jenkins_job_build.sh

#!/bin/bash
#
# Copyright (c) 2018-2020 Intel Corporation
#
# SPDX-License-Identifier: Apache-2.0
#

set -o errexit
set -o nounset
set -o pipefail
set -o errtrace

cidir=$(dirname "$0")
source "/etc/os-release" || source "/usr/lib/os-release"

CI_JOB=${CI_JOB:-}
ghprbPullId=${ghprbPullId:-}
ghprbTargetBranch=${ghprbTargetBranch:-}
GIT_BRANCH=${GIT_BRANCH:-}
KATA_DEV_MODE=${KATA_DEV_MODE:-}
METRICS_CI=${METRICS_CI:-false}
WORKSPACE=${WORKSPACE:-}
BAREMETAL=${BAREMETAL:-false}
TMPDIR=${TMPDIR:-}

usage() {
	cat <<EOF
Usage: jenkins_job_build.sh REPOSITORY [OPTION]...

REPOSITORY
	repository name: github.com/kata-containers/(kata-containers|tests)

OPTION:
	-t, --type      test type: (all|unit|main|snap) (default: all)

	Examples:
	jenkins_job_build.sh "github.com/kata-containers/tests"
	jenkins_job_build.sh "github.com/kata-containers/kata-container" -t unit
EOF
}

# Run noninteractive on ubuntu
if [ "$ID" == "ubuntu" ]; then
	export DEBIAN_FRONTEND=noninteractive
fi

# Signify to all scripts that they are running in a CI environment
[ -z "${KATA_DEV_MODE}" ] && export CI=true

if [ $# -eq 0 ]; then
	usage >&2
	exit 1
fi

# Name of the repo that we are going to test
export kata_repo="$1"
if [[ "${kata_repo}" != *"github.com/kata-containers/"* ]]; then
	echo "Invalid repository name" >&2
	usage >&2
	exit 1
fi

echo "Setup env for kata repository: $kata_repo"

shift
test_type="all"

while [[ $# -ne 0 ]]; do
	option=$1
	case ${option} in
	-t|--type)
		if [[ $# -lt 2 ]]; then
			echo "Missing parameter after ${option}" >&2
			exit 1
		fi
		shift
		test_type=$1
		case ${test_type} in
		all|unit|main|snap) : ;;
		*) echo "Unknown parameter ${test_type} for the option ${option}" >&2 && exit 1 ;;
		esac
		;;
	*) echo "Unknown option ${option}" >&2 && exit 1 ;;
	esac
	shift
done

tests_repo="${tests_repo:-github.com/kata-containers/tests}"
katacontainers_repo="${katacontainers_repo:-github.com/kata-containers/kata-containers}"

if [ "${kata_repo}" == "${katacontainers_repo}" ]; then
	ci_dir_name="ci"
else
	ci_dir_name=".ci"
fi

# This script is intended to execute under Jenkins
# If we do not know where the Jenkins defined WORKSPACE area is
# then quit
if [ -z "${WORKSPACE}" ]; then
	echo "Jenkins WORKSPACE env var not set - exiting" >&2
	exit 1
fi

# Put our go area into the Jenkins job WORKSPACE tree
export GOPATH=${WORKSPACE}/go
mkdir -p "${GOPATH}"

# Export all environment variables needed.
export GOROOT="/usr/local/go"
export PATH=${GOPATH}/bin:/usr/local/go/bin:/usr/sbin:/sbin:${PATH}

# Support Golang 1.16.x.
# By default in Golang >= 1.16 GO111MODULE is set to "on",
# some subprojects in this repo may not support "go modules",
# set GO111MODULE to "auto" to enable module-aware mode only when
# a go.mod file is present in the current directory.
export GO111MODULE="auto"

kata_repo_dir="${GOPATH}/src/${kata_repo}"
tests_repo_dir="${GOPATH}/src/${tests_repo}"

