QD-9408 Fix permissions and git settings for CNova-based linter

JetBrains · Jul 5, 2024 · 7d108dd · 7d108dd
1 parent 2ae2b3a
commit 7d108dd
Show file tree

Hide file tree

Showing 4 changed files with 131 additions and 4 deletions.
diff --git a/2024.2/base/cnova.Dockerfile b/2024.2/base/cnova.Dockerfile
@@ -0,0 +1,120 @@
+ARG NODE_TAG="22-bookworm-slim"
+ARG BASE_TAG="bookworm-slim"
+FROM node:$NODE_TAG AS node_base
+FROM debian:$BASE_TAG
+
+ARG CLANG="16"
+# renovate: datasource=repology depName=debian_12/ca-certificates versioning=loose
+ENV CA_CERTIFICATES_VERSION="20230311"
+# renovate: datasource=repology depName=debian_12/curl versioning=loose
+ENV CURL_VERSION="7.88.1-10+deb12u6"
+# renovate: datasource=repology depName=debian_12/git versioning=loose
+ENV GIT_VERSION="1:2.39.2-1.1"
+# renovate: datasource=repology depName=debian_12/git-lfs versioning=loose
+ENV GIT_LFS_VERSION="3.3.0-1+b5"
+# renovate: datasource=repology depName=debian_12/gnupg2 versioning=loose
+ENV GNUPG2_VERSION="2.2.40-1.1"
+# renovate: datasource=repology depName=debian_12/default-jre versioning=loose
+ENV DEFAULT_JRE_VERSION="2:1.17-74"
+# renovate: datasource=repology depName=debian_12/apt-transport-https versioning=loose
+ENV APT_TRANSPORT_HTTPS_VERSION="2.6.1"
+# renovate: datasource=repology depName=debian_12/autoconf versioning=loose
+ENV AUTOCONF_VERSION="2.71-3"
+# renovate: datasource=repology depName=debian_12/automake versioning=loose
+ENV AUTOMAKE_VERSION="1:1.16.5-1.3"
+# renovate: datasource=repology depName=debian_12/cmake versioning=loose
+ENV CMAKE_VERSION="3.25.1-1"
+# renovate: datasource=repology depName=debian_12/dpkg-dev versioning=loose
+ENV DPKG_DEV_VERSION="1.21.22"
+# renovate: datasource=repology depName=debian_12/file versioning=loose
+ENV FILE_VERSION="1:5.44-3"
+# renovate: datasource=repology depName=debian_12/make versioning=loose
+ENV MAKE_VERSION="4.3-4.1"
+# renovate: datasource=repology depName=debian_12/patch versioning=loose
+ENV PATCH_VERSION="2.7.6-7"
+# renovate: datasource=repology depName=debian_12/libc6-dev versioning=loose
+ENV LIBC6_DEV_VERSION="2.36-9+deb12u7"
+# renovate: datasource=repology depName=debian_11/locales versioning=loose
+ENV LOCALES_VERSION="2.36-9+deb12u7"
+
+# renovate: datasource=npm depName=eslint
+ENV ESLINT_VERSION="8.57.0"
+# renovate: datasource=npm depName=pnpm
+ENV PNPM_VERSION="8.15.7"
+
+ENV HOME="/root" \
+    LC_ALL="en_US.UTF-8" \
+    QODANA_DIST="/opt/idea" \
+    QODANA_DATA="/data" \
+    QODANA_DOCKER="true"
+ENV JAVA_HOME="$QODANA_DIST/jbr" \
+    QODANA_CONF="$HOME/.config/idea" \
+    PATH="/opt/yarn/bin:$QODANA_DIST/bin:$PATH"
+
+ENV CXX="/usr/lib/llvm-$CLANG/bin/clang++" \
+    CC="/usr/lib/llvm-$CLANG/bin/clang" \
+    CPLUS_INCLUDE_PATH="/usr/lib/clang/$CLANG/include"
+
+# hadolint ignore=SC2174,DL3009
+RUN --mount=target=/var/lib/apt/lists,type=cache,sharing=locked \
+    --mount=target=/var/cache/apt,type=cache,sharing=locked \
+    rm -f /etc/apt/apt.conf.d/docker-clean && \
+    mkdir -m 777 -p /opt/qodana $QODANA_DATA/project $QODANA_DATA/cache $QODANA_DATA/results && apt-get update && \
+    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+        ca-certificates=$CA_CERTIFICATES_VERSION \
+        curl=$CURL_VERSION \
+        default-jre=$DEFAULT_JRE_VERSION \
+        git=$GIT_VERSION \
+        git-lfs=$GIT_LFS_VERSION \
+        gnupg2=$GNUPG2_VERSION \
+        apt-transport-https=$APT_TRANSPORT_HTTPS_VERSION \
+        autoconf=$AUTOCONF_VERSION \
+        automake=$AUTOMAKE_VERSION \
+        cmake=$CMAKE_VERSION \
+        dpkg-dev=$DPKG_DEV_VERSION \
+        file=$FILE_VERSION \
+        make=$MAKE_VERSION \
+        patch=$PATCH_VERSION \
+        libc6-dev=$LIBC6_DEV_VERSION \
+        locales=$LOCALES_VERSION && \
+    echo 'en_US.UTF-8 UTF-8' > /etc/locale.gen && locale-gen && \
+    apt-get autoremove -y && apt-get clean && \
+    chmod 777 -R $HOME && \
+    echo 'root:x:0:0:root:/root:/bin/bash' > /etc/passwd && chmod 666 /etc/passwd && \
+    git config --global --add safe.directory '*'
+
+RUN echo "deb https://apt.llvm.org/bookworm/ llvm-toolchain-bookworm-${CLANG} main" > /etc/apt/sources.list.d/llvm.list && \
+    curl -s https://apt.llvm.org/llvm-snapshot.gpg.key | gpg --dearmor > /etc/apt/trusted.gpg.d/llvm.gpg && \
+    apt-key adv --keyserver keyserver.ubuntu.com --recv-keys "15CF4D18AF4F7421" && \
+    apt-get -qq update && \
+    apt-get install -qqy -t \
+      llvm-toolchain-bookworm-$CLANG \
+      clang-$CLANG \
+      clang-tidy-$CLANG \
+      clang-format-$CLANG \
+      lld-$CLANG \
+      libc++-$CLANG-dev \
+      libc++abi-$CLANG-dev && \
+    for f in /usr/lib/llvm-$CLANG/bin/*; do ln -sf "$f" /usr/bin; done && \
+    ln -sf clang /usr/bin/cc && \
+    ln -sf clang /usr/bin/c89 && \
+    ln -sf clang /usr/bin/c99 && \
+    ln -sf clang++ /usr/bin/c++ && \
+    ln -sf clang++ /usr/bin/g++ && \
+    rm -rf /var/lib/apt/lists/* && \
+    apt-get autoremove -y && apt-get clean
+
+COPY --from=node_base /usr/local/bin/node /usr/local/bin/
+COPY --from=node_base /usr/local/include/node /usr/local/include/node
+COPY --from=node_base /usr/local/lib/node_modules /usr/local/lib/node_modules
+COPY --from=node_base /opt/yarn-* /opt/yarn/
+
+RUN ln -s /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && \
+    ln -s /usr/local/lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx && \
+    ln -s /usr/local/lib/node_modules/corepack/dist/corepack.js /usr/local/bin/corepack && \
+    node --version && \
+    npm --version && \
+    yarn --version && \
+    npm install -g eslint@$ESLINT_VERSION pnpm@$PNPM_VERSION && npm config set update-notifier false && \
+    chmod 777 -R "$HOME/.npm" "$HOME/.npmrc" && \
+    mkdir -p -m 777 "$HOME/.m2" "$HOME/.m2/repository"
diff --git a/2024.2/base/docker-bake.hcl b/2024.2/base/docker-bake.hcl
@@ -58,7 +58,7 @@ target "python-js" {
 target "other" {
   name = "${edition}-base-latest"
   matrix = {
-    edition = ["dotnet", "go", "js", "php", "rust", "ruby", "cdnet"]
+    edition = ["dotnet", "go", "js", "php", "rust", "ruby", "cdnet", "cnova"]
   }
   tags = [
     "registry.jetbrains.team/p/sa/containers/qodana:${edition}-base-latest"

