build: Debug existing resources

.gitea/workflows/actions.yaml

@@ -1,73 +1,166 @@
 name: build-image
 on: [push]
 
+env:
+  UBUNTU_VERSION: '26.04' # Resolute
+  UBUNTU_SOURCE_IMAGE: https://st.itch.fyi/api/share/olYwWjZ17e?mode=download
+
 jobs:
-  # semrel_dryrun:
-  #   name: Semantic Release (Dry-run)
-  #   runs-on: ubuntu-latest
-  #   outputs:
-  #     version: ${{ steps.sem_rel.outputs.version }}
-  #   steps:
-  #     - name: Check out repository code
-  #       uses: actions/checkout@v3
-  #     - name: Set up Node
-  #       uses: actions/setup-node@v3
-  #       with:
-  #         node-version: 20
-  #     - name: Install dependencies
-  #       run: |
-  #         npm install \
-  #           semantic-release \
-  #           @semantic-release/commit-analyzer \
-  #           @semantic-release/exec
-  #     - name: Semantic Release (dry-run)
-  #       id: sem_rel
-  #       run: |
-  #         npx semantic-release \
-  #           --package @semantic-release/exec \
-  #           --package semantic-release \
-  #           --branches ${{ gitea.refname }} \
-  #           --tag-format 'v${version}' \
-  #           --dry-run \
-  #           --plugins @semantic-release/commit-analyzer,@semantic-release/exec \
-  #           --analyzeCommits @semantic-release/commit-analyzer \
-  #           --verifyRelease @semantic-release/exec \
-  #           --verifyReleaseCmd 'echo "version=${nextRelease.version}" >> $GITHUB_OUTPUT'
-  #       env:
-  #         GIT_CREDENTIALS: ${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_APIKEY }}
-  #     - name: Assert semantic release output
-  #       run: |
-  #         [[ -z "${{ steps.sem_rel.outputs.version }}" ]] && {
-  #           echo 'No release tag - exiting'; exit 1
-  #         } || {
-  #           echo 'Release tag set correctly: ${{ steps.sem_rel.outputs.version }}'; exit 0
+  semrel_dryrun:
+    name: Semantic Release (Dry-run)
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.sem_rel.outputs.version }}
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v3
+      - name: Install dependencies
+        run: |
+          npm install \
+            semantic-release \
+            @semantic-release/commit-analyzer \
+            @semantic-release/exec
+      - name: Semantic Release (dry-run)
+        id: sem_rel
+        run: |
+          npx semantic-release \
+            --package @semantic-release/exec \
+            --package semantic-release \
+            --branches ${{ gitea.refname }} \
+            --tag-format 'v${version}' \
+            --dry-run \
+            --plugins @semantic-release/commit-analyzer,@semantic-release/exec \
+            --analyzeCommits @semantic-release/commit-analyzer \
+            --verifyRelease @semantic-release/exec \
+            --verifyReleaseCmd 'echo "version=${nextRelease.version}" >> $GITHUB_OUTPUT'
+      - name: Assert semantic release output
+        run: |
+          [[ -z "${{ steps.sem_rel.outputs.version }}" ]] && {
+            echo 'No release tag - exiting'; exit 1
+          } || {
+            echo 'Release tag set correctly: ${{ steps.sem_rel.outputs.version }}'; exit 0
           }
 
   build_image:
     name: Build image
+    container: code.spamasaurus.com/djpbessems/act-runner-extended:1.0.0-cth20250815
     runs-on: ubuntu-latest
-    # needs: semrel_dryrun
+    needs: semrel_dryrun
     steps:
       - name: Check out repository code
         uses: actions/checkout@v4
-      - name: Generate seed ISO
-        shell: bash
+      - name: Set up build container
         run: |
           apt-get update && \
           apt-get install -y \
-            genisoimage
+            linux-generic
+          #  linux-modules-extra-$(uname -r) \
 
-          sed "s/__ROOT_HASHED_PASSWORD__/${{ secrets.ROOT_HASHED_PASSWORD }}/g" \
-            cloud-init/user-data.template > cloud-init/user-data
-          sed "s/__PUBLIC_SSHKEY__/${{ secrets.PUBLIC_SSHKEY }}/g" \
-            cloud-init/user-data.template > cloud-init/user-data
+          mkdir -p \
+            $PWD/ubuntu-vm \
+            /mnt/vmimage
+      - name: Retrieve source Ubuntu image
+        run: |
+          curl -L \
+            ${{ env.UBUNTU_SOURCE_IMAGE }} \
+            -o ubuntu-vm/ubuntu-${{ env.UBUNTU_VERSION }}-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img
+
+          qemu-img resize ubuntu-vm/ubuntu-${{ env.UBUNTU_VERSION }}-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img +5G
+      - name: Generate seed ISO
+        run: |
+          envsubst < cloud-init/user-data.template > cloud-init/user-data
 
