ocm-container.sh

#!/bin/bash

usage() {
  cat <<EOF
  usage: $0 [ OPTIONS ] [ Initial Cluster Name ]
  Options
  -h  --help          Show this message and exit
  -o  --launch-opts   Sets extra non-default container launch options
  -t  --tag           Sets the image tag to use
  -x  --debug         Set bash debug flag

  Initial Cluster Name can be either the cluster name, cluster id, or external cluster ID.
EOF
}

ARGS=()
BUILD_TAG="latest"

while [ "$1" != "" ]; do
  case $1 in
    -h | --help )           usage
                            exit 1
                            ;;
    -o | --launch-opts )    shift
                            OCM_CONTAINER_LAUNCH_OPTS=$1
                            ;;
    -t | --tag )            shift
                            BUILD_TAG="$1"
                            ;;
    -x | --debug )          set -x
                            ;;
    -* ) echo "Unexpected parameter $1"
         usage
         exit 1
         ;;

    * ) 
      ARGS+=($1)
      ;;
  esac
  shift
done

if [ ${#ARGS[@]} -gt 1 ]
then
  echo "Expected at most one argument.  Got ${#ARGS[@]}"
  usage
  exit 1
fi

### Load config
CONFIG_DIR=${HOME}/.config/ocm-container
export OCM_CONTAINER_CONFIGFILE="$CONFIG_DIR/env.source"

if [ ! -f ${OCM_CONTAINER_CONFIGFILE} ]; then
    echo "Cannot find config file at $OCM_CONTAINER_CONFIGFILE";
    echo "Run the init.sh file to create one."
    echo "exiting"
    exit 1;
fi

source ${OCM_CONTAINER_CONFIGFILE}

### SSH Agent Mounting
operating_system=`uname`

SSH_AGENT_MOUNT="-v ${SSH_AUTH_SOCK}:/tmp/ssh.sock:ro"

if [[ "$operating_system" == "Darwin" ]]
then
  SSH_AGENT_MOUNT="--mount type=bind,src=/run/host-services/ssh-auth.sock,target=/tmp/ssh.sock,readonly"
fi

### Kerberos Ticket Mounting
OCM_CONTAINER_KRB5CC_FILE=${KRB5CCNAME:-/tmp/krb5cc_$UID}
if [ -f $OCM_CONTAINER_KRB5CC_FILE ]
then
  KRB5CCFILEMOUNT="-v ${OCM_CONTAINER_KRB5CC_FILE}:/tmp/krb5cc:ro"
fi

### Kerberos User Override
if [ -z $OCM_CONTAINER_KERBEROS_USER ]
then
  OCM_CONTAINER_KERBEROS_USER=$(whoami)
fi
USER=$OCM_CONTAINER_KERBEROS_USER

### Automatic Login Detection
if [ -n "$ARGS" ]
then
  INITIAL_CLUSTER_LOGIN="-e INITIAL_CLUSTER_LOGIN=$ARGS"
fi

### start container
${CONTAINER_SUBSYS} run -it --rm --privileged \
-e "OCM_URL" \
-e "USER" \
-e "SSH_AUTH_SOCK=/tmp/ssh.sock" \
-e "KRB5CCNAME=/tmp/krb5cc" \
-e "OFFLINE_ACCESS_TOKEN" \
${INITIAL_CLUSTER_LOGIN} \
-v ${CONFIG_DIR}:/root/.config/ocm-container:ro \
-v ${HOME}/.ssh:/root/.ssh:ro \
-v ${HOME}/.aws/credentials:/root/.aws/credentials:ro \
-v ${HOME}/.aws/config:/root/.aws/config:ro \
${SSH_AGENT_MOUNT} \
${KRB5CCFILEMOUNT} \
${OCM_CONTAINER_LAUNCH_OPTS} \
ocm-container:${BUILD_TAG}