ci: fix notification step

chore(docker): update docker.io/python:3.12-alpine docker digest to c2f41e6
chore(docker): update docker.io/python:3.12-alpine docker digest to 63094ab
2024-08-12 09:41:21 +02:00 · 2024-08-08 00:36:28 +00:00 · 2024-08-06 00:07:51 +00:00 · 2024-08-03 00:07:02 +00:00 · 2024-08-02 00:37:03 +00:00 · 2024-07-25 00:05:22 +00:00
17 changed files with 297 additions and 315 deletions
--- a/.chglog/CHANGELOG.tpl.md
+++ b/.chglog/CHANGELOG.tpl.md
@ -1,23 +0,0 @@
 # Changelog
 {{ range .Versions -}}
 ## {{ if .Tag.Previous }}[{{ .Tag.Name }}]({{ $.Info.RepositoryURL }}/compare/{{ .Tag.Previous.Name }}...{{ .Tag.Name }}){{ else }}{{ .Tag.Name }}{{ end }} ({{ datetime "2006-01-02" .Tag.Date }})
 {{ range .CommitGroups -}}
 ### {{ .Title }}
 {{ range .Commits -}}
 - {{ if .Scope }}**{{ .Scope }}:** {{ end }}{{ (regexReplaceAll "(.*)/issues/(.*)" (regexReplaceAll "(Co-\\w*-by.*)" .Subject "") "${1}/pulls/${2}") | trim }}
 {{ end }}
 {{- end -}}
 {{- if .NoteGroups -}}
 {{ range .NoteGroups -}}
 ### {{ .Title }}
 {{ range .Notes }}
 {{ .Body }}
 {{ end }}
 {{ end -}}
 {{ end -}}
 {{ end -}}
--- a/.chglog/config.yml
+++ b/.chglog/config.yml
@ -1,24 +0,0 @@
 style: github
 template: CHANGELOG.tpl.md
 info:
  title: CHANGELOG
  repository_url: https://gitea.rknet.org/docker/molecule
 options:
  commit_groups:
    title_maps:
      feat: Features
      fix: Bug Fixes
      perf: Performance Improvements
      refactor: Code Refactoring
      chore: Others
      test: Testing
      ci: CI Pipeline
  header:
    pattern: "^(\\w*)(?:\\(([\\w\\$\\.\\-\\*\\s]*)\\))?\\:\\s(.*)$"
    pattern_maps:
      - Type
      - Scope
      - Subject
  notes:
    keywords:
      - BREAKING CHANGE
--- a/.dictionary
+++ b/.dictionary
@ -0,0 +1 @@
 Ansible
--- a/.drone.yml
+++ b/.drone.yml
@ -1,197 +0,0 @@
 ---
 kind: pipeline
 name: test
 platform:
  os: linux
  arch: amd64
 steps:
  - name: markdownlint
    image: thegeeklab/markdownlint-cli
    commands:
      - markdownlint 'README.md'
 trigger:
  ref:
    - refs/heads/main
    - refs/pull/**
    - refs/tags/**
 ---
 kind: pipeline
 name: build-container
 platform:
  os: linux
  arch: amd64
 steps:
  - name: dryrun
    image: thegeeklab/drone-docker-buildx:20
    settings:
      dockerfile: Dockerfile
      dry_run: true
      repo: thegeeklab/${DRONE_REPO_NAME}
      provenance: false
    when:
      ref:
        - refs/pull/**
  - name: tags
    image: thegeeklab/docker-autotag
    environment:
      DOCKER_AUTOTAG_FORCE_LATEST: True
      DOCKER_AUTOTAG_IGNORE_PRERELEASE: True
      DOCKER_AUTOTAG_OUTPUT_FILE: .tags
      DOCKER_AUTOTAG_VERSION: ${DRONE_TAG}
    when:
      ref:
        - refs/heads/main
        - refs/tags/**
    depends_on:
      - dryrun
  - name: changelog-generate
    image: thegeeklab/git-chglog
    commands:
      - git fetch -tq
      - git-chglog --no-color --no-emoji -o CHANGELOG.md ${DRONE_TAG:---next-tag unreleased unreleased}
    depends_on:
