conjur-debify 0.2.2 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c9e3361963d306c2c15ab66de60ca17cf6bd5685
-  data.tar.gz: d16f73386a8bf36bfbf41ce5fbcdff65f7bbe641
+  metadata.gz: b09163b1b3fd1d4cbf3e0c9a7960581bac62d3bf
+  data.tar.gz: 1542b78f84637ac4abb479d1f4f3bdfbf17e3313
 SHA512:
-  metadata.gz: 1a59b7d288d9dd214e6d4e95c06c6fdf5620bb4eda3da1aab92477a5c5c1f6f3b486e41fc88ad02e9d6b88e67d22ab6709e6787c8410cbbdb8a3d99b7307c771
-  data.tar.gz: 323e2581dea5d8d42fe1ce918c3100778e5f98814ff85687a95ac80962a59d99904b5eb11d59d11a6adfc506c0158fa67a447eebcf73d4fe260575cc28fd0940
+  metadata.gz: cff5d82b37638d470e81c87d11a1dd96934a4101b63e4c59c6f6717b5a09134be54723b3aa01eed6207ef48b71ef6e7a24274a29baa25a4605376114a2a56e50
+  data.tar.gz: 4f99702117b608961ddb17c3393d6d892fe7738c3839a4a7288d51cab4ecd5bd1a71190ef3a4a781609e513b4a70606ef61549db660560c971ec3a90d4e474e3

data/.gitignore

@@ -1,3 +1,4 @@
+.idea
 features/reports
 /.bundle/
 /.yardoc

data/README.md

@@ -83,6 +83,55 @@ COMMAND OPTIONS
 $ debify test -i conjur-appliance-cuke-master --image-tag 4.6-dev --no-pull -d example example test.sh
 ```
 
+## Publish a package
+
+```
+$ debify help publish
+NAME
+    publish - Publish a debian package to apt repository
+
+SYNOPSIS
+    debify [global options] publish [command options] package
+
+DESCRIPTION
+    Publishes a deb created with `debify package` to our private apt
+    repository.
+
+    You can use wildcards to select packages to publish, e.g., debify
+    publish *.deb.
+
+    --distribution should match the major/minor version of the Conjur
+    appliance you want to install to.
+
+    --component should be 'stable' if run after package tests pass or
+    'testing' if the package is not yet ready for release.
+
+    ARTIFACTORY_USERNAME and ARTIFACTORY_PASSWORD must be available
+    in the environment for upload to succeed.
+
+COMMAND OPTIONS
+    -c, --component=arg    - Maturity stage of the package, 'testing'
+                             or 'stable' (default: testing)
+    -d, --distribution=arg - Lock packages to a Conjur appliance
+                             version (default: 4.6)
+```
+
+### Example usage
+
+Assuming a `secrets.yml` like this exists in the source directory:
+
+```yaml
+ARTIFACTORY_USERNAME: !var artifactory/users/jenkins/username
+ARTIFACTORY_PASSWORD: !var artifactory/users/jenkins/password
+```
+
+```sh-session
+$ summon debify publish -c stable conjur-example_0.0.1_amd64.deb
+[Thread 0] Uploading artifact: https://conjurinc.artifactoryonline.com/conjurinc/debian-local/test.deb;deb.distribution=4.6;deb.component=stable;deb.architecture=amd64
+[Thread 0] Artifactory response: 201 Created
+Uploaded 1 artifacts to Artifactory.
+```
+
 ## Installation
 
 Add this line to your application's Gemfile:

data/lib/conjur/debify.rb

@@ -303,6 +303,65 @@ command "test" do |c|
     end
   end
 end
+
+desc "Publish a debian package to apt repository"
+long_desc <<DESC
+Publishes a deb created with `debify package` to our private apt repository.
+
+You can use wildcards to select packages to publish, e.g., debify publish *.deb.
+
+--distribution should match the major/minor version of the Conjur appliance you want to install to.
+
+--component should be 'stable' if run after package tests pass or 'testing' if the package is not yet ready for release.
+
+ARTIFACTORY_USERNAME and ARTIFACTORY_PASSWORD must be available in the environment for upload to succeed.
+DESC
+arg_name "package"
+command "publish" do |c|
+  c.desc "Lock packages to a Conjur appliance version"
+  c.default_value "4.6"
+  c.flag [ :d, :distribution ]
+
+  c.desc "Maturity stage of the package, 'testing' or 'stable'"
+  c.default_value "testing"
+  c.flag [ :c, :component ]
+
+  c.action do |global_options,cmd_options,args|
+    raise "package is required" unless package = args.shift
+
+    distribution = cmd_options[:distribution]
+    component = cmd_options[:component]
+    dir = '.'
+    dir = File.expand_path(dir)
+
+    publish_image = Docker::Image.build_from_dir File.expand_path('publish', File.dirname(__FILE__)), tag: "debify-publish", &DebugMixin::DOCKER
+    DebugMixin.debug_write "Built base publish image '#{publish_image.id}'\n"
+
+    options = {
+        'Image' => publish_image.id,
+        'Cmd' => [
+            "art", "upload",
+            "--url", "https://conjurinc.artifactoryonline.com/conjurinc",
+            "--user", ENV['ARTIFACTORY_USERNAME'],
+            "--password", ENV['ARTIFACTORY_PASSWORD'],
+            "--deb", "#{distribution}/#{component}/amd64",
+            package, "debian-local/"
+        ],
+        'Binds' => [
+            [ dir, "/src" ].join(':')
+        ]
+    }
+
+    container = Docker::Container.create(options)
+    begin
+      container.tap(&:start).streaming_logs(follow: true, stdout: true, stderr: true) { |stream, chunk| puts "#{chunk}" }
+      status = container.wait
+      raise "Failed to publish #{package}" unless status['StatusCode'] == 0
+    ensure
+      container.delete(force: true)
+    end
+  end
+end
   
 pre do |global,command,options,args|
   # Pre logic here
@@ -324,3 +383,4 @@ on_error do |exception|
   # return false to skip default error handling
   true
 end
+

data/lib/conjur/debify/version.rb

@@ -1,5 +1,5 @@
 module Conjur
   module Debify
-    VERSION = "0.2.2"
+    VERSION = "0.3.0"
   end
 end

data/lib/conjur/publish/Dockerfile

@@ -0,0 +1,8 @@
+FROM ruby:2.0
+
+RUN curl -kL \
+-o /usr/bin/art \
+https://bintray.com/artifact/download/jfrog/artifactory-cli-go/1.2.1/artifactory-cli-linux-amd64/art && \
+chmod +x /usr/bin/art
+
+WORKDIR /src

data/secrets.yml

@@ -0,0 +1,3 @@
+# Example of secrets.yml file needed for debify publish
+ARTIFACTORY_USERNAME: !var artifactory/users/jenkins/username
+ARTIFACTORY_PASSWORD: !var artifactory/users/jenkins/password

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: conjur-debify
 version: !ruby/object:Gem::Version
-  version: 0.2.2
+  version: 0.3.0
 platform: ruby
 authors:
 - Kevin Gilpin
@@ -125,6 +125,8 @@ files:
 - lib/conjur/fpm/Dockerfile
 - lib/conjur/fpm/debify_utils.sh
 - lib/conjur/fpm/package.sh
+- lib/conjur/publish/Dockerfile
+- secrets.yml
 homepage: https://github.com/conjurinc/debify
 licenses:
 - MIT