120 lines
3.1 KiB
Go
120 lines
3.1 KiB
Go
|
// Copyright 2019 Google LLC.
|
||
|
|
// SPDX-License-Identifier: Apache-2.0
|
||
|
|
//
|
||
|
|
// besadii is a small CLI tool that triggers depot builds on
|
||
|
|
// builds.sr.ht
|
||
|
|
//
|
||
|
|
// It is designed to run as a post-update git hook on the server
|
||
|
|
// hosting the depot.
|
||
|
|
package main
|
||
|
|
|
||
|
|
import (
|
||
|
|
"bytes"
|
||
|
|
"encoding/json"
|
||
|
|
"fmt"
|
||
|
|
"io/ioutil"
|
||
|
|
"log"
|
||
|
|
"net/http"
|
||
|
|
"os"
|
||
|
|
)
|
||
|
|
|
||
|
|
// Represents a builds.sr.ht build object as described on
|
||
|
|
// https://man.sr.ht/builds.sr.ht/api.md
|
||
|
|
type Build struct {
|
||
|
|
Manifest string `json:"manifest"`
|
||
|
|
Note string `json:"note"`
|
||
|
|
Tags []string `json:"tags"`
|
||
|
|
}
|
||
|
|
|
||
|
|
// Represents a build trigger object as described on <the docs for
|
||
|
|
// this are currently down>
|
||
|
|
type Trigger struct {
|
||
|
|
Action string `json:"action"`
|
||
|
|
Condition string `json:"condition"`
|
||
|
|
To string `json:"to"`
|
||
|
|
}
|
||
|
|
|
||
|
|
// Represents a build manifest for sourcehut.
|
||
|
|
type Manifest struct {
|
||
|
|
Image string `json:"image"`
|
||
|
|
Sources []string `json:"sources"`
|
||
|
|
Secrets []string `json:"secrets"`
|
||
|
|
Tasks [](map[string]string) `json:"tasks"`
|
||
|
|
Triggers []Trigger `json:"triggers"`
|
||
|
|
}
|
||
|
|
|
||
|
|
func prepareManifest(commit string) string {
|
||
|
|
m := Manifest{
|
||
|
|
Image: "nixos/latest",
|
||
|
|
Sources: []string{"https://git.camden.tazj.in/"},
|
||
|
|
|
||
|
|
// secret for cachix/tazjin
|
||
|
|
Secrets: []string{"f7f02546-4d95-44f7-a98e-d61fdded8b5b"},
|
||
|
|
|
||
|
|
Tasks: [](map[string]string){
|
||
|
|
{"setup": `# sourcehut does not censor secrets in builds, hence this hack:
|
||
|
|
echo -n 'export CACHIX_SIGNING_KEY=' >> ~/.buildenv
|
||
|
|
cat ~/.cachix-tazjin >> ~/.buildenv
|
||
|
|
nix-env -iA third_party.cachix -f git.tazj.in
|
||
|
|
cachix use tazjin
|
||
|
|
cd git.tazj.in
|
||
|
|
git checkout ` + commit},
|
||
|
|
|
||
|
|
{"build": `cd git.tazj.in
|
||
|
|
nix-build ci-builds.nix > built-paths`},
|
||
|
|
|
||
|
|
{"cache": `cd git.tazj.in
|
||
|
|
cat built-paths | cachix push tazjin`},
|
||
|
|
},
|
||
|
|
|
||
|
|
Triggers: []Trigger{
|
||
|
|
Trigger{Action: "email", Condition: "failure", To: "mail@tazj.in"},
|
||
|
|
},
|
||
|
|
}
|
||
|
|
|
||
|
|
j, _ := json.Marshal(m)
|
||
|
|
return string(j)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Trigger a build of a given branch & commit on builds.sr.ht
|
||
|
|
func triggerBuild(branch, commit string) {
|
||
|
|
build := Build{
|
||
|
|
Manifest: prepareManifest(commit),
|
||
|
|
Note: fmt.Sprintf("Build of 'master' at '%s'", commit),
|
||
|
|
Tags: []string{
|
||
|
|
"depot", branch,
|
||
|
|
},
|
||
|
|
}
|
||
|
|
|
||
|
|
body, _ := json.Marshal(build)
|
||
|
|
reader := ioutil.NopCloser(bytes.NewReader(body))
|
||
|
|
|
||
|
|
req, err := http.NewRequest("POST", "https://builds.sr.ht/api/jobs", reader)
|
||
|
|
if err != nil {
|
||
|
|
log.Fatalln("[ERROR] failed to create an HTTP request:", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
req.Header.Add("Authorization", fmt.Sprintf("token %s", os.Getenv("SRHT_TOKEN")))
|
||
|
|
req.Header.Add("Content-Type", "application/json")
|
||
|
|
|
||
|
|
resp, err := http.DefaultClient.Do(req)
|
||
|
|
if err != nil {
|
||
|
|
// This might indicate a temporary error on the SourceHut side, do
|
||
|
|
// not fail the whole program.
|
||
|
|
log.Println("failed to send builds.sr.ht request:", err)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
defer resp.Body.Close()
|
||
|
|
|
||
|
|
if resp.StatusCode != 200 {
|
||
|
|
respBody, err := ioutil.ReadAll(resp.Body)
|
||
|
|
log.Printf("received non-success response from builds.sr.ht: %s (%v)[%s]", respBody, resp.Status, err)
|
||
|
|
} else {
|
||
|
|
log.Println("triggered builds.sr.ht job for commit", commit)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func main() {
|
||
|
|
triggerBuild("master", "c5806a44a728d5a46878f54de7b695321a38559c")
|
||
|
|
}
|