[#2497] Customized `exexec` launch to support root operation (currently required...
[akkoma] / .gitlab-ci.yml
1 image: elixir:1.8.1
2
3 variables: &global_variables
4 POSTGRES_DB: pleroma_test
5 POSTGRES_USER: postgres
6 POSTGRES_PASSWORD: postgres
7 DB_HOST: postgres
8 MIX_ENV: test
9 USER: root
10
11 cache: &global_cache_policy
12 key: ${CI_COMMIT_REF_SLUG}
13 paths:
14 - deps
15 - _build
16
17 stages:
18 - build
19 - test
20 - benchmark
21 - deploy
22 - release
23 - docker
24
25 before_script:
26 - mix local.hex --force
27 - mix local.rebar --force
28
29 build:
30 stage: build
31 script:
32 - mix deps.get
33 - mix compile --force
34
35 benchmark:
36 stage: benchmark
37 when: manual
38 variables:
39 MIX_ENV: benchmark
40 services:
41 - name: postgres:9.6
42 alias: postgres
43 command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
44 script:
45 - mix deps.get
46 - mix ecto.create
47 - mix ecto.migrate
48 - mix pleroma.load_testing
49
50 unit-testing:
51 stage: test
52 retry: 2
53 cache: &testing_cache_policy
54 <<: *global_cache_policy
55 policy: pull
56
57 services:
58 - name: postgres:9.6
59 alias: postgres
60 command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
61 script:
62 - mix deps.get
63 - mix ecto.create
64 - mix ecto.migrate
65 - mix coveralls --preload-modules
66
67 # Removed to fix CI issue. In this early state it wasn't adding much value anyway.
68 # TODO Fix and reinstate federated testing
69 # federated-testing:
70 # stage: test
71 # cache: *testing_cache_policy
72 # services:
73 # - name: minibikini/postgres-with-rum:12
74 # alias: postgres
75 # command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
76 # script:
77 # - mix deps.get
78 # - mix ecto.create
79 # - mix ecto.migrate
80 # - epmd -daemon
81 # - mix test --trace --only federated
82
83 unit-testing-rum:
84 stage: test
85 retry: 2
86 cache: *testing_cache_policy
87 services:
88 - name: minibikini/postgres-with-rum:12
89 alias: postgres
90 command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
91 variables:
92 <<: *global_variables
93 RUM_ENABLED: "true"
94 script:
95 - mix deps.get
96 - mix ecto.create
97 - mix ecto.migrate
98 - "mix ecto.migrate --migrations-path priv/repo/optional_migrations/rum_indexing/"
99 - mix test --preload-modules
100
101 lint:
102 stage: test
103 cache: *testing_cache_policy
104 script:
105 - mix format --check-formatted
106
107 analysis:
108 stage: test
109 cache: *testing_cache_policy
110 script:
111 - mix deps.get
112 - mix credo --strict --only=warnings,todo,fixme,consistency,readability
113
114 docs-deploy:
115 stage: deploy
116 cache: *testing_cache_policy
117 image: alpine:latest
118 only:
119 - stable@pleroma/pleroma
120 - develop@pleroma/pleroma
121 before_script:
122 - apk add curl
123 script:
124 - curl -X POST -F"token=$DOCS_PIPELINE_TRIGGER" -F'ref=master' -F"variables[BRANCH]=$CI_COMMIT_REF_NAME" https://git.pleroma.social/api/v4/projects/673/trigger/pipeline
125 review_app:
126 image: alpine:3.9
127 stage: deploy
128 before_script:
129 - apk update && apk add openssh-client git
130 when: manual
131 environment:
132 name: review/$CI_COMMIT_REF_NAME
133 url: https://$CI_ENVIRONMENT_SLUG.pleroma.online/
134 on_stop: stop_review_app
135 only:
136 - branches
137 except:
138 - master
139 - develop
140 script:
141 - echo "$CI_ENVIRONMENT_SLUG"
142 - mkdir -p ~/.ssh
