Mmuzaf commented on code in PR #2620: URL: https://github.com/apache/cassandra/pull/2620#discussion_r1302014605
########## .build/build-sonar.xml: ########## @@ -0,0 +1,167 @@ +<?xml version="1.0" encoding="UTF-8" standalone="no"?> +<!-- + ~ Licensed to the Apache Software Foundation (ASF) under one + ~ or more contributor license agreements. See the NOTICE file + ~ distributed with this work for additional information + ~ regarding copyright ownership. The ASF licenses this file + ~ to you under the Apache License, Version 2.0 (the + ~ "License"); you may not use this file except in compliance + ~ with the License. You may obtain a copy of the License at + ~ + ~ http://www.apache.org/licenses/LICENSE-2.0 + ~ + ~ Unless required by applicable law or agreed to in writing, software + ~ distributed under the License is distributed on an "AS IS" BASIS, + ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + ~ See the License for the specific language governing permissions and + ~ limitations under the License. + --> +<project basedir="." name="apache-cassandra-sonar-tasks" xmlns:if="ant:if" xmlns:unless="ant:unless"> + <property name="sonar-scanner-cli.version" value="5.0.1.3006-linux"/> + <property name="sonar.workdir" value="${build.dir}/sonar"/> + <property name="sonar.download.dir" value="${user.home}/.cassandra-cache/tools"/> + <property name="sonar-scanner.home" value="${sonar.download.dir}/sonar-scanner-${sonar-scanner-cli.version}"/> + <property name="sonar.projectKey" value="cassandra"/> + <property name="sonar.mainBranch" value="trunk"/> + + <target name="sonar-init"> + <mkdir dir="${sonar.download.dir}"/> + <mkdir dir="${sonar-scanner.home}"/> + <mkdir dir="${sonar.workdir}"/> + <mkdir dir="${sonar.workdir}/scanner"/> + <mkdir dir="${sonar.workdir}/data"/> + <mkdir dir="${sonar.workdir}/logs"/> + <mkdir dir="${sonar.workdir}/extensions"/> + </target> + + <target name="init-sonar-scanner-cli" depends="sonar-init" unless="sonar-scanner.downloaded"> + <local name="sonar-scanner.downloaded"/> + <available file="${sonar-scanner.home}/bin/sonar-scanner" property="sonar-scanner.downloaded"/> + + <sequential unless:set="sonar-scanner.downloaded"> + <echo>Downloading Sonar-Scanner CLI...</echo> + <retry retrycount="3" retrydelay="5000" > + <get src="https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-${sonar-scanner-cli.version}.zip"; + dest="${sonar.download.dir}/sonar-scanner-cli-${sonar-scanner-cli.version}.zip"/> + </retry> + <unzip src="${sonar.download.dir}/sonar-scanner-cli-${sonar-scanner-cli.version}.zip" dest="${sonar.download.dir}" overwrite="true"/> + <setpermissions mode="755"> + <!-- unzip task in Ant does not preserve file permissions, so we need to make those files executable explicitly --> + <file file="${sonar-scanner.home}/bin/sonar-scanner" /> + <file file="${sonar-scanner.home}/jre/bin/java" /> + <file file="${sonar-scanner.home}/jre/lib/jspawnhelper" /> + </setpermissions> + </sequential> + </target> + + <macrodef name="check-server-status"> + <attribute name="url"/> + <sequential> + <exec executable="bash" failifexecutionfails="true" failonerror="true" logerror="false"> + <arg value="-c"/> + <arg value="curl -s "@{url}/api/system/status" | jq -r ".status" | grep UP"/> + </exec> + </sequential> + </macrodef> + + <target name="init-sonar-server" depends="sonar-init,maybe-set-sonar-server-url,maybe-start-sonar-server"> + <check-server-status url="${sonar.host.url}"/> + </target> + + <target name="maybe-set-sonar-server-url" depends="sonar-init" if="env.SONAR_SERVER_URL"> + <property name="sonar.host.url" value="${env.SONAR_SERVER_URL}"/> + <fail unless="env.SONAR_CASSANDRA_TOKEN" message="SONAR_CASSANDRA_TOKEN environment variable must be set when using Sonar server defined in env SONAR_SERVER_URL"/> + <property name="sonar.token" value="${env.SONAR_CASSANDRA_TOKEN}"/> + </target> + + <target name="maybe-start-sonar-server" depends="sonar-init" unless="env.SONAR_SERVER_URL"> + <property name="sonar.host.url" value="http://127.0.0.1:9000"/> + <local name="sonar-server.running"/> + <condition property="sonar-server.running" value="true"> + <socket server="127.0.0.1" port="9000"/> + </condition> + <antcall target="start-sonarqube" unless:set="sonar-server.running" inheritrefs="true"/> + + <exec executable="bash" failifexecutionfails="false" failonerror="true" logerror="false"> + <arg line="-c"/> + <arg value="curl -s -u admin:password -X POST '${sonar.host.url}/api/user_tokens/revoke?name=cassandra'"/> + </exec> + + <exec executable="bash" failifexecutionfails="true" failonerror="true" logerror="false"> + <arg line="-c"/> + <arg value="curl -s -u admin:password -X POST '${sonar.host.url}/api/user_tokens/generate?name=cassandra&type=GLOBAL_ANALYSIS_TOKEN' | jq -r '.token'"/> + <redirector outputproperty="sonar.token"/> + </exec> + </target> + + <target name="start-sonarqube" depends="sonar-init"> + <exec executable="docker" dir="${sonar.workdir}" failifexecutionfails="true" failonerror="true" logerror="true"> + <arg value="run"/> + <arg value="-d"/> + <arg value="--name"/> + <arg value="sonarqube"/> + <arg value="-e"/> + <arg value="SONAR_ES_BOOTSTRAP_CHECKS_DISABLE=true"/> + <arg value="-p"/> + <arg value="9000:9000"/> + <arg value="-v"/> + <arg value="${sonar.workdir}/data:/opt/sonarqube/data"/> + <arg value="-v"/> + <arg value="${sonar.workdir}/logs:/opt/sonarqube/logs"/> + <arg value="-v"/> + <arg value="${sonar.workdir}/extensions:/opt/sonarqube/extensions"/> + <arg value="sonarqube:community"/> + </exec> + + <retry retrycount="60" retrydelay="1000"> + <check-server-status url="${sonar.host.url}"/> + </retry> + + <exec executable="curl" failifexecutionfails="true" failonerror="true" logerror="false"> + <arg line="-u admin:admin"/> + <arg line="-X POST"/> + <arg line="-s"/> + <arg value="${sonar.host.url}/api/users/change_password?login=admin&password=password&previousPassword=admin"/> Review Comment: What is wrong with the `admin:admin`? Why do we need to change it? This is the requirement of the sonar itself, right? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
