mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
kevinveenbirkenbachandClaude Opus 5
66bde6af40
A run-wide draw proved one distribution and said nothing about the other four, while reporting green. Both are matrix-row axes now, assigned by the same deterministic rotation mode and tor already use, so one sweep exercises every distribution and every filesystem. The two read the row's position like an odometer, the distro as the low digit. Turning both on the position directly covers only n of the n x m pairs whenever the pools are the same length, and no sweep unlocks it. Both are part of a row's identity: glyphs in the job label, columns in the plan table, shards in the artifact name. Both are selectable through %distro and /filesystem, and a retrigger replays the distro off a failed title. It leaves the filesystem out, because a title states the kind the matrix assigned and a deploy may have fallen back from it. A row's filesystem is a preference unless a human names it, on the run or in a token. Reading the matrix's own narrowing as a demand would fail rows for every transient condition the applying step is built to tolerate. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
105 lines
3.7 KiB
Bash
Executable File
105 lines
3.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
# Resolve the CI deploy matrix for one chunk of one sweep. The pipeline itself
|
|
# (two discovery queries, the axis rotations, the chunk split) lives in
|
|
# cli.meta.ci.matrix, shared with the deploy-plan table, so the matrix this
|
|
# emits and the plan the summary renders can never disagree. Every entry is one
|
|
# role#variant row carrying the mode, onion state, distro and filesystem it was
|
|
# assigned.
|
|
#
|
|
# Inputs via env (defaults live in default.env, the single source of truth):
|
|
# INFINITO_CI_CHUNK chunk index to emit (required)
|
|
# INFINITO_CI_SWEEP sweep number driving the axis rotations
|
|
# INFINITO_CI_OFFSET regular rows to skip before filling the chunks
|
|
# INFINITO_MODES 'auto' or a subset of 'host compose swarm'
|
|
# INFINITO_WHITELIST optional space-separated app ids to keep
|
|
# INFINITO_PRIORITY optional space-separated app ids to lead
|
|
# INFINITO_TOR auto|enforced|exclusive|disabled
|
|
# INFINITO_DISTROS distro pool the rows are spread over; empty: all
|
|
# INFINITO_DOCKER_FILESYSTEM_ALLOWED filesystem pool; empty: all
|
|
# INFINITO_LIFECYCLES lifecycle envelope for discovery
|
|
# INFINITO_DISCOVERY_SORT complexity --sort spec (coverage-first)
|
|
# INFINITO_REQUIRED_STORAGE per-runner CI storage budget
|
|
# INFINITO_APP_DISCOVERY_RUNNER host|docker
|
|
#
|
|
# Output: JSON array of matrix entries to stdout (single line, always valid).
|
|
|
|
PYTHON="${PYTHON:-python3}"
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
REPO_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)"
|
|
cd "$REPO_ROOT"
|
|
|
|
if [[ -f "scripts/meta/env/load.sh" ]]; then
|
|
# shellcheck source=scripts/meta/env/load.sh
|
|
source "scripts/meta/env/load.sh"
|
|
fi
|
|
|
|
json_compact_array() {
|
|
jq -c 'if type=="array" then . else [] end'
|
|
}
|
|
|
|
run_meta_cli() {
|
|
case "${INFINITO_APP_DISCOVERY_RUNNER:?INFINITO_APP_DISCOVERY_RUNNER must be set}" in
|
|
host)
|
|
"${PYTHON}" "$@"
|
|
;;
|
|
docker)
|
|
NIX_CONFIG="${NIX_CONFIG:-}" \
|
|
INFINITO_DISTRO="${INFINITO_DISTRO}" \
|
|
docker compose exec -T infinito "${PYTHON}" "$@"
|
|
;;
|
|
*)
|
|
echo "apps.sh: unknown INFINITO_APP_DISCOVERY_RUNNER='${INFINITO_APP_DISCOVERY_RUNNER}' (expected: host|docker)" >&2
|
|
exit 2
|
|
;;
|
|
esac
|
|
}
|
|
|
|
matrix_json="$(
|
|
run_meta_cli -m cli.meta.ci.matrix \
|
|
--index "${INFINITO_CI_CHUNK:?INFINITO_CI_CHUNK must be set to the chunk index to emit}" \
|
|
--sweep "${INFINITO_CI_SWEEP}" \
|
|
--offset "${INFINITO_CI_OFFSET}" \
|
|
--modes "${INFINITO_MODES}" \
|
|
--whitelist "${INFINITO_WHITELIST}" \
|
|
--priority "${INFINITO_PRIORITY}" \
|
|
--lifecycles "${INFINITO_LIFECYCLES}" \
|
|
--tor "${INFINITO_TOR}" \
|
|
--distros "${INFINITO_DISTROS}" \
|
|
--filesystem "${INFINITO_DOCKER_FILESYSTEM_ALLOWED}"
|
|
)"
|
|
|
|
if [[ -n "${GITHUB_ACTIONS:-}" && -z "${ACT:-}" ]]; then
|
|
required_storage="${INFINITO_REQUIRED_STORAGE}"
|
|
|
|
mapfile -t roles < <(printf '%s\n' "${matrix_json}" | jq -r '.[].apps' | sort -u)
|
|
if [[ "${#roles[@]}" -gt 0 ]]; then
|
|
run_meta_cli \
|
|
-m cli.meta.roles.applications.sufficient_storage \
|
|
--roles "${roles[@]}" \
|
|
--required-storage "${required_storage}" \
|
|
--warnings \
|
|
--format json \
|
|
>/dev/null || true # nocheck: shell-or-true -- grandfathered: worked in practice; TODO: sharpen to catch only the exact tolerated error
|
|
|
|
kept_roles="$(
|
|
run_meta_cli \
|
|
-m cli.meta.roles.applications.sufficient_storage \
|
|
--roles "${roles[@]}" \
|
|
--required-storage "${required_storage}" \
|
|
--format json |
|
|
json_compact_array
|
|
)"
|
|
|
|
matrix_json="$(
|
|
printf '%s' "${matrix_json}" |
|
|
jq -c --argjson keep "${kept_roles}" \
|
|
'map(select(.apps as $a | $keep | index($a) != null))'
|
|
)"
|
|
fi
|
|
fi
|
|
|
|
printf '%s\n' "${matrix_json}" | json_compact_array
|