First steps for containerized builds #2581

Author: nicholasdille

renovate.json

@@ -860,6 +860,16 @@
       "depNameTemplate": "chanwit/ekz",
       "datasourceTemplate": "github-releases"
     },
+    {
+      "fileMatch": [
+        "^tools.yaml$"
+      ],
+      "matchStrings": [
+        "name: emojisum\\n\\s+version: \"?(?<currentValue>.*?)\n"
+      ],
+      "depNameTemplate": "emojisum/emojisum",
+      "datasourceTemplate": "github-tags"
+    },
     {
       "fileMatch": [
         "^tools.yaml$"
@@ -871,6 +881,16 @@
       "datasourceTemplate": "github-releases",
       "extractVersionTemplate": "^v(?<version>.+?)$"
     },
+    {
+      "fileMatch": [
+        "^tools.yaml$"
+      ],
+      "matchStrings": [
+        "name: envsub\\n\\s+version: \"?(?<currentValue>.*?)\n"
+      ],
+      "depNameTemplate": "stephenc/envsub",
+      "datasourceTemplate": "github-releases"
+    },
     {
       "fileMatch": [
         "^tools.yaml$"
@@ -910,6 +930,16 @@
         "name: firectl\\n\\s+version: \"?(?<currentValue>.*?)\n"
       ],
       "depNameTemplate": "firecracker-microvm/firectl",
+      "datasourceTemplate": "github-releases"
+    },
+    {
+      "fileMatch": [
+        "^tools.yaml$"
+      ],
+      "matchStrings": [
+        "name: firejail\\n\\s+version: \"?(?<currentValue>.*?)\n"
+      ],
+      "depNameTemplate": "netblue30/firejail",
       "datasourceTemplate": "github-releases",
       "extractVersionTemplate": "^v(?<version>.+?)$"
     },
@@ -1885,6 +1915,17 @@
       "datasourceTemplate": "github-releases",
       "extractVersionTemplate": "^v(?<version>.+?)$"
     },
+    {
+      "fileMatch": [
+        "^tools.yaml$"
+      ],
+      "matchStrings": [
+        "name: reptyr\\n\\s+version: \"?(?<currentValue>.*?)\n"
+      ],
+      "depNameTemplate": "nelhage/reptyr",
+      "datasourceTemplate": "github-tags",
+      "extractVersionTemplate": "^reptyr-(?<version>.+?)$"
+    },
     {
       "fileMatch": [
         "^tools.yaml$"
@@ -2041,6 +2082,18 @@
       "datasourceTemplate": "github-releases",
       "extractVersionTemplate": "^v(?<version>.+?)$"
     },
+    {
+      "fileMatch": [
+        "^tools.yaml$"
+      ],
+      "matchStrings": [
+        "name: su-exec\\n\\s+version: \"?(?<currentValue>.*?)\n"
+      ],
+      "depNameTemplate": "ncopa/su-exec",
+      "datasourceTemplate": "github-releases",
+      "extractVersionTemplate": "^v(?<version>.+?)$",
+      "versioningTemplate": "loose"
+    },
     {
       "fileMatch": [
         "^tools.yaml$"

tools.yaml

@@ -2227,6 +2227,26 @@ tools:
         x86_64: https://github.com/chanwit/ekz/releases/download/v${version}/ekz_${version}_linux_${alt_arch}.tar.gz
       type: tarball
 
+  - name: emojisum
+    version: master
+    needs:
+    - docker
+    tags:
+    - security
+    dockerfile: |
+      FROM golang:${go_version}
+    install: |
+      docker_run \
+          --workdir /go/src/github.com/emojisum/emojisum \
+          <<EOF
+      git clone -q --config advice.detachedHead=false --depth 1 --branch "${version}" https://github.com/emojisum/emojisum .
+      export CGO_ENABLED=0
+      export GO111MODULE=auto
+      go mod init
+      go mod tidy
+      go build -ldflags "-w -s" -o "/target/bin/emojisum" .
+      EOF
+
   - name: envcli
     version: 0.7.1
     check: ${binary} --version | cut -d' ' -f3
@@ -2237,6 +2257,23 @@ tools:
         x86_64: https://github.com/EnvCLI/EnvCLI/releases/download/v${version}/linux_${alt_arch}
       type: executable
 
