Administrator
/
Splunk_Docker
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '76bb868089'
${ noResults }
Splunk_Docker/make

528 lines
22 KiB
Raw Normal View History Unescape

Inital Commit
5 months ago
SHELL := /bin/bash
IMAGE_VERSION ?= "latest"
NONQUOTE_IMAGE_VERSION := $(patsubst "%",%,$(IMAGE_VERSION))
DOCKER_BUILD_FLAGS ?=
SPLUNK_ANSIBLE_REPO ?= https://github.com/splunk/splunk-ansible.git
SPLUNK_ANSIBLE_BRANCH ?= develop
SPLUNK_COMPOSE ?= cluster_absolute_unit.yaml
# Set Splunk version/build parameters here to define downstream URLs and file names
SPLUNK_PRODUCT := splunk
SPLUNK_VERSION := 9.2.2.20240415
SPLUNK_BUILD := 51a9cf8e4d88
ifeq ($(shell arch), s390x)
SPLUNK_ARCH = s390x
else
SPLUNK_ARCH = x86_64
endif
# Linux Splunk arguments
SPLUNK_LINUX_FILENAME ?= splunkbeta-${SPLUNK_VERSION}-${SPLUNK_BUILD}-Linux-${SPLUNK_ARCH}.tgz
SPLUNK_LINUX_BUILD_URL ?= https://download.splunk.com/products/${SPLUNK_PRODUCT}/beta/${SPLUNK_VERSION}/linux/${SPLUNK_LINUX_FILENAME}
UF_LINUX_FILENAME ?= splunkforwarder-${SPLUNK_VERSION}-${SPLUNK_BUILD}-Linux-${SPLUNK_ARCH}.tgz
UF_LINUX_BUILD_URL ?= https://download.splunk.com/products/universalforwarder/releases/${SPLUNK_VERSION}/linux/${UF_LINUX_FILENAME}
# Windows Splunk arguments
SPLUNK_WIN_FILENAME ?= splunk-${SPLUNK_VERSION}-${SPLUNK_BUILD}-x64-release.msi
SPLUNK_WIN_BUILD_URL ?= https://download.splunk.com/products/${SPLUNK_PRODUCT}/releases/${SPLUNK_VERSION}/windows/${SPLUNK_WIN_FILENAME}
UF_WIN_FILENAME ?= splunkforwarder-${SPLUNK_VERSION}-${SPLUNK_BUILD}-x64-release.msi
UF_WIN_BUILD_URL ?= https://download.splunk.com/products/universalforwarder/releases/${SPLUNK_VERSION}/windows/${UF_WIN_FILENAME}
# Security Scanner Variables
SCANNER_DATE := `date +%Y-%m-%d`
SCANNER_DATE_YEST := `TZ=GMT+24 +%Y:%m:%d`
SCANNER_VERSION := v8
SCANNER_LOCALIP := $(shell ifconfig | grep -Eo 'inet (addr:)?([0-9]*\.){3}[0-9]*' | grep -Eo '([0-9]*\.){3}[0-9]*' | grep -v '127.0.0.1' | awk '{print $1}' | head -n 1)
SCANNER_IMAGES_TO_SCAN := splunk-debian-9 splunk-debian-10 splunk-centos-7 splunk-redhat-8 uf-debian-9 uf-debian-10 uf-centos-7 uf-redhat-8 splunk-py23-debian-9 splunk-py23-debian-10 splunk-py23-centos-7 splunk-py23-redhat-8 uf-py23-debian-9 uf-py23-debian-10 uf-py23-centos-7 uf-py23-redhat-8
CONTAINERS_TO_SAVE := splunk-debian-9 splunk-debian-10 splunk-centos-7 splunk-redhat-8 uf-debian-9 uf-debian-10 uf-centos-7 uf-redhat-8 splunk-py23-debian-9 splunk-py23-debian-10 splunk-py23-centos-7 splunk-py23-redhat-8 uf-py23-debian-9 uf-py23-debian-10 uf-py23-centos-7 uf-py23-redhat-8
ifeq ($(shell uname), Linux)
SCANNER_FILE = clair-scanner_linux_amd64
else ifeq ($(shell uname), Darwin)
SCANNER_FILE = clair-scanner_darwin_amd64
else
SCANNER_FILE = clair-scanner_windows_amd64.exe
endif
.PHONY: tests interactive_tutorials
all: splunk uf splunk-py23 uf-py23
ansible:
@if [ -d "splunk-ansible" ]; then \
echo "Ansible directory exists - skipping clone"; \
else \
git clone ${SPLUNK_ANSIBLE_REPO} --branch ${SPLUNK_ANSIBLE_BRANCH}; \
fi
@cd splunk-ansible && git rev-parse HEAD > version.txt
@cat splunk-ansible/version.txt
##### Base images #####
base: base-debian-9 base-debian-10 base-centos-7 base-centos-8 base-redhat-8 base-windows-2016
base-debian-10:
docker build ${DOCKER_BUILD_FLAGS} -t base-debian-10:${IMAGE_VERSION} ./base/debian-10
base-debian-9:
docker build ${DOCKER_BUILD_FLAGS} -t base-debian-9:${IMAGE_VERSION} ./base/debian-9
base-centos-7:
docker build ${DOCKER_BUILD_FLAGS} -t base-centos-7:${IMAGE_VERSION} ./base/centos-7
base-centos-8:
docker build ${DOCKER_BUILD_FLAGS} -t base-centos-8:${IMAGE_VERSION} ./base/centos-8
base-redhat-8:
docker build ${DOCKER_BUILD_FLAGS} --label version=${SPLUNK_VERSION} -t base-redhat-8:${IMAGE_VERSION} ./base/redhat-8
base-redhat-8-armv8:
