docker-tidy/.drone.jsonnet

488 lines
11 KiB
Plaintext
Raw Normal View History

local PythonVersion(pyversion='3.6') = {
2020-03-01 17:42:29 +00:00
name: 'python' + std.strReplace(pyversion, '.', '') + '-pytest',
image: 'python:' + pyversion,
environment: {
PY_COLORS: 1,
},
commands: [
2020-12-23 22:48:56 +00:00
'pip install poetry poetry-dynamic-versioning -qq',
2020-11-15 20:52:35 +00:00
'poetry install -q',
'poetry run pytest dockertidy --cov=dockertidy --cov-append --no-cov-on-fail',
2020-11-15 21:06:32 +00:00
'poetry version',
'poetry run docker-tidy --help',
2020-03-01 17:42:29 +00:00
],
depends_on: [
2020-12-28 16:43:33 +00:00
'fetch',
2020-03-01 17:42:29 +00:00
],
};
local PipelineLint = {
kind: 'pipeline',
2020-11-27 13:13:11 +00:00
image_pull_secrets: ['docker_config'],
2020-03-01 17:42:29 +00:00
name: 'lint',
platform: {
os: 'linux',
arch: 'amd64',
},
steps: [
2020-12-30 14:42:34 +00:00
{
name: 'yapf',
image: 'python:3.9',
environment: {
PY_COLORS: 1,
},
commands: [
'git fetch -tq',
'pip install poetry poetry-dynamic-versioning -qq',
'poetry install -q',
'poetry run yapf -dr ./dockertidy',
],
},
2020-03-01 17:42:29 +00:00
{
name: 'flake8',
2020-11-15 20:52:35 +00:00
image: 'python:3.9',
2020-03-01 17:42:29 +00:00
environment: {
PY_COLORS: 1,
},
commands: [
2020-12-23 23:23:12 +00:00
'git fetch -tq',
2020-12-23 22:48:56 +00:00
'pip install poetry poetry-dynamic-versioning -qq',
2020-11-15 20:52:35 +00:00
'poetry install -q',
'poetry run flake8 ./dockertidy',
2020-03-01 17:42:29 +00:00
],
},
],
trigger: {
ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
2020-03-01 17:42:29 +00:00
},
};
local PipelineTest = {
2020-03-15 22:19:26 +00:00
kind: 'pipeline',
2020-11-27 13:13:11 +00:00
image_pull_secrets: ['docker_config'],
2020-03-15 22:19:26 +00:00
name: 'test',
platform: {
os: 'linux',
arch: 'amd64',
},
steps: [
2020-12-23 23:33:18 +00:00
{
name: 'fetch',
image: 'python:3.9',
commands: [
'git fetch -tq',
],
},
PythonVersion(pyversion='3.6'),
PythonVersion(pyversion='3.7'),
PythonVersion(pyversion='3.8'),
2020-11-15 20:52:35 +00:00
PythonVersion(pyversion='3.9'),
2020-03-15 22:19:26 +00:00
{
name: 'codecov',
2020-11-15 20:52:35 +00:00
image: 'python:3.9',
2020-03-15 22:19:26 +00:00
environment: {
PY_COLORS: 1,
CODECOV_TOKEN: { from_secret: 'codecov_token' },
},
commands: [
2020-04-06 20:29:37 +00:00
'pip install codecov -qq',
'codecov --required -X gcov',
2020-03-15 22:19:26 +00:00
],
2020-04-06 20:40:14 +00:00
depends_on: [
'python36-pytest',
'python37-pytest',
'python38-pytest',
2020-11-15 20:55:08 +00:00
'python39-pytest',
2020-04-06 20:40:14 +00:00
],
2020-03-15 22:19:26 +00:00
},
],
depends_on: [
2020-11-15 20:55:08 +00:00
'lint',
2020-03-15 22:19:26 +00:00
],
trigger: {
ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
2020-03-15 22:19:26 +00:00
},
};
2020-03-01 17:42:29 +00:00
local PipelineSecurity = {
kind: 'pipeline',
2020-11-27 13:13:11 +00:00
image_pull_secrets: ['docker_config'],
2020-03-01 17:42:29 +00:00
name: 'security',
platform: {
os: 'linux',
arch: 'amd64',
},
steps: [
{
name: 'bandit',
2020-11-15 20:52:35 +00:00
image: 'python:3.9',
2020-03-01 17:42:29 +00:00
environment: {
PY_COLORS: 1,
