dockerfiles/compile.go

// Copyright 2022 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//      http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package main

import (
	_ "embed"
	"fmt"
	"os"
	"path/filepath"
	"runtime"
	"strings"
)

//go:embed template
var template string

//go:embed template-header
var templateHeader string

type templateArguments struct {
	from_image        string
	target_name       string
	install_packages  string
	package_build     string
	tar_distro_name   string
	package_extension string
}

func applyTemplate(template string, arguments templateArguments) string {
	param_to_args := map[string]string{
		"{from_image}":        arguments.from_image,
		"{target_name}":       arguments.target_name,
		"{install_packages}":  arguments.install_packages,
		"{package_build}":     arguments.package_build,
		"{tar_distro_name}":   arguments.tar_distro_name,
		"{package_extension}": arguments.package_extension,
	}
	for param, arg := range param_to_args {
		template = strings.ReplaceAll(template, param, arg)
	}
	return template
}

// installCMake is used on platforms where the default package manager
// does not provided a recent enough version of CMake (we require >= 3.12).
// The cmake-install-recent layer is defined in template-header.
const installCMake = `
COPY --from=cmake-install-recent /cmake.sh /cmake.sh
RUN set -x; bash /cmake.sh --skip-license --prefix=/usr/local
`

// installJava is used on platforms where the default package manager
// does not provide an implementation of Java of a sufficient version as
// required by the JMX metrics gatherer build.
// The openjdk-install layer is defined in template-header.
const installJava = `
COPY --from=openjdk-install /usr/local/java-${OPENJDK_MAJOR_VERSION}-openjdk/ /usr/local/java-${OPENJDK_MAJOR_VERSION}-openjdk
ENV JAVA_HOME /usr/local/java-${OPENJDK_MAJOR_VERSION}-openjdk/`

var dockerfileArguments = []templateArguments{
	{
		from_image:  "rockylinux:8",
		target_name: "centos8",
		install_packages: `RUN set -x; yum -y update && \
		dnf -y install 'dnf-command(config-manager)' && \
		yum config-manager --set-enabled powertools && \
		yum -y install git systemd \
		autoconf libtool libcurl-devel libtool-ltdl-devel openssl-devel yajl-devel \
		gcc gcc-c++ make cmake bison flex file systemd-devel zlib-devel gtest-devel rpm-build systemd-rpm-macros java-${OPENJDK_MAJOR_VERSION}-openjdk-devel \
		expect rpm-sign zip tzdata-java`,
		package_build:     "RUN ./pkg/rpm/build.sh",
		tar_distro_name:   "centos-8",
		package_extension: "rpm",
	},
	{
		from_image:  "rockylinux:9",
		target_name: "rockylinux9",
		install_packages: `RUN set -x; dnf -y update && \
		dnf -y install 'dnf-command(config-manager)' && \
		dnf config-manager --set-enabled crb && \
		dnf install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm && \
		dnf -y install git systemd \
		autoconf libtool libcurl-devel libtool-ltdl-devel openssl-devel yajl-devel \
		gcc gcc-c++ make cmake bison flex file systemd-devel zlib-devel gtest-devel rpm-build systemd-rpm-macros java-${OPENJDK_MAJOR_VERSION}-openjdk-devel \
		expect rpm-sign zip tzdata-java