      - tags
  - name: changelog-format
    image: thegeeklab/alpine-tools
    commands:
      - prettier CHANGELOG.md
      - prettier -w CHANGELOG.md
    depends_on:
      - changelog-generate
  - name: publish-dockerhub
    image: thegeeklab/drone-docker-buildx:20
    settings:
      dockerfile: Dockerfile
      password:
        from_secret: docker_password
      repo: thegeeklab/${DRONE_REPO_NAME}
      username:
        from_secret: docker_username
      provenance: false
    when:
      ref:
        - refs/heads/main
        - refs/tags/**
    depends_on:
      - changelog-format
  - name: publish-quay
    image: thegeeklab/drone-docker-buildx:20
    settings:
      dockerfile: Dockerfile
      password:
        from_secret: quay_password
      registry: quay.io
      repo: quay.io/thegeeklab/${DRONE_REPO_NAME}
      username:
        from_secret: quay_username
      provenance: false
    when:
      ref:
        - refs/heads/main
        - refs/tags/**
    depends_on:
      - changelog-format
  - name: publish-gitea
    image: plugins/gitea-release
    settings:
      api_key:
        from_secret: gitea_token
      base_url: https://gitea.rknet.org
      note: CHANGELOG.md
      overwrite: true
      title: ${DRONE_TAG}
    when:
      ref:
        - refs/tags/**
    depends_on:
      - publish-dockerhub
      - publish-quay
 trigger:
  ref:
    - refs/heads/main
    - refs/pull/**
    - refs/tags/**
 depends_on:
  - test
 ---
 kind: pipeline
 name: notifications
 platform:
  os: linux
  arch: amd64
 steps:
  - name: pushrm-dockerhub
    image: chko/docker-pushrm:1
    environment:
      DOCKER_PASS:
        from_secret: docker_password
      DOCKER_USER:
        from_secret: docker_username
      PUSHRM_FILE: README.md
      PUSHRM_SHORT: Custom image for Molecule Ansible test automation
      PUSHRM_TARGET: thegeeklab/${DRONE_REPO_NAME}
    when:
      status:
        - success
  - name: pushrm-quay
    image: chko/docker-pushrm:1
    environment:
      APIKEY__QUAY_IO:
        from_secret: quay_token
      PUSHRM_FILE: README.md
      PUSHRM_TARGET: quay.io/thegeeklab/${DRONE_REPO_NAME}
    when:
      status:
        - success
  - name: matrix
    image: thegeeklab/drone-matrix
    settings:
      homeserver:
        from_secret: matrix_homeserver
      password:
        from_secret: matrix_password
      roomid:
        from_secret: matrix_roomid
      template: "Status: **{{ build.Status }}**<br/> Build: [{{ repo.Owner }}/{{ repo.Name }}]({{ build.Link }}){{#if build.Branch}} ({{ build.Branch }}){{/if}} by {{ commit.Author }}<br/> Message: {{ commit.Message.Title }}"
      username:
        from_secret: matrix_username
    when:
      status:
        - success
        - failure
 trigger:
  ref:
    - refs/heads/main
    - refs/tags/**
  status:
    - success
    - failure
 depends_on:
  - build-container
 ---
 kind: signature
 hmac: ca5d129a1c880f4f666cb83759d1a075c18485afe17f94696e46cb9753555f23
 ...
