/
build.sbt
160 lines (144 loc) · 11.8 KB
/
build.sbt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
// For the syntax of this file, see: https://www.scala-sbt.org/1.x/docs/Basic-Def.html
// This plugin is for building the docker image of our exchange svr
import scala.io.Source
import scala.sys.process._
import com.typesafe.sbt.packager.docker._
enablePlugins(JavaAppPackaging, DockerPlugin)
// For latest versions, see https://mvnrepository.com/
lazy val pekkoHttpVersion = settingKey[String]("Version of Pekko-Http")
lazy val pekkoVersion = settingKey[String]("Version of Pekko")
// Red Hat certification Docker labels.
lazy val release = settingKey[String]("A number used to identify the specific build for this image.")
lazy val summary = settingKey[String]("A short overview of the application or component in this image.")
lazy val vendor = settingKey[String]("Company name.")
val versionFunc = () => {
val versFile = Source.fromFile("src/main/resources/version.txt")
val versText = versFile.getLines.next()
versFile.close()
versText
}
Global / excludeLintKeys += daemonGroupGid // was getting unused error, even tho i think they are used
Global / excludeLintKeys += dockerEnvVars
lazy val root = (project in file("."))
.settings(
description := "'Containerized exchange-api'",
name := "amd64_exchange-api",
organization := "org.openhorizon",
pekkoHttpVersion := "[1.0.1]",
pekkoVersion := "[1.0.2]",
release := sys.env.getOrElse("GIT_SHORT_SHA", versionFunc()),
resolvers += Classpaths.typesafeReleases,
scalaVersion := "2.13.11",
summary := "'Open Horizon exchange-api image'",
vendor := "'Open Horizon'",
version := sys.env.getOrElse("IMAGE_VERSION", versionFunc()),
// ThisBuild / scapegoatVersion := "1.4.4",
// coverageEnabled := false,
// Sbt uses Ivy for dependency resolution, so it supports its version syntax: http://ant.apache.org/ivy/history/latest-milestone/ivyfile/dependency.html#revision
libraryDependencies ++= Seq(
"org.apache.pekko" %% "pekko-http" % pekkoHttpVersion.value,
"org.apache.pekko" %% "pekko-http-xml" % pekkoHttpVersion.value,
// "org.apache.pekko" %% "pekko-stream" % "[2.6.14,)",
// "org.apache.pekko" %% "pekko-http-spray-json" % "[10.2.1,)",
"com.github.pjfanning" %% "pekko-http-jackson" % "[2.3.3,)",
"org.apache.pekko" %% "pekko-http-cors" % "[1.0.0]",
"org.json4s" %% "json4s-native" % "4.0.6",
"org.json4s" %% "json4s-jackson" % "4.0.6",
"jakarta.ws.rs" % "jakarta.ws.rs-api" % "[3.1.0]",
// "org.glassfish.jersey.core" % "jersey-common" % "1.2.1", // Required at runtime by javax.ws.rs-api
"com.github.swagger-akka-http" %% "swagger-pekko-http" % "[2.12.0]", // Deprecated in v2.8.0 due to Akka license change to BSL v1.1
"com.github.swagger-akka-http" %% "swagger-scala-module" % "[2.12.0,)",
//"io.swagger.core.v3" % "swagger-core-jakarta" % "[2.1.12]", // Version 2.1.13+ requires newer versions of slick and slick-hikaricp
//"io.swagger.core.v3" % "swagger-jaxrs2-jakarta" % "[2.1.12]", // Version 2.1.13+ requires newer versions of slick and slick-hikaricp
// "com.typesafe.slick" %% "slick" % "[3.3.3]", // Version 3.4.1 depends on slick-pg and slick-pg_json4s v0.21.0
"com.typesafe.slick" %% "slick-hikaricp" % "[3.4.1]", // Version 3.4.1 depends on slick-pg and slick-pg_json4s v0.21.0
