quay/buildman/templates/cloudconfig.yaml

#cloud-config

ssh_authorized_keys:
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClk9Xh+wHZ3Iw7r2sQwyhpN2qMd7JEZ8ved9J+4cfJ8QKjZkecXVm5mEV5z92cZgUlM3Tr+4VjVWDtAuEQVyGi44I3vNjeRW8WOJ60JkcM/u+aAauN0Ep6+8WCH5iq+uFE9kRwmCLW28bpG1lOaL4MdsP/mY7fzgyYct3F5aZhHOHY2MvLrg54Hqa7MhuGjuW+sy6WQrhwowiNLUxpRdJ6TyIqQ5ukbtfE1W4OOMNZruHOELPw/uGMS1GClP/JzEyHpGblNhEKtmQXu89t0zRki6SerRnR3d18/s8JImGzRhaG560r3bHCvs1HZH9jZh2+p5cN0/3T7Dn0QSDwgAfJ Jake's Mac
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCC0m+hVmyR3vn/xoxJe9+atRWBxSK+YXgyufNVDMcb7H00Jfnc341QH3kDVYZamUbhVh/nyc2RP7YbnZR5zORFtgOaNSdkMYrPozzBvxjnvSUokkCCWbLqXDHvIKiR12r+UTSijPJE/Yk702Mb2ejAFuae1C3Ec+qKAoOCagDjpQ3THyb5oaKE7VPHdwCWjWIQLRhC+plu77ObhoXIFJLD13gCi01L/rp4mYVCxIc2lX5A8rkK+bZHnIZwWUQ4t8SIjWxIaUo0FE7oZ83nKuNkYj5ngmLHQLY23Nx2WhE9H6NBthUpik9SmqQPtVYbhIG+bISPoH9Xs8CLrFb0VRjz Joey's Mac
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo6FhAP7mFFOAzM91gtaKW7saahtaN4lur42FMMztz6aqUycIltCmvxo+3FmrXgCG30maMNU36Vm1+9QRtVQEd+eRuoIWP28t+8MT01Fh4zPuE2Wca3pOHSNo3X81FfWJLzmwEHiQKs9HPQqUhezR9PcVWVkbMyAzw85c0UycGmHGFNb0UiRd9HFY6XbgbxhZv/mvKLZ99xE3xkOzS1PNsdSNvjUKwZR7pSUPqNS5S/1NXyR4GhFTU24VPH/bTATOv2ATH+PSzsZ7Qyz9UHj38tKC+ALJHEDJ4HXGzobyOUP78cHGZOfCB5FYubq0zmOudAjKIAhwI8XTFvJ2DX1P3 jimmyzelinskie

write_files:
- path: /root/overrides.list
  permission: '0644'
  content: |
    REALM={{ realm }}
    TOKEN={{ token }}
    SERVER=wss://{{ manager_hostname }}

coreos:
  update:
    reboot-strategy: off
    group: {{ coreos_channel }}

  units:
    - name: quay-builder.service
      command: start
      content: |
        [Unit]
        Description=Quay builder container
        Author=Jake Moshenko
        After=docker.service

        [Service]
        TimeoutStartSec=600
        TimeoutStopSec=2000
        ExecStartPre=/usr/bin/docker login -u {{ quay_username }} -p {{ quay_password }} -e unused quay.io
        ExecStart=/usr/bin/docker run --rm --net=host --name quay-builder --privileged --env-file /root/overrides.list -v /var/run/docker.sock:/var/run/docker.sock -v /usr/share/ca-certificates:/etc/ssl/certs quay.io/coreos/registry-build-worker:scratched
        ExecStop=/usr/bin/docker stop quay-builder
        ExecStopPost=/bin/sh -xc "/bin/sleep 120; /usr/bin/systemctl --no-block poweroff"
First implementation of ephemeral build lifecycle manager. 2014-12-16 18:41:30 +00:00			`#cloud-config`