docker buildx build ${DOCKER_BUILD_FLAGS} --build-arg BUSYBOX_URL=${BUSYBOX_URL} --label version=${SPLUNK_VERSION} -t base-redhat-8-armv8:${IMAGE_VERSION} ./base/redhat-8
base-windows-2016:
docker build ${DOCKER_BUILD_FLAGS} -t base-windows-2016:${IMAGE_VERSION} ./base/windows-2016
##### Minimal images #####
minimal: minimal-debian-9 minimal-debian-10 minimal-centos-7 minimal-centos-8 minimal-redhat-8
minimal-debian-9: base-debian-9
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-debian-9 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
--target minimal -t minimal-debian-9:${IMAGE_VERSION} .
minimal-debian-10: base-debian-10
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-debian-10 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
--target minimal -t minimal-debian-10:${IMAGE_VERSION} .
minimal-centos-7: base-centos-7
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-centos-7 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
--target minimal -t minimal-centos-7:${IMAGE_VERSION} .
minimal-centos-8: base-centos-8
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-centos-8 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
--target minimal -t minimal-centos-8:${IMAGE_VERSION} .
minimal-redhat-8: base-redhat-8
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-redhat-8 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
--target minimal -t minimal-redhat-8:${IMAGE_VERSION} .
##### Bare images #####
bare: bare-debian-9 bare-debian-10 bare-centos-7 bare-centos-8 bare-redhat-8
bare-debian-9: base-debian-9
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-debian-9 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
--target bare -t bare-debian-9:${IMAGE_VERSION} .
bare-debian-10: base-debian-10
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-debian-10 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
--target bare -t bare-debian-10:${IMAGE_VERSION} .
bare-centos-7: base-centos-7
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-centos-7 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
--target bare -t bare-centos-7:${IMAGE_VERSION} .
bare-centos-8: base-centos-8
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-centos-8 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
--target bare -t bare-centos-8:${IMAGE_VERSION} .
bare-redhat-8: base-redhat-8
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-redhat-8 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
--target bare -t bare-redhat-8:${IMAGE_VERSION} .
##### Splunk images #####
splunk: ansible splunk-debian-9 splunk-debian-10 splunk-centos-7 splunk-centos-8 splunk-redhat-8
splunk-debian-9: base-debian-9 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-debian-9 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
-t splunk-debian-9:${IMAGE_VERSION} .
splunk-debian-10: base-debian-10 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-debian-10 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
-t splunk-debian-10:${IMAGE_VERSION} .
splunk-centos-7: base-centos-7 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-centos-7 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
-t splunk-centos-7:${IMAGE_VERSION} .
splunk-centos-8: base-centos-8 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-centos-8 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
-t splunk-centos-8:${IMAGE_VERSION} .
splunk-redhat-8: base-redhat-8 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-redhat-8 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_LINUX_BUILD_URL} \
-t splunk-redhat-8:${IMAGE_VERSION} .
splunk-windows-2016: base-windows-2016 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f splunk/windows-2016/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-windows-2016 \
--build-arg SPLUNK_BUILD_URL=${SPLUNK_WIN_BUILD_URL} \
-t splunk-windows-2016:${IMAGE_VERSION} .
