@le-space/rootfs 0.1.3 → 0.1.5

package/index.js

@@ -1,4 +1,5 @@
 // src/contract.ts
+import { existsSync } from "fs";
 import { readFile } from "fs/promises";
 import { fileURLToPath } from "url";
 function asObject(value) {
@@ -132,14 +133,27 @@ function contractShellEnv(contract, contractPath = "") {
     ROOTFS_CONTRACT_PORT_FORWARDS_JSON: JSON.stringify(contract.ports)
   };
 }
+function resolveReferencePath(profile, suffix = "") {
+  const candidates = [
+    new URL(`../reference/${profile}/${suffix}`, import.meta.url),
+    new URL(`./reference/${profile}/${suffix}`, import.meta.url)
+  ];
+  for (const candidate of candidates) {
+    const resolved = fileURLToPath(candidate);
+    if (existsSync(resolved)) {
+      return resolved;
+    }
+  }
+  return fileURLToPath(candidates[0]);
+}
 function referenceProfileRoot(profile) {
-  return fileURLToPath(new URL(`../reference/${profile}/`, import.meta.url));
+  return resolveReferencePath(profile);
 }
 function referenceProfileContractPath(profile) {
-  return fileURLToPath(new URL(`../reference/${profile}/contract.json`, import.meta.url));
+  return resolveReferencePath(profile, "contract.json");
 }
 function referenceProfileRootfsDir(profile) {
-  return fileURLToPath(new URL(`../reference/${profile}/rootfs/`, import.meta.url));
+  return resolveReferencePath(profile, "rootfs/");
 }
 
 // src/build-plan.ts
@@ -307,7 +321,7 @@ function createHostRootfsExecutionPlan(plan, options = {}) {
     reason: "Using host virt-customize/qemu-img toolchain.",
     referenceRootfsDir,
     runCommand: {
-      command: "bash",
+      command: "/bin/bash",
       args: [path2.join(referenceRootfsDir, "build-rootfs-image.sh")],
       workdir: referenceRootfsDir,
       env: {
@@ -369,7 +383,7 @@ function createDockerRootfsExecutionPlan(plan, options = {}) {
         "-w",
         rootfsMountPath,
         dockerImageTag,
-        "bash",
+        "/bin/bash",
         path2.posix.join(rootfsMountPath, "build-rootfs-image.sh")
       ]
     }
@@ -532,7 +546,7 @@ function rootfsScriptDir(buildPlan, override) {
 function createRootfsScriptCommand(buildPlan, referenceRootfsDir) {
   const scriptDir = rootfsScriptDir(buildPlan, referenceRootfsDir);
   return {
-    command: "bash",
+    command: "/bin/bash",
     args: [path3.join(scriptDir, "build-rootfs.sh")],
     workdir: scriptDir,
     env: rootfsBuildShellEnv(buildPlan)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@le-space/rootfs",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Shared rootfs contract parsing, reference profile assets, and build helpers.",
   "license": "MIT",
   "type": "module",

package/reference/uc-go-peer/contract.json

@@ -0,0 +1,58 @@
+{
+  "schemaVersion": 1,
+  "id": "uc-go-peer",
+  "displayName": "Universal Connectivity Go Relay",
+  "source": {
+    "repository": "self",
+    "subdirectory": "go-peer"
+  },
+  "rootfs": {
+    "profile": "uc-go-peer",
+    "installMode": "prebaked",
+    "installDir": "/opt/go-peer",
+    "binaryPath": "/usr/local/bin/universal-chat-go",
+    "dataDir": "/var/lib/uc-go-peer",
+    "envFile": "/etc/default/uc-go-peer"
+  },
+  "services": {
+    "bootstrap": "uc-go-peer-bootstrap.service",
+    "main": "uc-go-peer.service",
+    "autotlsRefresh": "uc-go-peer-autotls-refresh.service"
+  },
+  "ports": [
+    {
+      "port": 22,
+      "tcp": true,
+      "udp": false,
+      "purpose": "SSH"
+    },
+    {
+      "port": 80,
+      "tcp": true,
+      "udp": false,
+      "purpose": "Temporary setup endpoint"
+    },
+    {
+      "port": 443,
+      "tcp": true,
+      "udp": false,
+      "purpose": "Caddy HTTPS and WSS proxy"
+    },
+    {
+      "port": 9097,
+      "tcp": true,
+      "udp": false,
+      "purpose": "libp2p secure websocket listener"
+    },
+    {
+      "port": 9095,
+      "tcp": true,
+      "udp": true,
+      "purpose": "libp2p raw TCP and UDP transports"
+    }
+  ],
+  "manifest": {
+    "copyTarget": "js-peer/public/rootfs/uc-go-peer/latest.json",
+    "notes": "The go-peer image keeps the raw relay on internal port 9095, uses an internal plain websocket backend on 9096 for Caddy, exposes a dedicated internal secure websocket listener on 9097 for AutoTLS/direct WSS, advertises the actual Aleph host port mappings for direct TCP/UDP and AutoTLS websocket transports after deployment, and can optionally add a proxy-backed secure WebSocket address on port 443 via Caddy."
+  }
+}

