Tamarin/package

#!/usr/bin/env python3

import argparse, sys, shutil, os, hashlib

sys.path.append(os.path.dirname(__file__) + '/lib')

import tamarin, system, rkt

def configure_args_parser():

    profile_names = tamarin.get_available_profile_names()

    parser = argparse.ArgumentParser(description="Generate packages for various GNU/Linux distributions")

    # Define available/required arguments and flags
    parser.add_argument("project_directory", help="The path to your project to package")
    parser.add_argument("-o", "--output", help="The path to the generated packages destination directory", default=".")
    parser.add_argument("-p", "--profile", help="The profile to use to package this project (default: debian)", choices=profile_names, default='debian')
    parser.add_argument("-a", "--architecture", help="The target architecture for the package (default: amd64)", default='amd64')
    parser.add_argument("--rebuild", help="Ignore cache and rebuild container's image", action="store_true", default=False)

    return parser

if __name__ == "__main__":

    parser = configure_args_parser()
    args = parser.parse_args()

    # Verify project directory
    project_dir = os.path.abspath(args.project_directory)
    output_dir = os.path.abspath(args.output)

    # Load build profile
    profile = tamarin.load_profile(args.profile)

    workspace = tamarin.get_workspace_dir()
    workspace_tmp = tamarin.get_workspace_subdir('tmp')

    local_rkt_dir = tamarin.get_workspace_subdir('rkt')
    if not system.which('rkt', local_rkt_dir):
        # Download and extract rkt
        rkt_archive_path = tamarin.download_rkt()
        system.extract_tar(rkt_archive_path, workspace_tmp)
        rkt_archive_dir = tamarin.get_rkt_achive_dest_dir()
        shutil.rmtree(local_rkt_dir, ignore_errors=True)
        os.rename(rkt_archive_dir, local_rkt_dir)

    local_acbuild_dir = tamarin.get_workspace_subdir('acbuild')
    if not system.which('acbuild', local_acbuild_dir):
        # Download and extract acbuild
        acbuild_archive_path = tamarin.download_acbuild()
        system.extract_tar(acbuild_archive_path, workspace_tmp)
        acbuild_archive_dir = tamarin.get_acbuild_achive_dest_dir()
        shutil.rmtree(local_acbuild_dir, ignore_errors=True)
        os.rename(acbuild_archive_dir, local_acbuild_dir)

    pid = os.getpid()
    build_workspace = tamarin.get_workspace_subdir('tmp/build_{:d}'.format(pid))

    rkt_store = tamarin.get_workspace_subdir('store')
    rkt_flags = ["--dir={:s}".format(rkt_store)]

    base_image = profile['profile']['default_image']
    # If the base image is Docker-based, preload it and get its name from the store
    if base_image.startswith('docker://'):
        rkt.run([
            "fetch",
            "--insecure-options=image",
            base_image
        ] + rkt_flags)

    aci_file = os.path.join(os.sep, build_workspace, 'image.aci')
    acbuild_flags = ["--modify", aci_file, "--work-path", build_workspace]

    # Use cached image base on base_image and containerbuild hooks
    containerbuild_hooks = profile['containerbuild']['hooks']
    hasher = hashlib.sha1()
    hasher.update(base_image.encode())
    hasher.update(containerbuild_hooks.encode())
    image_hash = hasher.hexdigest()
    cache_dir = tamarin.get_workspace_subdir('cache')
    cached_image_file = os.path.join(os.sep, cache_dir, '{:s}.aci'.format(image_hash[:12]));

    if not args.rebuild and os.path.exists(cached_image_file):
      # Copy cached image
      shutil.copyfile(cached_image_file, aci_file)
    else:
      # Find and export base image from rkt' store
      name_pattern = base_image.split('/')[-1] + '$'
      image = rkt.find_image_by_name(name_pattern, rkt_flags=rkt_flags)
      rkt.export_image(image['id'], aci_file, rkt_flags=rkt_flags);

      # Build image
      tamarin.run_acbuild(acbuild_flags+["set-name", "image_{:d}".format(pid)])
      tamarin.run_acbuild(acbuild_flags+["mount", "add", "src", "/src", "--read-only"])
      tamarin.run_acbuild(acbuild_flags+["mount", "add", "dist", "/dist"])
      tamarin.run_acbuild(acbuild_flags+["mount", "add", "tamarin-hooks", "/tamarin/hooks", "--read-only"])
      tamarin.run_acbuild(acbuild_flags+["mount", "add", "tamarin-lib", "/tamarin/lib", "--read-only"])
      tamarin.run_acbuild(acbuild_flags+["mount", "add", "tamarin-profiles", "/tamarin/profiles", "--read-only"])

      # Execute containerbuild hooks
      cb_hooks_env = os.environ.copy()
      cb_hooks_env["PATH"] = os.environ['PATH'] + ':' + local_acbuild_dir
      cb_hooks_env["TAMARIN_ACBUILD"] = " ".join([system.which('acbuild', local_acbuild_dir)]+acbuild_flags)
      cb_hooks_env["TAMARIN_ACBUILD_ENGINE"] = "chroot" if not system.which('systemctl') else "systemd-nspawn"

      tamarin.run_profile_hooks(profile, 'containerbuild', cwd=build_workspace, env=cb_hooks_env)

      # Cache image
      shutil.copyfile(aci_file, cached_image_file)

    # Start container
    rkt.run(rkt_flags+[
        "run",
        "--insecure-options=image",
        aci_file, "--net=host",
        "--volume=src,kind=host,source={:s}".format(project_dir),
        "--volume=dist,kind=host,source={:s}".format(output_dir),
        "--volume=tamarin-hooks,kind=host,source={:s}".format(tamarin.get_hooks_dir()),
        "--volume=tamarin-lib,kind=host,source={:s}".format(tamarin.get_lib_dir()),
        "--volume=tamarin-profiles,kind=host,source={:s}".format(tamarin.get_profiles_dir()),
        "--set-env=HTTP_PROXY={:s}".format(os.environ['HTTP_PROXY']),
        "--set-env=HTTPS_PROXY={:s}".format(os.environ['HTTP_PROXY']),
        "--set-env=http_proxy={:s}".format(os.environ['http_proxy']),
        "--set-env=https_proxy={:s}".format(os.environ['https_proxy']),
        #"--interactive", "--exec", "/bin/bash"
        "--exec", "/usr/bin/python3", "--", "/tamarin/lib/build.py", args.profile, args.architecture
    ], as_root=True)

    # Cleanup

    rkt.run([
        "gc",
        "--grace-period=0"
    ] + rkt_flags, as_root=True)

    rkt.run([
        "image",
        "gc"
    ] + rkt_flags, as_root=True)

    shutil.rmtree(build_workspace, ignore_errors=True)