##### UF images #####
uf: ansible uf-debian-9 uf-debian-10 uf-centos-7 uf-centos-8 uf-redhat-8
ufbare-debian-9: base-debian-9 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f uf/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-debian-9 \
--build-arg SPLUNK_BUILD_URL=${UF_LINUX_BUILD_URL} \
--target bare -t ufbare-debian-9:${IMAGE_VERSION} .
ufbare-debian-10: base-debian-10 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f uf/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-debian-10 \
--build-arg SPLUNK_BUILD_URL=${UF_LINUX_BUILD_URL} \
--target bare -t ufbare-debian-10:${IMAGE_VERSION} .
uf-debian-9: base-debian-9 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f uf/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-debian-9 \
--build-arg SPLUNK_BUILD_URL=${UF_LINUX_BUILD_URL} \
-t uf-debian-9:${IMAGE_VERSION} .
uf-debian-10: base-debian-10 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f uf/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-debian-10 \
--build-arg SPLUNK_BUILD_URL=${UF_LINUX_BUILD_URL} \
-t uf-debian-10:${IMAGE_VERSION} .
uf-centos-7: base-centos-7 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f uf/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-centos-7 \
--build-arg SPLUNK_BUILD_URL=${UF_LINUX_BUILD_URL} \
-t uf-centos-7:${IMAGE_VERSION} .
uf-centos-8: base-centos-8 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f uf/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-centos-8 \
--build-arg SPLUNK_BUILD_URL=${UF_LINUX_BUILD_URL} \
-t uf-centos-8:${IMAGE_VERSION} .
uf-redhat-8: base-redhat-8 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f uf/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-redhat-8 \
--build-arg SPLUNK_BUILD_URL=${UF_LINUX_BUILD_URL} \
-t uf-redhat-8:${IMAGE_VERSION} .
uf-redhat-8-armv8: base-redhat-8-armv8 ansible
docker buildx build ${DOCKER_BUILD_FLAGS} \
-f uf/common-files/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-redhat-8-armv8 \
--build-arg SPLUNK_BUILD_URL=${UF_LINUX_BUILD_URL} \
-t uf-redhat-8-armv8:${IMAGE_VERSION} .
uf-windows-2016: base-windows-2016 ansible
docker build ${DOCKER_BUILD_FLAGS} \
-f uf/windows-2016/Dockerfile \
--build-arg SPLUNK_BASE_IMAGE=base-windows-2016 \
--build-arg SPLUNK_BUILD_URL=${UF_WIN_BUILD_URL} \
-t uf-windows-2016:${IMAGE_VERSION} .
##### Python 3 support #####
splunk-py23: splunk-py23-debian-9 splunk-py23-debian-10 splunk-py23-centos-7 splunk-py23-centos-8 splunk-py23-redhat-8
splunk-py23-debian-9: splunk-debian-9
docker build ${DOCKER_BUILD_FLAGS} \
-f py23-image/debian-9/Dockerfile \
--build-arg SPLUNK_PRODUCT=splunk \
-t splunk-py23-debian-9:${IMAGE_VERSION} .
splunk-py23-debian-10: splunk-debian-10
docker build ${DOCKER_BUILD_FLAGS} \
-f py23-image/debian-10/Dockerfile \
--build-arg SPLUNK_PRODUCT=splunk \
-t splunk-py23-debian-10:${IMAGE_VERSION} .
splunk-py23-centos-7: splunk-centos-7
docker build ${DOCKER_BUILD_FLAGS} \
-f py23-image/centos-7/Dockerfile \
--build-arg SPLUNK_PRODUCT=splunk \
-t splunk-py23-centos-7:${IMAGE_VERSION} .
