|
| 1 | +#!/bin/bash |
| 2 | +set -eo pipefail |
| 3 | + |
| 4 | +ROOTDIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )/../../" && pwd )" |
| 5 | +SCRIPTDIR=${ROOTDIR}/image-mode/microshift |
| 6 | +IMGNAME=microshift |
| 7 | +MICROSHIFT_VERSION=4.18 |
| 8 | +BUILD_ARCH=$(uname -m) |
| 9 | +OSVERSION=$(awk -F: '{print $5}' /etc/system-release-cpe) |
| 10 | +LVM_SYSROOT_SIZE_MIN=10240 |
| 11 | +LVM_SYSROOT_SIZE=${LVM_SYSROOT_SIZE_MIN} |
| 12 | +OCP_PULL_SECRET_FILE= |
| 13 | +AUTHORIZED_KEYS_FILE= |
| 14 | +AUTHORIZED_KEYS= |
| 15 | +USE_MIRROR_REPO= |
| 16 | + |
| 17 | +# shellcheck disable=SC2034 |
| 18 | +STARTTIME="$(date +%s)" |
| 19 | +BUILDDIR=${BUILDDIR:-${ROOTDIR}/_output/image-mode} |
| 20 | + |
| 21 | +usage() { |
| 22 | + local error_message="$1" |
| 23 | + |
| 24 | + if [ -n "${error_message}" ]; then |
| 25 | + echo "ERROR: ${error_message}" |
| 26 | + echo |
| 27 | + fi |
| 28 | + |
| 29 | + echo "Usage: $(basename "$0") <-pull_secret_file path_to_file> [OPTION]..." |
| 30 | + echo "" |
| 31 | + echo " -pull_secret_file path_to_file" |
| 32 | + echo " Path to a file containing the OpenShift pull secret, which can be" |
| 33 | + echo " obtained from https://console.redhat.com/openshift/downloads#tool-pull-secret" |
| 34 | + echo "" |
| 35 | + echo "Optional arguments:" |
| 36 | + echo " -lvm_sysroot_size num_in_MB" |
| 37 | + echo " Size of the system root LVM partition. The remaining" |
| 38 | + echo " disk space will be allocated for data (default: ${LVM_SYSROOT_SIZE})" |
| 39 | + echo " -authorized_keys_file path_to_file" |
| 40 | + echo " Path to an SSH authorized_keys file to allow SSH access" |
| 41 | + echo " into the default 'redhat' account" |
| 42 | + echo " -use-mirror-repo <mirror_repo>" |
| 43 | + echo " Use mirror repo to get release candidate and engineering preview rpms" |
| 44 | + echo " like (https://mirror.openshift.com/pub/openshift-v4/x86_64/microshift/ocp-dev-preview/latest-4.18/el9/os/)" |
| 45 | + echo " -microshift-version <microshift-version>" |
| 46 | + echo " Version of microshift for image generation (default: ${MICROSHIFT_VERSION}" |
| 47 | + echo " -hostname <hostname>" |
| 48 | + echo " Hostname of the machine" |
| 49 | + exit 1 |
| 50 | +} |
| 51 | + |
| 52 | +title() { |
| 53 | + echo -e "\E[34m\n# $1\E[00m" |
| 54 | +} |
| 55 | + |
| 56 | +# Parse the command line |
| 57 | +while [ $# -gt 0 ] ; do |
| 58 | + case $1 in |
| 59 | + -pull_secret_file) |
| 60 | + shift |
| 61 | + OCP_PULL_SECRET_FILE="$1" |
| 62 | + [ -z "${OCP_PULL_SECRET_FILE}" ] && usage "Pull secret file not specified" |
| 63 | + [ ! -s "${OCP_PULL_SECRET_FILE}" ] && usage "Empty or missing pull secret file" |
| 64 | + shift |
| 65 | + ;; |
| 66 | + -lvm_sysroot_size) |
| 67 | + shift |
| 68 | + LVM_SYSROOT_SIZE="$1" |
| 69 | + [ -z "${LVM_SYSROOT_SIZE}" ] && usage "System root LVM partition size not specified" |
| 70 | + [ "${LVM_SYSROOT_SIZE}" -lt ${LVM_SYSROOT_SIZE_MIN} ] && usage "System root LVM partition size cannot be smaller than ${LVM_SYSROOT_SIZE_MIN}MB" |
| 71 | + shift |
