future scripts

Deployment/Deployment.csproj

@@ -1,9 +1,11 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
   <PropertyGroup>
-    <TargetFramework>net8.0</TargetFramework>
+    <TargetFramework>net7.0</TargetFramework>
     <ImplicitUsings>enable</ImplicitUsings>
     <Nullable>enable</Nullable>
+    <IsPackable>true</IsPackable>
+    <Version>0.0.1</Version>
   </PropertyGroup>
 
   <ItemGroup>
@@ -13,5 +15,4 @@
     <InternalsVisibleTo Include="deployment.tests" />
   </ItemGroup>
 
-
 </Project>

Jenkinsfile

@@ -0,0 +1,78 @@
+pipeline {
+    agent any
+
+    stages {
+        stage('nuget pack'){
+            steps{
+                dotnetPack(outputDirectory: "./", project: "Deployment/Deployment.csproj")
+            }
+        } 
+        stage('build numberify'){
+            steps{
+                //sed -i 's/<Version>\\([0-9]\\+\\.[0-9]\\)\\.[0-9]\\+<\\/Version>/<Version>\\1.$BUILD_NUMBER<\\/Version>/' nugettest/nugettest.csproj
+                sh """
+                    filename=\$(ls ./*.nupkg | head -1)
+                    fullfilename=\$(basename -- \$filename)
+                    noext=\${fullfilename%.*}
+
+                    mv "\$filename" \$noext-\$BUILD_NUMBER.nupkg
+
+                    filename=null
+                    fullfilename=null
+                    noext=null
+                """
+            }
+        }
+        stage('release'){
+            when {
+                branch "release"
+            }
+            environment {
+                GITEA = credentials('0bd7c8f5-046c-44b9-9c77-7a28a219ae31')
+            }
+            steps{
+                sh """
+                    filename=\$(ls ./*.nupkg | head -1)
+                    fullfilename=\$(basename -- \$filename)
+                    noext=\${fullfilename%.*}
+                    curl -X 'POST' \
+                        -o release.json \
+                      'https://gitea.arg.rip/api/v1/repos/greyn/deployment/releases' \
+                      -H 'accept: application/json' \
+                      -H 'Authorization: token $GITEA_PSW' \
+                      -H 'Content-Type: application/json' \
+                      -d '{
+                      "body": "automatic build at '"\$(date)"'",
+                      "draft": false,
+                      "name": "$BUILD_NUMBER",
+                      "prerelease": false,
+                      "tag_name": "$BUILD_NUMBER",
+                      "target_commitish": "$GIT_COMMIT"
+                    }'
+                    cat release.json
+                    releaseid=\$(cat release.json | jq .id)
+
+                    postURL="https://gitea.arg.rip/api/v1/repos/greyn/deployment/releases/\$releaseid/assets?name=\$noext"
+                    curl -X 'POST' \
+                       \$postURL \
+                      -H 'accept: application/json' \
+                      -H 'Authorization: token $GITEA_PSW' \
+                      -H 'Content-Type: multipart/form-data' \
+                      -F "attachment=@\$fullfilename;type=application/nupkg"
+
+                    releaseid=null
+                    filename=null
+                    fullfilename=null
+                    noext=null
+                    postURL=null
+                """
+                dotnetNuGetPush(root: "./*.nupkg", source:"greyngitea", skipDuplicate:true)
+            }
+        }
+    }
+    post { 
+        always { 
+            cleanWs()
+        }
+    }
+}

scripts/1clickservice.groovy

@@ -0,0 +1,90 @@
+pipeline {
+    agent any 
+    parameters { 
+        string(name: 'servicename', description: "service name")
+        string(name: 'svcdesc', description: "service description")
+        boolean(name: 'database', description: "service has a database", defaultValue: true)
+    }
+    environment {
+        pw_linuxserviceaccount=""
+        pw_productiondatabase=""
+        pw_developmentdatabase=""
+        ALLOCES = credentials('//TODO: its usually a uuid')
+    }
+    stages {
+        stage("type strengthening") {
+            steps {
+                script {
+                    if (servicename.isEmpty()) {
+                        error("servicename mandatory")
+                    }
+                    if (servicename.contains(' ')) {
+                        error("servicename cannot have spaces. try dashes.")
+                    }
+                    sh env.pw_linuxserviceaccount=$(mktemp -u XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX)
+                    sh env.pw_productiondatabase=$(mktemp -u XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX)
+                    sh env.pw_developmentdatabase=$(mktemp -u XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX)
+                    //TODO: save them somewhere. probably better to not lock myself out of these accounts from moment 0 
+                }
+            }
+        }
+        stage("gitea project"){
+            steps{
+                //TODO: clone _template-service. Must be under greyn.
+                //TODO: if not database version, strip out database stuff
+            }
+        }
+        stage("jenkins pipeline"){
+            steps{
+                //TODO: tell jenkins to scan greyn pipeline
+                //TODO: find this new service in jenkins
+                //TODO: add the shared secrets to jenkins
+            }
+        }
+        stage("service account"){
+            steps{
+                script {
+                    //jenkins, the user trying to SSH, must be able to ssh in and sudo
+                    ssh user@host username=$servicename password=${env.pw_linuxserviceaccount} 'echo "$ALLOCES_PSW" | sudo -Sv && bash -s' << 'ENDSSH'
+                        useradd -m -s /bin/bash $username
+                        echo "$username:$password" | chpasswd
+                        loginctl enable-linger $username
+                    ENDSSH
+                }
+            }
+        }
+        stage("db init"){
+            when { expression { return params.database } }
+            steps {
+                //i'm pretty sure "update" with nothing will init? 
+                //meaning we don't have to init, first update will init
+                script {
+                    ssh user@host servicename=$servicename pw_productiondatabase=${env.pw_productiondatabase} pw_developmentdatabase=${env.pw_developmentdatabase} 'echo "$ALLOCES_PSW" | sudo -Sv && bash -s' << 'ENDSSH'
+                        sudo -u postgres psql && bash -s << 'ENDPSQL'
+                            create database $servicename;
+                            create user $servicename with encrypted password '$pw_productiondatabase';
+                            grant all privileges on database $servicename to $servicename;
+                        ENDPSQL
+                        
+                        service_dev="${servicename}_dev"
+                        sudo -u postgres psql && bash -s << 'ENDPSQL'
+                            create database $service_dev;
+                            create user $service_dev with encrypted password '$pw_developmentdatabase';
+                            grant all privileges on database $service_dev to $service_dev;
+                        ENDPSQL
+                
+                    ENDSSH
+                }
+            }
+        }
+        stage("initial service setup"){
+            steps{
+                sh 'scp $servicename.service user@server:~/.config/systemd/user/$servicename.service'
+                ssh user@host servicename=$servicename svcpw=$ARG2 'echo "$ALLOCES_PSW" | sudo -Sv && bash -s' << 'ENDSSH'
+                    systemctl --user daemon-reload
+                    systemctl --user enable $servicename.service
+                ENDSSH
+            }
+        }
+    }
+}

scripts/beefhaving_video.groovy

@@ -0,0 +1 @@
+//TODO

scripts/dotnet_binary.groovy

@@ -0,0 +1 @@
+//TODO

scripts/nupkg.groovy

@@ -0,0 +1 @@
+//TODO