},
commands: [
2020-12-23 23:23:12 +00:00
'git fetch -tq',
2020-12-23 22:48:56 +00:00
'pip install poetry poetry-dynamic-versioning -qq',
2020-11-15 20:52:35 +00:00
'poetry install -q',
'poetry run bandit -r ./dockertidy -x ./dockertidy/test',
2020-03-01 17:42:29 +00:00
],
},
],
depends_on: [
'test',
2020-03-01 17:42:29 +00:00
],
trigger: {
ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
2020-03-01 17:42:29 +00:00
},
};
local PipelineBuildPackage = {
kind: 'pipeline',
2020-11-27 13:13:11 +00:00
image_pull_secrets: ['docker_config'],
2020-03-01 17:42:29 +00:00
name: 'build-package',
platform: {
os: 'linux',
arch: 'amd64',
},
steps: [
{
name: 'build',
2020-11-15 20:52:35 +00:00
image: 'python:3.9',
2020-03-01 17:42:29 +00:00
commands: [
2020-12-23 23:23:12 +00:00
'git fetch -tq',
2020-11-15 20:52:35 +00:00
'pip install poetry poetry-dynamic-versioning -qq',
'poetry build',
2020-03-01 17:42:29 +00:00
],
},
{
name: 'checksum',
image: 'alpine',
commands: [
'cd dist/ && sha256sum * > ../sha256sum.txt',
],
},
{
name: 'publish-github',
image: 'plugins/github-release',
settings: {
overwrite: true,
api_key: { from_secret: 'github_token' },
files: ['dist/*', 'sha256sum.txt'],
title: '${DRONE_TAG}',
note: 'CHANGELOG.md',
},
when: {
ref: ['refs/tags/**'],
},
},
{
name: 'publish-pypi',
2020-11-15 20:52:35 +00:00
image: 'python:3.9',
commands: [
2020-12-23 23:23:12 +00:00
'git fetch -tq',
2020-11-15 20:52:35 +00:00
'pip install poetry poetry-dynamic-versioning -qq',
2020-12-28 14:05:49 +00:00
'poetry publish -n',
2020-11-15 20:52:35 +00:00
],
environment: {
2020-12-23 23:23:12 +00:00
POETRY_HTTP_BASIC_PYPI_USERNAME: { from_secret: 'pypi_username' },
POETRY_HTTP_BASIC_PYPI_PASSWORD: { from_secret: 'pypi_password' },
2020-03-01 17:42:29 +00:00
},
when: {
ref: ['refs/tags/**'],
},
},
],
depends_on: [
'security',
],
trigger: {
ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
2020-03-01 17:42:29 +00:00
},
};
local PipelineBuildContainer(arch='amd64') = {
kind: 'pipeline',
2020-11-27 13:13:11 +00:00
image_pull_secrets: ['docker_config'],
2020-03-01 17:42:29 +00:00
name: 'build-container-' + arch,
platform: {
os: 'linux',
arch: arch,
},
steps: [
{
name: 'build',
2020-11-15 20:52:35 +00:00
image: 'python:3.9',
2020-03-01 17:42:29 +00:00
commands: [
2020-12-23 23:23:12 +00:00
'git fetch -tq',
2020-11-15 20:52:35 +00:00
'pip install poetry poetry-dynamic-versioning -qq',
'poetry build',
2020-03-01 17:42:29 +00:00
],
},
{
name: 'dryrun',
2020-11-27 13:13:11 +00:00
image: 'plugins/docker:19',
2020-03-01 17:42:29 +00:00
settings: {
2020-11-27 13:13:11 +00:00
config: { from_secret: 'docker_config' },
2020-03-01 17:42:29 +00:00
dry_run: true,
dockerfile: 'docker/Dockerfile.' + arch,
2020-09-25 17:48:40 +00:00
repo: 'thegeeklab/${DRONE_REPO_NAME}',
2020-03-01 17:42:29 +00:00
username: { from_secret: 'docker_username' },
password: { from_secret: 'docker_password' },
},
when: {
ref: ['refs/pull/**'],
},
2020-09-25 18:06:15 +00:00
depends_on: ['build'],
2020-03-01 17:42:29 +00:00
},
{
2020-09-25 17:48:40 +00:00
name: 'publish-dockerhub',
2020-11-27 13:13:11 +00:00
image: 'plugins/docker:19',
2020-03-01 17:42:29 +00:00
settings: {
