init to git
This commit is contained in:
@@ -0,0 +1,115 @@
|
||||
{
|
||||
"user": {
|
||||
"user-id": 1001,
|
||||
"group-id": 121,
|
||||
"docker-group-id": 500
|
||||
},
|
||||
"install": [
|
||||
{
|
||||
"category": "aws",
|
||||
"source": "script",
|
||||
"packages": [
|
||||
"aws-cli"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "development",
|
||||
"source": "apt",
|
||||
"packages": [
|
||||
"build-essential",
|
||||
"lsb-release",
|
||||
"zlib1g-dev",
|
||||
"zstd",
|
||||
"gettext",
|
||||
"libcurl4-openssl-dev",
|
||||
"libpq-dev",
|
||||
"pkg-config",
|
||||
"libyaml-dev"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "container-tools",
|
||||
"source": "script",
|
||||
"packages": [
|
||||
"container-tools"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "debugging",
|
||||
"source": "script",
|
||||
"packages": [
|
||||
"liblttng-ust"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "docker-cli",
|
||||
"source": "script",
|
||||
"packages": [
|
||||
"docker-cli"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "docker",
|
||||
"source": "script",
|
||||
"packages": [
|
||||
"docker"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "git",
|
||||
"source": "script",
|
||||
"packages": [
|
||||
"git",
|
||||
"git-lfs"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "github",
|
||||
"source": "script",
|
||||
"packages": [
|
||||
"github-cli"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "network-tools",
|
||||
"source": "apt",
|
||||
"packages": [
|
||||
"inetutils-ping",
|
||||
"wget",
|
||||
"openssh-client",
|
||||
"rsync"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "node",
|
||||
"source": "apt",
|
||||
"packages": [
|
||||
"nodejs"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "powershell",
|
||||
"source": "script",
|
||||
"packages": [
|
||||
"powershell"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "python",
|
||||
"source": "apt",
|
||||
"packages": [
|
||||
"python3",
|
||||
"python3-pip",
|
||||
"python3-setuptools",
|
||||
"python3-venv"
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "yq",
|
||||
"source": "script",
|
||||
"packages": [
|
||||
"yq"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,26 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
function config_file() {
|
||||
echo "$(dirname "${BASH_SOURCE[0]}")/config.json"
|
||||
}
|
||||
|
||||
function user_id() {
|
||||
jq -r '.user."user-id"' "$(config_file)"
|
||||
}
|
||||
|
||||
function group_id() {
|
||||
jq -r '.user."group-id"' "$(config_file)"
|
||||
}
|
||||
|
||||
function docker_group_id() {
|
||||
jq -r '.user."docker-group-id"' "$(config_file)"
|
||||
}
|
||||
|
||||
function apt_packages() {
|
||||
jq -r '.install[] | select(.source == "apt") | .packages[]' "$(config_file)" | paste -sd ' ' -
|
||||
}
|
||||
|
||||
function script_packages() {
|
||||
jq -r '.install[] | select(.source == "script") | .packages[]' "$(config_file)"
|
||||
}
|
||||
@@ -0,0 +1,65 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
# Required by the build or runner operation
|