splunk-py23-centos-8: splunk-centos-8
docker build ${DOCKER_BUILD_FLAGS} \
-f py23-image/centos-8/Dockerfile \
--build-arg SPLUNK_PRODUCT=splunk \
-t splunk-py23-centos-8:${IMAGE_VERSION} .
splunk-py23-redhat-8: splunk-redhat-8
docker build ${DOCKER_BUILD_FLAGS} \
-f py23-image/redhat-8/Dockerfile \
--build-arg SPLUNK_PRODUCT=splunk \
-t splunk-py23-redhat-8:${IMAGE_VERSION} .
uf-py23: uf-py23-debian-9 uf-py23-debian-10 uf-py23-centos-7 uf-py23-redhat-8
uf-py23-debian-9: uf-debian-9
docker build ${DOCKER_BUILD_FLAGS} \
-f py23-image/debian-9/Dockerfile \
--build-arg SPLUNK_PRODUCT=uf \
-t uf-py23-debian-9:${IMAGE_VERSION} .
uf-py23-debian-10: uf-debian-10
docker build ${DOCKER_BUILD_FLAGS} \
-f py23-image/debian-10/Dockerfile \
--build-arg SPLUNK_PRODUCT=uf \
-t uf-py23-debian-10:${IMAGE_VERSION} .
uf-py23-centos-7: uf-centos-7
docker build ${DOCKER_BUILD_FLAGS} \
-f py23-image/centos-7/Dockerfile \
--build-arg SPLUNK_PRODUCT=uf \
-t uf-py23-centos-7:${IMAGE_VERSION} .
uf-py23-centos-8: uf-centos-8
docker build ${DOCKER_BUILD_FLAGS} \
-f py23-image/centos-8/Dockerfile \
--build-arg SPLUNK_PRODUCT=uf \
-t uf-py23-centos-8:${IMAGE_VERSION} .
uf-py23-redhat-8: uf-redhat-8
docker build ${DOCKER_BUILD_FLAGS} \
-f py23-image/redhat-8/Dockerfile \
--build-arg SPLUNK_PRODUCT=uf \
-t uf-py23-redhat-8:${IMAGE_VERSION} .
##### Tests #####
sample-compose-up: sample-compose-down
docker-compose -f test_scenarios/${SPLUNK_COMPOSE} up -d
sample-compose-down:
docker-compose -f test_scenarios/${SPLUNK_COMPOSE} down --volumes --remove-orphans || true
test: clean ansible test_setup all run_small_tests run_large_tests
run_small_tests: run_small_tests_centos7 run_small_tests_redhat8 run_small_tests_debian9 run_small_tests_debian10
run_large_tests: run_large_tests_centos7 run_large_tests_redhat8 run_large_tests_debian9 run_large_tests_debian10
test_centos7: clean ansible splunk-centos-7 uf-centos-7 test_setup run_small_tests_centos7 run_large_tests_centos7
test_redhat8: clean ansible splunk-redhat-8 uf-redhat-8 test_setup run_small_tests_redhat8 run_large_tests_redhat8
test_debian9: clean ansible splunk-debian-9 uf-debian-9 test_setup run_small_tests_debian9 run_large_tests_debian9
test_debian10: clean ansible splunk-debian-10 uf-debian-10 test_setup run_small_tests_debian10 run_large_tests_debian10
run_small_tests_centos7:
@echo 'Running the super awesome small tests; CentOS 7'
pytest -n 2 --reruns 1 -sv tests/test_single_splunk_image.py --platform centos-7 --junitxml test-results/centos7-result/testresults_small_centos7.xml
run_large_tests_centos7:
@echo 'Running the super awesome large tests; CentOS 7'
pytest -n 2 --reruns 1 -sv tests/test_distributed_splunk_image.py --platform centos-7 --junitxml test-results/centos7-result/testresults_large_centos7.xml
run_small_tests_redhat8:
@echo 'Running the super awesome small tests; RedHat 8'
pytest -n 2 --reruns 1 -sv tests/test_single_splunk_image.py --platform redhat-8 --junitxml test-results/redhat8-result/testresults_small_redhat8.xml
run_large_tests_redhat8:
@echo 'Running the super awesome large tests; RedHat 8'
pytest -n 2 --reruns 1 -sv tests/test_distributed_splunk_image.py --platform redhat-8 --junitxml test-results/redhat8-result/testresults_large_redhat8.xml
test_setup:
@echo 'Install test requirements'
pip install --upgrade pip
pip install -r $(shell pwd)/tests/requirements.txt --upgrade
