2026-01-29 02:04:01 +00:00
|
|
|
package devops
|
|
|
|
|
|
|
|
|
|
import (
|
|
|
|
|
"os"
|
|
|
|
|
"path/filepath"
|
|
|
|
|
|
2026-02-05 10:26:44 +00:00
|
|
|
"github.com/host-uk/core/pkg/config"
|
docs(audit): add dependency security audit report (#248)
* feat(devops): migrate filesystem operations to io.Local abstraction
Migrate config.go:
- os.ReadFile → io.Local.Read
Migrate devops.go:
- os.Stat → io.Local.IsFile
Migrate images.go:
- os.MkdirAll → io.Local.EnsureDir
- os.Stat → io.Local.IsFile
- os.ReadFile → io.Local.Read
- os.WriteFile → io.Local.Write
Migrate test.go:
- os.ReadFile → io.Local.Read
- os.Stat → io.Local.IsFile
Migrate claude.go:
- os.Stat → io.Local.IsDir
Updated tests to reflect improved behavior:
- Manifest.Save() now creates parent directories
- hasFile() correctly returns false for directories
Part of #101 (io.Medium migration tracking issue).
Closes #107
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* chore(io): migrate remaining packages to io.Local abstraction
Migrate filesystem operations to use the io.Local abstraction for
improved security, testability, and consistency:
- pkg/cache: Replace os.ReadFile, WriteFile, Remove, RemoveAll with
io.Local equivalents. io.Local.Write creates parent dirs automatically.
- pkg/agentic: Migrate config.go and context.go to use io.Local for
reading config files and gathering file context.
- pkg/repos: Use io.Local.Read, Exists, IsDir, List for registry
operations and git repo detection.
- pkg/release: Use io.Local for config loading, existence checks,
and artifact discovery.
- pkg/devops/sources: Use io.Local.EnsureDir for CDN download.
All paths are converted to absolute using filepath.Abs() before
calling io.Local methods to handle relative paths correctly.
Closes #104, closes #106, closes #108, closes #111
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* chore(io): migrate pkg/cli and pkg/container to io.Local abstraction
Continue io.Medium migration for the remaining packages:
- pkg/cli/daemon.go: PIDFile Acquire/Release now use io.Local.Read,
Delete, and Write for managing daemon PID files.
- pkg/container/state.go: LoadState and SaveState use io.Local for
JSON state persistence. EnsureLogsDir uses io.Local.EnsureDir.
- pkg/container/templates.go: Template loading and directory scanning
now use io.Local.IsFile, IsDir, Read, and List.
- pkg/container/linuxkit.go: Image validation uses io.Local.IsFile,
log file check uses io.Local.IsFile. Streaming log file creation
(os.Create) remains unchanged as io.Local doesn't support streaming.
Closes #105, closes #107
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* docs(audit): add dependency security audit report
Complete security audit of all project dependencies:
- Run govulncheck: No vulnerabilities found
- Run go mod verify: All modules verified
- Document 15 direct dependencies and 161 indirect
- Assess supply chain risks: Low risk overall
- Verify lock files are committed with integrity hashes
- Provide CI integration recommendations
Closes #185
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix(ci): build core CLI from source instead of downloading release
The workflows were trying to download from a non-existent release URL.
Now builds the CLI directly using `go build` with version injection.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* chore: trigger CI with updated workflow
* chore(ci): add workflow_dispatch trigger for manual runs
---------
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 08:04:26 +00:00
|
|
|
"github.com/host-uk/core/pkg/io"
|
2026-01-29 02:04:01 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
|
|
// Config holds global devops configuration from ~/.core/config.yaml.
|
|
|
|
|
type Config struct {
|
2026-02-05 10:26:44 +00:00
|
|
|
Version int `yaml:"version" mapstructure:"version"`
|
|
|
|
|
Images ImagesConfig `yaml:"images" mapstructure:"images"`
|
2026-01-29 02:04:01 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// ImagesConfig holds image source configuration.
|
|
|
|
|
type ImagesConfig struct {
|
2026-02-05 10:26:44 +00:00
|
|
|
Source string `yaml:"source" mapstructure:"source"` // auto, github, registry, cdn
|
|
|
|
|
GitHub GitHubConfig `yaml:"github,omitempty" mapstructure:"github,omitempty"`
|
|
|
|
|
Registry RegistryConfig `yaml:"registry,omitempty" mapstructure:"registry,omitempty"`
|
|
|
|
|
CDN CDNConfig `yaml:"cdn,omitempty" mapstructure:"cdn,omitempty"`
|
2026-01-29 02:04:01 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// GitHubConfig holds GitHub Releases configuration.
|
|
|
|
|
type GitHubConfig struct {
|
2026-02-05 10:26:44 +00:00
|
|
|
Repo string `yaml:"repo" mapstructure:"repo"` // owner/repo format
|
2026-01-29 02:04:01 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// RegistryConfig holds container registry configuration.
|
|
|
|
|
type RegistryConfig struct {
|
2026-02-05 10:26:44 +00:00
|
|
|
Image string `yaml:"image" mapstructure:"image"` // e.g., ghcr.io/host-uk/core-devops
|
2026-01-29 02:04:01 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// CDNConfig holds CDN/S3 configuration.
|
|
|
|
|
type CDNConfig struct {
|
2026-02-05 10:26:44 +00:00
|
|
|
URL string `yaml:"url" mapstructure:"url"` // base URL for downloads
|
2026-01-29 02:04:01 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// DefaultConfig returns sensible defaults.