| 72 | + ;; |
| 73 | + -authorized_keys_file) |
| 74 | + shift |
| 75 | + AUTHORIZED_KEYS_FILE="$1" |
| 76 | + [ -z "${AUTHORIZED_KEYS_FILE}" ] && usage "Authorized keys file not specified" |
| 77 | + shift |
| 78 | + ;; |
| 79 | + -use-mirror-repo) |
| 80 | + shift |
| 81 | + USE_MIRROR_REPO="$1" |
| 82 | + [ -z "${USE_MIRROR_REPO}" ] && usage "Mirror repo not specified" |
| 83 | + shift |
| 84 | + ;; |
| 85 | + -ushift-version) |
| 86 | + shift |
| 87 | + MICROSHIFT_VERSION="$1" |
| 88 | + [ -z "${MICROSHIFT_VERSION}" ] && usage "MicroShift version not specified" |
| 89 | + shift |
| 90 | + ;; |
| 91 | + -hostname) |
| 92 | + shift |
| 93 | + HOSTNAME="$1" |
| 94 | + [ -z "${HOSTNAME}" ] && usage "hostname not specified" |
| 95 | + shift |
| 96 | + ;; |
| 97 | + *) |
| 98 | + usage |
| 99 | + ;; |
| 100 | + esac |
| 101 | +done |
| 102 | + |
| 103 | +if [ ! -r "${OCP_PULL_SECRET_FILE}" ] ; then |
| 104 | + echo "ERROR: pull_secret_file file does not exist or not readable: ${OCP_PULL_SECRET_FILE}" |
| 105 | + exit 1 |
| 106 | +fi |
| 107 | +if [ -n "${AUTHORIZED_KEYS_FILE}" ]; then |
| 108 | + if [ ! -e "${AUTHORIZED_KEYS_FILE}" ]; then |
| 109 | + echo "ERROR: authorized_keys_file does not exist: ${AUTHORIZED_KEYS_FILE}" |
| 110 | + exit 1 |
| 111 | + else |
| 112 | + AUTHORIZED_KEYS=$(cat "${AUTHORIZED_KEYS_FILE}") |
| 113 | + fi |
| 114 | +fi |
| 115 | + |
| 116 | +mkdir -p "${BUILDDIR}" |
| 117 | + |
| 118 | +title "Preparing kickstart config" |
| 119 | +# Create a kickstart file from a template, compacting pull secret contents if necessary |
| 120 | +cat < "${SCRIPTDIR}/config/config.toml.template" \ |
| 121 | + | sed "s;REPLACE_HOSTNAME;${HOSTNAME};g" \ |
| 122 | + | sed "s;REPLACE_LVM_SYSROOT_SIZE;${LVM_SYSROOT_SIZE};g" \ |
| 123 | + | sed "s;REPLACE_OCP_PULL_SECRET_CONTENTS;$(cat < "${OCP_PULL_SECRET_FILE}" | jq -c);g" \ |
| 124 | + | sed "s^REPLACE_CORE_AUTHORIZED_KEYS_CONTENTS^${AUTHORIZED_KEYS}^g" \ |
| 125 | + > "${BUILDDIR}"/config.toml |
| 126 | + |
| 127 | +title "Building bootc image for microshift" |
| 128 | +sudo podman build --authfile ${OCP_PULL_SECRET_FILE} -t ${IMGNAME}:${MICROSHIFT_VERSION} \ |
| 129 | + --build-arg USHIFT_VER=${MICROSHIFT_VERSION} \ |
| 130 | + --env MIRROR_REPO=${USE_MIRROR_REPO} \ |
| 131 | + -f "${SCRIPTDIR}/config/Containerfile.bootc-rhel9" |
| 132 | + |
| 133 | +# As of now we are generating the ISO to have same previous behavior |
| 134 | +# TODO: Try to use qcow2 directly for vm creation |
| 135 | +title "Creating ISO image" |
| 136 | +sudo podman run --authfile ${OCP_PULL_SECRET_FILE} --rm -it \ |
| 137 | + --privileged \ |
| 138 | + --security-opt label=type:unconfined_t \ |
| 139 | + -v /var/lib/containers/storage:/var/lib/containers/storage \ |
| 140 | + -v "${BUILDDIR}"/config.toml:/config.toml \ |
| 141 | + -v "${BUILDDIR}":/output \ |
| 142 | + registry.redhat.io/rhel9/bootc-image-builder:latest \ |
| 143 | + --local \ |
| 144 | + --type iso \ |
| 145 | + --config /config.toml \ |
| 146 | + localhost/${IMGNAME}:${MICROSHIFT_VERSION} |
0 commit comments