package compiler import ( "fmt" "path" "strings" "github.com/rs/zerolog/log" backend "github.com/woodpecker-ci/woodpecker/pipeline/backend/types" "github.com/woodpecker-ci/woodpecker/pipeline/frontend/yaml" ) func (c *Compiler) createProcess(name string, container *yaml.Container, section string) *backend.Step { var ( detached bool workingdir string workspace = fmt.Sprintf("%s_default:%s", c.prefix, c.base) privileged = container.Privileged entrypoint = container.Entrypoint command = container.Command image = expandImage(container.Image) networkMode = container.NetworkMode ipcMode = container.IpcMode // network = container.Network ) networks := []backend.Conn{ { Name: fmt.Sprintf("%s_default", c.prefix), Aliases: []string{container.Name}, }, } for _, network := range c.networks { networks = append(networks, backend.Conn{ Name: network, }) } var volumes []string if !c.local { volumes = append(volumes, workspace) } volumes = append(volumes, c.volumes...) for _, volume := range container.Volumes.Volumes { volumes = append(volumes, volume.String()) } // append default environment variables environment := map[string]string{} for k, v := range container.Environment { environment[k] = v } for k, v := range c.env { switch v { case "", "0", "false": continue default: environment[k] = v } } environment["CI_WORKSPACE"] = path.Join(c.base, c.path) if section == "services" || container.Detached { detached = true } if !detached || len(container.Commands) != 0 { workingdir = path.Join(c.base, c.path) } if !detached { if err := paramsToEnv(container.Settings, environment, c.secrets); err != nil { log.Error().Err(err).Msg("paramsToEnv") } } if len(container.Commands) != 0 { if c.metadata.Sys.Arch == "windows/amd64" { entrypoint = []string{"powershell", "-noprofile", "-noninteractive", "-command"} command = []string{"[System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($Env:CI_SCRIPT)) | iex"} environment["CI_SCRIPT"] = generateScriptWindows(container.Commands) environment["HOME"] = "c:\\root" environment["SHELL"] = "powershell.exe" } else { entrypoint = []string{"/bin/sh", "-c"} command = []string{"echo $CI_SCRIPT | base64 -d | /bin/sh -e"} environment["CI_SCRIPT"] = generateScriptPosix(container.Commands) environment["HOME"] = "/root" environment["SHELL"] = "/bin/sh" } } if matchImage(container.Image, c.escalated...) { privileged = true entrypoint = []string{} command = []string{} } authConfig := backend.Auth{ Username: container.AuthConfig.Username, Password: container.AuthConfig.Password, Email: container.AuthConfig.Email, } for _, registry := range c.registries { if matchHostname(image, registry.Hostname) { authConfig.Username = registry.Username authConfig.Password = registry.Password authConfig.Email = registry.Email break } } for _, requested := range container.Secrets.Secrets { secret, ok := c.secrets[strings.ToLower(requested.Source)] if ok && (len(secret.Match) == 0 || matchImage(image, secret.Match...)) { environment[strings.ToUpper(requested.Target)] = secret.Value } } memSwapLimit := int64(container.MemSwapLimit) if c.reslimit.MemSwapLimit != 0 { memSwapLimit = c.reslimit.MemSwapLimit } memLimit := int64(container.MemLimit) if c.reslimit.MemLimit != 0 { memLimit = c.reslimit.MemLimit } shmSize := int64(container.ShmSize) if c.reslimit.ShmSize != 0 { shmSize = c.reslimit.ShmSize } cpuQuota := int64(container.CPUQuota) if c.reslimit.CPUQuota != 0 { cpuQuota = c.reslimit.CPUQuota } cpuShares := int64(container.CPUShares) if c.reslimit.CPUShares != 0 { cpuShares = c.reslimit.CPUShares } cpuSet := container.CPUSet if c.reslimit.CPUSet != "" { cpuSet = c.reslimit.CPUSet } return &backend.Step{ Name: name, Alias: container.Name, Image: image, Pull: container.Pull, Detached: detached, Privileged: privileged, WorkingDir: workingdir, Environment: environment, Labels: container.Labels, Entrypoint: entrypoint, Command: command, ExtraHosts: container.ExtraHosts, Volumes: volumes, Tmpfs: container.Tmpfs, Devices: container.Devices, Networks: networks, DNS: container.DNS, DNSSearch: container.DNSSearch, MemSwapLimit: memSwapLimit, MemLimit: memLimit, ShmSize: shmSize, Sysctls: container.Sysctls, CPUQuota: cpuQuota, CPUShares: cpuShares, CPUSet: cpuSet, AuthConfig: authConfig, OnSuccess: container.Constraints.Status.Match("success"), OnFailure: (len(container.Constraints.Status.Include)+ len(container.Constraints.Status.Exclude) != 0) && container.Constraints.Status.Match("failure"), NetworkMode: networkMode, IpcMode: ipcMode, } }