--- a/.gitsv/config.yml
+++ b/.gitsv/config.yml
@ -0,0 +1,47 @@
 ---
 version: "1.1"
 versioning:
  update-major: []
  update-minor: [feat]
  update-patch: [fix, perf, refactor, chore, test, ci, docs]
 tag:
  pattern: "v%d.%d.%d"
 release-notes:
  sections:
    - name: Features
      commit-types: [feat]
      section-type: commits
    - name: Bug Fixes
      commit-types: [fix]
      section-type: commits
    - name: Performance Improvements
      commit-types: [perf]
      section-type: commits
    - name: Code Refactoring
      commit-types: [refactor]
      section-type: commits
    - name: Others
      commit-types: [chore]
      section-type: commits
    - name: Testing
      commit-types: [test]
      section-type: commits
    - name: CI Pipeline
      commit-types: [ci]
      section-type: commits
    - name: Documentation
      commit-types: [docs]
      section-type: commits
    - name: BREAKING CHANGES
      section-type: breaking-changes
 commit-message:
  footer:
    issue:
      key: issue
      add-value-prefix: "#"
  issue:
    regex: "#?[0-9]+"
--- a/.prettierignore
+++ b/.prettierignore
@ -1,3 +1,2 @@
 .drone.yml
 *.tpl.md
 LICENSE
--- a/.woodpecker/build-container.yml
+++ b/.woodpecker/build-container.yml
@ -0,0 +1,69 @@
 ---
 when:
  - event: [pull_request, tag]
  - event: [push, manual]
    branch:
      - ${CI_REPO_DEFAULT_BRANCH}
 steps:
  - name: security-build
    image: quay.io/thegeeklab/wp-docker-buildx:5
    settings:
      containerfile: Containerfile.multiarch
      output: type=oci,dest=oci/${CI_REPO_NAME},tar=false
      repo: thegeeklab/${CI_REPO_NAME}
  - name: security-scan
    image: ghcr.io/aquasecurity/trivy
    commands:
      - trivy -v
      - trivy image --input oci/${CI_REPO_NAME}
    environment:
      TRIVY_EXIT_CODE: "1"
      TRIVY_IGNORE_UNFIXED: "true"
      TRIVY_NO_PROGRESS: "true"
      TRIVY_SEVERITY: HIGH,CRITICAL
      TRIVY_TIMEOUT: 1m
  - name: publish-dockerhub
    image: quay.io/thegeeklab/wp-docker-buildx:5
    group: container
    settings:
      auto_tag: true
      containerfile: Containerfile.multiarch
      password:
        from_secret: docker_password
      platforms:
        - linux/amd64
        - linux/arm64
      provenance: false
      repo: thegeeklab/${CI_REPO_NAME}
      username:
        from_secret: docker_username
    when:
      - event: [tag]
      - event: [push, manual]
        branch:
          - ${CI_REPO_DEFAULT_BRANCH}
  - name: publish-quay
    image: quay.io/thegeeklab/wp-docker-buildx:5
    group: container
    settings:
      auto_tag: true
      containerfile: Containerfile.multiarch
      password:
        from_secret: quay_password
      platforms:
        - linux/amd64
        - linux/arm64
      provenance: false
      registry: quay.io
      repo: quay.io/thegeeklab/${CI_REPO_NAME}
      username:
        from_secret: quay_username
    when:
      - event: [tag]
      - event: [push, manual]
        branch:
          - ${CI_REPO_DEFAULT_BRANCH}
--- a/.woodpecker/build-package.yml
+++ b/.woodpecker/build-package.yml
@ -0,0 +1,25 @@
 ---
 when:
  - event: [pull_request, tag]
  - event: [push, manual]
    branch:
      - ${CI_REPO_DEFAULT_BRANCH}
 steps:
  - name: changelog
    image: quay.io/thegeeklab/git-sv
    commands:
      - git sv current-version
      - git sv release-notes -t ${CI_COMMIT_TAG:-next} -o CHANGELOG.md
      - cat CHANGELOG.md
  - name: publish-gitea
    image: quay.io/thegeeklab/wp-gitea-release
    settings:
      api_key:
        from_secret: gitea_token
      base_url: https://gitea.rknet.org
      note: CHANGELOG.md
      title: ${CI_COMMIT_TAG}
    when:
      - event: [tag]
--- a/.woodpecker/docs.yml
+++ b/.woodpecker/docs.yml
@ -0,0 +1,62 @@