// "com.github.tminglei" %% "slick-pg" % "[0.20.4]", // Version 0.21.0 depends on version 3.4.0 of slick and slick-hikaricp
"com.github.tminglei" %% "slick-pg_json4s" % "[0.21.0]", // Version 0.21.0 depends on version 3.4.0 of slick and slick-hikaricp
"org.postgresql" % "postgresql" % "[42.7.1,)",
// "com.zaxxer" % "HikariCP" % "[3.4.5,)",
// "org.slf4j" % "slf4j-simple" % "[1.7.25]", // Version 1.7.35+ requires newer versions of slick and slick-hikaricp
// "ch.qos.logback" % "logback-classic" % "1.3.0-alpha5",
"com.mchange" % "c3p0" % "[0.9.5.5,)",
"org.scalaj" %% "scalaj-http" % "[2.4.2]", // Deprecated as of April 2022, in v2.4.2
"com.typesafe" % "config" % "[1.4.3,)",
"org.mindrot" % "jbcrypt" % "[0.4,)", // Last version (v0.4) release February 13, 2017
"com.pauldijou" %% "jwt-core" % "[5.0.0,)",
"com.github.cb372" %% "scalacache-guava" % "[0.28.0,)",
"com.osinka.i18n" %% "scala-i18n" % "[1.0.3,)",
"org.apache.pekko" %% "pekko-http-testkit" % pekkoHttpVersion.value % Test,
"org.apache.pekko" %% "pekko-testkit" % pekkoVersion.value % Test,
"org.apache.pekko" %% "pekko-stream-testkit" % pekkoVersion.value % Test,
"org.scalatest" %% "scalatest" % "[3.3.0-SNAP2,)" % "test",
"org.scalatestplus" %% "junit-4-12" % "[3.3.0.0-SNAP2,)" % "test",
"org.scalacheck" %% "scalacheck" % "[1.17.0,)" % "test",
"junit" % "junit" % "[4.13.2,)" % "test"
),
scalacOptions ++= Seq("-unchecked", "-deprecation", "-feature"),
javacOptions ++= Seq("-source", "17", "-target", "17", "-Xlint"),
fork := true,
Test / javaOptions ++= Seq("--add-opens", "java.base/java.net=ALL-UNNAMED"),
// Used when running test suites with HTTPS.
// Requires path to your PKCS #12 cryptographic store and its password.
// fork := true,
// javaOptions ++= Seq("-Djavax.net.ssl.trustStore=/home/someuser/git/exchange-api/target/localhost.p12", "-Djavax.net.ssl.trustStorePassword=truststore-password"),
//javaOptions ++= Seq("-Djava.security.auth.login.config=src/main/resources/jaas.config", "-Djava.security.policy=src/main/resources/auth.policy")
// These settings are for the Docker subplugin within sbt-native-packager. See: https://sbt-native-packager.readthedocs.io/en/stable/formats/docker.html
Docker / version := sys.env.getOrElse("IMAGE_VERSION", versionFunc()), // overwrite this setting to build a test version of the exchange with a custom tag in docker, defaults to exchange version
Docker / packageName := "openhorizon/" ++ name.value,
Docker / daemonUser := "exchangeuser",
Docker / daemonGroup := "exchangegroup",
Docker / daemonGroupGid := some("1001"),
dockerExposedPorts ++= Seq(8080),
dockerBaseImage := "registry.access.redhat.com/ubi9-minimal:latest",
dockerEnvVars := Map("JAVA_OPTS" -> ""), // this is here so JAVA_OPTS can be overridden on the docker run cmd with a value like: -Xmx1G
// dockerEntrypoint ++= Seq("-Djava.security.auth.login.config=src/main/resources/jaas.config") // <- had trouble getting this to work
Docker / mappings ++= Seq((baseDirectory.value / "LICENSE.txt") -> "/1/licenses/LICENSE.txt",
(baseDirectory.value / "config" / "exchange-api.tmpl") -> "/2/etc/horizon/exchange/exchange-api.tmpl"
),
dockerCommands := Seq(Cmd("FROM", dockerBaseImage.value ++ " as stage0"),
