ci/jjb/shell/bluval.sh

   1 #!/usr/bin/env bash
   2
   3 # Ensure we fail the job if any steps fail
   4 # Disable 'globbing'
   5 set -eux -o pipefail
   6
   7 echo "[ICN] Downloading ICN"
   8 git clone "https://gerrit.akraino.org/r/icn" ${WORKSPACE}/icn
   9
  10 echo "[ICN] Bringing up test cluster"
  11 function clean_vm {
  12     pushd ${WORKSPACE}/icn
  13     vagrant destroy -f
  14     popd
  15 }
  16 trap clean_vm EXIT
  17 pushd ${WORKSPACE}/icn
  18 # TODO Improve VM performance by only using cores on the same node
  19 #sed -i -e '/^\s\+libvirt.cpus/!b' -e "h;s/\S.*/libvirt.cpuset = '0-21,44-65'/;H;g" Vagrantfile
  20 vagrant destroy -f
  21 vagrant up --no-parallel
  22 vagrant ssh jump -c "
  23 set -exuf
  24 cd /icn
  25 sudo su -c 'make jump_server vm_cluster'
  26 "
  27 popd
  28
  29 echo "[ICN] Installing jenkins identity into test cluster"
  30 cp ${WORKSPACE}/icn/deploy/site/vm/id_rsa site-vm-rsa
  31 chmod 0600 site-vm-rsa
  32 ssh-keygen -f ${CLUSTER_SSH_KEY} -y > ${CLUSTER_SSH_KEY}.pub
  33 ssh-copy-id -i ${CLUSTER_SSH_KEY} -f ${CLUSTER_SSH_USER}@${CLUSTER_MASTER_IP} -o IdentityFile=site-vm-rsa -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null
  34
  35 echo "[ICN] Patching kube-hunter image location"
  36 cat <<'EOF' | patch -p1
  37 diff --git a/tests/variables.yaml b/tests/variables.yaml
  38 index fa3fe71..c54f37f 100644
  39 --- a/tests/variables.yaml
  40 +++ b/tests/variables.yaml
  41 @@ -82,3 +82,7 @@ dns_domain: cluster.local                     # cluster's DNS domain
  42  # NONE, WARN, INFO, DEBUG, and TRACE.
  43  # Default is INFO
  44  loglevel: INFO
  45 +
  46 +kube_hunter:
  47 +  path: 'aquasec'
  48 +  name: 'kube-hunter:edge'
  49 EOF
  50
  51 echo "[ICN] Downloading run_bluval.sh from upstream ci-management"
  52 wget --read-timeout=10 --timeout=10 --waitretry=10 -t 10 https://raw.githubusercontent.com/akraino-edge-stack/ci-management/master/jjb/shell/run_bluval.sh
  53
  54 echo "[ICN] Patching run_bluval.sh"
  55 cat <<'EOF' | patch -p3
  56 diff --git a/jjb/shell/run_bluval.sh b/jjb/shell/run_bluval.sh
  57 index 75d20eb..dbfad03 100755
  58 --- a/jjb/shell/run_bluval.sh
  59 +++ b/jjb/shell/run_bluval.sh
  60 @@ -177,6 +177,7 @@ if [ "$pull" == "true" ] || [ "$PULL" == "yes" ]
  61  then
  62      options+=" -P"
  63  fi
  64 +options+=" -t amd64-latest"
  65
  66  set +e
  67  if python3 --version > /dev/null; then
  68 @@ -209,4 +210,3 @@ else
  69      rm results.zip
  70  fi
  71
  72 -rm -f ~/.netrc
  73 EOF
  74
  75 echo "[ICN] Executing run_bluval.sh"
  76 /bin/bash run_bluval.sh