980f5e2187
Introduces three new types representing each of the possible package sources and moves the logic for specifying the package source to the server. Concrete changes: * Determining whether a specified git reference is a commit vs. a branch/tag is now done in the server, and is done more precisely by using a regular expression. * Package sources now have a new `CacheKey` function which can be used to retrieve a key under which a build manifest can be cached *if* the package source is not a moving target (i.e. a full git commit hash of either nixpkgs or a private repository). This function is not yet used. * Users *must* now specify a package source, Nixery no longer defaults to anything and will fail to launch if no source is configured.
87 lines
2.5 KiB
Go
87 lines
2.5 KiB
Go
// Copyright 2019 Google LLC
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License"); you may not
|
|
// use this file except in compliance with the License. You may obtain a copy of
|
|
// the License at
|
|
//
|
|
// https://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
// WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
// License for the specific language governing permissions and limitations under
|
|
// the License.
|
|
|
|
// Package config implements structures to store Nixery's configuration at
|
|
// runtime as well as the logic for instantiating this configuration from the
|
|
// environment.
|
|
package config
|
|
|
|
import (
|
|
"io/ioutil"
|
|
"log"
|
|
"os"
|
|
|
|
"cloud.google.com/go/storage"
|
|
)
|
|
|
|
// Load (optional) GCS bucket signing data from the GCS_SIGNING_KEY and
|
|
// GCS_SIGNING_ACCOUNT envvars.
|
|
func signingOptsFromEnv() *storage.SignedURLOptions {
|
|
path := os.Getenv("GCS_SIGNING_KEY")
|
|
id := os.Getenv("GCS_SIGNING_ACCOUNT")
|
|
|
|
if path == "" || id == "" {
|
|
log.Println("GCS URL signing disabled")
|
|
return nil
|
|
}
|
|
|
|
log.Printf("GCS URL signing enabled with account %q\n", id)
|
|
k, err := ioutil.ReadFile(path)
|
|
if err != nil {
|
|
log.Fatalf("Failed to read GCS signing key: %s\n", err)
|
|
}
|
|
|
|
return &storage.SignedURLOptions{
|
|
GoogleAccessID: id,
|
|
PrivateKey: k,
|
|
Method: "GET",
|
|
}
|
|
}
|
|
|
|
func getConfig(key, desc, def string) string {
|
|
value := os.Getenv(key)
|
|
if value == "" && def == "" {
|
|
log.Fatalln(desc + " must be specified")
|
|
} else if value == "" {
|
|
return def
|
|
}
|
|
|
|
return value
|
|
}
|
|
|
|
// config holds the Nixery configuration options.
|
|
type Config struct {
|
|
Bucket string // GCS bucket to cache & serve layers
|
|
Signing *storage.SignedURLOptions // Signing options to use for GCS URLs
|
|
Port string // Port on which to launch HTTP server
|
|
Pkgs PkgSource // Source for Nix package set
|
|
Timeout string // Timeout for a single Nix builder (seconds)
|
|
WebDir string // Directory with static web assets
|
|
}
|
|
|
|
func FromEnv() (*Config, error) {
|
|
pkgs, err := pkgSourceFromEnv()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return &Config{
|
|
Bucket: getConfig("BUCKET", "GCS bucket for layer storage", ""),
|
|
Port: getConfig("PORT", "HTTP port", ""),
|
|
Pkgs: pkgs,
|
|
Signing: signingOptsFromEnv(),
|
|
Timeout: getConfig("NIX_TIMEOUT", "Nix builder timeout", "60"),
|
|
WebDir: getConfig("WEB_DIR", "Static web file dir", ""),
|
|
}, nil
|
|
}
|