SPECS/caas-danm.spec

   1 # Copyright 2019 Nokia
   2 #
   3 # Licensed under the Apache License, Version 2.0 (the "License");
   4 # you may not use this file except in compliance with the License.
   5 # You may obtain a copy of the License at
   6 #
   7 #     http://www.apache.org/licenses/LICENSE-2.0
   8 #
   9 # Unless required by applicable law or agreed to in writing, software
  10 # distributed under the License is distributed on an "AS IS" BASIS,
  11 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12 # See the License for the specific language governing permissions and
  13 # limitations under the License.
  14
  15 %define COMPONENT danm
  16 %define RPM_NAME caas-%{COMPONENT}
  17 %define RPM_MAJOR_VERSION 3.3.0
  18 %define RPM_MINOR_VERSION 2
  19 %define DANM_VERSION v%{RPM_MAJOR_VERSION}
  20 %define CNI_VERSION 0.7.0
  21 %define go_version 1.12.1
  22 %define SRIOV_VERSION 6b53446e5781570c44e399cccb1fcdfa417f43a1
  23 %define IMAGE_TAG %{RPM_MAJOR_VERSION}-%{RPM_MINOR_VERSION}
  24 %define binary_build_dir %{_builddir}/%{RPM_NAME}-%{RPM_MAJOR_VERSION}/binary-save
  25 %define docker_build_dir %{_builddir}/%{RPM_NAME}-%{RPM_MAJOR_VERSION}/docker-build
  26 %define built_binaries_dir /binary-save
  27
  28 Name:           %{RPM_NAME}
  29 Version:        %{RPM_MAJOR_VERSION}
  30 Release:        %{RPM_MINOR_VERSION}%{?dist}
  31 Summary:        Containers as a Service %{COMPONENT} component
  32 License:        %{_platform_license} and BSD 3-Clause License
  33 URL:            https://github.com/nokia/danm
  34 BuildArch:      x86_64
  35 Vendor:         %{_platform_vendor} and Nokia
  36 Source0:        %{name}-%{version}.tar.gz
  37
  38 Requires: docker-ce >= 18.09.2, iputils
  39 BuildRequires: docker-ce >= 18.09.2, git
  40
  41 # more info at: https://fedoraproject.org/wiki/Packaging:Debuginfo No build ID note in Flannel
  42 %global debug_package %{nil}
  43
  44 %description
  45 This RPM contains the DANM and related CNI binaries for CaaS subsystem.
  46
  47 %prep
  48 %autosetup
  49
  50 %build
  51 mkdir -p %{binary_build_dir}/cni
  52 curl -fsSL -k https://github.com/containernetworking/plugins/releases/download/v%{CNI_VERSION}/cni-plugins-amd64-v%{CNI_VERSION}.tgz  | tar zx --strip-components=1 -C %{binary_build_dir}/cni
  53
  54 docker build \
  55   --network=host \
  56   --no-cache \
  57   --force-rm \
  58   --build-arg HTTP_PROXY="${http_proxy}" \
  59   --build-arg HTTPS_PROXY="${https_proxy}" \
  60   --build-arg NO_PROXY="${no_proxy}" \
  61   --build-arg http_proxy="${http_proxy}" \
  62   --build-arg https_proxy="${https_proxy}" \
  63   --build-arg no_proxy="${no_proxy}" \
  64   --build-arg DANM_VERSION="%{DANM_VERSION}" \
  65   --build-arg go_version="%{go_version}" \
  66   --build-arg SRIOV_VERSION="%{SRIOV_VERSION}" \
  67   --build-arg binaries="%{built_binaries_dir}" \
  68   --tag cni-builder:%{IMAGE_TAG} \
  69   %{docker_build_dir}/cni-builder/
  70
  71 builder_container=$(docker run -id --rm --network=none --entrypoint=/bin/sh cni-builder:%{IMAGE_TAG})
  72 mkdir -p %{binary_build_dir}/danm
  73 docker cp ${builder_container}:%{built_binaries_dir}/danm %{binary_build_dir}/
  74 mkdir -p %{binary_build_dir}/flannel
  75 docker cp ${builder_container}:%{built_binaries_dir}/flannel %{binary_build_dir}/
  76 mkdir -p %{binary_build_dir}/sriov
  77 docker cp ${builder_container}:%{built_binaries_dir}/sriov %{binary_build_dir}/
  78
  79 docker rm -f ${builder_container}
  80 docker rmi cni-builder:%{IMAGE_TAG}
  81
  82 %install
  83 mkdir -p %{buildroot}/etc/cni/net.d/
  84 rsync -av cni-config/00-danm.conf %{buildroot}/etc/cni/net.d/00-danm.conf
  85 rsync -av cni-config/flannel.conf %{buildroot}/etc/cni/net.d/flannel.conf
  86
  87 mkdir -p %{buildroot}/opt/cni/bin/
  88 # Generic CNI plugins
  89 # Don't use the standard ipvlan binary \
  90 # Don't use portmap, quick fix for CVE-2019-9946 \
  91 rsync -av \
  92       --chmod=go+rx,u+rwx \
  93       --exclude=ipvlan \
  94       --exclude=portmap \
  95        %{binary_build_dir}/cni/* %{buildroot}/opt/cni/bin
  96 # DANM
  97 install -D -m 0755 %{binary_build_dir}/danm/danm %{buildroot}/opt/cni/bin/danm
  98 install -D -m 0755 %{binary_build_dir}/danm/fakeipam %{buildroot}/opt/cni/bin/fakeipam
  99 # FLANNEL
 100 install -D -m 0755 %{binary_build_dir}/flannel/flannel %{buildroot}/opt/cni/bin/flannel
 101 # SRIOV
 102 install -D -m 0755 %{binary_build_dir}/sriov/sriov %{buildroot}/opt/cni/bin/sriov
 103
 104 %files
 105 # CONFIG
 106 /etc/cni/net.d/00-danm.conf
 107 /etc/cni/net.d/flannel.conf
 108 # CNI binaries
 109 /opt/cni/bin
 110
 111 %preun
 112
 113 %post
 114
 115 %postun
 116
 117 %clean
 118 rm -rf ${buildroot}