mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-13 06:06:38 +00:00
91 lines
2.7 KiB
Python
91 lines
2.7 KiB
Python
from __future__ import annotations
|
|
|
|
import os
|
|
import shutil
|
|
import subprocess
|
|
from pathlib import Path
|
|
from typing import TYPE_CHECKING
|
|
|
|
from . import PROJECT_ROOT
|
|
from .common import compose_file_args, resolve_distro
|
|
|
|
if TYPE_CHECKING:
|
|
import argparse
|
|
|
|
CI_DOCKER_ROOT = Path("/mnt/docker")
|
|
|
|
|
|
def _base_env(*, distro: str) -> dict[str, str]:
|
|
env = dict(os.environ)
|
|
env["INFINITO_DISTRO"] = distro
|
|
return env
|
|
|
|
|
|
def _compose_run(*, repo_root: Path, distro: str, args: list[str]) -> None:
|
|
cmd = ["docker", "compose", *compose_file_args(), *args]
|
|
env = _base_env(distro=distro)
|
|
env.setdefault("NIX_CONFIG", "")
|
|
subprocess.run(cmd, cwd=repo_root, env=env, check=True, text=True)
|
|
|
|
|
|
def _resolve_docker_root() -> Path:
|
|
raw = os.environ.get("INFINITO_DOCKER_VOLUME", "").strip().rstrip("/")
|
|
return Path(raw) if raw else CI_DOCKER_ROOT
|
|
|
|
|
|
def _validate_docker_root(docker_root: Path) -> None:
|
|
# Allow CI_DOCKER_ROOT itself and any per-runner subdirectory.
|
|
try:
|
|
docker_root.relative_to(CI_DOCKER_ROOT)
|
|
except ValueError:
|
|
raise RuntimeError(
|
|
"SECURITY VIOLATION: "
|
|
f"INFINITO_DOCKER_VOLUME={docker_root} is not allowed on GitHub runner. "
|
|
f"Only {CI_DOCKER_ROOT} or subdirectories are permitted."
|
|
)
|
|
|
|
|
|
def _wipe_docker_root(docker_root: Path) -> None:
|
|
if not docker_root.exists():
|
|
print(f">>> Docker root does not exist, nothing to clean: {docker_root}")
|
|
return
|
|
print(f">>> CI cleanup: wiping Docker root: {docker_root}")
|
|
shutil.rmtree(docker_root, ignore_errors=True)
|
|
docker_root.mkdir(parents=True, exist_ok=True)
|
|
|
|
|
|
def _cleanup_docker_root() -> None:
|
|
if os.environ.get("INFINITO_RUNNING_ON_GITHUB") != "true":
|
|
print(f">>> Not on GitHub - No bind volumes will be deleted: {CI_DOCKER_ROOT}")
|
|
return
|
|
if os.environ.get("INFINITO_PRESERVE_DOCKER_CACHE", "false").lower() == "true":
|
|
print(
|
|
">>> INFINITO_PRESERVE_DOCKER_CACHE=true — keeping Docker root for next distro"
|
|
)
|
|
return
|
|
docker_root = _resolve_docker_root()
|
|
_validate_docker_root(docker_root)
|
|
_wipe_docker_root(docker_root)
|
|
|
|
|
|
def down_stack(*, repo_root: Path, distro: str) -> None:
|
|
print(">>> Stopping compose stack and removing volumes")
|
|
try:
|
|
_compose_run(
|
|
repo_root=repo_root,
|
|
distro=distro,
|
|
args=["down", "--remove-orphans", "-v"],
|
|
)
|
|
finally:
|
|
_cleanup_docker_root()
|
|
|
|
|
|
def add_parser(sub: argparse._SubParsersAction) -> None:
|
|
p = sub.add_parser("down", help="Stop compose stack and remove volumes.")
|
|
p.set_defaults(_handler=handler)
|
|
|
|
|
|
def handler(args: argparse.Namespace) -> int:
|
|
down_stack(repo_root=PROJECT_ROOT, distro=resolve_distro())
|
|
return 0
|