143 - eval $(ssh-agent -s)
144 - echo "$SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add -
145 - ssh-keyscan -H "pleroma.online" >> ~/.ssh/known_hosts
146 - (ssh -t dokku@pleroma.online -- apps:create "$CI_ENVIRONMENT_SLUG") || true
147 - (ssh -t dokku@pleroma.online -- git:set "$CI_ENVIRONMENT_SLUG" keep-git-dir true) || true
148 - ssh -t dokku@pleroma.online -- config:set "$CI_ENVIRONMENT_SLUG" APP_NAME="$CI_ENVIRONMENT_SLUG" APP_HOST="$CI_ENVIRONMENT_SLUG.pleroma.online" MIX_ENV=dokku
149 - (ssh -t dokku@pleroma.online -- postgres:create $(echo $CI_ENVIRONMENT_SLUG | sed -e 's/-/_/g')_db) || true
150 - (ssh -t dokku@pleroma.online -- postgres:link $(echo $CI_ENVIRONMENT_SLUG | sed -e 's/-/_/g')_db "$CI_ENVIRONMENT_SLUG") || true
151 - (ssh -t dokku@pleroma.online -- certs:add "$CI_ENVIRONMENT_SLUG" /home/dokku/server.crt /home/dokku/server.key) || true
152 - git push -f dokku@pleroma.online:$CI_ENVIRONMENT_SLUG $CI_COMMIT_SHA:refs/heads/master
153
154 stop_review_app:
155 image: alpine:3.9
156 stage: deploy
157 before_script:
158 - apk update && apk add openssh-client git
159 when: manual
160 environment:
161 name: review/$CI_COMMIT_REF_NAME
162 action: stop
163 script:
164 - echo "$CI_ENVIRONMENT_SLUG"
165 - mkdir -p ~/.ssh
166 - eval $(ssh-agent -s)
167 - echo "$SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add -
168 - ssh-keyscan -H "pleroma.online" >> ~/.ssh/known_hosts
169 - ssh -t dokku@pleroma.online -- --force apps:destroy "$CI_ENVIRONMENT_SLUG"
170 - ssh -t dokku@pleroma.online -- --force postgres:destroy $(echo $CI_ENVIRONMENT_SLUG | sed -e 's/-/_/g')_db
171
172 amd64:
173 stage: release
174 # TODO: Replace with upstream image when 1.9.0 comes out
175 image: rinpatch/elixir:1.9.0-rc.0
176 only: &release-only
177 - stable@pleroma/pleroma
178 - develop@pleroma/pleroma
179 - /^maint/.*$/@pleroma/pleroma
180 - /^release/.*$/@pleroma/pleroma
181 artifacts: &release-artifacts
182 name: "pleroma-$CI_COMMIT_REF_NAME-$CI_COMMIT_SHORT_SHA-$CI_JOB_NAME"
183 paths:
184 - release/*
185 # Ideally it would be never for master branch and with the next commit for develop,
186 # but Gitlab does not support neither `only` for artifacts
187 # nor setting it to never from .gitlab-ci.yml
188 # nor expiring with the next commit
189 expire_in: 42 yrs
190
191 cache: &release-cache
192 key: $CI_COMMIT_REF_NAME-$CI_JOB_NAME
193 paths:
194 - deps
195 variables: &release-variables
196 MIX_ENV: prod
197 before_script: &before-release
198 - echo "import Mix.Config" > config/prod.secret.exs
199 - mix local.hex --force
200 - mix local.rebar --force
201 script: &release
202 - mix deps.get --only prod
203 - mkdir release
204 - export PLEROMA_BUILD_BRANCH=$CI_COMMIT_REF_NAME
205 - mix release --path release
206
207
208 amd64-musl:
209 stage: release
210 artifacts: *release-artifacts
211 only: *release-only
212 # TODO: Replace with upstream image when 1.9.0 comes out
213 image: rinpatch/elixir:1.9.0-rc.0-alpine
214 cache: *release-cache
215 variables: *release-variables
216 before_script: &before-release-musl
217 - apk add git gcc g++ musl-dev make
218 - echo "import Mix.Config" > config/prod.secret.exs
219 - mix local.hex --force
220 - mix local.rebar --force
221 script: *release
222
223 arm:
224 stage: release
225 artifacts: *release-artifacts
226 only: *release-only
227 tags:
228 - arm32
