70410cc478
- With bionic image based shipyard docker images, uwsgi crashes
with segmentation fault, when it tries to load the psycopg2 library,
causing the api become unreachable on both shipyard docker images.
This happens because psycopg2 2.7.x and uwsgi binary wheels are built
with incompatible ssl libraries. This patch upgrades psycopg2 to the
latest release to address this issue.
- The existing image build script cannot run in a docker or a pod,
based pipeline because of two reasons:
- The build script runs a docker (docker-in-docker) and mounts a
volume.
In a dind case, volume bind mounts will not work, because the nested
container will need the host file system's path for the source path.
- The shipyard service listens to its exposed service port in the
nested docker network namespace, which is not reachable from the host
pod/container.
This patch address both of the above issues. It first creates the
container, copies needed config files to the container and then starts
it. Also it execs into the nested docker to access the shipyard services
in a dind (docker-in-dcoker) case.
Change-Id: Ifdfed539babab01608bfaef37001bb79cd3a080d
58 lines
2.0 KiB
Bash
Executable File
58 lines
2.0 KiB
Bash
Executable File
#!/bin/bash
|
|
# Copyright 2017 AT&T Intellectual Property. All other rights reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
set -x
|
|
|
|
IMAGE=$1
|
|
USE_PROXY=${USE_PROXY:-false}
|
|
|
|
mkdir -p build/.tmprun/etc
|
|
docker create \
|
|
-v $PWD/build/.tmprun/etc:/etc/shipyard \
|
|
-p 9000:9000 \
|
|
--name shipyard_test ${IMAGE}
|
|
|
|
docker cp $PWD/etc/shipyard/api-paste.ini shipyard_test:/etc/shipyard
|
|
docker cp $PWD/tools/resources/shipyard.conf shipyard_test:/etc/shipyard
|
|
docker start shipyard_test &
|
|
sleep 5
|
|
|
|
# If the image build pipeline is running in a pod/docker (docker-in-docker),
|
|
# we'll need to exec into the nested container's network namespace to acces the
|
|
# shipyard api.
|
|
GOOD="HTTP/1.1 200 OK"
|
|
RESULT="$(curl -i 'http://127.0.0.1:9000/versions' --noproxy '*' | tr '\r' '\n' | head -1)"
|
|
if [[ "${RESULT}" != "${GOOD}" ]]; then
|
|
if docker exec -t shipyard_test /bin/bash -c "curl -i 'http://127.0.0.1:9000/versions' --noproxy '*' | tr '\r' '\n' | head -1 | grep 'HTTP/1.1 200 OK'"; then
|
|
RESULT="${GOOD}"
|
|
fi
|
|
fi
|
|
|
|
if [ "${USE_PROXY}" == "true" ]; then
|
|
CLI_RESULT="$(docker run -t --rm --net=host --env HTTP_PROXY="${PROXY}" --env HTTPS_PROXY="${PROXY}" ${IMAGE} help | tr '\r' '\n' | head -1)"
|
|
else
|
|
CLI_RESULT="$(docker run -t --rm --net=host ${IMAGE} help | tr '\r' '\n' | head -1)"
|
|
fi
|
|
|
|
docker stop shipyard_test
|
|
docker rm shipyard_test
|
|
rm -rf $PWD/build/.tmprun
|
|
CLI_GOOD="THE SHIPYARD COMMAND"
|
|
if [[ ${RESULT} == ${GOOD} && ${CLI_RESULT} == ${CLI_GOOD} ]]; then
|
|
exit 0
|
|
else
|
|
exit 1
|
|
fi
|