+  - name: envsub
+    version: 0.1.3
+    #check: ${binary}
+    needs:
+    - docker
+    tags:
+    - management
+    dockerfile: |
+      FROM rust:${rust_version}
+    install: |
+      docker_run \
+          --workdir /go/src/github.com/stephenc/envsub \
+          <<EOF
+      git clone -q --config advice.detachedHead=false --depth 1 --branch "${version}" https://github.com/stephenc/envsub .
+      cargo install --path /target/bin/
+      EOF
+
   - name: faas-cli
     version: 0.14.5
     check: ${binary} version | grep "version:" | cut -d' ' -f3
@@ -2309,6 +2346,33 @@ tools:
         x86_64: https://firectl-release.s3.amazonaws.com/firectl-v${version}
       type: executable
 
+  - name: firejail
+    version: 0.9.70
+    #check: ${binary}
+    needs:
+    - docker
+    tags:
+    - security
+    dockerfile: |
+      FROM ubuntu:22.04
+      RUN apt-get update \
+       && apt-get -y install \
+              build-essential \
+              git
+    # firejail, firecfg, firemon
+    # https://github.com/netblue30/firejail/tree/0.9.70/src/bash_completion
+    # https://github.com/netblue30/firejail/tree/0.9.70/src/zsh_completion
+    install: |
+      docker_run \
+          --workdir /go/src/github.com/netblue30/firejail \
+          <<EOF
+      git clone -q --config advice.detachedHead=false --depth 1 --branch "${version}" https://github.com/netblue30/firejail .
+      ./configure --prefix=/target
+      make
+      make install-strip
+      ls -l
+      EOF
+
   - name: footloose
     version: 0.6.3
     check: ${binary} version | cut -d' ' -f2
@@ -4334,6 +4398,32 @@ tools:
           systemctl daemon-reload
       fi
 
+  - name: reptyr
+    version: 0.9.0
+    #check: ${binary}
+    needs:
+    - docker
+    tags:
+    - XXX
+    dockerfile: |
+      FROM ubuntu:22.04
+      RUN apt-get update \
+       && apt-get -y install \
+              build-essential \
+              git
+    # https://github.com/nelhage/reptyr/blob/reptyr-0.9.0/reptyr.bash
+    install: |
+      docker_run \
+          --workdir /go/src/github.com/nelhage/reptyr \
+          <<EOF
+      git clone -q --config advice.detachedHead=false --depth 1 --branch "${version}" https://github.com/nelhage/reptyr .
+      export LDFLAGS=-static
+      make reptyr
+      mkdir -p /target/bin /target/share/man/man1
+      cp reptyr /target/bin/
+      cp reptyr.1 /target/share/man/man1/
+      EOF
+
   - name: rootlesskit
     version: 1.0.1
     check: ${binary} --version | cut -d' ' -f3
@@ -4569,6 +4659,28 @@ tools:
           systemctl daemon-reload
       fi
 
+  - name: su-exec
+    version: 0.2
+    #check: ${binary}
+    needs:
+    - docker
+    tags:
+    - XXX
+    dockerfile: |
+      FROM ubuntu:22.04
+      RUN apt-get update \
+       && apt-get -y install \
+              build-essential \
+              git
+    install: |
+      docker_run \
+          --workdir /go/src/github.com/ncopa/su-exec \
+          <<EOF
+      git clone -q --config advice.detachedHead=false --depth 1 --branch "${version}" https://github.com/ncopa/su-exec .
+      make su-exec-static
+      cp su-exec-static /target/bin/su-exec
+      EOF
+
   - name: stern
     version: 1.21.0
     check: ${binary} --version | grep ^version | cut -d' ' -f2