||||
function install_essentials() {
|
||||
apt-get install -y --no-install-recommends \
|
||||
ca-certificates \
|
||||
curl \
|
||||
jq \
|
||||
gnupg \
|
||||
tar \
|
||||
unzip \
|
||||
zip \
|
||||
apt-transport-https \
|
||||
sudo \
|
||||
dirmngr \
|
||||
locales \
|
||||
gosu \
|
||||
gpg-agent \
|
||||
dumb-init \
|
||||
libc-bin
|
||||
}
|
||||
|
||||
function install_tools_apt() {
|
||||
apt_packages | xargs apt-get install -y --no-install-recommends
|
||||
}
|
||||
|
||||
function remove_caches() {
|
||||
rm -rf /var/lib/apt/lists/*
|
||||
rm -rf /tmp/*
|
||||
}
|
||||
|
||||
function setup_sudoers() {
|
||||
sed -e 's/Defaults.*env_reset/Defaults env_keep = "HTTP_PROXY HTTPS_PROXY NO_PROXY FTP_PROXY http_proxy https_proxy no_proxy ftp_proxy"/' -i /etc/sudoers
|
||||
echo '%sudo ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers
|
||||
}
|
||||
|
||||
echo en_US.UTF-8 UTF-8 >> /etc/locale.gen
|
||||
|
||||
scripts_dir=$(dirname "$0")
|
||||
# shellcheck source=/dev/null
|
||||
source "$scripts_dir/sources.sh"
|
||||
# shellcheck source=/dev/null
|
||||
source "$scripts_dir/tools.sh"
|
||||
# shellcheck source=/dev/null
|
||||
source "$scripts_dir/config.sh"
|
||||
|
||||
apt-get update
|
||||
install_essentials
|
||||
configure_sources
|
||||
|
||||
apt-get update
|
||||
# The docker group needs to run before installers
|
||||
groupadd -g "$(docker_group_id)" docker || :
|
||||
install_tools_apt
|
||||
install_tools
|
||||
|
||||
setup_sudoers
|
||||
groupadd -g "$(group_id)" runner
|
||||
useradd -mr -d /home/runner -u "$(user_id)" -g "$(group_id)" runner
|
||||
usermod -aG sudo runner
|
||||
usermod -aG docker runner
|
||||
|
||||
remove_sources
|
||||
remove_caches
|
||||
@@ -0,0 +1,60 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
function configure_git() {
|
||||
# shellcheck source=/dev/null
|
||||
source /etc/os-release
|
||||
|
||||
local GIT_CORE_PPA_KEY="A1715D88E1DF1F24"
|
||||
|
||||
gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys ${GIT_CORE_PPA_KEY}
|
||||
gpg --export ${GIT_CORE_PPA_KEY} | gpg --dearmor -o /usr/share/keyrings/git-core.gpg
|
||||
|
||||
if [[ "${VERSION_CODENAME}" == "focal" ]]; then
|
||||
local GIT_CORE_FOCAL_PPA_KEY="E363C90F8F1B6217"
|
||||
local KEYRING_FILE="/usr/share/keyrings/git-core-focal.gpg"
|
||||
gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys ${GIT_CORE_FOCAL_PPA_KEY}
|
||||
gpg --export ${GIT_CORE_FOCAL_PPA_KEY} | gpg --dearmor -o "${KEYRING_FILE}"
|
||||
echo deb [signed-by=${KEYRING_FILE}] http://ppa.launchpad.net/git-core/ppa/ubuntu focal main>/etc/apt/sources.list.d/git-core.list
|
||||
|
||||
fi
|
||||
}
|
||||
|
||||
function configure_docker() {
|
||||
# shellcheck source=/dev/null
|
||||
source /etc/os-release
|
||||
|
||||
mkdir -p /etc/apt/keyrings
|
||||
curl -fsSL "https://download.docker.com/linux/$ID/gpg" | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
|
||||
|
||||
local version DPKG_ARCH
|
||||
version=$(echo "$VERSION_CODENAME" | sed 's/trixie\|n\/a/bookworm/g')
|
||||
DPKG_ARCH="$(dpkg --print-architecture)"
