ce7cb702218693d08ea6d83464d2457c9250027c

services/mail-keys/k8s/delivery/toolchain.fsx

@@ -0,0 +1,120 @@
+#load "projects.fsx"
+
+open System
+open System.IO
+open System.Net.Http
+open System.Runtime.InteropServices
+open Contract
+open Projects
+
+let project =
+    Environment.GetEnvironmentVariable "TARGETS"
+    |> decode<Target array>
+    |> selectProject
+
+let architecture, nodeArch, digest =
+    match RuntimeInformation.ProcessArchitecture with
+    | Architecture.X64 -> "x86_64", "x64", "5848553868b402d3fabb5b09270649977780a390f832155721025a08b5104455"
+    | Architecture.Arm64 -> "aarch64", "arm64", "439e9c438acdf6a6ffe47418da709153d66c4bed812e30a473faacb107dd2791"
+    | _ -> fail "unsupported build architecture"
+
+if not (Handoff.primary "/state") then
+    printfn "toolchain=cache"
+else
+    requireSuccess
+        "/sbin/apk"
+        [ "add"
+          "--root"
+          "/toolchain"
+          "--arch"
+          architecture
+          "--initdb"
+          "--no-scripts"
+          "--keys-dir"
+          "/etc/apk/keys"
+          "--repository"
+          "https://packages.wolfi.dev/os"
+          "busybox=1.38.0-r3"
+          "glibc-2.43=2.43-r18"
+          "ld-linux-2.43=2.43-r18"
+          "libgcc=16.2.0-r1"
+          "libstdc++=16.2.0-r1" ]
+        None
+        []
+    |> ignore
+
+    let name = $"node-v26.13.0-linux-{nodeArch}"
+    let archive = "/tmp/node.tar.gz"
+    use client = new HttpClient(Timeout = TimeSpan.FromMinutes 5.0)
+
+    use input =
+        client
+            .GetStreamAsync($"https://nodejs.org/dist/v26.13.0/{name}.tar.gz", cancellationToken)
+            .GetAwaiter()
+            .GetResult()
+
+    do
+        use output = File.Create archive
+        input.CopyTo output
+
+    require (sha256 archive = digest) "Node.js checksum mismatch"
+    extractGzip archive "/toolchain"
+    Directory.Move($"/toolchain/{name}", "/toolchain/node")
+    File.Delete archive
+
+    use npm =
+        client
+            .GetStreamAsync("https://registry.npmjs.org/npm/-/npm-12.2.1.tgz", cancellationToken)
+            .GetAwaiter()
+            .GetResult()
+
+    do
+        use output = File.Create archive
+        npm.CopyTo output
+
+    require
+        (sha256 archive = "228bd64aaef23270dbdbd2cf3d5ef5c467602ef38c4066246cef1984adab9a67")
+        "npm checksum mismatch"
+
+    extractGzip archive (directory "/toolchain/npm")
+    Directory.Delete("/toolchain/node/lib/node_modules/npm", true)
+    Directory.Move("/toolchain/npm/package", "/toolchain/node/lib/node_modules/npm")
+    File.Delete archive
+    directory "/toolchain/frontend" |> ignore
+
+    [ "package.json"; "package-lock.json" ]
+    |> List.iter (fun name -> File.Copy($"/source/repository/services/mail-keys/{name}", $"/toolchain/frontend/{name}"))
+
+    let environment =
+        [ "HOME", "/tmp"
+          "PATH", "/toolchain/node/bin:/usr/bin:/bin"
+          "LD_LIBRARY_PATH", "/toolchain/usr/lib"
+          "npm_config_cache", "/tmp/npm" ]
+
+    requireSuccess
+        "/toolchain/node/bin/node"
+        [ "/toolchain/node/lib/node_modules/npm/bin/npm-cli.js"
+          "ci"
+          "--ignore-scripts"
+          "--no-audit"
+          "--no-fund" ]
+        (Some "/toolchain/frontend")
+        environment
+    |> ignore
+
+    directory "/toolchain/image-base" |> ignore
+
+    requireSuccess
+        "/usr/bin/apko"
+        [ "build"
+          "--arch"
+          "x86_64,arm64"
+          "--sbom=false"
+          "/orchestration/go-oci.apko.yaml"
+          "mail-keys:base"
+          "/toolchain/image-base" ]
+        None
+        environment
+    |> ignore
+
+    printfn "toolchain=primary project=%s" project.Name