101 lines
2.2 KiB
Python
101 lines
2.2 KiB
Python
|
#!/usr/bin/env python3
|
||
|
|
"""
|
||
|
|
Building and deploying docker images is a bit of a special snowflake as we don't get a file we can upload/download
|
||
|
|
as an artifact. So we need to do everything in one job.
|
||
|
|
"""
|
||
|
|
import os
|
||
|
|
import shutil
|
||
|
|
import subprocess
|
||
|
|
from pathlib import Path
|
||
|
|
from typing import Optional
|
||
|
|
|
||
|
|
# Security: No third-party dependencies here!
|
||
|
|
|
||
|
|
root = Path(__file__).absolute().parent.parent
|
||
|
|
|
||
|
|
ref = os.environ["GITHUB_REF"]
|
||
|
|
branch: Optional[str] = None
|
||
|
|
tag: Optional[str] = None
|
||
|
|
if ref.startswith("refs/heads/"):
|
||
|
|
branch = ref.replace("refs/heads/", "")
|
||
|
|
elif ref.startswith("refs/tags/"):
|
||
|
|
tag = ref.replace("refs/tags/", "")
|
||
|
|
else:
|
||
|
|
raise AssertionError
|
||
|
|
|
||
|
|
(whl,) = root.glob("release/dist/mitmproxy-*-py3-none-any.whl")
|
||
|
|
docker_build_dir = root / "release/docker"
|
||
|
|
shutil.copy(whl, docker_build_dir / whl.name)
|
||
|
|
|
||
|
|
# Build for this platform and test if it runs.
|
||
|
|
subprocess.check_call(
|
||
|
|
[
|
||
|
|
"docker",
|
||
|
|
"buildx",
|
||
|
|
"build",
|
||
|
|
"--tag",
|
||
|
|
"localtesting",
|
||
|
|
"--load",
|
||
|
|
"--build-arg",
|
||
|
|
f"MITMPROXY_WHEEL={whl.name}",
|
||
|
|
".",
|
||
|
|
],
|
||
|
|
cwd=docker_build_dir,
|
||
|
|
)
|
||
|
|
r = subprocess.run(
|
||
|
|
[
|
||
|
|
"docker",
|
||
|
|
"run",
|
||
|
|
"--rm",
|
||
|
|
"localtesting",
|
||
|
|
"mitmdump",
|
||
|
|
"--version",
|
||
|
|
],
|
||
|
|
check=True,
|
||
|
|
capture_output=True,
|
||
|
|
)
|
||
|
|
print(r.stdout.decode())
|
||
|
|
assert "Mitmproxy: " in r.stdout.decode()
|
||
|
|
|
||
|
|
# Now we can deploy.
|
||
|
|
subprocess.check_call(
|
||
|
|
[
|
||
|
|
"docker",
|
||
|
|
"login",
|
||
|
|
"-u",
|
||
|
|
os.environ["DOCKER_USERNAME"],
|
||
|
|
"-p",
|
||
|
|
os.environ["DOCKER_PASSWORD"],
|
||
|
|
]
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
def _buildx(docker_tag):
|
||
|
|
subprocess.check_call(
|
||
|
|
[
|
||
|
|
"docker",
|
||
|
|
"buildx",
|
||
|
|
"build",
|
||
|
|
"--tag",
|
||
|
|
docker_tag,
|
||
|
|
"--push",
|
||
|
|
"--platform",
|
||
|
|
"linux/amd64,linux/arm64",
|
||
|
|
"--build-arg",
|
||
|
|
f"MITMPROXY_WHEEL={whl.name}",
|
||
|
|
".",
|
||
|
|
],
|
||
|
|
cwd=docker_build_dir,
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
if branch == "main":
|
||
|
|
_buildx("mitmproxy/mitmproxy:dev")
|
||
|
|
elif branch == "citest":
|
||
|
|
_buildx("mitmproxy/mitmproxy:citest")
|
||
|
|
elif tag:
|
||
|
|
_buildx(f"mitmproxy/mitmproxy:{tag}")
|
||
|
|
_buildx("mitmproxy/mitmproxy:latest")
|
||
|
|
else:
|
||
|
|
raise AssertionError
|