|
||||
echo "deb [arch=${DPKG_ARCH} signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/$ID ${version} stable" \
|
||||
| tee /etc/apt/sources.list.d/docker.list > /dev/null
|
||||
}
|
||||
|
||||
function configure_container_tools() {
|
||||
# shellcheck source=/dev/null
|
||||
source /etc/os-release
|
||||
|
||||
if [[ "${VERSION_CODENAME}" == "focal" ]]; then
|
||||
echo "available in 20.10 and higher"
|
||||
echo "deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04/ /" \
|
||||
| tee /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
|
||||
curl -L "https://build.opensuse.org/projects/devel:kubic/signing_keys/download?kind=gpg" \
|
||||
| /usr/bin/apt-key add -
|
||||
fi
|
||||
}
|
||||
|
||||
function configure_sources() {
|
||||
configure_git
|
||||
configure_docker
|
||||
configure_container_tools
|
||||
}
|
||||
|
||||
function remove_sources() {
|
||||
rm -f /etc/apt/sources.list.d/git-core.list
|
||||
rm -f /etc/apt/sources.list.d/docker.list
|
||||
rm -f /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
|
||||
}
|
||||
@@ -0,0 +1,127 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
function install_git() {
|
||||
( apt-get install -y --no-install-recommends git \
|
||||
|| apt-get install -t stable -y --no-install-recommends git )
|
||||
}
|
||||
|
||||
function install_liblttng-ust() {
|
||||
if [[ $(apt-cache search -n liblttng-ust0 | awk '{print $1}') == "liblttng-ust0" ]]; then
|
||||
apt-get install -y --no-install-recommends liblttng-ust0
|
||||
fi
|
||||
|
||||
if [[ $(apt-cache search -n liblttng-ust1 | awk '{print $1}') == "liblttng-ust1" ]]; then
|
||||
apt-get install -y --no-install-recommends liblttng-ust1
|
||||
fi
|
||||
}
|
||||
|
||||
function install_aws-cli() {
|
||||
( curl "https://awscli.amazonaws.com/awscli-exe-linux-$(uname -m).zip" -o "awscliv2.zip" \
|
||||
&& unzip -q awscliv2.zip -d /tmp/ \
|
||||
&& /tmp/aws/install \
|
||||
&& rm awscliv2.zip \
|
||||
) \
|
||||
|| pip3 install --no-cache-dir awscli
|
||||
}
|
||||
|
||||
function install_git-lfs() {
|
||||
local DPKG_ARCH
|
||||
DPKG_ARCH="$(dpkg --print-architecture)"
|
||||
GIT_LFS_VERSION=$(curl -sL -H "Accept: application/vnd.github+json" \
|
||||
https://api.github.com/repos/git-lfs/git-lfs/releases/latest \
|
||||
| jq -r '.tag_name' | sed 's/^v//g')
|
||||
|
||||
curl -s "https://github.com/git-lfs/git-lfs/releases/download/v${GIT_LFS_VERSION}/git-lfs-linux-${DPKG_ARCH}-v${GIT_LFS_VERSION}.tar.gz" -L -o /tmp/lfs.tar.gz
|
||||
tar -xzf /tmp/lfs.tar.gz -C /tmp
|
||||
"/tmp/git-lfs-${GIT_LFS_VERSION}/install.sh"
|
||||
rm -rf /tmp/lfs.tar.gz "/tmp/git-lfs-${GIT_LFS_VERSION}"
|
||||
}
|
||||
|
||||
function install_docker-cli() {
|
||||
apt-get install -y docker-ce-cli --no-install-recommends --allow-unauthenticated
|
||||
}
|
||||
|
||||
function install_docker() {
|
||||
apt-get install -y docker-ce docker-ce-cli docker-buildx-plugin containerd.io docker-compose-plugin --no-install-recommends --allow-unauthenticated
|
||||
|
||||
echo -e '#!/bin/sh\ndocker compose --compatibility "$@"' > /usr/local/bin/docker-compose
