-
Notifications
You must be signed in to change notification settings - Fork 763
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update Github actions to build new GRR Docker image
The new docker image and docker-compose setup replaces the GRR debian package. The current e2e testing is temporarily removed as it depends on the debian package and will be re-introduced after the docker-compose setup is available.
- Loading branch information
1 parent
727545a
commit a11a6c9
Showing
2 changed files
with
73 additions
and
142 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -2,78 +2,71 @@ | |
| # | ||
| # See https://hub.docker.com/r/grrdocker/grr/ | ||
| # | ||
| # We have configured Travis to trigger an image build every time a new server | ||
| # deb is been uploaded to GCS. | ||
| # We have configured Github Actions to trigger an image build every time a new | ||
| # a PUSH happens in the GRR github repository. | ||
| # | ||
| # Run the container with: | ||
| # Example: Run the grr admin_ui component: | ||
| # | ||
| # docker run \ | ||
| # -e EXTERNAL_HOSTNAME="localhost" \ | ||
| # -e ADMIN_PASSWORD="demo" \ | ||
| # -p 0.0.0.0:8000:8000 \ | ||
| # -p 0.0.0.0:8080:8080 \ | ||
| # grrdocker/grr | ||
| # docker run -it \ | ||
| # -v $(pwd)/docker_config_files:/configs | ||
| # ghcr.io/google/grr:grr-docker-compose | ||
| # "-component" "admin_ui" | ||
| # "-config" "/configs/server/grr.server.yaml" | ||
|
|
||
| FROM mariadb:jammy | ||
| FROM ubuntu:22.04 AS builder | ||
|
|
||
| LABEL maintainer="[email protected]" | ||
|
|
||
| ARG GCS_BUCKET | ||
| ARG GRR_COMMIT | ||
|
|
||
| ENV GRR_VENV /usr/share/grr-server | ||
| ENV DEBIAN_FRONTEND noninteractive | ||
| # Buffering output (sometimes indefinitely if a thread is stuck in | ||
| # a loop) makes for a non-optimal user experience when containers | ||
| # are run in the foreground, so we disable that. | ||
| ENV PYTHONUNBUFFERED=0 | ||
|
|
||
| SHELL ["/bin/bash", "-c"] | ||
| ENV PYTHONUNBUFFERED 0 | ||
|
|
||
| RUN apt-get update && \ | ||
| apt-get install -y \ | ||
| debhelper \ | ||
| default-jre \ | ||
| dpkg-dev \ | ||
| git \ | ||
| libffi-dev \ | ||
| libssl-dev \ | ||
| python-is-python3 \ | ||
| python3-dev \ | ||
| python3-pip \ | ||
| python3-venv \ | ||
| python3-mysqldb \ | ||
| rpm \ | ||
| wget \ | ||
| zip \ | ||
| python3-mysqldb | ||
| build-essential \ | ||
| linux-headers-generic \ | ||
| dh-make \ | ||
| rpm | ||
|
|
||
| # Only available when building as part of Github Actions. | ||
| COPY _artifacts* /client_templates | ||
|
|
||
| ENV VIRTUAL_ENV /usr/share/grr-server | ||
| ENV GRR_SOURCE /usr/src/grr | ||
|
|
||
| RUN python -m venv --system-site-packages $VIRTUAL_ENV | ||
| ENV PATH="$VIRTUAL_ENV/bin:$PATH" | ||
|
|
||
| # Limiting setuptools version due to | ||
| # https://github.com/pypa/setuptools/issues/3278 | ||
| # (it behaves incorrectly on Ubuntu 22 on virtualenvs with access to | ||
| # globally installed packages). | ||
| RUN pip3 install --upgrade 'setuptools<58.3.1' && \ | ||
| python3 -m venv --system-site-packages $GRR_VENV | ||
| RUN pip install wheel nodeenv grpcio-tools==1.60 | ||
|
|
||
| RUN $GRR_VENV/bin/pip install --upgrade --no-cache-dir pip wheel six setuptools nodeenv && \ | ||
| $GRR_VENV/bin/nodeenv -p --prebuilt --node=16.13.0 && \ | ||
| echo '{ "allow_root": true }' > /root/.bowerrc | ||
| RUN nodeenv -p --prebuilt --node=16.13.0 | ||
|
|
||
| # Copy the GRR code over. | ||
| ADD . /usr/src/grr | ||
| RUN mkdir ${GRR_SOURCE} | ||
| ADD . ${GRR_SOURCE} | ||
|
|
||
| RUN cd /usr/src/grr && bash -x /usr/src/grr/docker/install_grr_from_gcs.sh | ||
| WORKDIR ${GRR_SOURCE} | ||
|
|
||
| ENTRYPOINT ["/usr/src/grr/docker/docker-entrypoint.sh"] | ||
| RUN cd grr/server/grr_response_server/gui/static && \ | ||
| npm ci && npm run gulp compile | ||
|
|
||
| # Port for the admin UI GUI | ||
| EXPOSE 8000 | ||
| RUN python grr/proto/makefile.py && \ | ||
| python grr/core/grr_response_core/artifacts/makefile.py | ||
|
|
||
| # Port for clients to talk to | ||
| EXPOSE 8080 | ||
| RUN pip install -e grr/proto \ | ||
| pip install -e grr/core \ | ||
| pip install -e grr/client \ | ||
| pip install -e grr/server \ | ||
| pip install -e grr/client_builder \ | ||
| pip install -e api_client/python | ||
|
|
||
| # Directories used by GRR at runtime, which can be mounted from the host's | ||
| # filesystem. Note that volumes can be mounted even if they do not appear in | ||
| # this list. | ||
| VOLUME ["/usr/share/grr-server/install_data/etc"] | ||
| WORKDIR / | ||
|
|
||
| CMD ["grr"] | ||
| ENTRYPOINT [ "grr_server" ] | ||