-
Notifications
You must be signed in to change notification settings - Fork 8
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
89004ff
commit 98f0187
Showing
8 changed files
with
116 additions
and
104 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,4 @@ | ||
| root = true | ||
|
|
||
| [*.csproj] | ||
| build_check.BCC002.Severity=error |
Binary file added
BIN
+23.2 KB
artifacts/nuget/DotUtils.MsBuild.BinlogRedactor.SensitiveDataDetector.0.0.11.nupkg
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,135 +1,141 @@ | ||
| <Project Sdk="Microsoft.NET.Sdk.Web"> | ||
|
|
||
| <PropertyGroup> | ||
| <TargetFramework>net8.0</TargetFramework> | ||
| <Nullable>enable</Nullable> | ||
| <ImplicitUsings>enable</ImplicitUsings> | ||
| <RootNamespace>sdk_container_demo</RootNamespace> | ||
| <SelfContained>false</SelfContained> | ||
| <RuntimeIdentifiers>linux-x64;linux-arm64</RuntimeIdentifiers> | ||
| <PublishRepositoryUrl>true</PublishRepositoryUrl> | ||
| </PropertyGroup> | ||
|
|
||
| <PropertyGroup Label="Packaging properties"> | ||
| <Description>A project that demonstrates publishing to various container registries using just | ||
| the .NET SDK</Description> | ||
| <Authors>Chet Husk</Authors> | ||
| <PackageProjectUrl>https://github.com/baronfel/sdk-container-demo</PackageProjectUrl> | ||
| <PackageDocumentationUrl>https://github.com/baronfel/sdk-container-demo/blob/main/README.md</PackageDocumentationUrl> | ||
| <PackageLicenseExpression>MIT</PackageLicenseExpression> | ||
| <Title>.NET SDK 8 Container Demo</Title> | ||
| <ContainerImageTags>latest;v1.1</ContainerImageTags> | ||
| </PropertyGroup> | ||
|
|
||
| <!-- Example of how you could push the same image to multiple registries via a single target--> | ||
| <ItemGroup> | ||
| <DestinationRegistry Include="sdk-container-demo.azurecr.io" /> | ||
| <DestinationRegistry Include="ghcr.io" /> | ||
| <SingleRegistryPublish | ||
| Include="$(MSBuildProjectFullPath)" | ||
| AdditionalProperties="ContainerRegistry=%(DestinationRegistry)" /> | ||
| </ItemGroup> | ||
|
|
||
| <Target | ||
| Name="MultiRidBuild"> | ||
| <ItemGroup> | ||
| <_rids Include="$(RuntimeIdentifiers)" /> | ||
| <_InnerBuild Include="$(MSBuildProjectFullPath)" | ||
| AdditionalProperties="RuntimeIdentifier=%(_rids.Identity)" | ||
| PropertiesToUnset="RuntimeIdentifiers" /> | ||
| </ItemGroup> | ||
| <MSBuild | ||
| Projects="@(_InnerBuild)" | ||
| Targets="Build" | ||
| BuildInParallel="true" /> | ||
| </Target> | ||
|
|
||
| <Target | ||
| Name="MultiPush" | ||
| DependsOnTargets="Publish"> | ||
| <MSBuild | ||
| Projects="@(SingleRegistryPublish)" | ||
| Targets="PublishContainer" | ||
| BuildInParallel="true" /> | ||
| </Target> | ||
|
|
||
| <!-- crazy example of the things the SDK should be able to do for us eventually --> | ||
| <Target Name="MultiArchPublish"> | ||
| <ItemGroup> | ||
| <!-- first, define the container tags you want to create. these will be the roots of the arch-specific manifests - what users will mostly be using. --> | ||
| <_TagsToPublish Include="$(ContainerImageTags)" /> | ||
|
|
||
| <!-- next, define the architectures you want to publish for. we could have just used RuntimeIdentifiers from above, but I wanted to use golang-style tag parts, | ||
| <PropertyGroup> | ||
| <TargetFramework>net8.0</TargetFramework> | ||
| <Nullable>enable</Nullable> | ||
| <ImplicitUsings>enable</ImplicitUsings> | ||
| <RootNamespace>sdk_container_demo</RootNamespace> | ||
| <SelfContained>false</SelfContained> | ||
| <RuntimeIdentifiers>linux-x64;linux-arm64</RuntimeIdentifiers> | ||
| <PublishRepositoryUrl>true</PublishRepositoryUrl> | ||