package/reference/uc-go-peer/rootfs/Dockerfile.rootfs

@@ -0,0 +1,24 @@
+FROM debian:12
+
+ENV DEBIAN_FRONTEND=noninteractive
+ENV LIBGUESTFS_BACKEND=direct
+ARG GO_VERSION=1.25.4
+ENV PATH=/usr/local/go/bin:${PATH}
+
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends \
+    ca-certificates \
+    curl \
+    jq \
+    libguestfs-tools \
+    linux-image-amd64 \
+    python3 \
+    qemu-system-x86 \
+    qemu-utils \
+    tar \
+  && curl -fsSL "https://go.dev/dl/go${GO_VERSION}.linux-amd64.tar.gz" -o /tmp/go.tgz \
+  && tar -C /usr/local -xzf /tmp/go.tgz \
+  && rm -f /tmp/go.tgz \
+  && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /workspace/universal-connectivity/go-peer/aleph

package/reference/uc-go-peer/rootfs/build-rootfs-image.sh

@@ -0,0 +1,94 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ALEPH_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
+PROJECT_DIR="${PROJECT_DIR:-$(cd "${SCRIPT_DIR}/../../.." && pwd)}"
+ROOTFS_CONTRACT_FILE="${ROOTFS_CONTRACT_FILE:-${ALEPH_DIR}/root-profiles/uc-go-peer.json}"
+OUT_DIR="${OUT_DIR:-${ALEPH_DIR}/dist-rootfs}"
+BASE_URL="${BASE_URL:-https://cloud.debian.org/images/cloud/bookworm/latest/debian-12-genericcloud-amd64.qcow2}"
+BASE_IMAGE="${OUT_DIR}/debian-12-genericcloud-amd64.qcow2"
+IMAGE="${OUT_DIR}/aleph-uc-go-peer.qcow2"
+APP_BINARY="${OUT_DIR}/universal-chat-go"
+ROOTFS_IMAGE_SIZE="${ROOTFS_IMAGE_SIZE:-20G}"
+
+require() {
+  command -v "$1" >/dev/null 2>&1 || {
+    echo "Missing required command: $1" >&2
+    exit 1
+  }
+}
+
+require curl
+require qemu-img
+require virt-customize
+require python3
+require go
+
+eval "$(python3 "${SCRIPT_DIR}/read-rootfs-contract.py" "${ROOTFS_CONTRACT_FILE}")"
+
+ROOTFS_CONTRACT_BINARY_PATH="${ROOTFS_CONTRACT_BINARY_PATH:-/usr/local/bin/universal-chat-go}"
+GUEST_APP_DIR="$(dirname "${ROOTFS_CONTRACT_BINARY_PATH}")"
+
+if [ "${ROOTFS_CONTRACT_PROFILE}" != "uc-go-peer" ]; then
+  echo "Only the uc-go-peer rootfs profile is supported, got: ${ROOTFS_CONTRACT_PROFILE}" >&2
+  exit 1
+fi
+if [ "${ROOTFS_CONTRACT_INSTALL_MODE}" != "prebaked" ]; then
+  echo "Only prebaked install mode is supported, got: ${ROOTFS_CONTRACT_INSTALL_MODE}" >&2
+  exit 1
+fi
+if [ ! -d "${PROJECT_DIR}/go-peer" ]; then
+  echo "Missing go-peer directory: ${PROJECT_DIR}/go-peer" >&2
+  exit 1
+fi
+
+mkdir -p "${OUT_DIR}"
+
+echo "Building uc-go-peer image in prebaked mode"
+
+if [ ! -f "${BASE_IMAGE}" ]; then
+  curl -L "${BASE_URL}" -o "${BASE_IMAGE}"
+fi
+
+cp "${BASE_IMAGE}" "${IMAGE}"