Cmd("LABEL", "snp-multi-stage='intermediate'"),
Cmd("LABEL", "snp-multi-stage-id='6466ecf3-c305-40bb-909a-47e60bded33d'"),
Cmd("WORKDIR", "/etc/horizon/exchange"),
Cmd("COPY", "2/etc/horizon/exchange /2/etc/horizon/exchange"),
Cmd("RUN", "> /2/etc/horizon/exchange/config.json"),
Cmd("WORKDIR", "/licenses"),
Cmd("COPY", "1/licenses /1/licenses"),
Cmd("WORKDIR", "/opt/docker"),
Cmd("COPY", "2/opt /2/opt"),
Cmd("COPY", "4/opt /4/opt"),
Cmd("USER", "root"),
Cmd("RUN", "chmod -R u=r,g=r /2/etc/horizon /licenses && chmod -R u+w,g+w /2/etc/horizon/exchange && chmod -R u=rX,g=rX /4/opt/docker /2/opt/docker && chmod u+x,g+x /4/opt/docker/bin/" ++ name.value),
Cmd("FROM", dockerBaseImage.value),
Cmd("LABEL", "description=" ++ description.value),
// Cmd("LABEL", "io.k8s.description=''"),
// Cmd("LABEL", "io.k8s.display-name=''"),
// Cmd("LABEL", "io.openshift.tags=''"),
Cmd("LABEL", "name=" ++ name.value),
Cmd("LABEL", "release=" ++ release.value),
Cmd("LABEL", "summary=" ++ summary.value),
Cmd("LABEL", "vendor=" ++ vendor.value),
Cmd("LABEL", "version=" ++ version.value),
Cmd("RUN", "mkdir -p /run/user/$UID && microdnf update -y --nodocs 1>/dev/null 2>&1 && microdnf install -y --nodocs shadow-utils gettext java-17-openjdk openssl 1>/dev/null 2>&1 && microdnf clean all"),
Cmd("USER", "root"),
Cmd("RUN", "id -u " ++ (Docker / daemonUser).value ++ " 1>/dev/null 2>&1 || ((getent group 1001 1>/dev/null 2>&1 || (type groupadd 1>/dev/null 2>&1 && groupadd -g 1001 " ++ (Docker / daemonGroup).value ++ " || addgroup -g 1001 -S " ++ (Docker / daemonGroup).value ++ ")) && (type useradd 1>/dev/null 2>&1 && useradd --system --create-home --uid 1001 --gid 1001 " ++ (Docker / daemonUser).value ++ " || adduser -S -u 1001 -G " ++ (Docker / daemonGroup).value ++ " " ++ (Docker / daemonUser).value ++ "))"),
Cmd("WORKDIR", "/etc/horizon/exchange"),
Cmd("COPY --from=stage0 --chown=" ++ (Docker / daemonUser).value ++ ":" ++ (Docker / daemonGroup).value, "/2/etc/horizon/exchange /etc/horizon/exchange"),
Cmd("WORKDIR", "/licenses"),
Cmd("COPY --from=stage0 --chown=" ++ (Docker / daemonUser).value ++ ":" ++ (Docker / daemonGroup).value, "/1/licenses /licenses"),
Cmd("WORKDIR", "/opt/docker"),
Cmd("COPY --from=stage0 --chown=" ++ (Docker / daemonUser).value ++ ":" ++ (Docker / daemonGroup).value, "/4/opt/docker /opt/docker"),
Cmd("COPY --from=stage0 --chown=" ++ (Docker / daemonUser).value ++ ":" ++ (Docker / daemonGroup).value, "/2/opt/docker /opt/docker"),
Cmd("ENV", "JAVA_OPTS=''"),
Cmd("ENV", "ENVSUBST_CONFIG=''"),
Cmd("EXPOSE", "8080"),
Cmd("EXPOSE", "8083"),
Cmd("USER", "1001:1001"),
/*
* If bind-mounting your own config.json rename the configuration file in the container's filesystem to exchange-api.tmpl. This will overwrite the
* exchange-api.tmpl provided in this docker image and prevent cases where a bind-mount config.json is set with read-only permissions.
* Any mounted config.json can choose to use variables to take advantage of the substitution below.
*/
Cmd("ENTRYPOINT", "/usr/bin/envsubst $ENVSUBST_CONFIG < /etc/horizon/exchange/exchange-api.tmpl > /etc/horizon/exchange/config.json && /opt/docker/bin/" ++ name.value),
Cmd("CMD", "[]")
)
)