https://github.com/imjasonh/terraform-provider-melange

https://github.com/imjasonh/terraform-provider-melange

Last synced: 16 days ago
JSON representation

• Host: GitHub
• URL: https://github.com/imjasonh/terraform-provider-melange
• Owner: imjasonh
• License: mpl-2.0
• Created: 2023-09-30T09:54:06.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2024-01-01T07:12:55.000Z (about 1 year ago)
• Last Synced: 2024-10-31T04:50:14.118Z (2 months ago)
• Language: Go
• Size: 257 KB
• Stars: 2
• Watchers: 2
• Forks: 0
• Open Issues: 5
• Metadata Files:
  • Readme: README.md
  • License: LICENSE
  • Code of conduct: .github/CODE_OF_CONDUCT.md
  • Codeowners: .github/CODEOWNERS

Awesome Lists containing this project

README

        
# Terraform Provider for [`melange`](https://github.com/chainguard-dev/melange)

🚨 **This is a work in progress.** 🚨

https://registry.terraform.io/providers/chainguard-dev/melange

### Installing

```hcl

terraform {

  required_providers {

    melange = { source  = "chainguard-dev/melange" }

  }

}

```

Then `terraform init -upgrade`.

(This is not yet published)

### Build a single package

```hcl

provider "melange" {

    archs              = ["x86_64", "aarch64"]

    extra_repositories = ["https://packages.wolfi.dev/os"]

    extra_keyring      = ["https://packages.wolfi.dev/os/wolfi-signing.rsa.pub"]

}

data "melange_config" "config" {

    config_contents = file("package.yaml")

}

resource "melange_build" "package" {

    config          = data.melange_config.config.config

    config_contents = data.melange_config.config.config_contents

}

```

After applying this config, `packages/$ARCH/package-0.0.1-rX.apk` will be built, and `packages/$ARCH/APKINDEX.tar.gz` will be updated.

(This passes locally but currently fails in CI...)

### Build a graph of inter-dependent Melange configs

```hcl

data "melange_graph" "graph" {

    files = fileset(path.module, "*.yaml")

}

resource "melange_build" "packages" {

    for_each = data.melange_graph.graph.configs

    depends_on = data.melange_graph.graph.deps[each.key]

    config          = each.key

    config_contents = data.melange_graph.graph[each.key].config_contents

}

```

This will crawl a collection of Melange config files, construct a graph of the order they should be built to ensure dependencies are met, and build them in that order with Terraform's configured concurrency.

(This is not yet implemented)

### Build a package locally, then build it into an image using `apko_build`

```hcl

data "melange_config" "config" {

    config_contents = file("package.yaml")

}

resource "melange_build" "package" {

    config          = data.melange_config.config.config

    config_contents = data.melange_config.config.config_contents

}

provider "apko" {

    archs              = ["x86_64", "aarch64"]

    extra_repositories = ["https://packages.wolfi.dev/os", "./packages"]

    extra_keyring      = ["https://packages.wolfi.dev/os/wolfi-signing.rsa.pub", "./local-signing.rsa.pub"]

}

data "apko_config" "config" {

    config_contents = file("image.yaml")

    extra_packages  = [data.melange_config.config.config.package.name]

}

resource "apko_build" "image" {

    config = data.apko_config.config.config

}

```

(This is not yet tested)

### Build and upload a package to GCS

```hcl

resource "google_storage_bucket_object" "packages" {

    depends_on = [melange_build.packages]

    for_each = fileset("packages/**/*.apk")

    name   = "os/${each.key}"

    bucket = "blah-blah-example-packages"

}

```

(This is not yet tested)

### TODO

- Use a signing key from GCP Secret Manager or KMS