From 68c7ae67f1bf7d054ab2842bd023c5d360bb1559 Mon Sep 17 00:00:00 2001 From: Bram Kelchtermans Date: Tue, 27 Oct 2026 14:26:27 +0100 Subject: [PATCH] first version of stacky container --- Dockers/remote-stacky-container/Dockerfile | 54 +++ Dockers/remote-stacky-container/entrypoint.sh | 346 ++++++++++++++++++ Dockers/remote-stacky-container/version | 1 + 3 files changed, 401 insertions(+) create mode 100644 Dockers/remote-stacky-container/Dockerfile create mode 100644 Dockers/remote-stacky-container/entrypoint.sh create mode 100644 Dockers/remote-stacky-container/version diff --git a/Dockers/remote-stacky-container/Dockerfile b/Dockers/remote-stacky-container/Dockerfile new file mode 100644 index 0000000..d82cf9c --- /dev/null +++ b/Dockers/remote-stacky-container/Dockerfile @@ -0,0 +1,54 @@ +# Use an official Node.js runtime as a parent image +FROM node:22-slim + +# Set the working directory +WORKDIR /workspace + +# Install git, openssh-client, openssh-server, and other necessary packages +RUN apt-get update && apt-get install -y \ + git \ + openssh-client \ + openssh-server \ + screen \ + iputils-ping \ + software-properties-common \ + sudo \ + curl \ + unzip \ + openssl \ + ca-certificates \ + && apt-get clean \ + && rm -rf /var/lib/apt/lists/* + +# Install additional package managers +RUN npm install -g pnpm +RUN npm install -g @kilocode/cli@7.8.18 +RUN curl -fsSL https://bun.sh/install | bash + + +# Clone and setup linux-presets +RUN git clone https://gitea.bramkelchtermans.be/Bram/linux-presets.git --depth 1 && \ +cd linux-presets && \ +chmod +x setup.sh && \ +./setup.sh --terminal-icon 󰎙 && \ +cd .. && \ +rm -rf linux-presets + +# Add root to sudo group +RUN usermod -aG sudo root +RUN curl -fsSL https://claude.ai/install.sh | bash +RUN echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.config/fish/config.fish + + +# Create a directory for the SSH keys +RUN mkdir -p /root/.ssh + +# Copy the entrypoint script into the container +COPY entrypoint.sh /usr/local/bin/entrypoint.sh +RUN chmod +x /usr/local/bin/entrypoint.sh + +# Expose ports +EXPOSE 3000 22 + +# Set the entrypoint +ENTRYPOINT ["/usr/local/bin/entrypoint.sh"] diff --git a/Dockers/remote-stacky-container/entrypoint.sh b/Dockers/remote-stacky-container/entrypoint.sh new file mode 100644 index 0000000..7849069 --- /dev/null +++ b/Dockers/remote-stacky-container/entrypoint.sh @@ -0,0 +1,346 @@ +#!/bin/bash +set -e + +# Function to extract domain from Git SSH URL +extract_domain() { + local url=$1 + + # Handle different SSH URL formats + if [[ $url == ssh://* ]]; then + # For URLs starting with ssh://, extract the domain + echo "$url" | sed -E 's|ssh://[^@]+@([^:/]+).*|\1|' + else + # For URLs without ssh://, extract the domain after '@' and before ':' + echo "$url" | sed -E 's|[^@]+@([^:/]+).