mirror of
https://github.com/JasonN3/build-container-installer.git
synced 2025-12-25 10:57:55 +01:00
256 lines
8 KiB
YAML
256 lines
8 KiB
YAML
name: Create and publish an ISO
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- 'main'
|
|
tags:
|
|
- 'v*'
|
|
pull_request:
|
|
|
|
# Test Values
|
|
env:
|
|
ARCH: 'x86_64'
|
|
IMAGE_NAME: 'base'
|
|
IMAGE_REPO: 'quay.io/fedora-ostree-desktops'
|
|
IMAGE_TAG: '39'
|
|
VARIANT: 'Server'
|
|
FLATPAK_REMOTE_REFS: app/org.videolan.VLC/x86_64/stable runtime/org.kde.Platform/x86_64/5.15-23.08
|
|
SECURE_BOOT_KEY_URL: 'https://github.com/ublue-os/akmods/raw/main/certs/public_key.der'
|
|
ENROLLMENT_PASSWORD: 'container-installer'
|
|
|
|
jobs:
|
|
build-container:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@v4
|
|
with:
|
|
submodules: recursive
|
|
|
|
- name: Docker meta
|
|
id: meta
|
|
uses: docker/metadata-action@v5
|
|
with:
|
|
images: |
|
|
ghcr.io/${{ github.repository }}
|
|
tags: |
|
|
type=ref,event=branch
|
|
type=ref,event=pr
|
|
type=semver,pattern={{version}}
|
|
type=semver,pattern={{major}}.{{minor}}
|
|
|
|
- name: Buildah Build
|
|
id: build-image
|
|
uses: redhat-actions/buildah-build@v2
|
|
with:
|
|
containerfiles: Containerfile
|
|
tags: ${{ steps.meta.outputs.tags }}
|
|
|
|
- name: Push image
|
|
uses: redhat-actions/push-to-registry@v2
|
|
with:
|
|
image: ${{ steps.build-image.outputs.image }}
|
|
tags: ${{ steps.build-image.outputs.tags }}
|
|
username: ${{ github.actor }}
|
|
password: ${{ github.token }}
|
|
|
|
build-and-push-iso:
|
|
runs-on: ubuntu-latest
|
|
needs:
|
|
- build-container
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
continue-on-error: false
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
version:
|
|
- 38
|
|
- 39
|
|
outputs:
|
|
iso_name-38: ${{ steps.save_output.outputs.iso_name-38 }}
|
|
iso_name-39: ${{ steps.save_output.outputs.iso_name-39 }}
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Lowercase Registry
|
|
id: registry_case
|
|
uses: ASzc/change-string-case-action@v6
|
|
with:
|
|
string: ${{ env.IMAGE_REPO }}
|
|
|
|
- name: Get image version
|
|
id: meta
|
|
uses: docker/metadata-action@v5
|
|
with:
|
|
tags: |
|
|
type=ref,event=branch
|
|
type=ref,event=pr
|
|
|
|
- name: Build ISO with new container
|
|
uses: ./
|
|
id: build
|
|
with:
|
|
arch: ${{ env.ARCH}}
|
|
image_name: ${{ env.IMAGE_NAME}}
|
|
image_repo: ${{ env.IMAGE_REPO}}
|
|
image_tag: ${{ env.IMAGE_TAG }}
|
|
version: ${{ matrix.version }}
|
|
variant: ${{ env.VARIANT }}
|
|
flatpak_remote_refs: ${{ env.FLATPAK_REMOTE_REFS }}
|
|
secure_boot_key_url: ${{ env.SECURE_BOOT_KEY_URL }}
|
|
enrollment_password: ${{ env.ENROLLMENT_PASSWORD }}
|
|
iso_name: ${{ env.IMAGE_NAME }}-${{ env.IMAGE_TAG }}-${{ matrix.version }}.iso
|
|
|
|
- name: Save output
|
|
id: save_output
|
|
shell: bash
|
|
run: |
|
|
echo "iso_name-${{ matrix.version }}=${{ steps.build.outputs.iso_name}}" >> $GITHUB_OUTPUT
|
|
|
|
- name: Upload ISO as artifact
|
|
id: upload
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: ${{ steps.build.outputs.iso_name }}
|
|
path: |
|
|
${{ steps.build.outputs.iso_path }}
|
|
${{ steps.build.outputs.iso_path }}-CHECKSUM
|
|
if-no-files-found: error
|
|
retention-days: 0
|
|
compression-level: 0
|
|
overwrite: true
|
|
|
|
test-qemu:
|
|
runs-on: ubuntu-latest
|
|
needs:
|
|
- build-and-push-iso
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
continue-on-error: false
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
version:
|
|
- 38
|
|
- 39
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@v4
|
|
with:
|
|
submodules: recursive
