cc0f072908
* Enable running container as mqm * Fix merge problem * Don't force root usage * RHEL image runs as mqm instead of root * Build on host with SELinux enabled * Enable building on node in an OpenShift cluster * Enable running container as mqm * Fix merge problem * Don't force root usage * Merge lastest changes from master * RHEL image runs as mqm instead of root * Fix merge issues * Test changes for non-root * Make timeout properly, and more non-root test fixes * Run tests with fewer/no capabilities * Correct usage docs for non-root * Add security docs * Add temporary debug output * Remove debug code * Fixes for termination-log * Allow init container to run as root * Fixes for CentOS build * Fixes for RHEL build * Logging improvements * Fix Dockerfile RHEL/CentOS build * Fix bash error * Make all builds specify UID * Use redist client for Go SDK * Inspect image before running tests * New test for init container * Log container runtime in runmqdevserver * Add extra capabilities if using a RHEL image
50 lines
1.6 KiB
Bash
Executable File
50 lines
1.6 KiB
Bash
Executable File
#!/bin/bash
|
|
# -*- mode: sh -*-
|
|
# © Copyright IBM Corporation 2018, 2019
|
|
#
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# Run the Go build script inside the Go container, mounting the source
|
|
# directory in
|
|
|
|
function usage {
|
|
echo "Usage: $0 TAG DevModeFlag"
|
|
exit 20
|
|
}
|
|
|
|
if [ "$#" -ne 2 ]; then
|
|
echo "ERROR: Invalid number of parameters"
|
|
usage
|
|
fi
|
|
|
|
readonly tag=$1
|
|
readonly dev=$2
|
|
|
|
IMAGE_REVISION=${IMAGE_REVISION:="Not Applicable"}
|
|
IMAGE_SOURCE=${IMAGE_SOURCE:="Not Applicable"}
|
|
|
|
# Run the build in a container
|
|
# Note the ":Z" on the volume is to allow the container to access the files when SELinux is enabled
|
|
# Note the "podman" network is used explicitly, to avoid problems other CNI networks (e.g. on an OpenShift node)
|
|
podman run \
|
|
--volume ${PWD}:/opt/app-root/src/go/src/github.com/ibm-messaging/mq-container/:Z \
|
|
--env IMAGE_REVISION="$IMAGE_REVISION" \
|
|
--env IMAGE_SOURCE="$IMAGE_SOURCE" \
|
|
--env MQDEV=${dev} \
|
|
--user $(id -u) \
|
|
--rm \
|
|
--network podman \
|
|
${tag} \
|
|
bash -c "cd /opt/app-root/src/go/src/github.com/ibm-messaging/mq-container/ && ./mq-advanced-server-rhel/go-build.sh"
|