|
||||
chmod +x /usr/local/bin/docker-compose
|
||||
|
||||
sed -i 's/ulimit -Hn/# ulimit -Hn/g' /etc/init.d/docker
|
||||
}
|
||||
|
||||
function install_container-tools() {
|
||||
( apt-get install -y --no-install-recommends podman buildah skopeo || : )
|
||||
}
|
||||
|
||||
function install_github-cli() {
|
||||
local DPKG_ARCH GH_CLI_VERSION GH_CLI_DOWNLOAD_URL
|
||||
|
||||
DPKG_ARCH="$(dpkg --print-architecture)"
|
||||
|
||||
GH_CLI_VERSION=$(curl -sL -H "Accept: application/vnd.github+json" \
|
||||
https://api.github.com/repos/cli/cli/releases/latest \
|
||||
| jq -r '.tag_name' | sed 's/^v//g')
|
||||
|
||||
GH_CLI_DOWNLOAD_URL=$(curl -sL -H "Accept: application/vnd.github+json" \
|
||||
https://api.github.com/repos/cli/cli/releases/latest \
|
||||
| jq ".assets[] | select(.name == \"gh_${GH_CLI_VERSION}_linux_${DPKG_ARCH}.deb\")" \
|
||||
| jq -r '.browser_download_url')
|
||||
|
||||
curl -sSLo /tmp/ghcli.deb "${GH_CLI_DOWNLOAD_URL}"
|
||||
apt-get -y install /tmp/ghcli.deb
|
||||
rm /tmp/ghcli.deb
|
||||
}
|
||||
|
||||
function install_yq() {
|
||||
local DPKG_ARCH YQ_DOWNLOAD_URL
|
||||
|
||||
DPKG_ARCH="$(dpkg --print-architecture)"
|
||||
|
||||
YQ_DOWNLOAD_URL=$(curl -sL -H "Accept: application/vnd.github+json" \
|
||||
https://api.github.com/repos/mikefarah/yq/releases/latest \
|
||||
| jq ".assets[] | select(.name == \"yq_linux_${DPKG_ARCH}.tar.gz\")" \
|
||||
| jq -r '.browser_download_url')
|
||||
|
||||
curl -s "${YQ_DOWNLOAD_URL}" -L -o /tmp/yq.tar.gz
|
||||
tar -xzf /tmp/yq.tar.gz -C /tmp
|
||||
mv "/tmp/yq_linux_${DPKG_ARCH}" /usr/local/bin/yq
|
||||
}
|
||||
|
||||
function install_powershell() {
|
||||
local DPKG_ARCH PWSH_VERSION PWSH_DOWNLOAD_URL
|
||||
|
||||
DPKG_ARCH="$(dpkg --print-architecture)"
|
||||
|
||||
PWSH_VERSION=$(curl -sL -H "Accept: application/vnd.github+json" \
|
||||
https://api.github.com/repos/PowerShell/PowerShell/releases/latest \
|
||||
| jq -r '.tag_name' \
|
||||
| sed 's/^v//g')
|
||||
|
||||
PWSH_DOWNLOAD_URL=$(curl -sL -H "Accept: application/vnd.github+json" \
|
||||
https://api.github.com/repos/PowerShell/PowerShell/releases/latest \
|
||||
| jq -r ".assets[] | select(.name == \"powershell-${PWSH_VERSION}-linux-${DPKG_ARCH//amd64/x64}.tar.gz\") | .browser_download_url")
|
||||
|
||||
curl -L -o /tmp/powershell.tar.gz "$PWSH_DOWNLOAD_URL"
|
||||
mkdir -p /opt/powershell
|
||||
tar zxf /tmp/powershell.tar.gz -C /opt/powershell
|
||||
chmod +x /opt/powershell/pwsh
|
||||
ln -s /opt/powershell/pwsh /usr/bin/pwsh
|
||||
}
|
||||
|
||||
function install_tools() {
|
||||
local function_name
|
||||
# shellcheck source=/dev/null
|
||||
source "$(dirname "${BASH_SOURCE[0]}")/config.sh"
|
||||
|
||||
script_packages | while read -r package; do
|
||||
function_name="install_${package}"
|
||||
if declare -f "${function_name}" > /dev/null; then
|
||||
"${function_name}"
|
||||
else
|
||||
echo "No install script found for package: ${package}"
|
||||
exit 1
|
||||
fi
|
||||
done
|
||||
}
|
||||
Reference in New Issue
Block a user