mirror of
https://github.com/inspec/inspec
synced 2024-11-22 04:33:09 +00:00
83 lines
2.9 KiB
Bash
Executable file
83 lines
2.9 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
echo "--- dependencies"
|
|
. .expeditor/buildkite/cache_support.sh
|
|
install_cache_deps sudo
|
|
|
|
echo "--- setting up user"
|
|
export LANG=C.UTF-8 LANGUAGE=C.UTF-8
|
|
useradd -m -U --uid 2000 normal
|
|
echo "normal ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers.d/normal
|
|
|
|
echo "--- updating rubygems"
|
|
gem update -N --system 3.5.11 --force
|
|
|
|
echo "--- system details"
|
|
uname -a
|
|
gem env
|
|
bundle --version
|
|
mount
|
|
df /tmp
|
|
echo ${TMPDIR:-unknown}
|
|
|
|
# Fetch tokens from vault ASAP so that long-running tests don't cause our vault token to expire
|
|
echo "--- installing vault"
|
|
export VAULT_VERSION=1.13.0
|
|
export VAULT_HOME=$HOME/vault
|
|
curl --create-dirs -sSLo $VAULT_HOME/vault.zip https://releases.hashicorp.com/vault/$VAULT_VERSION/vault_${VAULT_VERSION}_linux_amd64.zip
|
|
unzip -o $VAULT_HOME/vault.zip -d $VAULT_HOME
|
|
|
|
echo "--- fetching License serverl url and keys from vault"
|
|
# Note: Currently, the value for the local license server is a static IP address. Please update this to a DNS name when available.
|
|
export CHEF_LICENSE_SERVER=$($VAULT_HOME/vault kv get -field ciserver secret/inspec/licensing/server)
|
|
# Note: Currently, this returns blank response
|
|
export CHEF_TELEMETRY_URL=$($VAULT_HOME/vault kv get -field ci secret/inspec/telemetry/server)
|
|
|
|
if [ -n "${CI_ENABLE_COVERAGE:-}" ]; then
|
|
echo "--- fetching Sonar token from vault"
|
|
export SONAR_TOKEN=$($VAULT_HOME/vault kv get -field token secret/inspec/sonar)
|
|
fi
|
|
|
|
echo "--- pull bundle cache"
|
|
pull_bundle
|
|
|
|
echo "--- bundle"
|
|
bundle config --local path vendor/bundle
|
|
bundle config set --local without deploy kitchen
|
|
bundle install --jobs=7 --retry=3
|
|
|
|
echo "--- push bundle cache"
|
|
push_bundle
|
|
|
|
echo "+++ bundle exec rake ${RAKE_TASK:-}"
|
|
# TODO: run this as non-root:
|
|
# chown -R normal:normal /home/normal /workdir
|
|
# su normal -c "bundle exec rake ${RAKE_TASK:-}"
|
|
# shellcheck disable=SC2086
|
|
bundle exec rake ${RAKE_TASK:-}
|
|
RAKE_EXIT=$?
|
|
|
|
# If coverage is enabled, then we need to pick up the coverage/coverage.json file
|
|
if [ -n "${CI_ENABLE_COVERAGE:-}" ]; then
|
|
echo "--- installing sonarscanner"
|
|
export SONAR_SCANNER_VERSION=6.1.0.4477
|
|
export SONAR_SCANNER_HOME=$HOME/.sonar/sonar-scanner-$SONAR_SCANNER_VERSION-linux-x64
|
|
curl --create-dirs -sSLo $HOME/.sonar/sonar-scanner.zip https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-$SONAR_SCANNER_VERSION-linux-x64.zip
|
|
unzip -o $HOME/.sonar/sonar-scanner.zip -d $HOME/.sonar/
|
|
export PATH=$SONAR_SCANNER_HOME/bin:$PATH
|
|
export SONAR_SCANNER_OPTS="-server"
|
|
|
|
# Delete the vendor/ directory. I've tried to exclude it using sonar.exclusions,
|
|
# but that appears to get ignored, and we end up analyzing the gemfile install
|
|
# which blows our analysis.
|
|
echo "--- deleting installed gems"
|
|
rm -rf vendor/
|
|
|
|
# See sonar-project.properties for additional settings
|
|
echo "--- running sonarscanner"
|
|
sonar-scanner \
|
|
-Dsonar.sources=. \
|
|
-Dsonar.host.url=https://sonar.progress.com
|
|
fi
|
|
|
|
exit $RAKE_EXIT
|