- semantic versioning is used
- a branch is created for every major release, e.g.
release-1.x
,release-2.x
, &c. - when ready to make a release;
- update any changelogs and documentation with release information, commit/merge to
main
. ensure CI passes. - if backporting fixes into past releases, follow the backporting procedure from containerd, else merge
main
into the current release branch. e.g.main
->release-2.x
. - checkout current release branch and update files/version with the current point release, e.g. change 'main' to
2.1.18-rc1
.- make a release commit (e.g. with message "RELEASE 2.1.18-rc1").
- update any changelogs and documentation with release information, commit/merge to
- tag the release using
v
as a prefix, e.g.git tag v2.1.18-rc1 && git push --tags
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// the following assumes AWS nitro (e.g. t3.*, m5.*, &c) instances (which use /dev/nvme0n1 as root disk) | |
// "safely" switches from MBR to GPT partitioning in Ubuntu < 21.04 or other AMIS. | |
// Tested using gdisk 1.0.3 from 18.04 / Bionic. | |
// after the change, you can use >2TB root disks. either initially, or by resizing a smaller one -- in nitro and non-nitro types | |
provisioners: [ | |
{ | |
"type": "shell", | |
"inline": [ | |
"echo Converting to GPT - AWS nitro type instance", |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import com.cloudbees.plugins.credentials.*; | |
import com.cloudbees.plugins.credentials.domains.Domain; | |
import org.jenkinsci.plugins.plaincredentials.impl.FileCredentialsImpl; | |
// | |
// modify fileName to match the filename of the secret(s) you want to print. | |
// (ID would probably be more helpful... yay stack overflow copy pasta) | |
// alternatively comment out the filter [line 15] to dump all secret files. | |
// | |
def fileName = "secrets.env" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
set -e | |
if [ -n "$POSTGRES_DATABASES" ]; then | |
echo "POSTGRES_DATABASES provided. Creating multiple databases..." >&2 | |
IFS=', '; for db in $POSTGRES_DATABASES; do | |
echo "Creating '$db'" >&2 | |
psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" <<-ESQL | |
CREATE USER "$db"; | |
CREATE DATABASE "$db"; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
package main | |
import ( | |
"fmt" | |
"log" | |
"strconv" | |
"github.com/miekg/dns" | |
) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env bash | |
main(){ | |
set -eo pipefail | |
# sysctl is a readonly filesystem in containers, so this must be set at run; | |
# [[ "$OSTYPE" =~ darwin|macos* ]] || docker_flags+=("--add-host host.docker.internal:host-gateway") | |
# docker run -it "${docker_flags[@]}" --cap-add=NET_ADMIN --sysctl net.ipv4.conf.all.route_localnet=1 ... | |
sysctl -w net.ipv4.conf.all.route_localnet=1 | |
docker_host_ip=$(getent ahostsv4 host.docker.internal | head -n1 | awk '{print $1}') |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env bash | |
# | |
# usage: JWT_SECRET="silly" mk-jwt-token | |
# @WARN: modify the payload and header to your needs. | |
# | |
main(){ | |
set -eo pipefail | |
[ -n "$JWT_SECRET" ] || die "JWT_SECRET environment variable is not set." |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env bash | |
# | |
# git-scp: sync the working copy with a remote host, respecting the .gitignores | |
# usage: git scp devbox | |
# where 'devbox' refers to a tracked remote. e.g. | |
# git remote add devbox host:~/git/repo-name | |
# | |
# installation: cp git-scp /usr/local/bin/git-scp && chmod +x /usr/local/bin/git-scp | |
# |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
## random LC name is assigned | |
resource "aws_launch_configuration" "main" { | |
image_id = "${var.ami}" | |
instance_type = "${var.instance_type}" |