cc0f072908
* Enable running container as mqm * Fix merge problem * Don't force root usage * RHEL image runs as mqm instead of root * Build on host with SELinux enabled * Enable building on node in an OpenShift cluster * Enable running container as mqm * Fix merge problem * Don't force root usage * Merge lastest changes from master * RHEL image runs as mqm instead of root * Fix merge issues * Test changes for non-root * Make timeout properly, and more non-root test fixes * Run tests with fewer/no capabilities * Correct usage docs for non-root * Add security docs * Add temporary debug output * Remove debug code * Fixes for termination-log * Allow init container to run as root * Fixes for CentOS build * Fixes for RHEL build * Logging improvements * Fix Dockerfile RHEL/CentOS build * Fix bash error * Make all builds specify UID * Use redist client for Go SDK * Inspect image before running tests * New test for init container * Log container runtime in runmqdevserver * Add extra capabilities if using a RHEL image
123 lines
4.6 KiB
Bash
Executable File
123 lines
4.6 KiB
Bash
Executable File
#!/bin/bash
|
|
# -*- mode: sh -*-
|
|
# © Copyright IBM Corporation 2018, 2019
|
|
#
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# Build a RHEL image of MQ Advanced for Developers, using the buildah tool
|
|
|
|
set -x
|
|
set -e
|
|
|
|
function usage {
|
|
echo "Usage: $0 BASETAG TAG VERSION"
|
|
exit 20
|
|
}
|
|
|
|
if [ "$#" -ne 3 ]; then
|
|
echo "ERROR: Invalid number of parameters"
|
|
usage
|
|
fi
|
|
|
|
###############################################################################
|
|
# Setup MQ server working container
|
|
###############################################################################
|
|
|
|
# Use a "scratch" container, so the resulting image has minimal files
|
|
# Resulting image won't have yum, for example
|
|
readonly basetag=$1
|
|
readonly ctr_mq=$(buildah from $basetag)
|
|
if [ -z "$ctr_mq" ]
|
|
then
|
|
echo "ERROR: ctr_mq is empty. Check above output for errors"
|
|
exit 50
|
|
fi
|
|
|
|
readonly mnt_mq=$(buildah mount $ctr_mq)
|
|
if [ -z "$mnt_mq" ]
|
|
then
|
|
echo "ERROR: mnt_mq is empty. Check above output for errors"
|
|
exit 50
|
|
fi
|
|
|
|
readonly tag=$2
|
|
readonly version=$3
|
|
readonly mqm_uid=888
|
|
readonly mqm_gid=888
|
|
|
|
# WARNING: This is what allows the mqm user to change the password of any other user
|
|
# It's used by runmqdevserver to change the admin/app passwords.
|
|
echo "mqm ALL = NOPASSWD: /usr/sbin/chpasswd" > $mnt_mq/etc/sudoers.d/mq-dev-config
|
|
|
|
# Run these commands inside the container so that the SELinux context is handled correctly
|
|
buildah run --user root $ctr_mq -- useradd --gid mqm admin
|
|
buildah run --user root $ctr_mq -- groupadd --system mqclient
|
|
buildah run --user root $ctr_mq -- useradd --gid mqclient app
|
|
buildah run --user root $ctr_mq -- bash -c "echo admin:passw0rd | chpasswd"
|
|
|
|
mkdir --parents $mnt_mq/run/runmqdevserver
|
|
chown ${mqm_uid}:${mqm_gid} $mnt_mq/run/runmqdevserver
|
|
|
|
# Copy runmqdevserver program
|
|
install --mode 0750 --owner ${mqm_uid} --group ${mqm_gid} ./build/runmqdevserver ${mnt_mq}/usr/local/bin/
|
|
|
|
install --directory --mode 0775 --owner ${mqm_uid} --group 0 ${mnt_mq}/run/runmqdevserver
|
|
|
|
# Copy template files
|
|
cp ./incubating/mqadvanced-server-dev/*.tpl ${mnt_mq}/etc/mqm/
|
|
|
|
# Copy web XML files for default developer configuration
|
|
mkdir --parents ${mnt_mq}/etc/mqm/web
|
|
cp --recursive ./incubating/mqadvanced-server-dev/web/* ${mnt_mq}/etc/mqm/web/
|
|
|
|
# Make "mqm" the owner of all the config files
|
|
chown --recursive ${mqm_uid}:${mqm_gid} ${mnt_mq}/etc/mqm/*
|
|
chmod --recursive 0750 ${mnt_mq}/etc/mqm/*
|
|
|
|
###############################################################################
|
|
# Final Buildah commands
|
|
###############################################################################
|
|
|
|
buildah config \
|
|
--port 1414/tcp \
|
|
--port 9157/tcp \
|
|
--port 9443/tcp \
|
|
--os linux \
|
|
--label architecture=x86_64 \
|
|
--label io.openshift.tags="mq messaging developer" \
|
|
--label io.k8s.display-name="IBM MQ Advanced Server Developer Edition" \
|
|
--label io.k8s.description="IBM MQ is messaging middleware that simplifies and accelerates the integration of diverse applications and business data across multiple platforms. It uses message queues to facilitate the exchanges of information and offers a single messaging solution for cloud, mobile, Internet of Things (IoT) and on-premises environments." \
|
|
--label name="${tag%:*}" \
|
|
--label vendor="IBM" \
|
|
--label version="$version" \
|
|
--label release="1" \
|
|
--label run="docker run -d -e LICENSE=accept --name ibm-mq-dev ${tag%:*}" \
|
|
--label summary="IBM MQ Advanced Server Developer Edition" \
|
|
--label description="IBM MQ is messaging middleware that simplifies and accelerates the integration of diverse applications and business data across multiple platforms. It uses message queues to facilitate the exchanges of information and offers a single messaging solution for cloud, mobile, Internet of Things (IoT) and on-premises environments." \
|
|
--label IBM_PRODUCT_ID="98102d16795c4263ad9ca075190a2d4d" \
|
|
--label IBM_PRODUCT_NAME="IBM MQ Advanced Server Developer Edition" \
|
|
--label IBM_PRODUCT_VERSION="$version" \
|
|
--env AMQ_ADDITIONAL_JSON_LOG=1 \
|
|
--env LANG=en_US.UTF-8 \
|
|
--env LOG_FORMAT=basic \
|
|
--env MQ_ADMIN_PASSWORD=passw0rd \
|
|
--env MQ_DEV=true \
|
|
--entrypoint runmqdevserver \
|
|
--user ${mqm_uid} \
|
|
$ctr_mq
|
|
buildah unmount $ctr_mq
|
|
buildah commit $ctr_mq $tag
|
|
|
|
buildah rm $ctr_mq
|