|
|
|
|
|
func DefaultConfig() *Config {
|
|
|
|
|
return &Config{
|
|
|
|
|
Version: 1,
|
|
|
|
|
Images: ImagesConfig{
|
|
|
|
|
Source: "auto",
|
|
|
|
|
GitHub: GitHubConfig{
|
|
|
|
|
Repo: "host-uk/core-images",
|
|
|
|
|
},
|
|
|
|
|
Registry: RegistryConfig{
|
|
|
|
|
Image: "ghcr.io/host-uk/core-devops",
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// ConfigPath returns the path to the config file.
|
|
|
|
|
func ConfigPath() (string, error) {
|
|
|
|
|
home, err := os.UserHomeDir()
|
|
|
|
|
if err != nil {
|
|
|
|
|
return "", err
|
|
|
|
|
}
|
|
|
|
|
return filepath.Join(home, ".core", "config.yaml"), nil
|
|
|
|
|
}
|
|
|
|
|
|
Migrate pkg/devops to Medium abstraction (#293)
* chore(io): migrate pkg/devops to Medium abstraction
This commit migrates the pkg/devops package to use the io.Medium abstraction instead of direct calls to io.Local or the os package.
Changes:
- Updated DevOps, ImageManager, and Manifest structs to hold an io.Medium.
- Updated New, NewImageManager, and LoadConfig to accept an io.Medium.
- Updated ImageSource interface and its implementations (GitHubSource, CDNSource) to accept io.Medium in Download method.
- Refactored internal helper functions (hasFile, hasPackageScript, etc.) to use io.Medium.
- Updated all unit tests and CLI entry points to pass the appropriate io.Medium.
This migration improves the testability and flexibility of the devops package by allowing for different storage backends.
* chore(io): migrate pkg/devops to Medium abstraction
This commit completes the migration of the pkg/devops package to the io.Medium abstraction.
Changes:
- Refactored DevOps, ImageManager, and Manifest structs to use io.Medium for storage operations.
- Updated New, NewImageManager, and LoadConfig to accept an io.Medium.
- Updated ImageSource interface and its implementations (GitHubSource, CDNSource) to accept io.Medium in Download method.
- Refactored internal helper functions (hasFile, hasPackageScript, etc.) to use io.Medium.
- Updated all unit tests and CLI entry points to pass the appropriate io.Medium.
- Fixed formatting issues in test files.
This migration enables easier testing and supports alternative storage backends.
2026-02-04 14:58:03 +00:00
|
|
|
// LoadConfig loads configuration from ~/.core/config.yaml using the provided medium.
|
2026-01-29 02:04:01 +00:00
|
|
|
// Returns default config if file doesn't exist.
|
Migrate pkg/devops to Medium abstraction (#293)
* chore(io): migrate pkg/devops to Medium abstraction
This commit migrates the pkg/devops package to use the io.Medium abstraction instead of direct calls to io.Local or the os package.
Changes:
- Updated DevOps, ImageManager, and Manifest structs to hold an io.Medium.
- Updated New, NewImageManager, and LoadConfig to accept an io.Medium.
- Updated ImageSource interface and its implementations (GitHubSource, CDNSource) to accept io.Medium in Download method.
- Refactored internal helper functions (hasFile, hasPackageScript, etc.) to use io.Medium.
- Updated all unit tests and CLI entry points to pass the appropriate io.Medium.
This migration improves the testability and flexibility of the devops package by allowing for different storage backends.
* chore(io): migrate pkg/devops to Medium abstraction
This commit completes the migration of the pkg/devops package to the io.Medium abstraction.
Changes:
- Refactored DevOps, ImageManager, and Manifest structs to use io.Medium for storage operations.
- Updated New, NewImageManager, and LoadConfig to accept an io.Medium.
- Updated ImageSource interface and its implementations (GitHubSource, CDNSource) to accept io.Medium in Download method.
- Refactored internal helper functions (hasFile, hasPackageScript, etc.) to use io.Medium.
- Updated all unit tests and CLI entry points to pass the appropriate io.Medium.
- Fixed formatting issues in test files.
This migration enables easier testing and supports alternative storage backends.
2026-02-04 14:58:03 +00:00
|
|
|
func LoadConfig(m io.Medium) (*Config, error) {
|
2026-01-29 02:04:01 +00:00
|
|
|
configPath, err := ConfigPath()
|
|
|
|
|
if err != nil {
|
|
|
|
|
return DefaultConfig(), nil
|
|
|
|
|
}
|
|
|
|
|
|
2026-02-05 10:26:44 +00:00
|
|
|
cfg := DefaultConfig()
|
|
|
|
|
|
|
|
|
|
if !m.IsFile(configPath) {
|
|
|
|
|
return cfg, nil
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Use centralized config service
|
|
|
|
|
c, err := config.New(config.WithMedium(m), config.WithPath(configPath))
|
2026-01-29 02:04:01 +00:00
|
|
|
if err != nil {
|
|
|
|
|
return nil, err
|
|
|
|
|
}
|
|
|
|
|
|
2026-02-05 10:26:44 +00:00
|
|
|
if err := c.Get("", cfg); err != nil {
|
2026-01-29 02:04:01 +00:00
|
|
|
return nil, err
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return cfg, nil
|
|
|
|
|
}
|