Merge pull request #6 from ncode/juliano/development

job to launch nomad and docker to validate the rules

Author: ncode

configs/development/Dockerfile

@@ -0,0 +1,46 @@
+# Use Oracle Linux 9 as the base image
+FROM oraclelinux:9
+
+# Set environment variables
+ENV NOMAD_VERSION=1.8.2
+ENV CNI_PLUGINS_VERSION=v1.5.1
+ENV ARCH=arm64
+
+# Install necessary packages
+RUN dnf update -y && \
+    dnf install -y \
+    curl \
+    git \
+    unzip \
+    tcpdump \
+    bind-utils \
+    iproute \
+    iputils \
+    iptables \
+    ipset \
+    ca-certificates && \
+    dnf clean all 
+
+# Download and install Nomad for the appropriate architecture
+RUN curl -fsSL https://releases.hashicorp.com/nomad/${NOMAD_VERSION}/nomad_${NOMAD_VERSION}_linux_${ARCH}.zip -o nomad.zip && \
+    mkdir -p /etc/nomad /var/lib/nomad && \
+    unzip nomad.zip && \
+    rm nomad.zip && \
+    mv nomad /usr/local/bin/nomad
+
+# Download and install CNI plugins for the appropriate architecture
+RUN mkdir -p /opt/cni/bin /opt/cni/config && \
+    curl -L https://github.com/containernetworking/plugins/releases/download/${CNI_PLUGINS_VERSION}/cni-plugins-linux-${ARCH}-${CNI_PLUGINS_VERSION}.tgz | tar -C /opt/cni/bin -xz
+
+# Create a basic CNI configuration
+RUN mkdir -p /opt/cni/config
+COPY entrypoint.sh /entrypoint.sh
+COPY my-network.conflist /opt/cni/config/my-network.conflist
+COPY outbound /opt/cni/bin/outbound
+COPY config.hcl /etc/nomad/config.hcl
+
+# Expose Nomad's default ports
+EXPOSE 4646 4647 4648 4649
+
+# Set the entrypoint to start Nomad in development mode
+ENTRYPOINT ["/entrypoint.sh"]

configs/development/Makefile

@@ -3,10 +3,13 @@
 all: build docker-build down up
 
 build:
-	GOOS=linux GOARCH=amd64 go build -ldflags="-s -w" ../../plugins/output
+	GOOS=linux GOARCH=arm64 go build -o outbound -ldflags="-s -w" ../../
 
 docker-build:
+	cp -f ../my-network.conflist .
 	docker build -t ncode/cni-output:dev .
+	rm my-network.conflist
+	rm outbound
 
 up:
 	docker compose up

configs/development/config.hcl

@@ -0,0 +1,15 @@
+server {
+  enabled          = true
+  bootstrap_expect = 1
+}
+
+datacenter = "dc1"
+region     = "rg1"
+bind_addr  = "0.0.0.0"
+data_dir   = "/var/lib/nomad"
+
+client {
+  enabled           = true
+  cpu_total_compute = 2000
+}
+

configs/development/docker-compose.yaml

@@ -0,0 +1,18 @@
+services:
+  nomad:
+    image: ncode/cni-output:dev 
+    ports:
+      - "4646:4646"  # HTTP API
+      - "4647:4647"  # RPC
+      - "4648:4648"  # Serf WAN
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+    privileged: true
+    deploy:
+      resources:
+        limits:
+          cpus: 2
+          memory: 512M
+        reservations:
+          cpus: 2
+          memory: 512M

configs/development/entrypoint.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+
+echo 1 > /proc/sys/net/ipv4/ip_forward
+nomad agent -config=/etc/nomad

configs/dig-job.hcl

@@ -0,0 +1,35 @@
+job "dig-job" {
+  datacenters = ["dc1"]
+
+  group "dig-group" {
+    network {
+      mode = "cni/my-network"
+    }
+
+    task "dig-task" {
+      driver = "exec"
+
+      config {
+        command = "/bin/bash"
+        args    = ["-c", "/local/dig-loop.sh"]
+      }
+
+      template {
+        destination = "local/dig-loop.sh"
+        perms       = "755"
+        data        = <<-EOT
+          #!/bin/bash
+          while true ; do
+            dig google.com
+            sleep 5
+          done
+        EOT
+      }
+
+      resources {
+        cpu    = 100
+        memory = 20
+      }
+    }
+  }
+}