| </PropertyGroup> | ||
|
|
||
| <PropertyGroup Label="Packaging properties"> | ||
| <Description> | ||
| A project that demonstrates publishing to various container registries using just | ||
| the .NET SDK | ||
| </Description> | ||
| <Authors>Chet Husk</Authors> | ||
| <PackageProjectUrl>https://github.com/baronfel/sdk-container-demo</PackageProjectUrl> | ||
| <PackageDocumentationUrl>https://github.com/baronfel/sdk-container-demo/blob/main/README.md</PackageDocumentationUrl> | ||
| <PackageLicenseExpression>MIT</PackageLicenseExpression> | ||
| <Title>.NET SDK 8 Container Demo</Title> | ||
| <ContainerImageTags>latest;v1.1</ContainerImageTags> | ||
| </PropertyGroup> | ||
|
|
||
| <ItemGroup> | ||
| <PackageReference Include="SecretsDetectionCheck" Version="4.0.0"/> | ||
| </ItemGroup> | ||
|
|
||
| <!-- Example of how you could push the same image to multiple registries via a single target--> | ||
| <ItemGroup> | ||
| <DestinationRegistry Include="sdk-container-demo.azurecr.io" /> | ||
| <DestinationRegistry Include="ghcr.io" /> | ||
| <SingleRegistryPublish | ||
| Include="$(MSBuildProjectFullPath)" | ||
| AdditionalProperties="ContainerRegistry=%(DestinationRegistry)" /> | ||
| </ItemGroup> | ||
|
|
||
| <Target | ||
| Name="MultiRidBuild"> | ||
| <ItemGroup> | ||
| <_rids Include="$(RuntimeIdentifiers)" /> | ||
| <_InnerBuild Include="$(MSBuildProjectFullPath)" | ||
| AdditionalProperties="RuntimeIdentifier=%(_rids.Identity)" | ||
| PropertiesToUnset="RuntimeIdentifiers" /> | ||
| </ItemGroup> | ||
| <MSBuild | ||
| Projects="@(_InnerBuild)" | ||
| Targets="Build" | ||
| BuildInParallel="true" /> | ||
| </Target> | ||
|
|
||
| <Target | ||
| Name="MultiPush" | ||
| DependsOnTargets="Publish"> | ||
| <MSBuild | ||
| Projects="@(SingleRegistryPublish)" | ||
| Targets="PublishContainer" | ||
| BuildInParallel="true" /> | ||
| </Target> | ||
|
|
||
| <!-- crazy example of the things the SDK should be able to do for us eventually --> | ||
| <Target Name="MultiArchPublish"> | ||
| <ItemGroup> | ||
| <!-- first, define the container tags you want to create. these will be the roots of the arch-specific manifests - what users will mostly be using. --> | ||
| <_TagsToPublish Include="$(ContainerImageTags)" /> | ||
|
|
||
| <!-- next, define the architectures you want to publish for. we could have just used RuntimeIdentifiers from above, but I wanted to use golang-style tag parts, | ||
| so that these images would look and feel like other container images. --> | ||
| <_RIDItems Include="linux-x64" GolangArch="amd64"/> | ||
| <_RIDItems Include="linux-arm64" GolangArch="arm64"/> | ||
| </ItemGroup> | ||
| <_RIDItems Include="linux-x64" GolangArch="amd64"/> | ||
| <_RIDItems Include="linux-arm64" GolangArch="arm64"/> | ||
| </ItemGroup> | ||
|
|
||
| <!-- Ideally at this point we'd call some target that would map .NET RIDs to Golang architecture items, but this doesn't currently exist --> | ||
| <!-- <MapRidsToGolangArch RIDs="@(_RIDItems)"> | ||
| <!-- Ideally at this point we'd call some target that would map .NET RIDs to Golang architecture items, but this doesn't currently exist --> | ||
| <!-- <MapRidsToGolangArch RIDs="@(_RIDItems)"> | ||
| <Output TaskParameter="RidsWithArch" ItemName="_RIDItems" /> | ||
| </MapRidsToGolangArch> --> | ||
|
|
||
| <ItemGroup> | ||
| <!-- this next part is kind of gross - we're trying to construct an MSBuild property value like 'ContainerImageTags=<tagbase>-<arch>;<tagbase>-<arch>' | ||
| <ItemGroup> | ||
| <!-- this next part is kind of gross - we're trying to construct an MSBuild property value like 'ContainerImageTags=<tagbase>-<arch>;<tagbase>-<arch>' | ||