		ENV JAVA_HOME /usr/lib/jvm/java-${OPENJDK_MAJOR_VERSION}-openjdk/`,
		package_build:     "RUN ./pkg/rpm/build.sh",
		tar_distro_name:   "rockylinux-9",
		package_extension: "rpm",
	},
	{
		from_image:  "debian:bookworm",
		target_name: "bookworm",
		install_packages: `RUN set -x; apt-get update && \
		DEBIAN_FRONTEND=noninteractive apt-get -y install git systemd \
		autoconf libtool libcurl4-openssl-dev libltdl-dev libssl-dev libyajl-dev \
		build-essential cmake bison flex file libsystemd-dev \
		devscripts cdbs pkg-config openjdk-${OPENJDK_MAJOR_VERSION}-jdk zip`,
		package_build:     "RUN ./pkg/deb/build.sh",
		tar_distro_name:   "debian-bookworm",
		package_extension: "deb",
	},
	{
		from_image:  "debian:bullseye",
		target_name: "bullseye",
		install_packages: `RUN set -x; apt-get update && \
		DEBIAN_FRONTEND=noninteractive apt-get -y install git systemd \
		autoconf libtool libcurl4-openssl-dev libltdl-dev libssl-dev libyajl-dev \
		build-essential cmake bison flex file libsystemd-dev \
		devscripts cdbs pkg-config openjdk-${OPENJDK_MAJOR_VERSION}-jdk zip`,
		package_build:     "RUN ./pkg/deb/build.sh",
		tar_distro_name:   "debian-bullseye",
		package_extension: "deb",
	},
	{
		// Use OpenSUSE Leap 42.3 to emulate SLES 12:
		//https://en.opensuse.org/openSUSE:Build_Service_cross_distribution_howto#Detect_a_distribution_flavor_for_special_code
		from_image:  "opensuse/archive:42.3",
		target_name: "sles12",
		install_packages: `# Add home:odassau repo to install 3.4 bison
ADD https://download.opensuse.org/repositories/home:/odassau/SLE_12_SP4/home:odassau.repo /tmp/home:odassau.repo
RUN set -x; \
		# The 'OSS Update' repo signature is no longer valid, so verify the checksum instead.
		zypper --no-gpg-check refresh 'OSS Update' && \
		(echo '6dd0b89202b19dae873434c5f2ba01164205071581fc02365712be801e304b3b /var/cache/zypp/raw/OSS Update/repodata/repomd.xml' | sha256sum --check) && \
		zypper -n install git systemd autoconf automake flex libtool libcurl-devel libopenssl-devel libyajl-devel gcc gcc-c++ zlib-devel rpm-build expect cmake systemd-devel systemd-rpm-macros unzip zip && \
		# Remove expired root certificate.
		mv /var/lib/ca-certificates/pem/DST_Root_CA_X3.pem /etc/pki/trust/blacklist/ && \
		update-ca-certificates && \
		# Add home:odassau repo to install 3.4 bison
		zypper addrepo /tmp/home:odassau.repo && \
		zypper -n --gpg-auto-import-keys refresh && \
		zypper -n update && \
		# zypper/libcurl has a use-after-free bug that causes segfaults for particular download sequences.
		# If this bug happens to trigger in the future, adding a "zypper -n download" of a subset of the packages can avoid the segfault.
		zypper -n install 'bison>3' && \
		# Allow fluent-bit to find systemd
		ln -fs /usr/lib/systemd /lib/systemd` + installJava + installCMake,
		package_build:     "RUN ./pkg/rpm/build.sh",
		tar_distro_name:   "sles-12",
		package_extension: "rpm",
	},
	{
		from_image:  "opensuse/leap:15.1",
		target_name: "sles15",
		install_packages: `RUN set -x; zypper -n refresh && \
		zypper -n update && \
		zypper -n install git systemd autoconf automake flex libtool libcurl-devel libopenssl-devel libyajl-devel gcc gcc-c++ zlib-devel rpm-build expect cmake systemd-devel systemd-rpm-macros unzip zip 'bison>3'
# Allow fluent-bit to find systemd
RUN ln -fs /usr/lib/systemd /lib/systemd` + installJava + installCMake,
		package_build:     "RUN ./pkg/rpm/build.sh",
		tar_distro_name:   "sles-15",
		package_extension: "rpm",
	},
	{
		from_image:  "ubuntu:focal",
		target_name: "focal",
		install_packages: `RUN set -x; apt-get update && \
		DEBIAN_FRONTEND=noninteractive apt-get -y install git systemd \
		autoconf libtool libcurl4-openssl-dev libltdl-dev libssl-dev libyajl-dev \
		build-essential cmake bison flex file libsystemd-dev \
		devscripts cdbs pkg-config openjdk-${OPENJDK_MAJOR_VERSION}-jdk zip`,
		package_build:     "RUN ./pkg/deb/build.sh",
		tar_distro_name:   "ubuntu-focal",
		package_extension: "deb",
	},
	{
		from_image:  "ubuntu:jammy",
		target_name: "jammy",
		install_packages: `RUN set -x; apt-get update && \
		DEBIAN_FRONTEND=noninteractive apt-get -y install git systemd \
		autoconf libtool libcurl4-openssl-dev libltdl-dev libssl-dev libyajl-dev \
		build-essential cmake bison flex file libsystemd-dev \
		devscripts cdbs pkg-config openjdk-${OPENJDK_MAJOR_VERSION}-jdk zip`,
		package_build:     "RUN ./pkg/deb/build.sh",
		tar_distro_name:   "ubuntu-jammy",
		package_extension: "deb",
	},
	{
		from_image:  "ubuntu:noble",
		target_name: "noble",
		install_packages: `RUN set -x; apt-get update && \
		DEBIAN_FRONTEND=noninteractive apt-get -y install git systemd \
		autoconf libtool libcurl4-openssl-dev libltdl-dev libssl-dev libyajl-dev \
		build-essential cmake bison flex file libsystemd-dev \
		devscripts cdbs pkg-config openjdk-${OPENJDK_MAJOR_VERSION}-jdk zip debhelper`,
		package_build:     "RUN ./pkg/deb/build.sh",
		tar_distro_name:   "ubuntu-noble",
		package_extension: "deb",
	},
	{
		from_image:  "ubuntu:oracular",
		target_name: "oracular",
		install_packages: `RUN set -x; apt-get update && \
		DEBIAN_FRONTEND=noninteractive apt-get -y install git systemd \
		autoconf libtool libcurl4-openssl-dev libltdl-dev libssl-dev libyajl-dev \
		build-essential cmake bison flex file systemd-dev debhelper libsystemd-dev \
		devscripts cdbs pkg-config openjdk-${OPENJDK_MAJOR_VERSION}-jdk zip`,
		package_build:     "RUN ./pkg/deb/build.sh",
		tar_distro_name:   "ubuntu-oracular",
		package_extension: "deb",
	},
}

func getDockerfileFooter() string {
	components := []string{"FROM scratch"}
	for _, arg := range dockerfileArguments {
		components = append(components, fmt.Sprintf("COPY --from=%s /* /", arg.target_name))
	}
	return strings.Join(components, "\n")
}

func getDockerfilePath() string {
	_, filename, _, _ := runtime.Caller(0)
	return filepath.Join(filepath.Dir(filepath.Dir(filename)), "Dockerfile")
}

func getDockerfile() (string, error) {
	components := []string{templateHeader}
	for _, arg := range dockerfileArguments {
		components = append(components, applyTemplate(template, arg))
	}
	components = append(components, getDockerfileFooter())
	return strings.Join(components, "\n\n"), nil
}

func main() {
	dockerfile, err := getDockerfile()
	if err != nil {
		panic(err)
	}
	err = os.WriteFile(getDockerfilePath(), []byte(dockerfile), 0644)
	if err != nil {
		panic(err)
	}
}