*|\1|' + fi +} + +# Extract SSH port from Git URL (ssh://user@host:port/path format) +extract_port() { + local url=$1 + + if [[ $url == ssh://* ]] && [[ $url =~ ssh://[^@]+@[^:/]+:([0-9]+) ]]; then + echo "${BASH_REMATCH[1]}" + fi +} + +# Check if the required environment variables are set +if [ -z "$REPO_URL" ]; then + echo "Error: REPO_URL environment variable must be set." + exit 1 +fi + +if [ ! -f /root/.ssh/id_rsa ]; then + echo "Error: SSH private key not found at /root/.ssh/id_rsa" + exit 1 +fi + +if [ -z "$GIT_USER" ]; then + echo "Error: GIT_USER environment variable must be set." + exit 1 +fi + +if [ -z "$GIT_EMAIL" ]; then + echo "Error: GIT_EMAIL environment variable must be set." + exit 1 +fi + +# Set default package manager if not provided +PACKAGE_MANAGER=${PACKAGE_MANAGER:-npm} + +add_teleport_labels() { + # Default config path if not provided + CONFIG_FILE=${CONFIG_FILE:-/etc/teleport.yaml} + + if [ -z "$TELEPORT_LABELS" ]; then + echo "No TELEPORT_LABELS environment variable set, skipping label configuration" + return 0 + fi + + if [ ! -f "$CONFIG_FILE" ]; then + echo "Error: Teleport config not found at $CONFIG_FILE" + return 1 + fi + + echo "Adding Teleport labels from TELEPORT_LABELS environment variable..." + + # Check if ssh_service section exists + if ! grep -q "ssh_service:" "$CONFIG_FILE"; then + echo "Error: ssh_service section not found in teleport.yaml" + return 1 + fi + + # Extract existing labels from the config file + declare -A EXISTING_LABELS + IN_LABELS_SECTION=0 + IN_SSH_SERVICE=0 + while IFS= read -r line; do + # Detect when we enter the ssh_service section + if [[ "$line" =~ ^[[:space:]]*ssh_service:[[:space:]]*$ ]]; then + IN_SSH_SERVICE=1 + continue + fi + # Detect when we enter the labels section + if [ "$IN_SSH_SERVICE" -eq 1 ] && [[ "$line" =~ ^[[:space:]]*labels:[[:space:]]*$ ]]; then + IN_LABELS_SECTION=1 + continue + fi + # Detect when we leave the ssh_service section (next top-level key) + if [ "$IN_SSH_SERVICE" -eq 1 ] && [[ "$line" =~ ^[[:space:]]*[a-zA-Z_][a-zA-Z0-9_]*:[[:space:]]* ]] && [ "$IN_LABELS_SECTION" -eq 0 ]; then + IN_SSH_SERVICE=0 + fi + # Detect when we leave the labels section (next key at same or higher indentation) + if [ "$IN_LABELS_SECTION" -eq 1 ] && [[ "$line" =~ ^[[:space:]]*[a-zA-Z_][a-zA-Z0-9_]*:[[:space:]]* ]]; then + # Check if this is a key at the same or less indentation as labels: + if [[ ! "$line" =~ ^[[:space:]]{4,} ]]; then + IN_LABELS_SECTION=0 + IN_SSH_SERVICE=0 + fi + fi + # Extract label key:value pairs + if [ "$IN_LABELS_SECTION" -eq 1 ]; then + if [[ "$line" =~ ^[[:space:]]+([^:]+):[[:space:]]*(.+)$ ]]; then + existing_key=$(echo "${BASH_REMATCH[1]}" | xargs) + existing_value=$(echo "${BASH_REMATCH[2]}" | xargs) + EXISTING_LABELS["$existing_key"]="$existing_value" + fi + fi + done < "$CONFIG_FILE" + + # Check if all labels from TELEPORT_LABELS are already present + IFS=',' read -ra LABELS <<< "$TELEPORT_LABELS" + ALL_LABELS_EXIST=true + for label in "${LABELS[@]}"; do + # Trim whitespace + label=$(echo "$label" | xargs) + + # Check if label contains colon + if [[ "$label" == *":"* ]]; then + key=$(echo "$label" | cut -d':' -f1 | xargs) + + if [ -n "$key" ]; then + # Check if this label key doesn't exist + if [ -z "${EXISTING_LABELS[$key]}" ]; then + ALL_LABELS_EXIST=false + break + fi + fi + fi + done + + # If all labels already exist, skip file modification + if [ "$ALL_LABELS_EXIST" = true ]; then + echo "All Teleport labels from TELEPORT_LABELS are already present, skipping update" + return 0 + fi + + # Build the