* feat(devops): migrate filesystem operations to io.Local abstraction Migrate config.go: - os.ReadFile → io.Local.Read Migrate devops.go: - os.Stat → io.Local.IsFile Migrate images.go: - os.MkdirAll → io.Local.EnsureDir - os.Stat → io.Local.IsFile - os.ReadFile → io.Local.Read - os.WriteFile → io.Local.Write Migrate test.go: - os.ReadFile → io.Local.Read - os.Stat → io.Local.IsFile Migrate claude.go: - os.Stat → io.Local.IsDir Updated tests to reflect improved behavior: - Manifest.Save() now creates parent directories - hasFile() correctly returns false for directories Part of #101 (io.Medium migration tracking issue). Closes #107 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * chore(io): migrate remaining packages to io.Local abstraction Migrate filesystem operations to use the io.Local abstraction for improved security, testability, and consistency: - pkg/cache: Replace os.ReadFile, WriteFile, Remove, RemoveAll with io.Local equivalents. io.Local.Write creates parent dirs automatically. - pkg/agentic: Migrate config.go and context.go to use io.Local for reading config files and gathering file context. - pkg/repos: Use io.Local.Read, Exists, IsDir, List for registry operations and git repo detection. - pkg/release: Use io.Local for config loading, existence checks, and artifact discovery. - pkg/devops/sources: Use io.Local.EnsureDir for CDN download. All paths are converted to absolute using filepath.Abs() before calling io.Local methods to handle relative paths correctly. Closes #104, closes #106, closes #108, closes #111 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * chore(io): migrate pkg/cli and pkg/container to io.Local abstraction Continue io.Medium migration for the remaining packages: - pkg/cli/daemon.go: PIDFile Acquire/Release now use io.Local.Read, Delete, and Write for managing daemon PID files. - pkg/container/state.go: LoadState and SaveState use io.Local for JSON state persistence. EnsureLogsDir uses io.Local.EnsureDir. - pkg/container/templates.go: Template loading and directory scanning now use io.Local.IsFile, IsDir, Read, and List. - pkg/container/linuxkit.go: Image validation uses io.Local.IsFile, log file check uses io.Local.IsFile. Streaming log file creation (os.Create) remains unchanged as io.Local doesn't support streaming. Closes #105, closes #107 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * docs(audit): add dependency security audit report Complete security audit of all project dependencies: - Run govulncheck: No vulnerabilities found - Run go mod verify: All modules verified - Document 15 direct dependencies and 161 indirect - Assess supply chain risks: Low risk overall - Verify lock files are committed with integrity hashes - Provide CI integration recommendations Closes #185 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * fix(ci): build core CLI from source instead of downloading release The workflows were trying to download from a non-existent release URL. Now builds the CLI directly using `go build` with version injection. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * chore: trigger CI with updated workflow * chore(ci): add workflow_dispatch trigger for manual runs --------- Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
87 lines
2 KiB
Go
87 lines
2 KiB
Go
package devops
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
|
|
"github.com/host-uk/core/pkg/io"
|
|
"gopkg.in/yaml.v3"
|
|
)
|
|
|
|
// Config holds global devops configuration from ~/.core/config.yaml.
|
|
type Config struct {
|
|
Version int `yaml:"version"`
|
|
Images ImagesConfig `yaml:"images"`
|
|
}
|
|
|
|
// ImagesConfig holds image source configuration.
|
|
type ImagesConfig struct {
|
|
Source string `yaml:"source"` // auto, github, registry, cdn
|
|
GitHub GitHubConfig `yaml:"github,omitempty"`
|
|
Registry RegistryConfig `yaml:"registry,omitempty"`
|
|
CDN CDNConfig `yaml:"cdn,omitempty"`
|
|
}
|
|
|
|
// GitHubConfig holds GitHub Releases configuration.
|
|
type GitHubConfig struct {
|
|
Repo string `yaml:"repo"` // owner/repo format
|
|
}
|
|
|
|
// RegistryConfig holds container registry configuration.
|
|
type RegistryConfig struct {
|
|
Image string `yaml:"image"` // e.g., ghcr.io/host-uk/core-devops
|
|
}
|
|
|
|
// CDNConfig holds CDN/S3 configuration.
|
|
type CDNConfig struct {
|
|
URL string `yaml:"url"` // base URL for downloads
|
|
}
|
|
|
|
// DefaultConfig returns sensible defaults.
|
|
func DefaultConfig() *Config {
|
|
return &Config{
|
|
Version: 1,
|
|
Images: ImagesConfig{
|
|
Source: "auto",
|
|
GitHub: GitHubConfig{
|
|
Repo: "host-uk/core-images",
|
|
},
|
|
Registry: RegistryConfig{
|
|
Image: "ghcr.io/host-uk/core-devops",
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
// ConfigPath returns the path to the config file.
|
|
func ConfigPath() (string, error) {
|
|
home, err := os.UserHomeDir()
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
return filepath.Join(home, ".core", "config.yaml"), nil
|
|
}
|
|
|
|
// LoadConfig loads configuration from ~/.core/config.yaml.
|
|
// Returns default config if file doesn't exist.
|
|
func LoadConfig() (*Config, error) {
|
|
configPath, err := ConfigPath()
|
|
if err != nil {
|
|
return DefaultConfig(), nil
|
|
}
|
|
|
|
content, err := io.Local.Read(configPath)
|
|
if err != nil {
|
|
if os.IsNotExist(err) {
|
|
return DefaultConfig(), nil
|
|
}
|
|
return nil, err
|
|
}
|
|
|
|
cfg := DefaultConfig()
|
|
if err := yaml.Unmarshal([]byte(content), cfg); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return cfg, nil
|
|
}
|