           genisoimage \
-            -output seed.iso \
+            -output ubuntu-vm/seed.iso \
             -volid cidata \
             -joliet \
             -rock \
             cloud-init/meta-data cloud-init/user-data
+        env:
+          ROOT_HASHED_PASSWORD: ${{ secrets.VM_ROOT_HASHED_PASSWORD }}
+          PUBLIC_SSHKEY: ${{ secrets.VM_PUBLIC_SSHKEY }}
+      - name: Provision template virtual machine
+        run: |
+          [ -e /dev/kvm ] && kvm_flag="-enable-kvm" || kvm_flag=""
+
+          qemu-system-x86_64 \
+            $kvm_flag \
+            -m 3072 \
+            -smp 2 \
+            -cpu host \
+            -drive file=ubuntu-vm/ubuntu-${{ env.UBUNTU_VERSION }}-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img,if=virtio,format=qcow2 \
+            -drive file=ubuntu-vm/seed.iso,format=raw,media=cdrom \
+            -nographic \
+            -net nic \
+            -net user \
+            -device virtio-serial-pci,id=virtio-serial0 \
+            -chardev socket,path=qga.sock,server=on,wait=off,id=qga0 \
+            -device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0
+
+          if ! guestfish --ro -a ubuntu-vm/ubuntu-${{ env.UBUNTU_VERSION }}-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img -i stat /var/log/template-generation-success; then
+            echo "VM provisioning encountered errors - exiting"
+            exit 1
+          fi
+      - name: Compress image file
+        id: compress_image
+        run: |
+          virt-sparsify --compress \
+            --check-tmpdir ignore \
+            ubuntu-vm/ubuntu-${{ env.UBUNTU_VERSION }}-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img \
+            ubuntu-vm/ubuntu-${{ env.UBUNTU_VERSION }}-rke2-v${{ needs.semrel_dryrun.outputs.version }}-compacted.img
+
+          rm ubuntu-vm/ubuntu-${{ env.UBUNTU_VERSION }}-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img
+
+          echo "image_path=ubuntu-vm/ubuntu-${{ env.UBUNTU_VERSION }}-rke2-v${{ needs.semrel_dryrun.outputs.version }}-compacted.img" | tee -a "$GITHUB_OUTPUT"
+      - name: Check for existing resources
+        run: |
+          curl -fsSL -X GET \
+            http://nextexplorer.nextexplorer.svc.cluster.local:3000/api/browse/Storage/Repository/rel/ || true
+          curl -ksS -X GET \
+            https://lab-hv-vip.bessems.lan/v1/harvesterhci.io.virtualmachineimages || true
+      - name: Upload image file
+        run: |
+          set -x
+          REPO_TOKEN=$(curl -fsiSL -X POST \
+            http://nextexplorer.nextexplorer.svc.cluster.local:3000/api/auth/login \
+            -H "Content-Type: application/json" \
+            -d '{"email": "${{ secrets.REPO_USERNAME }}", "password": "${{ secrets.REPO_PASSWORD }}"}' | \
+            grep -oP 'connect\.sid=[^;]+' | head -n 1
+          )
+
+          FILE_PATH="${{ steps.compress_image.outputs.image_path }}"
+          FILE_NAME="$(basename "$FILE_PATH" | sed 's/-compacted//')"
+
+          curl -fsSL -X POST \
+            http://nextexplorer.nextexplorer.svc.cluster.local:3000/api/upload \
+            --header "Cookie: $REPO_TOKEN" \
+            --form "uploadTo=/Storage/Repository/rel" \
+            --form "filedata=@${FILE_PATH};filename=${FILE_NAME}"
+          SHARE_URL=$(curl -fsSL -X POST \
+            http://nextexplorer.nextexplorer.svc.cluster.local:3000/api/shares \
+            --header "Content-Type: application/json" \
+            --header "Cookie: $REPO_TOKEN" \
+            -d '{"sourcePath":"Storage/Repository/rel/${FILE_NAME}"}' | \
+            jq -r '.directFileUrl'
+          )
+
+          curl -ksS -X POST \
+            https://lab-hv-vip.bessems.lan/v1/harvesterhci.io.virtualmachineimages \
+            --header "Authorization: Bearer ${{ secrets.HV_TOKEN }}" \
+            --header "Content-Type: application/json" \
+            -d @- <<EOF
+          {
+            "type": "harvesterhci.io.virtualmachineimage",
+            "metadata": {
+              "namespace": "default"
+            },
+            "spec": {
+              "displayName": "$FILE_NAME",
+              "sourceType": "download",
+              "url": "$SHARE_URL?mode=download"
+            }
+          }
+          EOF
 
   # semrel:
   #   name: Semantic Release

cloud-init/user-data.template

@@ -6,23 +6,35 @@ snap:
     00: snap refresh --hold=forever
 package_reboot_if_required: true
 packages:
+  - cifs-utils
+  - linux-generic
   - qemu-guest-agent
   - yq
-  - cifs-utils
 
 runcmd:
   - apt-get install -y linux-modules-extra-$(uname -r)
+  - sed -i '/"${distro_id}:${distro_codename}-updates"/s|^//||' /etc/apt/apt.conf.d/50unattended-upgrades
   - sysctl -w net.ipv6.conf.all.disable_ipv6=1
   - systemctl enable --now qemu-guest-agent.service
+  - cloud-init clean --logs
+  - truncate -s 0 /etc/hostname /etc/machine-id
+  - rm -f /etc/ssh/ssh_host_* /var/lib/dbus/machine-id
+  - ln -s /etc/machine-id /var/lib/dbus/machine-id
+  - echo "TEMPLATE_GENERATION_SUCCESS" | tee /var/log/template-generation-success
+  - sync
 
 disable_root: false
 users:
   - name: root
-    hashed_passwd: __ROOT_HASHED_PASSWORD__
+    hashed_passwd: ${ROOT_HASHED_PASSWORD}
     lock_passwd: false
     shell: /bin/bash
     ssh_authorized_keys:
-      - __PUBLIC_SSHKEY__
+      - ${PUBLIC_SSHKEY}
 ssh_authorized_keys:
-  - >
-    __PUBLIC_SSHKEY__
+  - ${PUBLIC_SSHKEY}
+
+power_state:
+  delay: now
+  mode: poweroff
+  condition: true