# Get the tests repository
mkdir -p $(dirname "${tests_repo_dir}")
[ -d "${tests_repo_dir}" ] || git clone "https://${tests_repo}.git" "${tests_repo_dir}"

arch=$("${tests_repo_dir}/.ci/kata-arch.sh")

# Get the repository of the PR to be tested
mkdir -p $(dirname "${kata_repo_dir}")
[ -d "${kata_repo_dir}" ] || git clone "https://${kata_repo}.git" "${kata_repo_dir}"

# If CI running on bare-metal, a few clean-up work before walking into test repo
if [ "${BAREMETAL}" == true ]; then
	echo "Looking for baremetal cleanup script for arch ${arch}"
	clean_up_script=("${tests_repo_dir}/.ci/${arch}/clean_up_${arch}.sh") || true
	if [ -f "${clean_up_script}" ]; then
		echo "Running baremetal cleanup script for arch ${arch}"
		tests_repo="${tests_repo}" "${clean_up_script}"
	else
		echo "Running common baremetal cleanup script"
		tests_repo="${tests_repo}" "${tests_repo_dir}/.ci/clean_up.sh"
	fi
fi

# $TMPDIR may be set special value on BAREMETAL CI.
# e.g. TMPDIR="/tmp/kata-containers" on ARM CI node.
if [ -n "${TMPDIR}" ]; then
	mkdir -p "${TMPDIR}"
fi

pushd "${kata_repo_dir}"

pr_number=
branch=

# $ghprbPullId and $ghprbTargetBranch are variables from
# the Jenkins GithubPullRequestBuilder Plugin
[ -n "${ghprbPullId}" ] && [ -n "${ghprbTargetBranch}" ] && export pr_number="${ghprbPullId}"

if [ -n "$pr_number" ]; then
	export branch="${ghprbTargetBranch}"
	export pr_branch="PR_${pr_number}"
else
	export branch="${GIT_BRANCH/*\//}"
fi

# Resolve kata dependencies
"${GOPATH}/src/${tests_repo}/.ci/resolve-kata-dependencies.sh"

# Install go after repository is cloned and checkout to PR
# This ensures:
# - We have latest changes in install_go.sh
# - We got get changes if versions.yaml changed.
"${GOPATH}/src/${tests_repo}/.ci/install_go.sh" -p -f

# Check if we can fastpath return/skip the CI
# Work around the 'set -e' dying if the check fails by using a bash
# '{ group command }' to encapsulate.
{
	if [ "${pr_number:-}"  != "" ]; then
		echo "Testing a PR check if can fastpath return/skip"
		"${tests_repo_dir}/.ci/ci-fast-return.sh"
		ret=$?
	else
		echo "not a PR will run all the CI"
		ret=1
	fi
} || true
if [ "$ret" -eq 0 ]; then
	echo "Short circuit fast path skipping the rest of the CI."
	exit 0
fi

# Run the static analysis tools
if [ "${METRICS_CI}" = "false" ]; then
	# We run static checks on GitHub Actions for x86_64,
	# hence run them on Jenkins for non-x86_64 only.
	if [ "$arch" != "x86_64" ]; then
		if [ "${kata_repo}" == "${katacontainers_repo}" ]; then
			make -C src/runtime pkg/katautils/config-settings.go
		fi
		specific_branch=""
		# If not a PR, we are testing on stable or master branch.
		[ -z "$pr_number" ] && specific_branch="true"
		"${ci_dir_name}/static-checks.sh" --only-arch "$kata_repo" "$specific_branch"
		# It is too early to configure defaultRuntimeConfiguration
		# The file generation should be deferred at runtime installation with
		# /opt/confidential-containers/share/defaults/kata-containers/configuration.toml
		rm -f src/runtime/pkg/katautils/config-settings.go
	fi
fi