mkdir test-results/centos7-result || true
mkdir test-results/debian9-result || true
mkdir test-results/debian10-result || true
mkdir test-results/redhat8-result || true
run_small_tests_debian9:
@echo 'Running the super awesome small tests; Debian 9'
pytest -n 2 --reruns 1 -sv tests/test_single_splunk_image.py --platform debian-9 --junitxml test-results/debian9-result/testresults_small_debian9.xml
run_large_tests_debian9:
@echo 'Running the super awesome large tests; Debian 9'
pytest -n 2 --reruns 1 -sv tests/test_distributed_splunk_image.py --platform debian-9 --junitxml test-results/debian9-result/testresults_large_debian9.xml
run_small_tests_debian10:
@echo 'Running the super awesome small tests; Debian 10'
pytest -n 2 --reruns 1 -sv tests/test_single_splunk_image.py --platform debian-10 --junitxml test-results/debian10-result/testresults_small_debian10.xml
run_large_tests_debian10:
@echo 'Running the super awesome large tests; Debian 10'
pytest -n 2 --reruns 1 -sv tests/test_distributed_splunk_image.py --platform debian-10 --junitxml test-results/debian10-result/testresults_large_debian10.xml
save_containers:
@echo 'Saving the following containers:${CONTAINERS_TO_SAVE}'
mkdir test-results/saved_images || true
$(foreach image,${CONTAINERS_TO_SAVE}, echo "Currently saving: ${image}"; docker save ${image} --output test-results/saved_images/${image}.tar; echo "Compressing: ${image}.tar"; gzip test-results/saved_images/${image}.tar; )
test_python3_all: test_splunk_python3_all test_uf_python3_all
test_splunk_python3_all: test_splunk_centos7_python3 test_splunk_redhat8_python3 test_splunk_debian9_python3 test_splunk_debian10_python3
test_uf_python3_all: test_uf_centos7_python3 test_uf_redhat8_python3 test_uf_debian9_python3 test_uf_debian10_python3
test_splunk_centos7_python3:
$(call test_python3_installation,splunk-py23-centos-7)
test_splunk_redhat8_python3:
$(call test_python3_installation,splunk-py23-redhat-8)
test_splunk_debian9_python3:
$(call test_python3_installation,splunk-py23-debian-9)
test_splunk_debian10_python3:
$(call test_python3_installation,splunk-py23-debian-10)
test_uf_centos7_python3:
$(call test_python3_installation,uf-py23-centos-7)
test_uf_redhat8_python3:
$(call test_python3_installation,uf-py23-redhat-8)
test_uf_debian9_python3:
$(call test_python3_installation,uf-py23-debian-9)
test_uf_debian10_python3:
$(call test_python3_installation,uf-py23-debian-10)
define test_python3_installation
docker run -d --rm --name $1 -it $1 bash
docker exec -it $1 bash -c 'if [[ $$(python3 -V) =~ "Python 3" ]] ; then echo "$$(python3 -V) installed" ; else echo "No Python3 installation found" ; docker kill $1 ; exit 1 ; fi'
docker kill $1
endef
test_python2_all: test_splunk_python2_all test_uf_python2_all
test_splunk_python2_all: test_splunk_centos7_python2 test_splunk_redhat8_python2 test_splunk_debian9_python2 test_splunk_debian10_python2
test_uf_python2_all: test_uf_centos7_python2 test_uf_redhat8_python2 test_uf_debian9_python2 test_uf_debian10_python2
test_splunk_centos7_python2:
$(call test_python2_installation,splunk-py23-centos-7)
test_splunk_redhat8_python2:
$(call test_python2_installation,splunk-py23-redhat-8)
test_splunk_debian9_python2:
$(call test_python2_installation,splunk-py23-debian-9)
test_splunk_debian10_python2:
$(call test_python2_installation,splunk-py23-debian-10)
test_uf_centos7_python2:
