* Enable running container as mqm * Fix merge problem * Don't force root usage * RHEL image runs as mqm instead of root * Build on host with SELinux enabled * Enable building on node in an OpenShift cluster * Enable running container as mqm * Fix merge problem * Don't force root usage * Merge lastest changes from master * RHEL image runs as mqm instead of root * Fix merge issues * Test changes for non-root * Make timeout properly, and more non-root test fixes * Run tests with fewer/no capabilities * Correct usage docs for non-root * Add security docs * Add temporary debug output * Remove debug code * Fixes for termination-log * Allow init container to run as root * Fixes for CentOS build * Fixes for RHEL build * Logging improvements * Fix Dockerfile RHEL/CentOS build * Fix bash error * Make all builds specify UID * Use redist client for Go SDK * Inspect image before running tests * New test for init container * Log container runtime in runmqdevserver * Add extra capabilities if using a RHEL image
163 lines
5.6 KiB
Bash
Executable File
163 lines
5.6 KiB
Bash
Executable File
#!/bin/bash
|
|
# -*- mode: sh -*-
|
|
# © Copyright IBM Corporation 2018, 2019
|
|
#
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# Build a RHEL image, using the buildah tool
|
|
|
|
set -x
|
|
set -e
|
|
|
|
function usage {
|
|
echo "Usage: $0 ARCHIVE-NAME PACKAGES TAG VERSION MQDevFlag"
|
|
exit 20
|
|
}
|
|
|
|
if [ "$#" -ne 5 ]; then
|
|
echo "ERROR: Invalid number of parameters"
|
|
usage
|
|
fi
|
|
|
|
###############################################################################
|
|
# Setup MQ server working container
|
|
###############################################################################
|
|
|
|
# Use RHEL 7 minimal container (which doesn't include things like Python or Yum)
|
|
readonly ctr_mq=$(buildah from rhel7-minimal)
|
|
if [ -z "$ctr_mq" ]
|
|
then
|
|
echo "ERROR: ctr_mq is empty. Check above output for errors"
|
|
exit 50
|
|
fi
|
|
|
|
readonly mnt_mq=$(buildah mount $ctr_mq)
|
|
if [ -z "$mnt_mq" ]
|
|
then
|
|
echo "ERROR: mnt_mq is empty. Check above output for errors"
|
|
exit 50
|
|
fi
|
|
|
|
readonly archive=downloads/$1
|
|
readonly packages=$2
|
|
readonly tag=$3
|
|
readonly version=$4
|
|
readonly mqdev=$5
|
|
readonly mqm_uid=888
|
|
readonly mqm_gid=888
|
|
|
|
###############################################################################
|
|
# Install MQ server
|
|
###############################################################################
|
|
|
|
microdnf_opts="--nodocs"
|
|
# Check whether the host is registered with Red Hat
|
|
if subscription-manager status ; then
|
|
# Host is subscribed, but the minimal image has no enabled repos
|
|
# Note that the "bc" package is the only one in "extras"
|
|
microdnf_opts="${microdnf_opts} --enablerepo=rhel-7-server-rpms --enablerepo=rhel-7-server-extras-rpms"
|
|
else
|
|
# Use the Yum repositories configured on the host
|
|
cp -R /etc/yum.repos.d/* ${mnt_mq}/etc/yum.repos.d/
|
|
fi
|
|
buildah run ${ctr_mq} -- microdnf ${microdnf_opts} install \
|
|
bash \
|
|
bc \
|
|
coreutils \
|
|
file \
|
|
findutils \
|
|
gawk \
|
|
glibc-common \
|
|
grep \
|
|
passwd \
|
|
procps-ng \
|
|
sed \
|
|
shadow-utils \
|
|
tar \
|
|
util-linux \
|
|
which
|
|
|
|
# Install "sudo" if using MQ Advanced for Developers
|
|
if [ "$mqdev" = "TRUE" ]; then
|
|