 ---
 when:
  - event: [pull_request, tag]
  - event: [push, manual]
    branch:
      - ${CI_REPO_DEFAULT_BRANCH}
 steps:
  - name: markdownlint
    image: quay.io/thegeeklab/markdownlint-cli
    group: test
    commands:
      - markdownlint 'README.md'
  - name: spellcheck
    image: quay.io/thegeeklab/alpine-tools
    group: test
    commands:
      - spellchecker --files '_docs/**/*.md' 'README.md' -d .dictionary -p spell indefinite-article syntax-urls
    environment:
      FORCE_COLOR: "true"
  - name: link-validation
    image: docker.io/lycheeverse/lychee
    group: test
    commands:
      - lychee --no-progress --format detailed README.md
  - name: pushrm-dockerhub
    image: docker.io/chko/docker-pushrm:1
    secrets:
      - source: docker_password
        target: DOCKER_PASS
      - source: docker_username
        target: DOCKER_USER
    environment:
      PUSHRM_FILE: README.md
      PUSHRM_SHORT: Custom image for Ansible Molecule test automation
      PUSHRM_TARGET: thegeeklab/${CI_REPO_NAME}
    when:
      - event: [push, manual]
        branch:
          - ${CI_REPO_DEFAULT_BRANCH}
        status: [success]
  - name: pushrm-quay
    image: docker.io/chko/docker-pushrm:1
    secrets:
      - source: quay_token
        target: APIKEY__QUAY_IO
    environment:
      PUSHRM_FILE: README.md
      PUSHRM_TARGET: quay.io/thegeeklab/${CI_REPO_NAME}
    when:
      - event: [push, manual]
        branch:
          - ${CI_REPO_DEFAULT_BRANCH}
        status: [success]
 depends_on:
  - build-package
  - build-container
--- a/.woodpecker/notify.yml
+++ b/.woodpecker/notify.yml
@ -0,0 +1,26 @@
 ---
 when:
  - event: [tag]
  - event: [push, manual]
    branch:
      - ${CI_REPO_DEFAULT_BRANCH}
 runs_on: [success, failure]
 steps:
  - name: matrix
    image: quay.io/thegeeklab/wp-matrix
    settings:
      homeserver:
        from_secret: matrix_homeserver
      room_id:
        from_secret: matrix_room_id
      user_id:
        from_secret: matrix_user_id
      access_token:
        from_secret: matrix_access_token
    when:
      - status: [success, failure]
 depends_on:
  - docs
--- a/Containerfile.multiarch
+++ b/Containerfile.multiarch
@ -0,0 +1,43 @@
 FROM docker.io/python:3.12-alpine@sha256:c2f41e6a5a67bc39b95be3988dd19fbd05d1b82375c46d9826c592cca014d4de
 LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
 LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
 LABEL org.opencontainers.image.title="molecule"
 LABEL org.opencontainers.image.url="https://gitea.rknet.org/container/molecule"
 LABEL org.opencontainers.image.source="https://gitea.rknet.org/container/molecule"
 LABEL org.opencontainers.image.documentation="https://gitea.rknet.org/container/molecule"
 ARG ANSIBLE_VERSION
 ARG MOLECULE_VERSION
 # renovate: datasource=pypi depName=molecule
 ENV MOLECULE_VERSION="${MOLECULE_VERSION:-24.7.0}"
 # renovate: datasource=pypi depName=ansible
 ENV ANSIBLE_VERSION="${ANSIBLE_VERSION:-10.2.0}"
 ENV PY_COLORS=1
 ENV CARGO_NET_GIT_FETCH_WITH_CLI=true
 ENV ANSIBLE_FORCE_COLOR=true
 ENV USER=root
 COPY overlay/ /
 RUN apk add --update --no-cache --virtual .build-deps build-base libffi-dev musl-dev openssl-dev python3-dev cargo && \
    apk add --update --no-cache git openssh-client && \
    apk upgrade --no-cache libexpat && \
    echo "Installing requirements ..." && \
    pip install -qq --no-cache-dir --upgrade pip && \
    pip install -qq --no-cache-dir boto boto3 botocore apache-libcloud hcloud \
        flaky passlib pytest pytest-testinfra && \
    echo "Installing ansible 'v$ANSIBLE_VERSION' ..." && \
    pip install -qq --no-cache-dir ansible=="$ANSIBLE_VERSION" && \
    echo "Installing molecule version 'v$MOLECULE_VERSION' ..." && \