$(call test_python2_installation,uf-py23-centos-7)
test_uf_redhat8_python2:
$(call test_python2_installation,uf-py23-redhat-8)
test_uf_debian9_python2:
$(call test_python2_installation,uf-py23-debian-9)
test_uf_debian10_python2:
$(call test_python2_installation,uf-py23-debian-10)
#python2 version print to stderr, hence the 2>&1
define test_python2_installation
docker run -d --rm --name $1 -it $1 bash
docker exec -it $1 bash -c 'if [[ $$(python -V 2>&1) =~ "Python 2" ]] ; then echo "$$(python -V 2>&1) is the default python" ; else echo "Python is not default to python2" ; docker kill $1 ; exit 1 ; fi'
docker kill $1
endef
test_debian10_image_size:
$(call test_image_size,splunk-debian-10)
define test_image_size
docker pull splunk/splunk:edge
CUR_SIZE=$$(docker image inspect $1:latest --format='{{.Size}}') ; \
EDGE_SIZE=$$(docker image inspect splunk/splunk:edge --format='{{.Size}}') ; \
echo "current $1 image size = "$$CUR_SIZE ; \
echo "edge image size = "$$EDGE_SIZE ; \
if [[ $$CUR_SIZE -gt $$EDGE_SIZE*140/100 ]] ; then echo "current image size is 40% more than edge image" ; exit 1 ; fi
endef
setup_clair_scanner:
mkdir clair-scanner-logs
mkdir test-results/cucumber
docker stop clair_db || true
docker rm clair_db || true
docker stop clair || true
docker rm clair || true
docker pull arminc/clair-db:${SCANNER_DATE} || docker pull arminc/clair-db:${SCANNER_DATE_YEST} || echo "WARNING: Failed to pull daily image, defaulting to latest" >> clair-scanner-logs/clair_setup_errors.log ; docker pull arminc/clair-db:latest
docker run -d --name clair_db arminc/clair-db:${SCANNER_DATE} || docker run -d --name clair_db arminc/clair-db:${SCANNER_DATE_YEST} || docker run -d --name clair_db arminc/clair-db:latest
docker run -p 6060:6060 --link clair_db:postgres -d --name clair --restart on-failure arminc/clair-local-scan:v2.0.6
wget https://github.com/arminc/clair-scanner/releases/download/${SCANNER_VERSION}/${SCANNER_FILE}
mv ${SCANNER_FILE} clair-scanner
chmod +x clair-scanner
echo "Waiting for clair daemon to start"
retries=0 ; while( ! wget -T 10 -q -O /dev/null http://0.0.0.0:6060/v1/namespaces ) ; do sleep 1 ; echo -n "." ; if [ $$retries -eq 10 ] ; then echo " Timeout, aborting." ; exit 1 ; fi ; retries=$$(($$retries+1)) ; done
echo "Daemon started."
run_clair_scan:
$(foreach image,${SCANNER_IMAGES_TO_SCAN}, mkdir test-results/clair-scanner-${image}; ./clair-scanner -c http://0.0.0.0:6060 --ip ${SCANNER_LOCALIP} -r test-results/clair-scanner-${image}/results.json -l clair-scanner-logs/${image}.log -w clair-whitelist.yml ${image}:${NONQUOTE_IMAGE_VERSION} || true ; python clair_to_junit_parser.py test-results/clair-scanner-${image}/results.json --output test-results/clair-scanner-${image}/results.xml ; )
setup_and_run_clair: setup_clair_scanner run_clair_scan
clean:
docker stop clair_db || true
docker rm clair_db || true
docker stop clair || true
docker rm clair || true
rm -rf .pytest_cache || true
rm -rf clair-scanner || true
rm -rf clair-scanner-logs || true
rm -rf test-results/* || true
docker rm -f ${TEST_IMAGE_NAME} || true
docker system prune -f --volumes
clean_ansible:
rm -rf splunk-ansible
dev_loop:
SPLUNK_IMAGE="splunk-debian-10:latest" make sample-compose-down && sleep 15 && DOCKER_BUILD_FLAGS="--no-cache" make all && sleep 15 && SPLUNK_IMAGE="splunk-debian-10:latest" make sample-compose-up

Powered by BW's shoe-string budget.