2020-11-27 13:13:11 +00:00
config: { from_secret: 'docker_config' },
2020-03-01 17:42:29 +00:00
auto_tag: true,
auto_tag_suffix: arch,
dockerfile: 'docker/Dockerfile.' + arch,
2020-09-25 17:48:40 +00:00
repo: 'thegeeklab/${DRONE_REPO_NAME}',
2020-03-01 17:42:29 +00:00
username: { from_secret: 'docker_username' },
password: { from_secret: 'docker_password' },
},
when: {
ref: ['refs/heads/main', 'refs/tags/**'],
2020-03-01 17:42:29 +00:00
},
2020-09-25 17:48:40 +00:00
depends_on: ['dryrun'],
},
{
name: 'publish-quay',
2020-11-27 13:13:11 +00:00
image: 'plugins/docker:19',
2020-09-25 17:48:40 +00:00
settings: {
2020-11-27 13:13:11 +00:00
config: { from_secret: 'docker_config' },
2020-09-25 17:48:40 +00:00
auto_tag: true,
auto_tag_suffix: arch,
dockerfile: 'docker/Dockerfile.' + arch,
2020-09-25 17:48:40 +00:00
registry: 'quay.io',
repo: 'quay.io/thegeeklab/${DRONE_REPO_NAME}',
username: { from_secret: 'quay_username' },
password: { from_secret: 'quay_password' },
},
when: {
ref: ['refs/heads/main', 'refs/tags/**'],
2020-09-25 17:48:40 +00:00
},
depends_on: ['dryrun'],
2020-03-01 17:42:29 +00:00
},
],
depends_on: [
'security',
],
trigger: {
ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
2020-03-01 17:42:29 +00:00
},
};
local PipelineDocs = {
kind: 'pipeline',
2020-11-27 13:13:11 +00:00
image_pull_secrets: ['docker_config'],
2020-03-01 17:42:29 +00:00
name: 'docs',
platform: {
os: 'linux',
arch: 'amd64',
},
concurrency: {
limit: 1,
},
steps: [
{
name: 'assets',
2020-11-17 13:01:42 +00:00
image: 'thegeeklab/alpine-tools',
2020-03-01 17:42:29 +00:00
commands: [
2020-11-17 13:01:42 +00:00
'make doc',
2020-03-01 17:42:29 +00:00
],
},
{
2020-06-03 20:40:20 +00:00
name: 'markdownlint',
image: 'thegeeklab/markdownlint-cli',
2020-03-01 17:42:29 +00:00
commands: [
2020-12-26 15:56:06 +00:00
"markdownlint 'docs/content/**/*.md' 'README.md' 'CONTRIBUTING.md'",
2020-03-01 17:42:29 +00:00
],
2020-06-03 20:40:20 +00:00
},
{
name: 'spellcheck',
image: 'node:lts-alpine',
commands: [
'npm install -g spellchecker-cli',
2020-12-26 15:56:06 +00:00
"spellchecker --files 'docs/content/**/*.md' 'README.md' 'CONTRIBUTING.md' -d .dictionary -p spell indefinite-article syntax-urls --no-suggestions",
2020-06-03 20:40:20 +00:00
],
environment: {
FORCE_COLOR: true,
NPM_CONFIG_LOGLEVEL: 'error',
},
},
{
name: 'testbuild',
2020-08-01 18:33:34 +00:00
image: 'klakegg/hugo:0.74.3-ext-alpine',
2020-06-03 20:40:20 +00:00
commands: [
'hugo-official -s docs/ -b http://localhost/',
],
},
{
name: 'link-validation',
2020-09-25 17:48:40 +00:00
image: 'thegeeklab/link-validator',
2020-06-03 20:40:20 +00:00
commands: [
'link-validator -ro',
],
environment: {
LINK_VALIDATOR_BASE_DIR: 'docs/public',
},
},
{
name: 'build',
2020-08-01 18:33:34 +00:00
image: 'klakegg/hugo:0.74.3-ext-alpine',
2020-06-03 20:40:20 +00:00
commands: [
'hugo-official -s docs/',
],
},
{
name: 'beautify',
image: 'node:lts-alpine',
commands: [
'npm install -g js-beautify',
"html-beautify -r -f 'docs/public/**/*.html'",
],
environment: {
FORCE_COLOR: true,
NPM_CONFIG_LOGLEVEL: 'error',
},
2020-03-01 17:42:29 +00:00
},
{
name: 'publish',
2020-05-26 19:38:16 +00:00
image: 'plugins/s3-sync',
