sandbox/Makefile at main · cocoonstack/sandbox · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
KERNEL_VERSION := $(shell cat boot/kernel/VERSION)
KERNEL_MIRROR ?= https://cdn.kernel.org/pub/linux/kernel
BOOT_IMAGE ?= sandbox-boot:$(KERNEL_VERSION)

SILKD_VERSION := $(shell sed -n 's/^version = "\(.*\)"/\1/p' silkd/Cargo.toml | head -1)
SILKD_IMAGE ?= sandbox-silkd:$(SILKD_VERSION)

EXTRACT_IMAGE ?= $(BOOT_IMAGE)

# The parent workspace's go.work excludes these modules; GOWORK=off keeps
# local invocations identical to CI.
GO_MODULES := sandboxd sdk e2e

.PHONY: test lint boot boot-debug extract extract-debug silkd-image base python images \
	sandboxd go-test go-lint

test:
	cd boot/init && cargo test
	cd silkd && cargo test

lint:
	cd boot/init && cargo fmt --check && cargo clippy --all-targets -- -D warnings
	cd silkd && cargo fmt --check && cargo clippy --all-targets -- -D warnings

sandboxd:
	mkdir -p dist
	cd sandboxd && GOWORK=off go build -o ../dist/sandboxd .

go-test:
	for m in $(GO_MODULES); do (cd $$m && GOWORK=off go test -race ./...) || exit 1; done

go-lint:
	for m in $(GO_MODULES); do \
		(cd $$m && GOWORK=off golangci-lint run ./... && GOWORK=off golangci-lint fmt --diff ./...) || exit 1; \
	done

# --platform: the kernel build is x86-only (x86_64_defconfig, PVH); without
# the pin, arm64 hosts build an aarch64 stage that dies inside kbuild.
boot:
	docker build --platform linux/amd64 -t $(BOOT_IMAGE) --build-arg KERNEL_VERSION=$(KERNEL_VERSION) --build-arg KERNEL_MIRROR=$(KERNEL_MIRROR) boot

boot-debug:
	docker build --platform linux/amd64 -t $(BOOT_IMAGE)-debug --build-arg KERNEL_VERSION=$(KERNEL_VERSION) --build-arg KERNEL_MIRROR=$(KERNEL_MIRROR) --build-arg INITRD_DEBUG=1 boot

extract:
	rm -rf dist && mkdir -p dist
	cid=$$(docker create $(EXTRACT_IMAGE)) && docker cp $$cid:/boot dist/boot && docker rm $$cid

extract-debug:
	$(MAKE) extract EXTRACT_IMAGE=$(BOOT_IMAGE)-debug

silkd-image:
	docker build --platform linux/amd64 -t $(SILKD_IMAGE) -f silkd/Dockerfile silkd

base: silkd-image
	docker build --platform linux/amd64 -t sandbox-base:dev \
		--build-arg BOOT_IMAGE=$(BOOT_IMAGE) \
		--build-arg SILKD_IMAGE=$(SILKD_IMAGE) \
		--secret id=sandbox_install_agent,src=os-image/base/install-agent.sh \
		-f os-image/base/24.04/Dockerfile os-image/base

python: base
	docker build --platform linux/amd64 -t sandbox-python:dev \
		--build-arg BASE_IMAGE=sandbox-base:dev \
		-f os-image/python/3.12/Dockerfile os-image/python

images: base python