# Source the variables needed for setup the system and run the tests
# according to the job type.
pushd "${GOPATH}/src/${tests_repo}"
source ".ci/ci_job_flags.sh"
source "${cidir}/lib.sh"
popd

run_unit_test() {
	# Run unit tests on non x86_64
	if [[ "$arch" == "s390x" || "$arch" == "aarch64" ]]; then
		echo "Running unit tests"
		sudo chown -R "$USER" "$HOME/.cargo" || true
		"$ci_dir_name/install_rust.sh" && source "$HOME/.cargo/env"
		clone_katacontainers_repo

		pushd "${GOPATH}/src/${katacontainers_repo}"
		echo "Installing libseccomp library from sources"
		libseccomp_install_dir=$(mktemp -d -t libseccomp.XXXXXXXXXX)
		gperf_install_dir=$(mktemp -d -t gperf.XXXXXXXXXX)
		sudo -E ./ci/install_libseccomp.sh "${libseccomp_install_dir}" "${gperf_install_dir}"
		echo "Set environment variables for the libseccomp crate to link the libseccomp library statically"
		export LIBSECCOMP_LINK_TYPE=static
		export LIBSECCOMP_LIB_PATH="${libseccomp_install_dir}/lib"
		sudo -E PATH=$PATH make test
		popd
	else
		echo "Skip running unit tests because it is assumed to run elsewhere"
	fi
}

run_main_test() {
	if [ "${CI_JOB}" != "SGX" ]; then
		"${ci_dir_name}/setup.sh"
	fi

	if [ "${CI_JOB}" == "VFIO" ]; then
		pushd "${GOPATH}/src/${tests_repo}"
		ci_dir_name=".ci"

		echo "Installing initrd image"
		sudo -E AGENT_INIT=yes TEST_INITRD=yes osbuilder_distro=alpine PATH=$PATH "${ci_dir_name}/install_kata_image.sh"

		echo "Installing kernel"
		sudo -E PATH=$PATH "${ci_dir_name}/install_kata_kernel.sh"

		echo "Installing Cloud Hypervisor"
		sudo -E PATH=$PATH "${ci_dir_name}/install_cloud_hypervisor.sh"

		echo "Running VFIO tests"
		"${ci_dir_name}/run.sh"

		popd
	elif [ "${METRICS_CI}" == "false" ]; then
		# Run integration tests
		#
		# Note: this will run all classes of tests for ${tests_repo}.
		"${ci_dir_name}/run.sh"
	elif [  "${CI_JOB}" == "SGX" ]; then
		echo "General setup"
		sudo -E PATH=$PATH "${ci_dir_name}/setup_env_ubuntu.sh" "default"

		echo "Install containerd"
		sudo -E PATH=$PATH "${ci_dir_name}/install_cri_containerd.sh"
		sudo -E PATH=$PATH "${ci_dir_name}/configure_containerd_for_kata.sh"

		echo "Install kubernetes"
		sudo -E PATH=$PATH "${ci_dir_name}/install_kubernetes.sh"

		echo "Configure SGX"
		sudo -E PATH=$PATH "${ci_dir_name}/configure_for_sgx.sh"
	else
		echo "Running the metrics tests:"
		"${ci_dir_name}/run.sh"
	fi
}

test_snap_build() {
	if [[ "${ID}" == "ubuntu" && "$(uname -m)" != "x86_64" ]]; then
		echo "Test snap build"
		sudo apt install -y snapcraft
		clone_katacontainers_repo

		pushd "${katacontainers_repo_dir}"
		sudo snapcraft snap --debug --destructive-mode
		# PREFIX is changed in snap build, change it back
		PREFIX=
		popd
	else
		echo "Skipping snap test because it is assumed to run elsewhere"
	fi
}

case ${test_type} in
	all)
		run_main_test
		run_unit_test
		test_snap_build
		;;
	unit)
		run_unit_test
		;;
	main)
		run_main_test
		;;
	snap)
		test_snap_build
		;;
	*) echo "Unknown test type." >&2 && exit 1 ;;
esac

popd