Task to build a builder image using the paketo pack tool

Review the wording of the intro text Signed-off-by: cmoulliard <cmoulliard@redhat.com> Changing the OWNERS Signed-off-by: cmoulliard <cmoulliard@redhat.com> Use kerberios username for cmoulliard Signed-off-by: cmoulliard <cmoulliard@redhat.com> Fix username typo error Signed-off-by: cmoulliard <cmoulliard@redhat.com> Remove ubi from name, README and task definition Signed-off-by: cmoulliard <cmoulliard@redhat.com> Removing the default value image as name will change Signed-off-by: cmoulliard <cmoulliard@redhat.com> Removing #rsync comments Signed-off-by: cmoulliard <cmoulliard@redhat.com> Remove from message printed: Signed-off-by: cmoulliard <cmoulliard@redhat.com> Use buildah --retry parameter Signed-off-by: cmoulliard <cmoulliard@redhat.com> Rename the task to include the suffic: -oci-ta Signed-off-by: cmoulliard <cmoulliard@redhat.com> Change owner from cmoullia to cmoulliard Signed-off-by: cmoulliard <cmoulliard@redhat.com> Double quote to prevent globbing and word splitting Signed-off-by: cmoulliard <cmoulliard@redhat.com> Double quote to prevent globbing and word splitting Signed-off-by: cmoulliard <cmoulliard@redhat.com> Double quote to prevent word splitting Signed-off-by: cmoulliard <cmoulliard@redhat.com> Declare and assign separately to avoid masking return values. Signed-off-by: cmoulliard <cmoulliard@redhat.com> Useless cat. Consider 'cmd < file | ..' or 'cmd file | ..' instead. Signed-off-by: cmoulliard <cmoulliard@redhat.com> Remove trailing spaces and wrong indentation: expected 4 but found 6 Signed-off-by: cmoulliard <cmoulliard@redhat.com> Fixing: Assigning an array to a string! Assign as array, or use * instead of @ to concatenate Signed-off-by: cmoulliard <cmoulliard@redhat.com> Fixing: Expanding an array without an index only gives the first element. Signed-off-by: cmoulliard <cmoulliard@redhat.com> Fixing: Use braces when expanding arrays. Signed-off-by: cmoulliard <cmoulliard@redhat.com> Remove double quote for ${BUILD_ARGS[@]} Signed-off-by: cmoulliard <cmoulliard@redhat.com> Rename the task to include the suffix: -oci-ta Signed-off-by: cmoulliard <cmoulliard@redhat.com> Replace @ with * for the array Signed-off-by: cmoulliard <cmoulliard@redhat.com> Replace @ with * for the array Signed-off-by: cmoulliard <cmoulliard@redhat.com> Removing some additional comments Signed-off-by: cmoulliard <cmoulliard@redhat.com> Moving from OWNERS to CODEOWNERS Signed-off-by: cmoulliard <cmoulliard@redhat.com> Add missing task of paketo to the renovate.json file Signed-off-by: cmoulliard <cmoulliard@redhat.com> Updating renovate.json using update_renovate_json_based_on_codeowners.py script Signed-off-by: cmoulliard <cmoulliard@redhat.com> Create a new renovate group for paketo => buildpack Signed-off-by: cmoulliard <cmoulliard@redhat.com> Set -x to debug the bash script and review the logic to set the args passed to BUILD_ARGS Signed-off-by: cmoulliard <cmoulliard@redhat.com> Remove set +x to understand why the bash script fails Signed-off-by: cmoulliard <cmoulliard@redhat.com> Remove double quotes around argument: SSH_ARGS and echo BUILD_ARGS Signed-off-by: cmoulliard <cmoulliard@redhat.com> Remove set +x to understand why the bash script fails Signed-off-by: cmoulliard <cmoulliard@redhat.com> Declare the SSH_ARGS using an array Signed-off-by: cmoulliard <cmoulliard@redhat.com> Remove set -x as non needed and fix wrong path to get image_digest Signed-off-by: cmoulliard <cmoulliard@redhat.com> Remove trailling spaces Signed-off-by: cmoulliard <cmoulliard@redhat.com> Removing ##### from echo commands Signed-off-by: cmoulliard <cmoulliard@redhat.com> Generate the SBOM of the base image Signed-off-by: cmoulliard <cmoulliard@redhat.com> Remove trailing space reported by yamllint Signed-off-by: cmoulliard <cmoulliard@redhat.com> Remove trailing ## Signed-off-by: cmoulliard <cmoulliard@redhat.com> Removing the BUILDER_IMAGE parameter Signed-off-by: cmoulliard <cmoulliard@redhat.com>
konflux-ci · Dec 13, 2024 · 05e7400 · 05e7400
1 parent 04a09b1
commit 05e7400
Show file tree

Hide file tree

Showing 6 changed files with 502 additions and 535 deletions.
diff --git a/CODEOWNERS b/CODEOWNERS
@@ -112,6 +112,9 @@
 /task/oci-copy          @ralphbean
 /task/oci-copy-oci-ta   @ralphbean
 
+# renovate groupName=buildpack
+/task/build-paketo-builder-oci-ta @cmoulliard
+
 # These are auto-generated and often require changes when tasks change.
 # Allow anyone with write access to approve the changes.
 /pipelines/*/README.md
diff --git a/renovate.json b/renovate.json
@@ -176,6 +176,12 @@
         "task/rpms-signature-scan/**",
         "task/verify-signed-rpms/**"
       ]
+    },
+    {
+      "groupName": "buildpack",
+      "matchFileNames": [
+        "task/build-paketo-builder-oci-ta/**"
+      ]
     }
   ],
   "postUpdateOptions": [

diff --git a/task/build-paketo-ubi-builder/0.1/README.md → ...build-paketo-builder-oci-ta/0.1/README.md b/task/build-paketo-ubi-builder/0.1/README.md → ...build-paketo-builder-oci-ta/0.1/README.md
@@ -1,13 +1,13 @@
-# build-paketo-ubi-builder task
+# build-paketo-builder-oci-ta task
 
-The `build-paketo-ubi-builder` task builds an ubi image for a paketo builder using as input the [builder.toml](https://buildpacks.io/docs/reference/config/builder-config/) file. The image is build using the pack tool packaged part of the [paketo-container](https://github.com/konflux-ci/paketo-container/) image.
+The `build-paketo-builder-oci-ta` task builds a builder image (e.g. https://github.com/paketo-community/builder-ubi-base) for paketo using as input the [builder.toml](https://buildpacks.io/docs/reference/config/builder-config/) file. The image is build using the pack tool packaged part of the [paketo-container](https://github.com/konflux-ci/paketo-container/) image.
 The task also produces the SBOM which is signed and added to the image.
 
 ## Parameters
 | name                 | description                                                                         | default value                                                              | required |
 |----------------------|-------------------------------------------------------------------------------------|----------------------------------------------------------------------------|----------|
 | BUILD_ARGS           | Array of --build-arg values ("arg=value" strings)                                   | []                                                                         | false    |
-| BUILDER_NAME         | Name of the paketo builder image containing the tools as: pack, jam, create-package | quay.io/redhat-user-workloads/konflux-build-pipeli-tenant/paketo-container | false    |
+| BUILDER_NAME         | Name of the paketo builder image containing the tools as: pack, jam, create-package |  | true     |
 | CACHI2_ARTIFACT      | The Trusted Artifact URI pointing to the artifact with the prefetched dependencies. | ""                                                                         | false    |
 | CONTEXT              | Path to the directory to use as context.                                            | .                                                                          | false    |
 | HERMETIC             | Determines if build will be executed without network access.                        | false                                                                      | false    |