|
|
|
|
- name: Ensure qemu is installed
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y qemu qemu-utils xorriso unzip qemu-system-x86 netcat socat jq isomd5sum ansible make coreutils
|
|
|
|
- name: Create disk
|
|
run: |
|
|
qemu-img create -f qcow2 disk.qcow2 50G
|
|
|
|
- name: Download generated ISO
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: ${{ needs['build-and-push-iso']['outputs'][format('iso_name-{0}', matrix.version)] }}
|
|
|
|
- name: Verify ISO
|
|
run: |
|
|
checkisomd5 ${{ needs['build-and-push-iso']['outputs'][format('iso_name-{0}', matrix.version)] }}
|
|
sha256sum -c ${{ needs['build-and-push-iso']['outputs'][format('iso_name-{0}', matrix.version)] }}-CHECKSUM
|
|
|
|
- name: Run ISO checks
|
|
run: |
|
|
mv ${{ needs['build-and-push-iso']['outputs'][format('iso_name-{0}', matrix.version)] }} deploy.iso
|
|
make test-iso VERSION=${{ matrix.version }} FLATPAK_REMOTE_REFS="${{ env.FLATPAK_REMOTE_REFS}}"
|
|
|
|
- name: Add Kickstart and Grub options to ISO
|
|
run: |
|
|
sudo mkdir /mnt/iso || true
|
|
sudo mount -o loop deploy.iso /mnt/iso
|
|
cp /mnt/iso/boot/grub2/grub.cfg grub.cfg
|
|
sudo umount /mnt/iso
|
|
sed -i 's/quiet/console=ttyS0,115200n8 inst.ks=cdrom:\/ks.cfg/' grub.cfg
|
|
sed -i 's/set default="1"/set default="0"/' grub.cfg
|
|
sed -i 's/set timeout=60/set timeout=1/' grub.cfg
|
|
cat << EOF > ks.cfg
|
|
lang en_US.UTF-8
|
|
keyboard us
|
|
timezone Americas/New_York
|
|
zerombr
|
|
clearpart --all --initlabel
|
|
autopart
|
|
poweroff
|
|
user --name=core --groups=wheel --password=foobar
|
|
%include /usr/share/anaconda/interactive-defaults.ks
|
|
%post
|
|
systemctl disable firewalld
|
|
systemctl enable sshd
|
|
%end
|
|
EOF
|
|
xorriso -dialog on << EOF
|
|
-indev deploy.iso
|
|
-outdev test.iso
|
|
-boot_image any replay
|
|
-map ks.cfg ks.cfg
|
|
-chmod 0444 ks.cfg
|
|
-map grub.cfg boot/grub2/grub.cfg
|
|
-end
|
|
EOF
|
|
|
|
- name: Install the test VM
|
|
run: |
|
|
timeout 1h qemu-system-x86_64 -name "Anaconda" -boot d -m 4096 -cpu qemu64 -display none -cdrom test.iso -smp 2 -hda disk.qcow2 -serial telnet:localhost:4321,server,nowait & QEMU_PID=$!
|
|
echo "PID: $QEMU_PID"
|
|
timeout 1m bash -c "while ! (echo > /dev/tcp/127.0.0.1/4321); do sleep 0.1; done"
|
|
(nc localhost 4321 | tee vm.stdout) &
|
|
wait $QEMU_PID
|
|
|
|
- name: Start the test VM
|
|
env:
|
|
VM_USER: core
|
|
VM_PASS: foobar
|
|
VM_IP: "127.0.0.1"
|
|
VM_PORT: "5555"
|
|
run: |
|
|
mkfifo vm.stdin
|
|
qemu-system-x86_64 -name "Anaconda" \
|
|
-m 4096 -cpu qemu64 -display none -smp 2 \
|
|
-chardev socket,path=/tmp/qga.sock,server,nowait,id=qga0 \
|
|
-device e1000,netdev=net0 \
|
|
-netdev user,id=net0,hostfwd=tcp::${VM_PORT}-:22 \
|
|
-device virtio-serial \
|
|
-device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0 \
|
|
-boot c -hda disk.qcow2 -serial telnet:localhost:4321,server,nowait & export QEMU_PID=$!
|
|
echo "PID: $QEMU_PID"
|
|
|
|
timeout 1m bash -c "while ! (echo > /dev/tcp/127.0.0.1/4321); do sleep 0.1; done"
|
|
(tail -f vm.stdin | nc localhost 4321 | tee vm.stdout) &
|
|
|
|
timeout 30m bash -c "while ! (grep 'login:' vm.stdout); do sleep 1; done"
|
|
|
|
if ! (echo > /dev/tcp/${VM_IP}/${VM_PORT})
|
|
then
|
|
echo "SSH must be installed and enabled inside the container"
|
|
fi
|
|
|
|
echo "VM ready for tests at IP ${VM_IP}:${VM_PORT}"
|
|
echo "Creating Ansible inventory"
|
|
cat << EOF > ansible_inventory
|
|
ungrouped:
|
|
hosts:
|
|
vm:
|
|
ansible_host: ${VM_IP}
|
|
ansible_port: ${VM_PORT}
|
|
ansible_user: ${VM_USER}
|
|
ansible_password: ${VM_PASS}
|
|
EOF
|
|
|
|
make test-vm
|