new ssh_service section with existing and new labels + NEW_SSH_SECTION="ssh_service:" + NEW_SSH_SECTION="$NEW_SSH_SECTION"$'\n'" labels:" + + # First, add existing labels that are not being replaced + for existing_key in "${!EXISTING_LABELS[@]}"; do + NEW_SSH_SECTION="$NEW_SSH_SECTION"$'\n'" $existing_key: ${EXISTING_LABELS[$existing_key]}" + done + + IFS=',' read -ra LABELS <<< "$TELEPORT_LABELS" + for label in "${LABELS[@]}"; do + # Trim whitespace + label=$(echo "$label" | xargs) + + # Check if label contains colon + if [[ "$label" == *":"* ]]; then + key=$(echo "$label" | cut -d':' -f1 | xargs) + value=$(echo "$label" | cut -d':' -f2- | xargs) + + if [ -n "$key" ] && [ -n "$value" ]; then + # Only add if the label key doesn't already exist + if [ -z "${EXISTING_LABELS[$key]}" ]; then + NEW_SSH_SECTION="$NEW_SSH_SECTION"$'\n'" $key: $value" + echo "Added label: $key = $value" + else + echo "Label '$key' already exists with value '${EXISTING_LABELS[$key]}', skipping" + fi + else + echo "Warning: Invalid label format '$label'. Expected format: key:value" + fi + else + echo "Warning: Label '$label' does not contain colon separator. Expected format: key:value" + fi + done + + # Create a backup + cp "$CONFIG_FILE" "$CONFIG_FILE.backup" + + # If ssh_service exists, replace it. Otherwise, append to the end. + if grep -qE '^[[:space:]]*ssh_service:' "$CONFIG_FILE"; then + echo "Found existing ssh_service section, updating labels..." + awk -v new_section="$NEW_SSH_SECTION" ' + BEGIN { + in_ssh_service = 0 + section_replaced = 0 + } + /^[[:space:]]*ssh_service:/ { + in_ssh_service = 1 + if (!section_replaced) { + print new_section + section_replaced = 1 + } + next + } + in_ssh_service && /^[[:space:]]*[a-zA-Z_][a-zA-Z0-9_]*:/ { + in_ssh_service = 0 + } + in_ssh_service { + next + } + { print $0 } + ' "$CONFIG_FILE" > "$CONFIG_FILE.tmp" && mv "$CONFIG_FILE.tmp" "$CONFIG_FILE" + echo "Teleport labels updated successfully" + else + echo "ssh_service section not found; appending to bottom of $CONFIG_FILE..." + # Ensure file ends with a newline before appending + tail -c1 "$CONFIG_FILE" | read -r _ || echo >> "$CONFIG_FILE" + printf "%s\n" "$NEW_SSH_SECTION" >> "$CONFIG_FILE" + echo "Teleport ssh_service section appended successfully" + fi +} + + +# Optional Teleport setup +if [ -n "$TELEPORT_VERSION" ] && [ -n "$TELEPORT_URL" ] && [ -n "$TELEPORT_TOKEN" ]; then + echo "Teleport configuration detected. Setting up Teleport..." + + # Set default edition if not provided + TELEPORT_EDITION=${TELEPORT_EDITION:-oss} + + # Only install Teleport if it's not already installed + if ! command -v teleport &> /dev/null; then + echo "Installing Teleport version $TELEPORT_VERSION, edition $TELEPORT_EDITION..." + curl https://goteleport.com/static/install.sh | bash -s "${TELEPORT_VERSION}" "${TELEPORT_EDITION}" + fi + + # Create teleport configuration + if [ ! -f /etc/teleport.yaml ]; then + teleport configure --roles=node --token="$TELEPORT_TOKEN" --proxy="$TELEPORT_URL" --no-acme -o file + echo "Created teleport configuration file" + else + echo "Teleport configuration file already exists, skipping configuration creation" + fi + + # Get the hostname of the machine + HOSTNAME=$(hostname) + + add_teleport_labels + # Update nodename in teleport config + sed -i "s/^ nodename:.