+qemu-img resize "${IMAGE}" "${ROOTFS_IMAGE_SIZE}"
+
+echo "Building universal-chat-go outside the guest image"
+(
+  cd "${PROJECT_DIR}/go-peer"
+  GOMODCACHE="${OUT_DIR}/gomodcache" \
+  GOCACHE="${OUT_DIR}/gocache" \
+  CGO_ENABLED=0 \
+  go build -ldflags="-w -s" -o "${APP_BINARY}" .
+)
+
+rm -rf "${OUT_DIR}/gomodcache" "${OUT_DIR}/gocache"
+
+virt-customize \
+  -a "${IMAGE}" \
+  --mkdir "${ROOTFS_CONTRACT_INSTALL_DIR}" \
+  --mkdir "${ROOTFS_CONTRACT_DATA_DIR}" \
+  --copy-in "${APP_BINARY}:${GUEST_APP_DIR}" \
+  --copy-in "${SCRIPT_DIR}/uc-go-peer-bootstrap.sh:/usr/local/sbin" \
+  --copy-in "${SCRIPT_DIR}/uc-go-peer-configure.sh:/usr/local/sbin" \
+  --copy-in "${SCRIPT_DIR}/uc-go-peer-autotls-refresh.py:/usr/local/sbin" \
+  --copy-in "${SCRIPT_DIR}/uc-go-peer-describe.py:/usr/local/sbin" \
+  --copy-in "${SCRIPT_DIR}/uc-go-peer-setup-server.py:/usr/local/sbin" \
+  --copy-in "${SCRIPT_DIR}/uc-go-peer-bootstrap.service:/etc/systemd/system" \
+  --copy-in "${SCRIPT_DIR}/uc-go-peer-autotls-refresh.service:/etc/systemd/system" \
+  --copy-in "${SCRIPT_DIR}/uc-go-peer.service:/etc/systemd/system" \
+  --run-command "chmod 0755 ${ROOTFS_CONTRACT_BINARY_PATH}" \
+  --run-command "chmod 0755 /usr/local/sbin/uc-go-peer-bootstrap.sh" \
+  --run-command "chmod 0755 /usr/local/sbin/uc-go-peer-configure.sh" \
+  --run-command "chmod 0755 /usr/local/sbin/uc-go-peer-autotls-refresh.py" \
+  --run-command "chmod 0755 /usr/local/sbin/uc-go-peer-describe.py" \
+  --run-command "chmod 0755 /usr/local/sbin/uc-go-peer-setup-server.py" \
+  --run-command "INSTALL_DIR=${ROOTFS_CONTRACT_INSTALL_DIR} APP_BINARY=${ROOTFS_CONTRACT_BINARY_PATH} DATA_DIR=${ROOTFS_CONTRACT_DATA_DIR} ENV_FILE=${ROOTFS_CONTRACT_ENV_FILE} SERVICE_USER=uc-go-peer /usr/local/sbin/uc-go-peer-bootstrap.sh base" \
+  --run-command "INSTALL_DIR=${ROOTFS_CONTRACT_INSTALL_DIR} APP_BINARY=${ROOTFS_CONTRACT_BINARY_PATH} DATA_DIR=${ROOTFS_CONTRACT_DATA_DIR} ENV_FILE=${ROOTFS_CONTRACT_ENV_FILE} SERVICE_USER=uc-go-peer /usr/local/sbin/uc-go-peer-bootstrap.sh build" \
+  --run-command "INSTALL_DIR=${ROOTFS_CONTRACT_INSTALL_DIR} APP_BINARY=${ROOTFS_CONTRACT_BINARY_PATH} DATA_DIR=${ROOTFS_CONTRACT_DATA_DIR} ENV_FILE=${ROOTFS_CONTRACT_ENV_FILE} SERVICE_USER=uc-go-peer /usr/local/sbin/uc-go-peer-bootstrap.sh finalize" \
+  --run-command "systemctl enable ${ROOTFS_CONTRACT_BOOTSTRAP_SERVICE}" \
+  --run-command "systemctl enable ${ROOTFS_CONTRACT_AUTOTLS_SERVICE}" \
+  --run-command "systemctl enable ${ROOTFS_CONTRACT_MAIN_SERVICE}"
+
+echo "Rootfs image ready at ${IMAGE}"