229 # TODO: Replace with upstream image when 1.9.0 comes out
230 image: rinpatch/elixir:1.9.0-rc.0-arm
231 cache: *release-cache
232 variables: *release-variables
233 before_script: *before-release
234 script: *release
235
236 arm-musl:
237 stage: release
238 artifacts: *release-artifacts
239 only: *release-only
240 tags:
241 - arm32
242 # TODO: Replace with upstream image when 1.9.0 comes out
243 image: rinpatch/elixir:1.9.0-rc.0-arm-alpine
244 cache: *release-cache
245 variables: *release-variables
246 before_script: *before-release-musl
247 script: *release
248
249 arm64:
250 stage: release
251 artifacts: *release-artifacts
252 only: *release-only
253 tags:
254 - arm
255 # TODO: Replace with upstream image when 1.9.0 comes out
256 image: rinpatch/elixir:1.9.0-rc.0-arm64
257 cache: *release-cache
258 variables: *release-variables
259 before_script: *before-release
260 script: *release
261
262 arm64-musl:
263 stage: release
264 artifacts: *release-artifacts
265 only: *release-only
266 tags:
267 - arm
268 # TODO: Replace with upstream image when 1.9.0 comes out
269 image: rinpatch/elixir:1.9.0-rc.0-arm64-alpine
270 cache: *release-cache
271 variables: *release-variables
272 before_script: *before-release-musl
273 script: *release
274
275 docker:
276 stage: docker
277 image: docker:latest
278 cache: {}
279 dependencies: []
280 variables: &docker-variables
281 DOCKER_DRIVER: overlay2
282 DOCKER_HOST: unix:///var/run/docker.sock
283 IMAGE_TAG: $CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA
284 IMAGE_TAG_SLUG: $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG
285 IMAGE_TAG_LATEST: $CI_REGISTRY_IMAGE:latest
286 IMAGE_TAG_LATEST_STABLE: $CI_REGISTRY_IMAGE:latest-stable
287 before_script: &before-docker
288 - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
289 - docker pull $IMAGE_TAG_SLUG || true
290 - export CI_JOB_TIMESTAMP=$(date --utc -Iseconds)
291 - export CI_VCS_REF=$CI_COMMIT_SHORT_SHA
292 allow_failure: true
293 script:
294 - docker build --cache-from $IMAGE_TAG_SLUG --build-arg VCS_REF=$CI_VCS_REF --build-arg BUILD_DATE=$CI_JOB_TIMESTAMP -t $IMAGE_TAG -t $IMAGE_TAG_SLUG -t $IMAGE_TAG_LATEST .
295 - docker push $IMAGE_TAG
296 - docker push $IMAGE_TAG_SLUG
297 - docker push $IMAGE_TAG_LATEST
298 tags:
299 - dind
300 only:
301 - develop@pleroma/pleroma
302
303 docker-stable:
304 stage: docker
305 image: docker:latest
306 cache: {}
307 dependencies: []
308 variables: *docker-variables
309 before_script: *before-docker
310 allow_failure: true
311 script:
312 - docker build --cache-from $IMAGE_TAG_SLUG --build-arg VCS_REF=$CI_VCS_REF --build-arg BUILD_DATE=$CI_JOB_TIMESTAMP -t $IMAGE_TAG -t $IMAGE_TAG_SLUG -t $IMAGE_TAG_LATEST_STABLE .
313 - docker push $IMAGE_TAG
314 - docker push $IMAGE_TAG_SLUG
315 - docker push $IMAGE_TAG_LATEST_STABLE
316 tags:
317 - dind
318 only:
319 - stable@pleroma/pleroma
320
321 docker-release:
322 stage: docker
323 image: docker:latest
324 cache: {}
325 dependencies: []
326 variables: *docker-variables
327 before_script: *before-docker
328 allow_failure: true
329 script:
330 - docker build --cache-from $IMAGE_TAG_SLUG --build-arg VCS_REF=$CI_VCS_REF --build-arg BUILD_DATE=$CI_JOB_TIMESTAMP -t $IMAGE_TAG -t $IMAGE_TAG_SLUG .
331 - docker push $IMAGE_TAG
332 - docker push $IMAGE_TAG_SLUG
333 tags:
334 - dind
335 only:
336 - /^release/.*$/@pleroma/pleroma