| this means we need a map of each specific arch to the list of tags we'd like to push for that arch. the easiest way I found to do that is | ||
| * create unique items that 'splat' the RIDs across each of the tags | ||
| * batch by the RIDs - thus capturing all of the tags in the ItemGroup for that batch. we can now transform that ItemGroup to make our final property string --> | ||
|
|
||
| <_RIDSForTag Include="@(_TagsToPublish)" RID="%(_RIDItems.Identity)" GolangArch="%(_RIDItems.GolangArch)" /> | ||
| <_TagsForRID Include="%(_RIDSForTag.RID)" ContainerTags="@(_RIDSForTag->'%(Identity)-%(GolangArch)', ';')" /> | ||
| <_RIDSForTag Include="@(_TagsToPublish)" RID="%(_RIDItems.Identity)" GolangArch="%(_RIDItems.GolangArch)" /> | ||
| <_TagsForRID Include="%(_RIDSForTag.RID)" ContainerTags="@(_RIDSForTag->'%(Identity)-%(GolangArch)', ';')" /> | ||
|
|
||
| <!-- now that we have our mappings, we can build this project for each RID, passing the full set of tags to create --> | ||
| <_ContainerPublish | ||
| Include="$(MSBuildProjectFullPath)" | ||
| AdditionalProperties="RuntimeIdentifier=%(_TagsForRID.Identity);ContainerImageTags=%(_TagsForRID.ContainerTags)" /> | ||
| </ItemGroup> | ||
| <!-- now that we have our mappings, we can build this project for each RID, passing the full set of tags to create --> | ||
| <_ContainerPublish | ||
| Include="$(MSBuildProjectFullPath)" | ||
| AdditionalProperties="RuntimeIdentifier=%(_TagsForRID.Identity);ContainerImageTags=%(_TagsForRID.ContainerTags)" /> | ||
| </ItemGroup> | ||
|
|
||
| <MSBuild | ||
| Projects="@(_ContainerPublish)" | ||
| Targets="Publish;PublishContainer" | ||
| BuildInParallel="true" /> | ||
| <MSBuild | ||
| Projects="@(_ContainerPublish)" | ||
| Targets="Publish;PublishContainer" | ||
| BuildInParallel="true" /> | ||
|
|
||
| <Message Text="Created architecture-specific images, now creating manifest list" Importance="High" /> | ||
| <Message Text="Created architecture-specific images, now creating manifest list" Importance="High" /> | ||
|
|
||
| <!-- | ||
| <!-- | ||
| If we pushed to an actual registry we can make a multi-arch image here. We need the image name and the tags to do so. | ||
| However, the PublishContainer targt doesn't actually emit the name or tags so we have to reconstruct it. | ||
| This is a gap, we should fill it in the SDK. | ||
| NOTE: We can only create the multi-arch manifest if we pushed to a registry. This is a fundamental constraint, so that condition has been applied to all of this code | ||
| --> | ||
| <!-- Call ComputeContainerConfig on this project so that the properties it sets are visible --> | ||
| <MSBuild Projects="$(MSBuildThisFile)" Targets="ComputeContainerConfig" /> | ||
| <!-- Call ComputeContainerConfig on this project so that the properties it sets are visible --> | ||
| <MSBuild Projects="$(MSBuildThisFile)" Targets="ComputeContainerConfig" /> | ||
|
|
||
| <!-- To make a manifest we need to know the name of the manifest (e.g. mcr.microsoft.com/dotnet/sdk:8.0) and the names of all of the | ||
| <!-- To make a manifest we need to know the name of the manifest (e.g. mcr.microsoft.com/dotnet/sdk:8.0) and the names of all of the | ||
| architecture-specific images that go into that manifest (e.g. mcr.microsoft.com/dotnet/sdk:8.0-arm64, mcr.microsoft.com/dotnet/sdk:8.0-amd64, etc). | ||
| Again, the easiest way to do that is to make add the 'parent' information to some other pience of data that already contains the tag/arch data. | ||
| --> | ||
|
|
||
| <ItemGroup Condition="'$(ContainerRegistry)' != ''"> | ||