diff --git a/2024.2/cnova/internal.Dockerfile b/2024.2/cnova/internal.Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.jetbrains.team/p/sa/containers/qodana:debian-base-latest
+FROM registry.jetbrains.team/p/sa/containers/qodana:cnova-base-latest
 
 ARG TARGETPLATFORM
 ARG DEVICEID

diff --git a/next/base/cnova.Dockerfile b/next/base/cnova.Dockerfile
@@ -34,6 +34,8 @@ ENV MAKE_VERSION="4.3-4.1"
 ENV PATCH_VERSION="2.7.6-7"
 # renovate: datasource=repology depName=debian_12/libc6-dev versioning=loose
 ENV LIBC6_DEV_VERSION="2.36-9+deb12u7"
+# renovate: datasource=repology depName=debian_11/locales versioning=loose
+ENV LOCALES_VERSION="2.36-9+deb12u7"
 
 # renovate: datasource=npm depName=eslint
 ENV ESLINT_VERSION="8.57.0"
@@ -73,8 +75,13 @@ RUN --mount=target=/var/lib/apt/lists,type=cache,sharing=locked \
         file=$FILE_VERSION \
         make=$MAKE_VERSION \
         patch=$PATCH_VERSION \
-        libc6-dev=$LIBC6_DEV_VERSION && \
-    apt-get autoremove -y && apt-get clean
+        libc6-dev=$LIBC6_DEV_VERSION \
+        locales=$LOCALES_VERSION && \
+    echo 'en_US.UTF-8 UTF-8' > /etc/locale.gen && locale-gen && \
+    apt-get autoremove -y && apt-get clean && \
+    chmod 777 -R $HOME && \
+    echo 'root:x:0:0:root:/root:/bin/bash' > /etc/passwd && chmod 666 /etc/passwd && \
+    git config --global --add safe.directory '*'
 
 RUN echo "deb https://apt.llvm.org/bookworm/ llvm-toolchain-bookworm-${CLANG} main" > /etc/apt/sources.list.d/llvm.list && \
     curl -s https://apt.llvm.org/llvm-snapshot.gpg.key | gpg --dearmor > /etc/apt/trusted.gpg.d/llvm.gpg && \