tf-agent_cntnr

FROM phusion/baseimage:focal-1.0.0

ARG influx_host
ARG influx_port
ARG influx_user
ARG influx_pw

ENV DEBIAN_FRONTEND noninteractive
ENV HOME /root
ENV LC_ALL C.UTF-8
ENV LANG en_US.UTF-8
ENV LANGUAGE en_US.UTF-8
ENV PATH /data/testflinger/agent:/data/testflinger/cli:/data/testflinger/device-connectors:$PATH

RUN echo "RUNNING tf-agent_cntnr dockerfile"
RUN echo "influx_host: ${influx_host}"
RUN echo "influx_port: ${influx_port}"
RUN echo "influx_user: ${influx_user}"
RUN echo "influx_pw: ${influx_pw}"

# add maas-cli PPA
RUN apt-add-repository ppa:maas/2.9 -y \
  && add-apt-repository ppa:checkbox-dev/stable -y

# install deps & cleanup
RUN apt-get update \
  && apt-get install -y \
    --no-install-recommends \
    bash \
    bash-completion \
    sudo \
    openssh-client \
    ssh-import-id \
    build-essential \
    net-tools \
    iputils-ping \
    iproute2 \
    curl \
    git \
    wget \
    python3 \
    python3-dev \
    python3-pip \
    python3-virtualenv \
    python3-requests \
    python3-click \
    openjdk-11-jre \
    maas-cli \
    python-cheetah \
    checkbox-ng

# clean up APT
RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

# link python3 bin
RUN ln -s /usr/bin/python3 /usr/bin/python
RUN pip3 install requests_oauthlib "paho-mqtt<2.0.0" xdg ruamel.yaml urllib3
RUN pip3 install --upgrade requests urllib3

# add users
RUN useradd -ms /bin/bash ubuntu \
  && useradd -ms /bin/bash jenkins

# add to sudoers
RUN echo 'ubuntu ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers \
  && echo 'jenkins ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers

# add SSH access
RUN rm -f /etc/service/sshd/down \
  && /etc/my_init.d/00_regen_ssh_host_keys.sh > /dev/null 2>&1

# prepare ssh key ops
COPY ./authorized_keys /tmp/authorized_keys

# gen ssh keys, update pubkey, import auth_keys
USER ubuntu
# generate ssh key and insert real hostname into pubkey
RUN ssh-keygen -t rsa -N '' -f /home/ubuntu/.ssh/id_rsa \
  && sed -i 's|@buildkitsandbox|@testflinger-agent-cntnr|gI' /home/ubuntu/.ssh/id_rsa.pub
# import auth_keys
RUN cat /tmp/authorized_keys >> /home/ubuntu/.ssh/authorized_keys

USER jenkins
# generate ssh key and insert real hostname into pubkey
RUN ssh-keygen -t rsa -N '' -f /home/jenkins/.ssh/id_rsa \
  && sed -i 's|@buildkitsandbox|@testflinger-agent-cntnr|gI' /home/jenkins/.ssh/id_rsa.pub
# import auth_keys
RUN cat /tmp/authorized_keys >> /home/jenkins/.ssh/authorized_keys

# root must be last
USER root
RUN ssh-keygen -t rsa -N '' -f /root/.ssh/id_rsa \
  && sed -i 's|@buildkitsandbox|@testflinger-agent-cntnr|gI' /root/.ssh/id_rsa.pub
RUN cat /tmp/authorized_keys >> /root/.ssh/authorized_keys \
  && rm -f /tmp/authorized_keys

# facilitate logging
RUN mkdir -p /var/log/testflinger \
  && chmod 755 /var/log/testflinger

#Install testflinger source
WORKDIR /data/testflinger
RUN git init \
  && git remote add origin https://github.com/canonical/testflinger.git \
  && git fetch origin \
  #&& git checkout -b main 525468018
  && git checkout -b main --track origin/main

# run tf-agent setup
WORKDIR /data/testflinger/agent
RUN echo && echo "Running testflinger-agent setup:" \ 
  && echo "Updating pip from $(pip3 --version)" \
  && pip3 install -U pip \
  && hash -r \
  && echo "New pip version: $(pip3 --version)" \
  && echo "Attempting build/install of testflinger-agent" \
  && pip install -I .

## run tf-agent setup
#WORKDIR /data/testflinger/agent
#RUN echo && echo "Running testflinger-agent setup:" \ 
#  && pip3 install .
#  #&& python3 setup.py install

# run tf-cli setup
WORKDIR /data/testflinger/cli
RUN echo && echo "Running testflinger-cli setup:" \
  && pip3 install .  
#&& python3 setup.py install

# run device connector
WORKDIR /data/testflinger/device-connectors
RUN echo && echo "Running device-connectors setup:" \
  && pip install -I .
  #&& python3 setup.py install

# adjust perms on src files
RUN chown -R ubuntu:ubuntu /data/testflinger/agent \
  && chmod 775 /data/testflinger/agent \
  && chown -R ubuntu:ubuntu /data/testflinger/cli \
  && chmod 775 /data/testflinger/cli \
  && chown -R ubuntu:ubuntu /data/testflinger/device-connectors \
  && chmod 775 /data/testflinger/device-connectors

# set user passwords (temp pw)
RUN echo "ubuntu:ch4ng3m3" | chpasswd \
  && echo "jenkins:ch4ng3m3" | chpasswd

# set user passwords (secure method)
# RUN --mount=type=secret,id=tf_secret,required=true chpasswd < /run/secrets/tf_secret