Merge pull request #5722 from mozilla/feature/gha+biojob

Feature/gha+biojob

.github/workflows/hubs-RetPageOrigin.yml

@@ -10,9 +10,12 @@ jobs:
     with:
       registry: mozillareality
       dockerfile: RetPageOriginDockerfile
-      smoke_k8s_deployment: hubs
-      smoke_k8s_deployment_container: hubs
+      personal_k8s_deployment: hubs
+      personal_k8s_deployment_container: hubs
+      bio_script_path: scripts/hab-wrap-and-push.sh
     secrets:
       DOCKER_HUB_PWD: ${{ secrets.DOCKER_HUB_PWD }}
-      GCP_TURKEYGITOPS_SA_JSON : ${{ secrets.GCP_TURKEYGITOPS_SA_JSON  }}
-
+      GCP_TURKEYGITOPS_SA_JSON: ${{ secrets.GCP_TURKEYGITOPS_SA_JSON  }}
+      BLDR_HAB_TOKEN: ${{ secrets.BLDR_HAB_TOKEN }}
+      BLDR_RET_TOKEN: ${{ secrets.BLDR_RET_TOKEN }}
+      BLDR_RET_PUB_B64: ${{ secrets.BLDR_RET_PUB_B64 }}

scripts/hab-wrap-and-push.sh

@@ -0,0 +1,79 @@
+
+set -e
+
+#BLDR_HAB_TOKEN='_Qk9YLTEKYmxkci0yMDE3M...'
+#BLDR_RET_TOKEN='_Qk9YLTEKYmxkci0yMDE5M...'
+#BLDR_RET_PUB_B64='U0lHLVBVQi0xCm1vemls...'
+
+### preps
+org="biome-sh";repo="biome"
+ver=$(curl -s https://api.github.com/repos/$org/$repo/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3)}')
+dl="https://github.com/$org/$repo/releases/download/$ver/bio-${ver#"v"}-x86_64-linux.tar.gz"
+echo "[info] getting bio from: $dl" && curl -L -o bio.gz $dl && tar -xf bio.gz 
+cp ./bio /usr/bin/bio && bio --version
+
+bio origin key generate mozillareality
+habCacheKeyPath="/hab/cache/keys"
+echo "habCacheKeyPath: $habCacheKeyPath"
+mkdir -p $habCacheKeyPath
+echo $BLDR_HAB_TOKEN > $habCacheKeyPath/mozillareality_hab
+echo $BLDR_RET_TOKEN > $habCacheKeyPath/mozillareality_ret
+export HAB_ORIGIN=mozillareality
+export HAB_ORIGIN_KEYS=mozillareality_hab
+cd /hubs && mkdir -p dist
+
+### get turkey files
+cp -r /www/hubs ./dist
+#translate from turkey to hab
+export BASE_ASSETS_PATH="$(echo "base_assets_path" | sha256sum | cut -d' ' -f1)"
+
+find dist/hubs/ -type f -name *.html -exec sed -i "s/{{rawhubs-base-assets-path}}\//$BASE_ASSETS_PATH\//g" {} \;           
+find dist/hubs/ -type f -name *.html -exec sed -i "s/{{rawhubs-base-assets-path}}/$BASE_ASSETS_PATH\//g" {} \; 
+find dist/hubs/ -type f -name *.css -exec sed -i "s/{{rawhubs-base-assets-path}}\//$BASE_ASSETS_PATH\//g" {} \; 
+find dist/hubs/ -type f -name *.css -exec sed -i "s/{{rawhubs-base-assets-path}}/$BASE_ASSETS_PATH\//g" {} \;
+
+echo "### build hab pkg"
+export HAB_AUTH_TOKEN=$BLDR_HAB_TOKEN
+
+cat > habitat/plan.sh << 'EOF'
+pkg_name=hubs
+pkg_origin=mozillareality
+pkg_maintainer="Mozilla Mixed Reality <mixreality@mozilla.com>"
+pkg_version="1.0.0"
+pkg_license=('MPLv2')
+pkg_description="Duck-powered web-based social VR."
+pkg_upstream_url="https://hubs.mozilla.com/"
+pkg_build_deps=(
+    core/coreutils/8.32/20210826054709
+    core/bash/5.1/20210826055113
+    mozillareality/node16/16.16.0/20220729014143
+    core/git/2.31.0/20211016175551
+)
+pkg_deps=(
+    core/aws-cli/1.16.118/20190305224525 # AWS cli used for run hook when uploading to S3
+)
+do_build() {
+  # Avoid using git:// and ssh
+  git config --global url."https://github.com/".insteadOf git@github.com:
+  git config --global url."https://".insteadOf git://
+  # We inject a random token into the build for the base assets path
+  export BASE_ASSETS_PATH="$(echo "base_assets_path" | sha256sum | cut -d' ' -f1)/" # HACK need a trailing slash so webpack'ed semantics line up
+  export BUILD_VERSION="${pkg_version}.$(echo $pkg_prefix | cut -d '/' -f 7)"
+}
+do_install() {
+  cp -R dist "${pkg_prefix}"
+}
+EOF
+
+bio pkg build --cache-key-path $habCacheKeyPath -k mozillareality .
+
+### upload
+echo "### upload hab pkg"
+export HAB_BLDR_URL="https://bldr.reticulum.io"
+export HAB_AUTH_TOKEN=$BLDR_RET_TOKEN
+export HAB_ORIGIN_KEYS=mozillareality_ret
+echo $BLDR_RET_PUB_B64 | base64 -d > /hab/cache/keys/mozillareality-20190117233449.pub
+# cat /hab/cache/keys/mozillareality-20190117233449.pub
+hart="/hab/cache/artifacts/$HAB_ORIGIN-hubs*.hart"
+ls -lha $hart
+bio pkg upload $hart