2020-03-01 17:42:29 +00:00
settings: {
2020-05-26 19:38:16 +00:00
access_key: { from_secret: 's3_access_key' },
bucket: 'geekdocs',
delete: true,
endpoint: 'https://sp.rknet.org',
path_style: true,
secret_key: { from_secret: 's3_secret_access_key' },
source: 'docs/public/',
strip_prefix: 'docs/public/',
target: '/${DRONE_REPO_NAME}',
2020-03-01 17:42:29 +00:00
},
2020-11-17 13:01:42 +00:00
when: {
ref: ['refs/heads/main', 'refs/tags/**'],
2020-11-17 13:01:42 +00:00
},
2020-03-01 17:42:29 +00:00
},
],
depends_on: [
'build-package',
'build-container-amd64',
'build-container-arm64',
'build-container-arm',
],
trigger: {
ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
2020-03-01 17:42:29 +00:00
},
};
local PipelineNotifications = {
kind: 'pipeline',
2020-11-27 13:13:11 +00:00
image_pull_secrets: ['docker_config'],
2020-03-01 17:42:29 +00:00
name: 'notifications',
platform: {
os: 'linux',
arch: 'amd64',
},
steps: [
{
image: 'plugins/manifest',
2020-09-25 17:48:40 +00:00
name: 'manifest-dockerhub',
2020-03-01 17:42:29 +00:00
settings: {
ignore_missing: true,
auto_tag: true,
username: { from_secret: 'docker_username' },
password: { from_secret: 'docker_password' },
2020-09-25 17:48:40 +00:00
spec: 'docker/manifest.tmpl',
},
when: {
status: ['success'],
2020-03-01 17:42:29 +00:00
},
},
{
2020-09-25 17:48:40 +00:00
image: 'plugins/manifest',
name: 'manifest-quay',
settings: {
ignore_missing: true,
auto_tag: true,
username: { from_secret: 'quay_username' },
password: { from_secret: 'quay_password' },
spec: 'docker/manifest-quay.tmpl',
},
when: {
status: ['success'],
},
},
{
name: 'pushrm-dockerhub',
image: 'chko/docker-pushrm:1',
2020-03-01 17:42:29 +00:00
environment: {
2020-09-25 17:48:40 +00:00
DOCKER_PASS: {
from_secret: 'docker_password',
},
DOCKER_USER: {
from_secret: 'docker_username',
},
PUSHRM_FILE: 'README.md',
2020-09-27 12:06:35 +00:00
PUSHRM_SHORT: 'Keep docker hosts tidy',
2020-09-25 17:48:40 +00:00
PUSHRM_TARGET: 'thegeeklab/${DRONE_REPO_NAME}',
},
when: {
status: ['success'],
},
},
{
name: 'pushrm-quay',
image: 'chko/docker-pushrm:1',
environment: {
APIKEY__QUAY_IO: {
from_secret: 'quay_token',
},
PUSHRM_FILE: 'README.md',
PUSHRM_TARGET: 'quay.io/thegeeklab/${DRONE_REPO_NAME}',
},
when: {
status: ['success'],
2020-03-01 17:42:29 +00:00
},
},
{
name: 'matrix',
image: 'plugins/matrix',
settings: {
homeserver: { from_secret: 'matrix_homeserver' },
roomid: { from_secret: 'matrix_roomid' },
template: 'Status: **{{ build.status }}**<br/> Build: [{{ repo.Owner }}/{{ repo.Name }}]({{ build.link }}) ({{ build.branch }}) by {{ build.author }}<br/> Message: {{ build.message }}',
username: { from_secret: 'matrix_username' },
password: { from_secret: 'matrix_password' },
},
2020-03-07 14:52:02 +00:00
when: {
status: ['success', 'failure'],
},
2020-03-01 17:42:29 +00:00
},
],
depends_on: [
'docs',
],
trigger: {
ref: ['refs/heads/main', 'refs/tags/**'],
2020-03-01 17:42:29 +00:00
status: ['success', 'failure'],
},
};
[
PipelineLint,
PipelineTest,
PipelineSecurity,
PipelineBuildPackage,
PipelineBuildContainer(arch='amd64'),
PipelineBuildContainer(arch='arm64'),
PipelineBuildContainer(arch='arm'),
PipelineDocs,
PipelineNotifications,
]