    pip install -qq --no-cache-dir molecule=="$MOLECULE_VERSION" molecule-plugins[docker] molecule_hetznercloud; \
    apk del .build-deps && \
    rm -rf /var/cache/apk/* && \
    rm -rf /tmp/* && \
    rm -rf /root/.cache/
 USER root
 CMD []
 ENTRYPOINT ["/bin/molecule"]
--- a/49
+++ b/49
@ -1,49 +0,0 @@
 FROM python:3.11-alpine@sha256:625383c19a9a14824e6b89b5bbadc5138d5c2ad5adcc67d8ee4e3527cf35ffe0
 LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
 LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
 LABEL org.opencontainers.image.title="molecule"
 LABEL org.opencontainers.image.url="https://gitea.rknet.org/docker/molecule"
 LABEL org.opencontainers.image.source="https://gitea.rknet.org/docker/molecule"
 LABEL org.opencontainers.image.documentation="https://gitea.rknet.org/docker/molecule"
 ARG ANSIBLE_VERSION
 ARG BUILD_VERSION
 # renovate: datasource=pypi depName=molecule
 ENV MOLECULE_VERSION="${BUILD_VERSION:-4.0.4}"
 # renovate: datasource=pypi depName=ansible
 ENV ANSIBLE_VERSION="${ANSIBLE_VERSION:-7.1.0}"
 ENV PY_COLORS=1
 ENV CARGO_NET_GIT_FETCH_WITH_CLI=true
 ENV ANSIBLE_FORCE_COLOR=true
 ENV USER=root
 ENV PATH=/bin:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin
 COPY overlay/ /
 RUN apk add --update --no-cache --virtual .build-deps build-base libffi-dev musl-dev openssl-dev python3-dev cargo && \
    apk add --update --no-cache git openssh-client && \
    echo "Installing requirements ..." && \
    pip install -qq --upgrade --no-cache-dir pip && \
    pip install -qq --no-cache-dir -r /root/requirements.txt && \
    echo "Installing ansible 'v$ANSIBLE_VERSION' ..." && \
    pip install -qq --no-cache-dir ansible=="$ANSIBLE_VERSION" && \
    MOLECULE_VERSION="${MOLECULE_VERSION##v}" && \
    MOLECULE_MAJOR="${MOLECULE_VERSION%%.*}" && \
    if [ -z "${MOLECULE_MAJOR//[0-9]}" ] && [ -n "$MOLECULE_MAJOR" ]; then \
        echo "Installing molecule version '$MOLECULE_VERSION' ..." && \
        pip install -qq --no-cache-dir molecule[docker,lint,test]=="$MOLECULE_VERSION"; \
    else \
        echo "Installing latest molecule ..." && \
        pip install -qq --no-cache-dir molecule[docker,lint,test]; \
    fi && \
    apk del .build-deps && \
    rm -rf /var/cache/apk/* && \
    rm -rf /tmp/* && \
    rm -rf /root/.cache/
 USER root
 CMD []
 ENTRYPOINT ["/bin/molecule"]
--- a/README.md
+++ b/README.md
@ -1,14 +1,18 @@
 # molecule
-Custom image for Molecule Ansible test automation
+Custom image for Ansible Molecule test automation
-[![Build Status](https://img.shields.io/drone/build/docker/molecule?logo=drone&server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/docker/molecule)
+<!-- spellchecker-disable -->
 [![Build Status](https://ci.rknet.org/api/badges/container/molecule/status.svg)](https://ci.rknet.org/repos/container/molecule)
 [![Docker Hub](https://img.shields.io/badge/dockerhub-latest-blue.svg?logo=docker&logoColor=white)](https://hub.docker.com/r/thegeeklab/molecule)
 [![Quay.io](https://img.shields.io/badge/quay-latest-blue.svg?logo=docker&logoColor=white)](https://quay.io/repository/thegeeklab/molecule)
-[![Source: Gitea](https://img.shields.io/badge/source-gitea-blue.svg?logo=gitea&logoColor=white)](https://gitea.rknet.org/docker/molecule)
+[![Source: Gitea](https://img.shields.io/badge/source-gitea-blue.svg?logo=gitea&logoColor=white)](https://gitea.rknet.org/container/molecule)
-[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://gitea.rknet.org/docker/molecule/src/branch/main/LICENSE)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://gitea.rknet.org/container/molecule/src/branch/main/LICENSE)
-Custom Docker image to automate Ansible deployment tests with [Molecule](https://molecule.readthedocs.io/en/latest/).