*/ nodename: $HOSTNAME/" /etc/teleport.yaml + + # Start Teleport in the background + echo "Starting Teleport service..." + cat /etc/teleport.yaml + nohup teleport start & +else + echo "Skipping Teleport setup - credentials not provided" +fi + +# Ensure the SSH key has the correct permissions +chmod 600 /root/.ssh/id_rsa + +# Extract the domain and port from the REPO_URL +DOMAIN=$(extract_domain "$REPO_URL") +PORT=$(extract_port "$REPO_URL") + +# Add the SSH configuration for the domain +{ + echo "Host $DOMAIN" + echo " HostName $DOMAIN" + echo " IdentityFile /root/.ssh/id_rsa" + echo " StrictHostKeyChecking no" + if [ -n "$PORT" ]; then + echo " Port $PORT" + fi +} >> /root/.ssh/config + +echo "Configured SSH for $DOMAIN${PORT:+ on port $PORT}" + +# Clone the repository if it doesn't exist +if [ ! -d "/workspace/.git" ]; then + git clone "$REPO_URL" /workspace +fi + +# Add the public SSH key to authorized_keys +if [ -f /root/.ssh/hostkey.pub ]; then + cat /root/.ssh/hostkey.pub >> /root/.ssh/authorized_keys +fi + +# Change to the repository directory +cd /workspace + +# Install dependencies using the specified package manager +case $PACKAGE_MANAGER in + npm) + npm install + ;; + yarn) + yarn install + ;; + pnpm) + pnpm install + ;; + bun) + bun install + ;; + *) + echo "Error: Unsupported package manager: $PACKAGE_MANAGER" + exit 1 + ;; +esac + +if [ -n "$POST_INSTALL_COMMAND" ]; then + echo "Running POST_INSTALL_COMMAND: $POST_INSTALL_COMMAND" + bash -c "$POST_INSTALL_COMMAND" +fi + +# Copy the environment file to the repository's environments directory +if [ -f /environment/.env ]; then + mkdir -p /workspace/environments + cp /environment/.env /workspace/.env +else + echo "Warning: Environment file not found at /environment/.env" +fi + +# Set the git user and email +git config --global user.name "$GIT_USER" +git config --global user.email "$GIT_EMAIL" + +# Start SSH server +service ssh start + +# Determine the run command +if [ -z "$RUN_COMMAND" ]; then + # If RUN_COMMAND is not set, try to find a suitable command from package.json + if [ -f "package.json" ]; then + if grep -q '"dev"' package.json; then + RUN_COMMAND="dev" + elif grep -q '"start"' package.json; then + RUN_COMMAND="start" + else + echo "Error: Could not determine a suitable run command from package.json" + exit 1 + fi + else + echo "Error: package.json not found and RUN_COMMAND not set" + exit 1 + fi +fi + +# Start the application in a detached screen session so it can be attached interactively +SCREEN_SESSION=${SCREEN_SESSION:-app} + +screen -dmS "$SCREEN_SESSION" bash -c "$PACKAGE_MANAGER run $RUN_COMMAND; echo \"Process exited with code \$?\"; exec bash" + +echo "Application started in screen session '$SCREEN_SESSION'" +echo "Attach with: screen -r $SCREEN_SESSION" +echo "Detach without stopping: Ctrl+A then D" + +exec sleep infinity diff --git a/Dockers/remote-stacky-container/version b/Dockers/remote-stacky-container/version new file mode 100644 index 0000000..d3827e7 --- /dev/null +++ b/Dockers/remote-stacky-container/version @@ -0,0 +1 @@ +1.0