Add dockerfile and initial CI pipeline

Author: Stuart133

.circleci/config.yml

@@ -0,0 +1,109 @@
+version: 2.1
+
+orbs:
+  slack: circleci/[email protected]
+
+workflows:
+  main-workflow:
+    jobs:
+      - download-taskagent:
+          context: org-global
+      - scan-image:
+          context: org-global
+          requires:
+            - download-taskagent
+      - build-and-publish-image:
+          name: build-and-publish-image-amd64
+          context: org-global
+          requires:
+            - scan-image
+      - build-and-publish-image:
+          name: build-and-publish-image-arm64
+          resource: arm.medium
+          arch: arm64
+          context: org-global
+          requires:
+            - scan-image
+
+executors:
+  ccc:
+    docker:
+      - image: circleci/command-convenience:0.1
+        auth:
+          username: $DOCKER_HUB_USER
+          password: $DOCKER_HUB_PASSWORD
+    environment:
+      NAME: << pipeline.parameters.release-name >>
+      DOCKERFILE_PATH: Dockerfile
+      TEAM: on-prem
+
+parameters:
+  release-name:
+    type: string
+    default: "runner-init"
+
+jobs:
+  download-taskagent:
+    machine:
+      image: ubuntu-2204:2024.02.7
+      resource_class: small
+    steps:
+      - checkout
+      - docker_login
+      - run: ./do download-taskagent amd64
+      - run: ./do download-taskagent arm64
+      - persist_to_workspace:
+          root: .
+          paths:
+            - "./circleci-agent-*"
+      - notify_failing_main
+
+  build-and-publish-image:
+    parameters:
+      resource:
+        type: string
+        default: small
+      arch:
+        type: string
+        default: amd64
+    machine:
+      image: ubuntu-2204:2024.02.7
+      resource_class: << parameters.resource>>
+    steps:
+      - checkout
+      - attach_workspace:
+          at: .
+      - docker_login
+      - run: docker build -t circleci/<< pipeline.parameters.release-name >>:agent-<< parameters.arch >> --build-arg ARCH=<< parameters.arch >> .
+      # TODO: Publish images (on main) once the repo is set up
+      - notify_failing_main
+
+  scan-image:
+    executor: ccc
+    steps:
+      - checkout
+      - setup_remote_docker
+      - attach_workspace:
+          at: .
+      - run:
+          name: Scan Docker images
+          command: scan
+      - store_artifacts:
+          path: ccc-image-scan-results
+      - notify_failing_main
+
+commands:
+  docker_login:
+    steps:
+      - run:
+          name: "Log into Docker Hub"
+          command: |
+            docker login -u "${DOCKER_HUB_USER}" -p "${DOCKER_HUB_PASSWORD}"
+    
+  notify_failing_main:
+    steps:
+      - slack/notify:
+          channel: runner-alerts
+          branch_pattern: main
+          event: fail
+          template: basic_fail_1

Dockerfile

@@ -0,0 +1,14 @@
+FROM busybox:stable-musl as build
+
+FROM scratch as temp
+
+ARG ARCH=amd64
+
+COPY ./circleci-agent-${ARCH} /opt/circleci/circleci-agent
+COPY --from=build /bin/cp /bin/cp
+
+FROM scratch
+
+COPY --from=temp / /
+
+CMD ["/bin/cp"]

do

@@ -0,0 +1,132 @@
+#!/usr/bin/env bash
+
+set -eu -o pipefail
+
+# This variable is used, but shellcheck can't tell.
+# shellcheck disable=SC2034
+help_download_taskagent="Download task agent via the picard image"
+download-taskagent() {
+    arch=${1:?'task agent arch must be specified'}
+
+    id=$(docker create circleci/picard:agent)
+    docker cp "$id":/opt/circleci/linux/"$arch"/circleci-agent ./circleci-agent-"$arch"
+    docker rm -v "$id"
+}
+
+help-text-intro() {
+    echo "
+DO
+
+A set of simple repetitive tasks that adds minimally
+to standard tools used to build and test the service.
+(e.g. go and docker)
+"
+}
+
+### START FRAMEWORK ###
+# Do Version 0.0.4
+
+# This variable is used, but shellcheck can't tell.
+# shellcheck disable=SC2034
+help_completion="Print shell completion function for this script.
+
+Usage: $0 completion SHELL"
+completion() {
+    local shell
+    shell="${1-}"
+
+    if [ -z "$shell" ]; then
+        echo "Usage: $0 completion SHELL" 1>&2
+        exit 1
+    fi
+
+    case "$shell" in
+    bash)
+        (
+            echo
+            echo '_dotslashdo_completions() { '
+            # shellcheck disable=SC2016
+            echo '  COMPREPLY=($(compgen -W "$('"$0"' list)" "${COMP_WORDS[1]}"))'
+            echo '}'
+            echo 'complete -F _dotslashdo_completions '"$0"
+        )
+        ;;
+    zsh)
+        cat <<EOF
+_dotslashdo_completions() {
+  local -a subcmds
+  subcmds=()
+  DO_HELP_SKIP_INTRO=1 $0 help | while read line; do
+EOF
+        cat <<'EOF'
+    cmd=$(cut -f1  <<< $line)
+    cmd=$(awk '{$1=$1};1' <<< $cmd)
+
+    desc=$(cut -f2- <<< $line)
+    desc=$(awk '{$1=$1};1' <<< $desc)
+
+    subcmds+=("$cmd:$desc")
+  done
+  _describe 'do' subcmds
+}
+
+compdef _dotslashdo_completions do
+EOF
+        ;;
+    fish)
+        cat <<EOF
+complete -e -c do
+complete -f -c do
+for line in (string split \n (DO_HELP_SKIP_INTRO=1 $0 help))
+EOF
+        cat <<'EOF'
+  set cmd (string split \t $line)
+  complete -c do  -a $cmd[1] -d $cmd[2]
+end
+EOF
+        ;;
+    esac
+}
+
+list() {
+    declare -F | awk '{print $3}'
+}
+
+# This variable is used, but shellcheck can't tell.
+# shellcheck disable=SC2034
+help_help="Print help text, or detailed help for a task."
+help() {
+    local item
+    item="${1-}"
+    if [ -n "${item}" ]; then
+        local help_name
+        help_name="help_${item//-/_}"
+        echo "${!help_name-}"
+        return
+    fi
+
+    if [ -z "${DO_HELP_SKIP_INTRO-}" ]; then
+        type -t help-text-intro >/dev/null && help-text-intro
+    fi
+    for item in $(list); do
+        local help_name text
+        help_name="help_${item//-/_}"
+        text="${!help_name-}"
+        [ -n "$text" ] && printf "%-30s\t%s\n" "$item" "$(echo "$text" | head -1)"
+    done
+}
+
+case "${1-}" in
+list) list ;;
+"" | "help") help "${2-}" ;;
+*)
+    if ! declare -F "${1}" >/dev/null; then
+        printf "Unknown target: %s\n\n" "${1}"
+        help
+        exit 1
+    else
+        "$@"
+    fi
+    ;;
+esac
+### END FRAMEWORK ###