mirror of
https://seed.radicle.dev/rad:zwTxygwuz5LDGBq255RA2CbNGrz8.git
synced 2026-10-18 19:30:29 +08:00
feat: add shell script to set up Debian host as a Radicle CI node
This commit is contained in:
Lars Wirzenius
Executable
+200
@@ -0,0 +1,200 @@
|
||||
#!/usr/bin/env bash
|
||||
#
|
||||
# Install Radicle CI with Ambient on a Debian host. Run this as root.
|
||||
# Note that this is not suitable for upgrades, only initial installation.
|
||||
#
|
||||
# This script installs a Radicle node, the Radicle CI broker, and the Ambient
|
||||
# CI engine. It also installs Caddy and other tooling needed. To access the CI
|
||||
# reports, go to http://HOST, where `HOST` is the hostname. Note lack of TLS.
|
||||
# The `radicle-ci-example` repository is cloned and this triggers CI to run.
|
||||
#
|
||||
# You will want to review the configuration files:
|
||||
#
|
||||
# * /home/ci/ci.yaml - the CI broker
|
||||
# * /home/ci/radicle-ci-ambient.yaml - the Ambient adapter
|
||||
# * /home/ci/.config/ambient/config.yaml - Ambient itself
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
# Print log message.
|
||||
log() {
|
||||
printf "LOG: $*\n"
|
||||
}
|
||||
|
||||
# Print error message and terminate script.
|
||||
die() {
|
||||
echo "$*" 1>&2
|
||||
exit 1
|
||||
}
|
||||
|
||||
log Set up a temporary directory and its automatic removal.
|
||||
tmp="$(mktemp -d)"
|
||||
trap 'rm -rf "$tmp"' EXIT
|
||||
|
||||
log Prevent packages from asking configuration questions when installed.
|
||||
export DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
log Install tools we will need.
|
||||
if ! apt-get update -q >"$tmp/update.log" 2>&1; then
|
||||
cat "$tmp/update.log"
|
||||
exit 1
|
||||
fi
|
||||
if ! command -v chronic >/dev/null; then
|
||||
if ! apt-get install -y moreutils >"$tmp/moreutils" 2>&1; then
|
||||
cat "$tmp/moreutils"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
if ! command -v curl >/dev/null; then
|
||||
chronic apt-get install -y curl
|
||||
fi
|
||||
if ! command -v gpg >/dev/null; then
|
||||
chronic apt-get install -y gpg
|
||||
fi
|
||||
if ! command -v pstree >/dev/null; then
|
||||
chronic apt-get install -y psmisc
|
||||
fi
|
||||
if ! command -v unxz >/dev/null; then
|
||||
chronic apt-get install -y xz-utils
|
||||
fi
|
||||
|
||||
log Set up the Radicle APT repository.
|
||||
if ! dpkg -l radicle-archive-keyring 2>&1 | grep '^ii ' >/dev/null; then
|
||||
log Download current keyring package.
|
||||
cd "$tmp"
|
||||
curl -O -sL https://radicle.xyz/apt/radicle-archive-keyring.deb
|
||||
chronic dpkg -i radicle-archive-keyring.deb
|
||||
|
||||
log Add to APT source lists.
|
||||
cat <<EOF | tee /etc/apt/sources.list.d/radicle_xyz_apt.list >/dev/null
|
||||
deb [signed-by=/usr/share/radicle/radicle-archive-keyring.asc] https://radicle.xyz/apt release main
|
||||
EOF
|
||||
|
||||
log Install keyring package.
|
||||
chronic apt-get update
|
||||
chronic apt-get install -y radicle-archive-keyring
|
||||
fi
|
||||
|
||||
log Install Radicle and CI software.
|
||||
chronic apt-get install -y radicle radicle-ci-broker radicle-ci-ambient ambient-ci
|
||||
|
||||
log Create user for running CI. This user will also run the Radicle node.
|
||||
if ! getent passwd ci >/dev/null; then
|
||||
chronic adduser --disabled-password --comment "Radicle CI" ci
|
||||
fi
|
||||
|
||||
log Add CI user to kvm group.
|
||||
chronic adduser ci kvm
|
||||
|
||||
log Configure Ambient.
