Jenkinsfile

pipeline {
    agent {
        dockerfile {
            dir 'verinice-distribution/docker-verinice-builder'
            args '-v $MAVEN_REPOSITORY_BASE/repository$EXECUTOR_NUMBER:/m2/repository -v $HOME/.cache/verinicebuild:/cache/verinicebuild'
        }
    }
    environment {
        // In case the build server exports a custom JAVA_HOME, we fix the JAVA_HOME
        // to the one used by the docker image.
        JAVA_HOME='/usr/lib/jvm/java-1.8.0-openjdk'
    }
    parameters {
        string(name: 'jreversion', defaultValue: 'jdk8u242-b08', description: 'Download and pack a JRE with this version. See https://adoptopenjdk.net/archive.html for a list of possible versions.', trim: true)
        booleanParam(name: 'dists', defaultValue: false, description: 'Run distribution steps, i.e. build RPMs files etc.')
        // We need an extra flag. Unfortunately it is not possible to find out, if a password is left empty.
        booleanParam(name: 'distSign', defaultValue: false, description: 'Sign RPM packages')
        password(name: 'GNUPGPASSPHRASE', defaultValue: null, description: 'The passphrase of the key stored in KEYDIR/verinice.public.')
    }
    options {
        buildDiscarder(logRotator(numToKeepStr: '3'))
    }
    stages {
        stage('Setup') {
            steps {
                script {
                    if (params.distSign && !params.dists) {
                        def msg = 'You have to enable dists, if you want to sign packages.'
                        buildDescription msg
                        error msg
                    }
                    if (env.TAG_NAME){
                        currentBuild.keepLog = true
                    }
                }
                buildDescription "${env.GIT_BRANCH} ${env.GIT_COMMIT[0..8]}"
                sh './verinice-distribution/build.sh clean'
            }
        }
        stage('Fetch JREs') {
            steps {
                sh "./verinice-distribution/build.sh JREVERSION=${params.jreversion} -j4 jres"
            }
        }
        stage('Build') {
            steps {
                sh "./verinice-distribution/build.sh verify"
                archiveArtifacts artifacts: 'sernet.verinice.releng.client.product/target/products/*.zip,sernet.verinice.releng.server.product/target/*.war,sernet.verinice.releng.client.product/target/repository/**', fingerprint: true
                junit allowEmptyResults: true, testResults: '**/build/reports/**/*.xml'
                perfReport filterRegex: '', sourceDataFiles: '**/build/reports/TEST*.xml'
            }
        }
        stage('Trigger RCPTT') {
            steps {
                build job: 'verinice-client-rcptt', wait: false, parameters: [
                    gitParameter(name: 'BRANCH_OR_TAG', value: "${env.GIT_BRANCH}"),
                    string(name: 'artifact_selector', value: 'sernet.verinice.releng.client.product/target/products/*linux.gtk.x86_64*.zip'),
                    string(name: 'job_to_copy_from', value: "${currentBuild.fullProjectName}"),
                    string(name: 'build_to_copy_from', value: '<TriggeredBuildSelector plugin="copyartifact@1.42.1">  <upstreamFilterStrategy>UseGlobalSetting</upstreamFilterStrategy>  <allowUpstreamDependencies>false</allowUpstreamDependencies></TriggeredBuildSelector>')
                ]
                /*
                build job: 'verinice-server-rcptt-test', wait: false, parameters: [
                    gitParameter(name: 'BRANCH_OR_TAG', value: "${env.GIT_BRANCH}"),
                    string(name: 'artifact_selector', value: 'sernet.verinice.releng.client.product/target/products/*linux.gtk.x86_64*.zip'),
                    string(name: 'job_to_copy_from', value: "${currentBuild.fullProjectName}"),
                    string(name: 'build_to_copy_from', value: '<TriggeredBuildSelector plugin="copyartifact@1.42.1">  <upstreamFilterStrategy>UseGlobalSetting</upstreamFilterStrategy>  <allowUpstreamDependencies>false</allowUpstreamDependencies></TriggeredBuildSelector>')
                ]
                */
                /*
                build job: 'verinice-rcptt-custom-test', wait: false, parameters: [
                    gitParameter(name: 'BRANCH_OR_TAG', value: "${env.GIT_BRANCH}"),
                    string(name: 'artifact_selector', value: 'sernet.verinice.releng.client.product/target/products/*linux.gtk.x86_64*.zip'),
                    string(name: 'job_to_copy_from', value: "${currentBuild.fullProjectName}"),
                    string(name: 'build_to_copy_from', value: '<TriggeredBuildSelector plugin="copyartifact@1.42.1">  <upstreamFilterStrategy>UseGlobalSetting</upstreamFilterStrategy>  <allowUpstreamDependencies>false</allowUpstreamDependencies></TriggeredBuildSelector>'),
                    string(name: 'test-list', value: "bp*.test"),
                ]
                */
            }
        }
        stage('Documentation') {
            steps {
                sh "./verinice-distribution/build.sh -j4 docs"
                archiveArtifacts artifacts: 'doc/manual/*/*.pdf,doc/manual/*/*.zip', fingerprint: true
            }
        }
        stage('Distributions') {
            when {
                expression { params.dists && currentBuild.result in [null, 'SUCCESS'] }
            }
            steps {
                sh "./verinice-distribution/build.sh -j2 dists"
            }
        }
        // Signing is a separate step because we want to be able to build RPMs any time, to test them.
        // However RPMs are only archived if they are signed.
        stage('Distributions Signing') {
            when {
                expression { params.distSign && currentBuild.result in [null, 'SUCCESS'] }
            }
            steps {
                sh "./verinice-distribution/sign-rpms verinice-distribution/rhel-?/RPMS/noarch/*"
                archiveArtifacts artifacts: 'verinice-distribution/rhel-?/RPMS/noarch/*', fingerprint: true
            }
        }
    }
    post {
        always {
            recordIssues(tools: [mavenConsole()])
            recordIssues(tools: [java()])
            recordIssues(tools: [taskScanner(highTags: 'FIXME', ignoreCase: true, normalTags: 'TODO', includePattern: '**/*.java, **/*.xml')])
        }
        failure {
            emailext body: '${JELLY_SCRIPT,template="text"}', subject: '$DEFAULT_SUBJECT', to: 'dm@sernet.de, uz@sernet.de, an@sernet.de, fw@sernet.de, ak@sernet.de'
        }
    }
}