9.5 KiB
Playbooks
deployment to a clean infrastructure
General remarks:
- GCP does not route any traffic to your services unless the service is "healthy". It might take a few minutes after startup before the services is classified as healthy. Until then you will only see some generic error message.
These are the steps to set up the build server on a clean infrastructure:
- Configure the tools on your local machine:
If you not running docker under your user, you might need to./local_setup.sh
sudo gcloud auth login --no-launch-browser && gcloud auth configure-docker
before running other commands under sudo. - Delete the old cluster, if it still exists:
cd kubernetes/cluster ./cluster_delete.sh
- Create the cluster:
cd kubernetes/cluster ./cluster_create.sh
- Create the disk storage, if it does not yet exist:
cd kubernetes/cluster ./disk_create.sh
- SSH into the VM instance mounting the volume, find the mount point and then set
# go to the mount point of the volume cd /var/lib/kubelet/plugins/kubernetes.io/gce-pd/mounts/jenkins-home # change the permissions sudo chmod a+rwx
- Push the docker images to gcr.io:
cd containers #for each subfolder: ./build_deploy.sh <foldername>
- Deploy the stack:
cd kubernetes ./deploy.sh
- Configure it
creating basic authentication for reverse proxy
- create auth file, based on ingress-nginx documentation
cd kubernetes/reverse-proxy htpasswd -c auth <username> # enter password at prompt # add more users as required kubectl create secret generic proxy-auth --from-file=auth --namespace=jenkins
Creating docker containers on Windows
If you want to build/update/test docker container for Windows, you need to do this on a Windows machine.
Note: There is an existing windows-development machine that you can resume and use for development. Please stop it after use.
Here are the instructions to set up such a machine on GCP.
-
Pick a GCP Windows image with Desktop Support.
- pick a "persistent SSD" as boot Disk. This is much faster
- (optionally) add a "local scratch SSD" and use it as you workspace. This will make builds faster, but you will not be able to stop this instance and will have to kill and re-create it again.
- make sure that you give enough permissions in "Identity and API access" to be able to e.g. push new docker images to GCR.
-
Format the local SSD partition and use it as workspace.
-
install Chocolately:
iex ((new-object net.webclient).DownloadString('https://chocolatey.org/install.ps1'))
-
Install development tools:
choco install -y git googlechrome vscode
-
(optionally) If you want to be able to push changes to github, you need to set up your github SSH keys and user name:
ssh-keygen git config --global user.name <your name> git config --global user.email <your email>
-
Install Docker Enterprise and reboot:
Install-Module DockerMsftProvider -Force Install-Package Docker -ProviderName DockerMsftProvider -Force Restart-Computer
-
Configure the Docker credentials for GCP:
gcloud init # set options according to ./k8s_config here gcloud components install docker-credential-gcr docker-credential-gcr configure-docker
-
To build and run the current agent run:
cd c:\ git clone https://github.com/google/llvm-premerge-checks cd llvm-premerge-checks\containers .\build_deploy.ps1 agent-windows-buildkite # or agent-windows-jenkins c:\llvm-premerge-check\scripts\windows_agent_start_buildkite.ps1 # or windows_agent_start_jenkins.ps1
Spawning a new windows agent
To spawn a new windows agent:
- Go to the GCP page and pick a new number for the agent.
- Run
kubernetes/windows_agent_create.sh agent-windows-<number>
- Go to the GCP page again
- Login to the new machine via RDP (you will need a RDP client, e.g. Chrome app).
- In the RDP session: run these commands in the CMD window under Administrator to bootstrap the Windows machine:
Ignore the pop-up to format the new disk and wait for the machine to reboot.Invoke-WebRequest -uri 'https://raw.githubusercontent.com/google/llvm-premerge-checks/master/scripts/windows_agent_bootstrap.ps1' -OutFile c:\windows_agent_bootstrap.ps1 c:/windows_agent_bootstrap.ps1 -ssd
Buildkite
- Create
c:\credentials
folder with filebuildkite-env.ps1
:
Pleas mind the length of the agent name as it will be in path and might cause some tests to fail due to 260 character limit.$Env:buildkiteAgentToken = "secret-token" $Env:BUILDKITE_AGENT_NAME = "w#" $Env:BUILDKITE_AGENT_TAGS = "queue=windows" $Env:CONDUIT_TOKEN = "conduit-api-token"
- Clone scripts directory and start agent:
git clone https://github.com/google/llvm-premerge-checks.git C:\llvm-premerge-checks C:\llvm-premerge-checks\scripts\windows_agent_start_buildkite.ps1 [-workdir D:\] [-testing] [-version latest]
- Add a task to start agent when machine restarts (make sure to pass correct parameters).
git clone https://github.com/google/llvm-premerge-checks.git C:\llvm-premerge-checks
schtasks.exe /create /tn "Start Buildkite agent" /ru SYSTEM /SC ONSTART /DELAY 0005:00 /tr "powershell -command 'C:\llvm-premerge-checks\scripts\windows_agent_start_buildkite.ps1 -workdir c:\ws'"
Jenkins
- Create
c:\credentials
folder withbuild-agent-results_key.json
to access cloud storage copy from one of the existing machines. - Run
git clone https://github.com/google/llvm-premerge-checks.git "c:\llvm-premerge-checks"
C:\llvm-premerge-checks\scripts\windows_agent_start_buildkite.ps1 [-testing] [-version latest]
Buildkite monitoring
VM instance buildkite-monitoring
exposes Buildkite metrics to GCP.
To setup a new instance:
- Create as small linux VM with full access to Stackdriver Monitoring API.
- Follow instructions to install moninorign agent and enable statsd plugin.
- Download recent release of buildkite-agent-metrics.
- Run in SSH session:
chmod +x buildkite-agent-metrics-linux-amd64
nohup ./buildkite-agent-metrics-linux-amd64 -token XXXX -interval 30s -backend statsd &
.
Metrics are exported as "custom/statsd/gauge".
Testing scripts locally
Build and run agent docker image sudo ./containers/build_run.sh agent-debian-testing-ssd /bin/bash
.
Within a container set environment variables similar to pipeline.
Additionally set WORKSPACE
, PHID
and DIFF_ID
parameters. Set CONDUIT_TOKEN
with your personal one from https://reviews.llvm.org/settings/user/<USERNAME>/page/apitokens/
.
Custom environment variables for debugging
Buildkite pipelines have a number of custom environment variables one can set to change their behavior to debug issues or test changes. The best way is to look on pipeline generators (e.g. build_master_pipeline)
Testing changes before merging
It's recommended to test even small changes before committing them to the master
branch.
- create a branch with your changes, e.g. "my-feature" and push it to origin.
- manually create a buildkite build in the pipeline you are updating and specify environment variable
scripts_branch="my-feature"
(see other )
Phabricator integration
The general flow for builds on Phabricator is:
- A user uploads a Diff (=patch) to a Revision (set of Diffs with comments and buildstatus, ... ).
- A Herald checks if one of the rules matches this event.
- You can use the rules to trigger a Build in Harbormaster.
- Harbor sends an HTTP request to the Jenkins server.
- Jenkins executes the build. In the last step of the build, a script is uploading the results to Phabricator.
- Phabricator sets the build status and displays the results.
Herald
We currently have these Herald rules to configure the builds:
- Triggering builds for everyone:
- H576 This will only trigger for non-beta testers.
- Triggering the beta-test builds:
You can archive a rule to disable it.
Harbormaster
We have these build plans in Harbormaster:
You can disable a build plan to stop it from building.