| <!-- We'll need to group by 'tag' here to get the manifest names (the nice tags). To make that easier, let's add the parent manifest name and the | ||
| <ItemGroup Condition="'$(ContainerRegistry)' != ''"> | ||
| <!-- We'll need to group by 'tag' here to get the manifest names (the nice tags). To make that easier, let's add the parent manifest name and the | ||
| 'final' container name onto each of our already-RID-aware Tag items. --> | ||
| <_RIDSForTag> | ||
| <FullImageName>$(ContainerRegistry)/$(ContainerRepository):%(Identity)-%(GolangArch)</FullImageName> | ||
| <ParentManifestName>$(ContainerRegistry)/$(ContainerRepository):%(Identity)</ParentManifestName> | ||
| </_RIDSForTag> | ||
| </ItemGroup> | ||
|
|
||
| <ItemGroup Condition="'$(ContainerRegistry)' == ''"> | ||
| <!-- We'll need to group by 'tag' here to get the manifest names (the nice tags). To make that easier, let's add the parent manifest name and the | ||
| <_RIDSForTag> | ||
| <FullImageName>$(ContainerRegistry)/$(ContainerRepository):%(Identity)-%(GolangArch)</FullImageName> | ||
| <ParentManifestName>$(ContainerRegistry)/$(ContainerRepository):%(Identity)</ParentManifestName> | ||
| </_RIDSForTag> | ||
| </ItemGroup> | ||
|
|
||
| <ItemGroup Condition="'$(ContainerRegistry)' == ''"> | ||
| <!-- We'll need to group by 'tag' here to get the manifest names (the nice tags). To make that easier, let's add the parent manifest name and the | ||
| 'final' container name onto each of our already-RID-aware Tag items. --> | ||
| <_RIDSForTag> | ||
| <FullImageName>$(ContainerRepository):%(Identity)-%(GolangArch)</FullImageName> | ||
| <ParentManifestName>$(ContainerRepository):%(Identity)</ParentManifestName> | ||
| </_RIDSForTag> | ||
| </ItemGroup> | ||
| <_RIDSForTag> | ||
| <FullImageName>$(ContainerRepository):%(Identity)-%(GolangArch)</FullImageName> | ||
| <ParentManifestName>$(ContainerRepository):%(Identity)</ParentManifestName> | ||
| </_RIDSForTag> | ||
| </ItemGroup> | ||
|
|
||
| <!-- armed with that data, we can easily batch these Task calls. '%(_RIDSForTag.ParentManifestName)' filters _RIDSForTag down to all items that have the same ParentManifestName. | ||
| <!-- armed with that data, we can easily batch these Task calls. '%(_RIDSForTag.ParentManifestName)' filters _RIDSForTag down to all items that have the same ParentManifestName. | ||
| this means that we can refer to @(_RIDSForTag) here as only the Items for the images for this manifest! From there it's easy to splat the FullImageName onto the CLI calls. --> | ||
| <Exec Command="podman manifest create %(_RIDSForTag.ParentManifestName) @(_RIDSForTag->'%(FullImageName)', ' ')" /> | ||
| <Message Text="Created manifest list %(_RIDSForTag.ParentManifestName)" Importance="High" /> | ||
| <Exec Command="podman manifest push %(_RIDSForTag.ParentManifestName)" Condition="'$(ContainerRegistry)' != ''" /> | ||
| <Message Text="Pushed manifest list %(_RIDSForTag.ParentManifestName) to $(ContainerRegistry)" Condition="'$(ContainerRegistry)' != ''" Importance="High" /> | ||
| </Target> | ||
| <Exec Command="podman manifest create %(_RIDSForTag.ParentManifestName) @(_RIDSForTag->'%(FullImageName)', ' ')" /> | ||
| <Message Text="Created manifest list %(_RIDSForTag.ParentManifestName)" Importance="High" /> | ||
| <Exec Command="podman manifest push %(_RIDSForTag.ParentManifestName)" Condition="'$(ContainerRegistry)' != ''" /> | ||
| <Message Text="Pushed manifest list %(_RIDSForTag.ParentManifestName) to $(ContainerRegistry)" Condition="'$(ContainerRegistry)' != ''" Importance="High" /> | ||
| </Target> | ||
| </Project> |