Adds CI CD with deb for external deps

2026-11-06 18:15:17 +00:00
1 parent 03d48b76e4
commit 7373cb8d73
@@ -0,0 +1,86 @@
+# GeographicLib Installation
+FROM harbor.sl.defence-elec.de/proxydockerhub/library/ubuntu:26.04
+
+ARG RME_USERPASS=ctc
+ARG RME_ADMINSRV=10.198.80.75
+ARG RME_PROJECT=guez
+
+# Proxy configuration for air-gapped environments
+ARG http_proxy="http://10.198.80.130:3128"
+ARG no_proxy="localhost,127.0.0.1,defence-elec.de,.defence-elec.de,sl.defence-elec.de,10.198.80.0/23,192.168.133.0/24,141.200.0.0/16,10.184.0.0/15,10.199.101.35,10.199.101.36,10.199.101.158"
+ARG HTTP_PROXY=${http_proxy}
+ARG https_proxy=${http_proxy}
+ARG HTTPS_PROXY=${http_proxy}
+ARG NO_PROXY=${no_proxy}
+
+LABEL author="Legatus Team"
+LABEL project=${RME_PROJECT}
+LABEL version="2.0"
+LABEL description="GeographicLib for Legatus"
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+# OS and PATH configuration
+ENV LANG=C.UTF-8 \
+    LC_ALL=C.UTF-8
+
+# Shell global auf Bash mit sicheren Pipes umstellen
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+
+# Originale Repositories durch Nexus Proxies ersetzen
+RUN echo : > /etc/apt/sources.list && \
+    echo -e "Types: deb\n\
+URIs: http://remote-repo.sl.defence-elec.de:8081/repository/ubuntu\n\
+Suites: resolute resolute-updates resolute-backports\n\
+Components: main restricted universe multiverse\n\
+Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg\n\
+\n\
+Types: deb\n\
+URIs: http://remote-repo.sl.defence-elec.de:8081/repository/ubuntu-security\n\
+Suites: resolute-security\n\
+Components: main restricted universe multiverse\n\
+Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg\n\
+\n\
+Types: deb\n\
+URIs: https://internal-repo.sl.defence-elec.de/repository/external-rpms\n\
+Suites: general\n\
+Components: main\n\
+Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg" > /etc/apt/sources.list.d/ubuntu.sources
+
+# Create users (install openssl first for password hashing)
+RUN apt-get update && apt-get install -y openssl \
+    && groupadd ctc -g 1445 || true \
+    && groupadd rme -g 1001 || true \
+    && useradd -d /shd/CTC/TOOLS -u 1445 -g ctc -m -p $(openssl passwd -5 ${RME_USERPASS}) ctc || true \
+    && useradd -d /home/rme -u 1001 -g rme -m -p $(openssl passwd -5 ${RME_USERPASS}) rme || true \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN curl -fsSL http://${RME_ADMINSRV}/rme/deb_and_rpm_signage_key.pub --output /etc/apt/keyrings/deb_and_rpm_signage_key.asc \
+    && curl -fsSL http://${RME_ADMINSRV}/rme/SL-Netz.crt --output /usr/local/share/ca-certificates/SL-Netz.crt \
+    && update-ca-certificates
+
+ARG GEOGRAPHICLIB_VERSION=2.0
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential cmake git \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install GeographicLib from DEB package (air-gapped environment)
+# DEB package is downloaded from internal SCM repository:
+# https://internal-repo.sl.defence-elec.de/#browse/browse:external-rpms:general
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    libgeographiclib-dev=${GEOGRAPHICLIB_VERSION} \
+    && rm -rf /var/lib/apt/lists/*
+
+# Set GeographicLib installation path
+ENV GEOGRAPHICLIB_ROOT=/opt/GeographicLib
+ENV GEOGRAPHICLIB_VERSION=${GEOGRAPHICLIB_VERSION}
+
+# Verify installation
+RUN test -f /opt/GeographicLib/lib/libGeographicLib.so || test -d /opt/GeographicLib/include
+
+USER ctc
+WORKDIR /shd/CTC/TOOLS
+
+CMD ["/bin/bash"]
@@ -0,0 +1,108 @@
+pipeline {
+    agent any
+
+    environment {
+        GEOGRAPHICLIB_VERSION = '2.0'
+        HARBOR_REGISTRY = 'harbor.sl.defence-elec.de/proxydockerhub'
+        IMAGE_NAME = 'geographiclib'
+        IMAGE_TAG = "${GEOGRAPHICLIB_VERSION}"
+        OFFLINE_CACHE_PATH = '/opt/offline-cache/geographiclib'
+    }
+
+    options {
+        timeout(time: 20, unit: 'MINUTES')
+        buildDiscarder(logRotator(numToKeepStr: '10'))
+    }
+
+    stages {
+        stage('Checkout') {
+            steps {
+                checkout scm
+            }
+        }
+
+        stage('Prepare DEB Package Installation') {
+            steps {
+                script {
+                    // GeographicLib DEB package (libgeographiclib-dev) will be installed from internal SCM repository.
+                    // No license file required - open source (MIT/X11 license).
+                    sh """
+                        echo "GeographicLib: Will install libgeographiclib-dev from internal SCM"
+                    """
+                }
+            }
+        }
+
+        stage('Build GeographicLib Container') {
+            steps {
+                script {
+                    dir('external-dependencies/geographiclib') {
+                        sh """
+                            docker build \
+                              --build-arg GEOGRAPHICLIB_VERSION=${GEOGRAPHICLIB_VERSION} \
+                              -t ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG} \
+                              .
+                        """
+                    }
+                }
+            }
+        }
+
+        stage('Verify GeographicLib') {
+            steps {
+                script {
+                    sh """
+                        docker run --rm ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG} bash -c '
+                          ls -la /opt/GeographicLib/
+                        '
+                    """
+                }
+            }
+        }
+
+        stage('Generate SBOM') {
+            steps {
+                script {
+                    dir('external-dependencies/geographiclib') {
+                        sh """
+                            mkdir -p sbom
+                            
+                            # Set environment variables for SBOM generation
+                            export GIT_URL="${env.GIT_URL}"
+                            export GIT_COMMIT="${env.GIT_COMMIT}"
+                            export BUILD_NUMBER="${env.BUILD_NUMBER}"
+                            export DOCKERFILE_PATH="external-dependencies/geographiclib/Dockerfile"
+                            
+                            # Generate CycloneDX SBOM, SLSA provenance, and license report
+                            bash ../scripts/generate-sbom.sh geographiclib ${GEOGRAPHICLIB_VERSION} ./sbom
+                        """
+                    }
+                }
+            }
+        }
+
+        stage('Push to Registry') {
+            steps {
+                script {
+                    withCredentials([usernamePassword(
+                        credentialsId: 'harbor-credentials',
+                        usernameVariable: 'HARBOR_USER',
+                        passwordVariable: 'HARBOR_PASSWORD'
+                    )]) {
+                        sh """
+                            echo ${HARBOR_PASSWORD} | docker login ${HARBOR_REGISTRY} -u ${HARBOR_USER} --password-stdin
+                            docker push ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}
+                            docker logout ${HARBOR_REGISTRY}
+                        """
+                    }
+                }
+            }
+        }
+    }
+
+    post {
+        always {
+            cleanWs()
+        }
+    }
+}