buildah run ${ctr_mq} -- microdnf ${microdnf_opts} install sudo
|
|
fi
|
|
|
|
# Clean up cached files
|
|
buildah run ${ctr_mq} -- microdnf ${microdnf_opts} clean all
|
|
rm -rf ${mnt_mq}/etc/yum.repos.d/*
|
|
|
|
buildah run --user root $ctr_mq -- groupadd --system --gid ${mqm_gid} mqm
|
|
buildah run --user root $ctr_mq -- useradd --system --uid ${mqm_uid} --gid mqm --groups 0 mqm
|
|
buildah run --user root $ctr_mq -- usermod -aG mqm root
|
|
|
|
# Install MQ server packages into the MQ builder image
|
|
./mq-advanced-server-rhel/install-mq-rhel.sh ${ctr_mq} "${mnt_mq}" "${archive}" "${packages}"
|
|
|
|
# Create the directory for MQ configuration files
|
|
mkdir -p ${mnt_mq}/etc/mqm
|
|
chown ${mqm_uid}:${mqm_gid} ${mnt_mq}/etc/mqm
|
|
|
|
# Install the Go binaries into the image
|
|
install --mode 0750 --owner ${mqm_uid} --group 0 ./build/runmqserver ${mnt_mq}/usr/local/bin/
|
|
install --mode 6750 --owner ${mqm_uid} --group 0 ./build/chk* ${mnt_mq}/usr/local/bin/
|
|
install --mode 0750 --owner ${mqm_uid} --group 0 ./NOTICES.txt ${mnt_mq}/opt/mqm/licenses/notices-container.txt
|
|
|
|
install --directory --mode 0775 --owner ${mqm_uid} --group 0 ${mnt_mq}/run/runmqserver
|
|
buildah run --user root $ctr_mq -- touch /run/termination-log
|
|
buildah run --user root $ctr_mq -- chown mqm:root /run/termination-log
|
|
buildah run --user root $ctr_mq -- chmod 0660 /run/termination-log
|
|
|
|
###############################################################################
|
|
# Final Buildah commands
|
|
###############################################################################
|
|
|
|
if [ "$mqdev" = "TRUE" ]; then
|
|
OSTAG="mq messaging developer"
|
|
DISNAME="IBM MQ Advanced Server Developer Edition"
|
|
PID="98102d16795c4263ad9ca075190a2d4d"
|
|
else
|
|
OSTAG="mq messaging"
|
|
DISNAME="IBM MQ Advanced Server"
|
|
PID="4486e8c4cc9146fd9b3ce1f14a2dfc5b"
|
|
fi
|
|
|
|
buildah config \
|
|
--port 1414/tcp \
|
|
--port 9157/tcp \
|
|
--os linux \
|
|
--label architecture=x86_64 \
|
|
--label io.openshift.tags="$OSTAG" \
|
|
--label io.k8s.display-name="$DISNAME" \
|
|
--label io.k8s.description="IBM MQ is messaging middleware that simplifies and accelerates the integration of diverse applications and business data across multiple platforms. It uses message queues to facilitate the exchanges of information and offers a single messaging solution for cloud, mobile, Internet of Things (IoT) and on-premises environments." \
|
|
--label name="${tag%:*}" \
|
|
--label vendor="IBM" \
|
|
--label version="$version" \
|
|
--label release="1" \
|
|
--label run="docker run -d -e LICENSE=accept --name ibm-mq ${tag%:*}" \
|
|
--label summary="$DISNAME" \
|
|
--label description="IBM MQ is messaging middleware that simplifies and accelerates the integration of diverse applications and business data across multiple platforms. It uses message queues to facilitate the exchanges of information and offers a single messaging solution for cloud, mobile, Internet of Things (IoT) and on-premises environments." \
|
|
--label IBM_PRODUCT_ID="$PID" \
|
|
--label IBM_PRODUCT_NAME="$DISNAME" \
|
|
--label IBM_PRODUCT_VERSION="$version" \
|
|
--env AMQ_ADDITIONAL_JSON_LOG=1 \
|
|
--env LANG=en_US.UTF-8 \
|
|
--env LOG_FORMAT=basic \
|
|
--entrypoint runmqserver \
|
|
--user ${mqm_uid} \
|
|
$ctr_mq
|
|
buildah unmount $ctr_mq
|
|
buildah commit $ctr_mq $tag
|
|
|
|
buildah rm $ctr_mq
|