Add everyones ssh keys to the ephemeral build workers. 2015-01-29 23:40:17 +00:00			`ssh_authorized_keys:`
			`- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClk9Xh+wHZ3Iw7r2sQwyhpN2qMd7JEZ8ved9J+4cfJ8QKjZkecXVm5mEV5z92cZgUlM3Tr+4VjVWDtAuEQVyGi44I3vNjeRW8WOJ60JkcM/u+aAauN0Ep6+8WCH5iq+uFE9kRwmCLW28bpG1lOaL4MdsP/mY7fzgyYct3F5aZhHOHY2MvLrg54Hqa7MhuGjuW+sy6WQrhwowiNLUxpRdJ6TyIqQ5ukbtfE1W4OOMNZruHOELPw/uGMS1GClP/JzEyHpGblNhEKtmQXu89t0zRki6SerRnR3d18/s8JImGzRhaG560r3bHCvs1HZH9jZh2+p5cN0/3T7Dn0QSDwgAfJ Jake's Mac`
			`- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCC0m+hVmyR3vn/xoxJe9+atRWBxSK+YXgyufNVDMcb7H00Jfnc341QH3kDVYZamUbhVh/nyc2RP7YbnZR5zORFtgOaNSdkMYrPozzBvxjnvSUokkCCWbLqXDHvIKiR12r+UTSijPJE/Yk702Mb2ejAFuae1C3Ec+qKAoOCagDjpQ3THyb5oaKE7VPHdwCWjWIQLRhC+plu77ObhoXIFJLD13gCi01L/rp4mYVCxIc2lX5A8rkK+bZHnIZwWUQ4t8SIjWxIaUo0FE7oZ83nKuNkYj5ngmLHQLY23Nx2WhE9H6NBthUpik9SmqQPtVYbhIG+bISPoH9Xs8CLrFb0VRjz Joey's Mac`
			`- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo6FhAP7mFFOAzM91gtaKW7saahtaN4lur42FMMztz6aqUycIltCmvxo+3FmrXgCG30maMNU36Vm1+9QRtVQEd+eRuoIWP28t+8MT01Fh4zPuE2Wca3pOHSNo3X81FfWJLzmwEHiQKs9HPQqUhezR9PcVWVkbMyAzw85c0UycGmHGFNb0UiRd9HFY6XbgbxhZv/mvKLZ99xE3xkOzS1PNsdSNvjUKwZR7pSUPqNS5S/1NXyR4GhFTU24VPH/bTATOv2ATH+PSzsZ7Qyz9UHj38tKC+ALJHEDJ4HXGzobyOUP78cHGZOfCB5FYubq0zmOudAjKIAhwI8XTFvJ2DX1P3 jimmyzelinskie`

First implementation of ephemeral build lifecycle manager. 2014-12-16 18:41:30 +00:00			`write_files:`
			`- path: /root/overrides.list`
			`permission: '0644'`
			`content: \|`
			`REALM={{ realm }}`
			`TOKEN={{ token }}`
Generalize the ephemeral build managers so that any manager may manage a builder spawned by any other manager. 2014-12-31 16:33:56 +00:00			`SERVER=wss://{{ manager_hostname }}`
First implementation of ephemeral build lifecycle manager. 2014-12-16 18:41:30 +00:00
			`coreos:`
			`update:`
			`reboot-strategy: off`
			`group: {{ coreos_channel }}`

			`units:`
			`- name: quay-builder.service`
			`command: start`
			`content: \|`
			`[Unit]`
			`Description=Quay builder container`
			`Author=Jake Moshenko`
			`After=docker.service`

			`[Service]`
			`TimeoutStartSec=600`
			`TimeoutStopSec=2000`
			`ExecStartPre=/usr/bin/docker login -u {{ quay_username }} -p {{ quay_password }} -e unused quay.io`
Use the tiny registry-build-worker image. Bind mount in the root certificates so that Quay SSL certificates can be calidated. 2015-01-27 19:12:47 +00:00			`ExecStart=/usr/bin/docker run --rm --net=host --name quay-builder --privileged --env-file /root/overrides.list -v /var/run/docker.sock:/var/run/docker.sock -v /usr/share/ca-certificates:/etc/ssl/certs quay.io/coreos/registry-build-worker:scratched`
First implementation of ephemeral build lifecycle manager. 2014-12-16 18:41:30 +00:00			`ExecStop=/usr/bin/docker stop quay-builder`
Try lowering the sleep on the shutdown timeout to avoid the service dispatch timeout built into systemd. 2014-12-23 22:42:47 +00:00			`ExecStopPost=/bin/sh -xc "/bin/sleep 120; /usr/bin/systemctl --no-block poweroff"`