ci: Sync bootc-ubuntu-setup action from bootc-dev/infra #3556
+92
−8
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,91 @@ | ||
| name: 'Bootc Ubuntu Setup' | ||
| description: 'Default host setup' | ||
| inputs: | ||
| libvirt: | ||
| description: 'Install libvirt and virtualization stack' | ||
| required: false | ||
| default: 'false' | ||
| runs: | ||
| using: 'composite' | ||
| steps: | ||
| # The default runners have TONS of crud on them... | ||
| - name: Free up disk space on runner | ||
| shell: bash | ||
| run: | | ||
| set -xeuo pipefail | ||
| sudo df -h | ||
| unwanted_pkgs=('^aspnetcore-.*' '^dotnet-.*' '^llvm-.*' 'php.*' '^mongodb-.*' '^mysql-.*' | ||
| azure-cli google-chrome-stable firefox mono-devel) | ||
| unwanted_dirs=(/usr/share/dotnet /opt/ghc /usr/local/lib/android /opt/hostedtoolcache/CodeQL) | ||
| # Start background removal operations as systemd units; if this causes | ||
| # races in the future around disk space we can look at waiting for cleanup | ||
| # before starting further jobs, but right now we spent a lot of time waiting | ||
| # on the network and scripts and such below, giving these plenty of time to run. | ||
| n=0 | ||
| runcleanup() { | ||
| sudo systemd-run -r -u action-cleanup-${n} -- "$@" | ||
| n=$(($n + 1)) | ||
| } | ||
| runcleanup docker image prune --all --force | ||
| for x in ${unwanted_dirs[@]}; do | ||
| runcleanup rm -rf "$x" | ||
| done | ||
| # Apt removals in foreground, as we can't parallelize these | ||
| for x in ${unwanted_pkgs[@]}; do | ||
| /bin/time -f '%E %C' sudo apt-get remove -y $x | ||
| done | ||
| # We really want support for heredocs | ||
| - name: Update podman and install just | ||
| shell: bash | ||
| run: | | ||
| set -eux | ||
| # Require the runner is ubuntu-24.04 | ||
| IDV=$(. /usr/lib/os-release && echo ${ID}-${VERSION_ID}) | ||
| test "${IDV}" = "ubuntu-24.04" | ||
| # plucky is the next release | ||
| echo 'deb http://azure.archive.ubuntu.com/ubuntu plucky universe main' | sudo tee /etc/apt/sources.list.d/plucky.list | ||
| /bin/time -f '%E %C' sudo apt update | ||
| # skopeo is currently older in plucky for some reason hence --allow-downgrades | ||
| /bin/time -f '%E %C' sudo apt install -y --allow-downgrades crun/plucky podman/plucky skopeo/plucky just | ||
| # This is the default on e.g. Fedora derivatives, but not Debian | ||
| - name: Enable unprivileged /dev/kvm access | ||
| shell: bash | ||
| run: | | ||
| set -xeuo pipefail | ||
|
There was a problem hiding this comment. Setting echo 'KERNEL=="kvm", GROUP="kvm", MODE="0660", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
Member
Author
There was a problem hiding this comment. Same thing is done on bootc-dev/infra and is just for the ephemeral runners. @cgwalters Is this valid to you?
Member
There was a problem hiding this comment. Nah I think |
||
| echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules | ||
| sudo udevadm control --reload-rules | ||
| sudo udevadm trigger --name-match=kvm | ||
| ls -l /dev/kvm | ||
| # Used by a few workflows, but generally useful | ||
| - name: Set architecture variable | ||
| id: set_arch | ||
| shell: bash | ||
| run: echo "ARCH=$(arch)" >> $GITHUB_ENV | ||
| # Install libvirt stack if requested | ||
| - name: Install libvirt and virtualization stack | ||
| if: ${{ inputs.libvirt == 'true' }} | ||
| shell: bash | ||
| run: | | ||
| set -xeuo pipefail | ||
| export BCVK_VERSION=0.8.0 | ||
| /bin/time -f '%E %C' sudo apt install -y libkrb5-dev pkg-config libvirt-dev genisoimage qemu-utils qemu-kvm virtiofsd libvirt-daemon-system | ||
| # Something in the stack is overriding this, but we want session right now for bcvk | ||
| echo LIBVIRT_DEFAULT_URI=qemu:///session >> $GITHUB_ENV | ||
| td=$(mktemp -d) | ||
| cd $td | ||
| # Install bcvk | ||
| target=bcvk-$(arch)-unknown-linux-gnu | ||
| /bin/time -f '%E %C' curl -LO https://github.com/bootc-dev/bcvk/releases/download/v${BCVK_VERSION}/${target}.tar.gz | ||
| tar xzf ${target}.tar.gz | ||
| sudo install -T ${target} /usr/bin/bcvk | ||
| cd - | ||
| rm -rf "$td" | ||
|
|
||
| # Also bump the default fd limit as a workaround for https://github.com/bootc-dev/bcvk/issues/65 | ||
| sudo sed -i -e 's,^\* hard nofile 65536,* hard nofile 524288,' /etc/security/limits.conf | ||
|
There was a problem hiding this comment. The current echo "* hard nofile 524288" | sudo tee /etc/security/limits.d/99-bcvk.conf |
||
| - name: Cleanup status | ||
| shell: bash | ||
| run: | | ||
| set -xeuo pipefail | ||
| systemctl list-units 'action-cleanup*' | ||
| df -h | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It's a good shell scripting practice to quote variables when expanding them, especially in commands, to prevent word splitting or glob expansion. While
apt-get removepackage names typically don't contain spaces, using"$x"ensures robustness against unexpected characters./bin/time -f '%E %C' sudo apt-get remove -y "$x"