jschoubben
60010aa1fa
mesh/merge-gate head 60010aa1fa12 merged into trunk 89e15c7bcda6 — pass: builds mesh-build-go, mesh-build-image, mesh-build-node → g14, novox, shanks; no b…
mesh/repo-check head 60010aa1fa12 merged into trunk 89e15c7bcda6 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-…
mesh/delivery ready: it delivers once merged
mesh/delivery-group group fix/1839-build-floor rejected: composed together: the checker's verdict at the members' heads (4215ec1a7727): unit: logrotate/cmd/log…
mesh/check failed: unit: logrotate/cmd/logrotate-tools.TestTheBaseParses: manifest_test.go:52: logrotate -d: exit status 1 | 60010aa1fa12 on 89e15c7bc…
mesh-build-go, mesh-build-node and mesh-build-image refuse every fetch, test and build, and say unhealthy, while their work or cache filesystem has less than 20 GiB free (build-agent's floor), so the builder chooses another node instead of filling this one. Each serves build_<x>_release, removing a workspace once its caller's last step answered; a failed fetch removes its own; a workspace never released goes two hours after its last use (ADR 0509) in place of a day, never while a step holds it. Pins mesh-sdk's fix/1839-build-floor (buildstep.Floor, buildstep.Workspaces).
145 lines
3.0 KiB
JSON
145 lines
3.0 KiB
JSON
{
|
|
"module": "mesh-build-image",
|
|
"version": "1",
|
|
"moved": true,
|
|
"runs-as": "mesh-build-image",
|
|
"capabilities": [
|
|
"package-manager",
|
|
"user-namespaces"
|
|
],
|
|
"state": [
|
|
"keys",
|
|
"steps"
|
|
],
|
|
"tools": [
|
|
"build_image_fetch",
|
|
"build_image_build",
|
|
"build_image_copy",
|
|
"build_image_release",
|
|
"build_image_step",
|
|
"build_image_steps",
|
|
"build_image_status",
|
|
"build_image_health"
|
|
],
|
|
"requires": [
|
|
"forge-account",
|
|
"rootless-image-build",
|
|
"artifact-store"
|
|
],
|
|
"own-secrets": {
|
|
"broker": "${dir:state}/broker"
|
|
},
|
|
"secrets-owner": "mesh-build-image",
|
|
"runtime-health": {
|
|
"kind": "tool",
|
|
"tool": "build_image_health",
|
|
"interval": "60s",
|
|
"timeout": "10s",
|
|
"looks": 2,
|
|
"grace": "60s"
|
|
},
|
|
"resources": [
|
|
{
|
|
"id": "account",
|
|
"type": "user",
|
|
"name": "mesh-build-image",
|
|
"shell": "/usr/bin/nologin",
|
|
"home": "/var/lib/mesh-build-image"
|
|
},
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"owner": "mesh-build-image",
|
|
"place": ".",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "work",
|
|
"type": "directory",
|
|
"path": "/var/lib/mesh-build-image-work",
|
|
"mode": "0700",
|
|
"owner": "mesh-build-image",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "store",
|
|
"type": "directory",
|
|
"path": "/var/lib/mesh-build-image-store",
|
|
"mode": "0700",
|
|
"owner": "mesh-build-image",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "ssh-dir",
|
|
"type": "directory",
|
|
"path": "${dir:state}/.ssh",
|
|
"mode": "0700",
|
|
"owner": "mesh-build-image",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "ssh-config",
|
|
"type": "file",
|
|
"path": "${dir:ssh-dir}/config",
|
|
"owner": "mesh-build-image",
|
|
"mode": "0600",
|
|
"template": "files/forge"
|
|
},
|
|
{
|
|
"id": "known-hosts",
|
|
"type": "file",
|
|
"path": "${dir:ssh-dir}/known_hosts",
|
|
"owner": "mesh-build-image",
|
|
"mode": "0644",
|
|
"template": "files/known_hosts"
|
|
},
|
|
{
|
|
"id": "git-config",
|
|
"type": "file",
|
|
"path": "${dir:state}/.config/git/config",
|
|
"owner": "mesh-build-image",
|
|
"mode": "0644",
|
|
"template": "files/gitconfig"
|
|
},
|
|
{
|
|
"id": "registry",
|
|
"type": "file",
|
|
"path": "${dir:state}/registry",
|
|
"owner": "mesh-build-image",
|
|
"mode": "0644",
|
|
"template": "files/registry"
|
|
},
|
|
{
|
|
"id": "git",
|
|
"type": "package",
|
|
"package": "git"
|
|
},
|
|
{
|
|
"id": "openssh",
|
|
"type": "package",
|
|
"package": "openssh"
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "tools",
|
|
"kind": "bundle",
|
|
"language": "go",
|
|
"system": "arch",
|
|
"from": "cmd/mesh-build-image",
|
|
"binary": "mesh-build-image",
|
|
"loads": [
|
|
"mesh-build-image"
|
|
]
|
|
},
|
|
{
|
|
"name": "files",
|
|
"kind": "archive",
|
|
"from": "files"
|
|
}
|
|
]
|
|
}
|
|
}
|