108 lines
3.6 KiB
Groovy
108 lines
3.6 KiB
Groovy
pipeline {
|
|
agent any
|
|
|
|
environment {
|
|
GEOGRAPHICLIB_VERSION = '2.0'
|
|
HARBOR_REGISTRY = 'harbor.sl.defence-elec.de/proxydockerhub'
|
|
IMAGE_NAME = 'geographiclib'
|
|
IMAGE_TAG = "${GEOGRAPHICLIB_VERSION}"
|
|
OFFLINE_CACHE_PATH = '/opt/offline-cache/geographiclib'
|
|
}
|
|
|
|
options {
|
|
timeout(time: 20, unit: 'MINUTES')
|
|
buildDiscarder(logRotator(numToKeepStr: '10'))
|
|
}
|
|
|
|
stages {
|
|
stage('Checkout') {
|
|
steps {
|
|
checkout scm
|
|
}
|
|
}
|
|
|
|
stage('Prepare DEB Package Installation') {
|
|
steps {
|
|
script {
|
|
// GeographicLib DEB package (libgeographiclib-dev) will be installed from internal SCM repository.
|
|
// No license file required - open source (MIT/X11 license).
|
|
sh """
|
|
echo "GeographicLib: Will install libgeographiclib-dev from internal SCM"
|
|
"""
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Build GeographicLib Container') {
|
|
steps {
|
|
script {
|
|
dir('external-dependencies/geographiclib') {
|
|
sh """
|
|
docker build \
|
|
--build-arg GEOGRAPHICLIB_VERSION=${GEOGRAPHICLIB_VERSION} \
|
|
-t ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG} \
|
|
.
|
|
"""
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Verify GeographicLib') {
|
|
steps {
|
|
script {
|
|
sh """
|
|
docker run --rm ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG} bash -c '
|
|
ls -la /opt/GeographicLib/
|
|
'
|
|
"""
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Generate SBOM') {
|
|
steps {
|
|
script {
|
|
dir('external-dependencies/geographiclib') {
|
|
sh """
|
|
mkdir -p sbom
|
|
|
|
# Set environment variables for SBOM generation
|
|
export GIT_URL="${env.GIT_URL}"
|
|
export GIT_COMMIT="${env.GIT_COMMIT}"
|
|
export BUILD_NUMBER="${env.BUILD_NUMBER}"
|
|
export DOCKERFILE_PATH="external-dependencies/geographiclib/Dockerfile"
|
|
|
|
# Generate CycloneDX SBOM, SLSA provenance, and license report
|
|
bash ../scripts/generate-sbom.sh geographiclib ${GEOGRAPHICLIB_VERSION} ./sbom
|
|
"""
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Push to Registry') {
|
|
steps {
|
|
script {
|
|
withCredentials([usernamePassword(
|
|
credentialsId: 'harbor-credentials',
|
|
usernameVariable: 'HARBOR_USER',
|
|
passwordVariable: 'HARBOR_PASSWORD'
|
|
)]) {
|
|
sh """
|
|
echo ${HARBOR_PASSWORD} | docker login ${HARBOR_REGISTRY} -u ${HARBOR_USER} --password-stdin
|
|
docker push ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}
|
|
docker logout ${HARBOR_REGISTRY}
|
|
"""
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
post {
|
|
always {
|
|
cleanWs()
|
|
}
|
|
}
|
|
} |