+<!-- spellchecker-enable -->
 Custom container image to automate Ansible deployment tests with [Molecule](https://ansible.readthedocs.io/projects/molecule/).
 ## Environment variables
@ -34,4 +38,4 @@ MOLECULE_ANSIBLE_VAULT_PASSWORD=my_secret
 ## License
-This project is licensed under the MIT License - see the [LICENSE](https://gitea.rknet.org/docker/molecule/src/branch/main/LICENSE) file for details.
+This project is licensed under the MIT License - see the [LICENSE](https://gitea.rknet.org/container/molecule/src/branch/main/LICENSE) file for details.
--- a/overlay/bin/molecule
+++ b/overlay/bin/molecule
@ -1,5 +1,5 @@
 #!/usr/bin/env sh
-# shellcheck disable=2039
+# shellcheck disable=2039,3040
 set -eo pipefail
 DIR=$(pwd)
@ -11,7 +11,7 @@ if [ -n "${MOLECULE_CUSTOM_MODULES_REPO}" ]; then
    WORKDIR="${MOLECULE_LIBRARY_DIR}"
    [ -d "$WORKDIR" ] && rm -rf "$WORKDIR"
    mkdir -p "$WORKDIR"
-    git clone "$MOLECULE_CUSTOM_MODULES_REPO" "$WORKDIR" 2> /dev/null
+    git clone "$MOLECULE_CUSTOM_MODULES_REPO" "$WORKDIR" 2>/dev/null
 fi
 if [ -n "${MOLECULE_CUSTOM_FILTERS_REPO}" ]; then
@ -19,13 +19,13 @@ if [ -n "${MOLECULE_CUSTOM_FILTERS_REPO}" ]; then
    printf "Cloning custom filters ...\n"
    [ -d "$WORKDIR" ] && rm -rf "$WORKDIR"
    mkdir -p "$WORKDIR"
-    git clone "$MOLECULE_CUSTOM_FILTERS_REPO" "$WORKDIR" 2> /dev/null
+    git clone "$MOLECULE_CUSTOM_FILTERS_REPO" "$WORKDIR" 2>/dev/null
 fi
 if [ -n "${MOLECULE_ANSIBLE_VAULT_PASSWORD}" ]; then
    printf "Write vault password file ...\n"
    MOLECULE_ANSIBLE_VAULT_PASSWORD_FILE=/root/.vaultpasswd
-    echo "${MOLECULE_ANSIBLE_VAULT_PASSWORD}" > $MOLECULE_ANSIBLE_VAULT_PASSWORD_FILE
+    echo "${MOLECULE_ANSIBLE_VAULT_PASSWORD}" >$MOLECULE_ANSIBLE_VAULT_PASSWORD_FILE
    exec env ANSIBLE_VAULT_PASSWORD_FILE=$MOLECULE_ANSIBLE_VAULT_PASSWORD_FILE /usr/local/bin/molecule "$@"
 else
    exec /usr/local/bin/molecule "$@"
--- a/overlay/root/requirements.txt
+++ b/overlay/root/requirements.txt
@ -1,11 +0,0 @@
 # cloud provider deps
 boto
 boto3
 botocore
 apache-libcloud
 hcloud
 # misc
 pycrypto
 flaky
 passlib
--- a/trivy-secret.yaml
+++ b/trivy-secret.yaml
@ -0,0 +1,6 @@
 ---
 allow-rules:
  - id: private-key
    path: .*/ansible/.*/site-packages/ansible_collections/(community|google|netapp)/.*\.py
  - id: aws-secret-access-key
    path: .*/ansible/.*/site-packages/ansible_collections/amazon/.*\.py
--- a/trivy.yaml
+++ b/trivy.yaml
@ -0,0 +1,4 @@
 ---
 scan:
  skip-files:
    - /usr/local/bin/gomplate