Commit e424202d authored by Pedro Eduardo Trujillo's avatar Pedro Eduardo Trujillo
Browse files

Merge branch 'dev' into 'master' 

Omite restricción de runner de CI

See merge request redmic-project/docker/kafka-connector-builder!1
parents 77977522 4d1a4bfb

.dockerignore

0 → 100644
+1 −0
Original line number Diff line number Diff line 
*

.gitlab-ci.yml

0 → 100644
+62 −0
Original line number Diff line number Diff line 
stages:

  - package

  - test-package



image: docker:stable



variables:

  DOCKER_DRIVER: overlay2



services:

  - docker:dind



docker-build-commit-non-master-branches:

  stage: package

  only:

    - branches

  except:

    - master

  script:

    - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY}

    - docker build -t ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA} -t ${CI_REGISTRY_IMAGE}:${CI_COMMIT_REF_NAME}-latest .

    - docker push ${CI_REGISTRY_IMAGE}



docker-build-commit-master-branch:

  stage: package

  only:

    - master

  script:

    - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY}

    - docker build -t ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA} -t ${CI_REGISTRY_IMAGE}:latest .

    - docker push ${CI_REGISTRY_IMAGE}



docker-tag-already-built-image:

  stage: package

  only:

    - tags

  script:

    - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY}

    - docker pull ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA}

    - docker tag ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA} ${CI_REGISTRY_IMAGE}:${CI_COMMIT_TAG}

    - docker push ${CI_REGISTRY_IMAGE}



container-scanning:

  stage: test-package

  allow_failure: true

  only:

    - branches

  script:

    - docker run -d --name db arminc/clair-db:latest

    - docker run -p 6060:6060 --link db:postgres -d --name clair arminc/clair-local-scan:v2.0.1

    - apk add -U wget ca-certificates

    - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY}

    - docker pull ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA}

    - wget https://github.com/arminc/clair-scanner/releases/download/v8/clair-scanner_linux_amd64

    - mv clair-scanner_linux_amd64 clair-scanner

    - chmod +x clair-scanner

    - touch clair-whitelist.yml

    - >

      ./clair-scanner -c http://docker:6060 --ip $(hostname -i) -r gl-sast-container-report.json -l clair.log

      -w clair-whitelist.yml ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA} || true

  artifacts:

    paths: [gl-sast-container-report.json]

Dockerfile

0 → 100644
+40 −0
Original line number Diff line number Diff line 
FROM ubuntu:xenial



LABEL maintainer="info@redmic.es"



ARG GRADLE_VERSION=5.1-0ubuntu1



RUN apt-get update && \

	apt-get install --no-install-recommends -y \

		software-properties-common && \

	add-apt-repository ppa:cwchien/gradle && \

	apt-get update && \

	apt-get install --no-install-recommends -y \

		gradle=${GRADLE_VERSION} \

		openjdk-8-jdk \

		maven \

		git && \

    rm -rf /var/lib/apt/lists/*



ARG KAFKA_VERSION=trunk

ARG CONFLUENT_VERSION=v5.0.1



RUN git clone --single-branch --branch ${KAFKA_VERSION} https://github.com/apache/kafka.git && \

	git clone --single-branch --branch ${CONFLUENT_VERSION} https://github.com/confluentinc/common.git



WORKDIR "/kafka"



RUN gradle installAll



WORKDIR "/common"



RUN mvn install



RUN apt-get remove --purge -y \

		software-properties-common \

		gradle \

		openjdk-8-jdk \

		maven \

		git && \

	apt-get autoremove --purge -y && \

	rm -rf /kafka /common