feat(agent): package stable Go runtime for OpenWrt

2026-07-21 00:20:48 +03:00
parent e6236f505c
commit 01e0350cde
18 changed files with 461 additions and 38 deletions
--- a/deploy/luci-builder/Dockerfile
+++ b/deploy/luci-builder/Dockerfile
@@ -0,0 +1,151 @@
+# syntax=docker/dockerfile:1
+
+FROM golang:1.26.5-bookworm AS go-agent
+
+ARG RMM_GOARCH=mipsle
+ARG RMM_GOARM=7
+ARG RMM_GOMIPS=softfloat
+ARG RMM_GOAMD64=v1
+
+WORKDIR /src
+
+COPY go.mod go.sum ./
+COPY agent/go agent/go
+
+RUN export CGO_ENABLED=0 GOOS=linux GOARCH="${RMM_GOARCH}" \
+    && case "${RMM_GOARCH}" in \
+        arm) export GOARM="${RMM_GOARM}" ;; \
+        mips|mipsle) export GOMIPS="${RMM_GOMIPS}" ;; \
+        amd64) export GOAMD64="${RMM_GOAMD64}" ;; \
+       esac \
+    && mkdir /out \
+    && go build -trimpath -ldflags="-s -w" \
+        -o /out/rmm-agent ./agent/go/cmd/rmm-agent
+
+FROM debian:bookworm-slim AS builder
+
+ARG OPENWRT_SDK_URL="https://downloads.openwrt.org/releases/25.12.4/targets/ramips/mt7621/openwrt-sdk-25.12.4-ramips-mt7621_gcc-14.3.0_musl.Linux-x86_64.tar.zst"
+ARG OPENWRT_SDK_SHA256="03f4766fcfbae86a814cbbf194226fa7e9ec66be2d4273bc1a0927a72a43a333"
+
+RUN apt-get update \
+    && DEBIAN_FRONTEND=noninteractive apt-get install --yes --no-install-recommends \
+        build-essential \
+        ca-certificates \
+        curl \
+        file \
+        gawk \
+        gettext \
+        git \
+        libncurses-dev \
+        libssl-dev \
+        perl \
+        python3 \
+        python3-setuptools \
+        rsync \
+        unzip \
+        zstd \
+    && rm -rf /var/lib/apt/lists/* \
+    && useradd --create-home --uid 1000 builder
+
+USER builder
+WORKDIR /home/builder
+
+RUN curl --fail --location --show-error --silent \
+        --output openwrt-sdk.tar.zst "${OPENWRT_SDK_URL}" \
+    && echo "${OPENWRT_SDK_SHA256}  openwrt-sdk.tar.zst" | sha256sum --check --strict \
+    && mkdir sdk \
+    && tar --zstd --extract --file openwrt-sdk.tar.zst --strip-components=1 --directory sdk \
+    && rm openwrt-sdk.tar.zst
+
+USER root
+
+RUN apt-get update \
+    && DEBIAN_FRONTEND=noninteractive apt-get install --yes --no-install-recommends wget \
+    && rm -rf /var/lib/apt/lists/*
+
+USER builder
+WORKDIR /home/builder/sdk
+
+RUN ./scripts/feeds update -a \
+    && for package_name in \
+        ca-bundle \
+        ip-tiny \
+        iwinfo \
+        luci-base \
+        mbedtls \
+        openssh-client \
+        openssh-keygen \
+        ubus \
+        uclient-fetch; \
+       do \
+        ./scripts/feeds install "${package_name}"; \
+       done
+
+COPY --chown=builder:builder agent/package/rmm-agent package/rmm-agent
+COPY --chown=builder:builder agent/package/rmm-agent-go-production package/rmm-agent-go-production
+COPY --from=go-agent --chown=builder:builder /out/rmm-agent package/rmm-agent-go-production/files/usr/bin/rmm-agent
+
+RUN printf '%s\n' \
+        '# CONFIG_ALL is not set' \
+        '# CONFIG_ALL_KMODS is not set' \
+        '# CONFIG_ALL_NONSHARED is not set' \
+        'CONFIG_PACKAGE_libmbedtls=y' \
+        'CONFIG_PACKAGE_libustream-mbedtls=y' \
+        'CONFIG_PACKAGE_rmm-agent=m' \
+        'CONFIG_PACKAGE_rmm-agent-go-production=m' \
+        > .config \
+    && make defconfig \
+    && awk ' \
+        /^CONFIG_PACKAGE_[^=]+=[ym]$/ { \
+            split($0, parts, "="); \
+            print "# " parts[1] " is not set"; \
+            next; \
+        } \
+        { print; } \
+       ' .config > .config.packages-pruned \
+    && mv .config.packages-pruned .config \
+    && printf '%s\n' \
+        'CONFIG_PACKAGE_libmbedtls=y' \
+        'CONFIG_PACKAGE_libustream-mbedtls=y' \
+        'CONFIG_PACKAGE_rmm-agent=m' \
+        'CONFIG_PACKAGE_rmm-agent-go-production=m' \
+        >> .config \
+    && make defconfig
+
+RUN grep -E '^CONFIG_PACKAGE_(libmbedtls|libustream-mbedtls)=' .config \
+    && make -j"$(nproc)" package/feeds/base/mbedtls/compile \
+    && make -j"$(nproc)" package/feeds/base/ustream-ssl/compile
+
+RUN make -j"$(nproc)" \
+        package/rmm-agent/compile \
+        package/rmm-agent-go-production/compile
+
+COPY --chown=builder:builder agent/package/luci-app-rmm-agent package/luci-app-rmm-agent
+
+RUN rm -rf tmp/info \
+    && rm -f \
+        tmp/.config-package.in \
+        tmp/.packagedeps \
+        tmp/.packageinfo
+
+RUN printf '%s\n' 'CONFIG_PACKAGE_luci-app-rmm-agent=m' >> .config \
+    && make defconfig
+
+RUN make -j1 package/luci-app-rmm-agent/compile V=s
+
+RUN mkdir -p /home/builder/artifacts \
+    && find bin -type f \
+        \( -name 'luci-app-rmm-agent*.apk' \
+           -o -name 'luci-app-rmm-agent*.ipk' \
+           -o -name 'rmm-agent*.apk' \
+           -o -name 'rmm-agent*.ipk' \) \
+        -exec cp '{}' /home/builder/artifacts/ \; \
+    && test -n "$(find /home/builder/artifacts -maxdepth 1 -type f \( -name '*.apk' -o -name '*.ipk' \) -print -quit)" \
+    && cd /home/builder/artifacts \
+    && find . -maxdepth 1 -type f \( -name '*.apk' -o -name '*.ipk' \) -print \
+        | LC_ALL=C sort \
+        | xargs sha256sum > SHA256SUMS
+
+FROM scratch AS artifacts
+
+COPY --from=builder /home/builder/artifacts/ /