|
||||
install -d ~ci/.config/ambient -o ci -g ci
|
||||
sudo -u ci tee ~ci/.config/ambient/config.yaml <<EOF >/dev/null
|
||||
executor: /usr/bin/ambient-execute-plan
|
||||
projects: ~/ambient-projects.yaml
|
||||
artifacts_max_size: 1G
|
||||
cache_max_size: 50G
|
||||
uefi: true
|
||||
qemu:
|
||||
cpus: 1
|
||||
memory: 1G
|
||||
lint: false
|
||||
EOF
|
||||
sudo -i -u ci ambient config >/dev/null
|
||||
|
||||
log Install Caddy.
|
||||
chronic apt-get install -y caddy
|
||||
tee /etc/caddy/Caddyfile <<EOF >/dev/null
|
||||
:80 {
|
||||
root * /srv/http/
|
||||
file_server browse
|
||||
}
|
||||
EOF
|
||||
install -d /srv/http -o ci -g ci
|
||||
systemctl reload caddy
|
||||
|
||||
log Configure CI broker.
|
||||
sudo -u ci tee ~ci/ci.yaml <<EOF >/dev/null
|
||||
description: |
|
||||
<p>This is a Radicle CI node.
|
||||
db: /home/ci/ci.db
|
||||
report_dir: /srv/http
|
||||
concurrent_adapters: 1
|
||||
adapters:
|
||||
ambient:
|
||||
command: /bin/radicle-ci-ambient
|
||||
env:
|
||||
RADICLE_CI_AMBIENT: /home/ci/radicle-ci-ambient.yaml
|
||||
triggers:
|
||||
- adapter: ambient
|
||||
filters:
|
||||
- !HasFile ".radicle/ambient.yaml"
|
||||
EOF
|
||||
sudo -i -u ci cib --log-level error --config ci.yaml config >/dev/null
|
||||
|
||||
log Configure Ambient adapter.
|
||||
sudo -i -u ci tee ~ci/radicle-ci-ambient.yaml <<EOF >/dev/null
|
||||
image: /home/ci/ambient.qcow2
|
||||
logdir: /srv/http/ambient-log
|
||||
log: /home/ci/radicle-ci-ambient.log
|
||||
base_url: "http://$(hostname)/ambient-log"
|
||||
EOF
|
||||
install -d ~ci/.local/state/ambient-ci/projects -o ci -g ci
|
||||
|
||||
log Download virtual machine image for Ambient.
|
||||
if ! [ -e ~ci/ambient.qcow2 ]; then
|
||||
chronic sudo -i -u ci curl -sOL https://files.liw.fi/ambient/ambient.qcow2.xz
|
||||
sudo -i -u ci unxz ambient.qcow2.xz
|
||||
fi
|
||||
|
||||
log Set up Radicle node.
|
||||
chronic sudo -i -u ci rad auth --alias "ci-$(hostname)" --stdin </dev/null
|
||||
|
||||
log Install systemd service unit for Radicle node.
|
||||
cat <<EOF >/etc/systemd/system/radicle-node.service
|
||||
[Unit]
|
||||
Description=Radicle Node
|
||||
After=network-online.target
|
||||
Requires=network-online.target
|
||||
|
||||
[Service]
|
||||
User=ci
|
||||
Group=ci
|
||||
ExecStart=/usr/bin/radicle-node --listen 0.0.0.0:8776 --force
|
||||
KillMode=process
|
||||
Restart=always
|
||||
RestartSec=3
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
log Install systemd service unit for Radicle CI broker
|
||||
cat <<EOF >/etc/systemd/system/radicle-ci-broker.service
|
||||
[Unit]
|
||||
Requires=radicle-node.service
|
||||
After=radicle-node.service
|
||||
Description=Radicle CI broker
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
ExecStart=/bin/cib --log-level info --config /home/ci/ci.yaml process-events
|
||||
KillMode=control-group
|
||||
Restart=always
|
||||
RestartSec=1
|
||||
User=ci
|
||||
Group=ci
|
||||
|
||||
[Install]
|
||||
WantedBy=default.target
|
||||
EOF
|
||||
|
||||
log Start Radicle CI via systemd.
|
||||
systemctl daemon-reload
|
||||
chronic systemctl enable radicle-node
|
||||
chronic systemctl enable radicle-ci-broker
|
||||
systemctl start radicle-ci-broker
|
||||
|
||||
log Seed the radicle-ci-example repository.
|
||||
chronic sudo -i -u ci rad seed rad:z28U8KUBvVSMQc13NydX3LBDsdEdQ
|
||||
|
||||
log "OK"
|
||||
Reference in New Issue
Block a user