log to screen

Reviewed-on: #45

.gitea/workflows/publish.yaml

@@ -0,0 +1,27 @@
+name: Build and publish Image
+run-name: ${{ gitea.actor }} is building py-eagle-mqtt image
+on:
+  push:
+    branches:
+      - '*'         # matches every branch that doesn't contain a '/'
+      - '*/*'       # matches every branch containing a single '/'
+      - '**'        # matches every branch
+      - '!master'   # excludes master
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4.1.1
+
+    - name: Build Docker image
+      run: docker build -t harbor.evanshome.io/library/py-eagle-mqtt:dev ./Docker/
+
+    - name: Login to Harbor
+      run: docker login -u ${{ secrets.HARBOR_USERNAME }} -p ${{ secrets.HARBOR_PASSWORD }} harbor.evanshome.io
+
+    - name: Push Docker image to Harbor
+      run: docker push harbor.evanshome.io/library/py-eagle-mqtt:dev
+      

.gitea/workflows/semantic-release.yaml

@@ -0,0 +1,63 @@
+name: Semantic Release and Changelog
+run-name: ${{ gitea.actor }} is running Semantic Release
+on:
+  push:
+    branches:
+      - 'master'
+
+jobs:
+  Patch:
+    name: Patch
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4.1.1
+      with:
+        fetch-depth: '0'
+    - name: Minor version for each merge
+      id: taggerDryRun
+      uses: anothrNick/github-tag-action@1.67.0
+      env:
+        GITHUB_TOKEN: ${{ secrets.REPO_PUSH_TOKEN }}
+        WITH_V: true
+        DRY_RUN: true
+
+    - name: echo new tag
+      run: |
+        echo "The next tag version will be: ${{ steps.taggerDryRun.outputs.new_tag }}"
+    - name: echo tag
+      run: |
+        echo "The current tag is: ${{ steps.taggerDryRun.outputs.tag }}"
+    - name: echo part
+      run: |
+        echo "The version increment was: ${{ steps.taggerDryRun.outputs.part }}"
+  
+  Build-and-Publish:
+    name: Build and Publish
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4.1.1
+
+    - name: Login to Harbor 
+      uses: docker/login-action@v2
+      with:
+        registry: harbor.evanshome.io
+        username: "robot$registry-bot"
+        password: ${{ secrets.HARBOR_PASSWORD }}
+
+    - name: Build Docker image
+      run: docker build -t harbor.evanshome.io/library/py-eagle-mqtt:latest ./Docker/
+
+    - name: Minor version for each merge
+      id: taggerFinal
+      uses: anothrNick/github-tag-action@1.67.0
+      env:
+        GITHUB_TOKEN: ${{ secrets.REPO_PUSH_TOKEN }}
+        WITH_V: true
+        GIT_API_TAGGING: false
+
+    - name: tag with name
+      run: docker tag  harbor.evanshome.io/library/py-eagle-mqtt:latest harbor.evanshome.io/library/py-eagle-mqtt:${{ steps.taggerFinal.outputs.new_tag }}
+
+    - name: Push Docker image to Harbor
+      run: docker push --all-tags harbor.evanshome.io/library/py-eagle-mqtt

.gitlab-ci.yml

@@ -4,76 +4,34 @@
 # See https://docs.gitlab.com/ee/ci/variables/#priority-of-environment-variables
 
 stages:
-- test
+#- test
 - build
-- push_local
 - release
-- push_dockerhub
+- push_local
-
+##- push_dockerhub
-.docker_base:
-  image: docker:20.10.6-dind
-  services:
-    - name: docker:20.10.6-dind
-      command: ["--tls=false"]
-  variables:
-    DOCKER_DRIVER: overlay2
-    DOCKER_HOST: tcp://127.0.0.1:2375/
-    DOCKER_TLS_CERTDIR: ""
-    IMAGE_TAG: "$CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG"
-    FF_GITLAB_REGISTRY_HELPER_IMAGE: 1
-  before_script:
-    - docker version
-    - docker info
-    - docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
 
 build:
-  extends:
+  image: docker:24.0.7-dind
-    - .docker_base
   stage: build
-  script:
-  - docker pull $CI_REGISTRY_IMAGE:latest || true
-  - >
-    docker build
-    --pull
-    --cache-from $CI_REGISTRY_IMAGE:latest
-    --tag $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
-    --build-arg BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')
-    --build-arg VCS_REF=$CI_COMMIT_SHORT_SHA
-    ./Docker/
-  - docker push $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
-
-push local:
-  extends:
-    - .docker_base
-  stage: push_local
-  variables:
-    GIT_STRATEGY: none
   only:
-  - master
+    refs:
-  script:
+    - tags
-  - docker pull $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
+    - branches
-  - docker tag $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA $CI_REGISTRY_IMAGE:latest
+  services:
-  - docker push $CI_REGISTRY_IMAGE:latest
+    -  name: docker:24.0.7-dind
-
+       command: ["--tls=false"]
-push dockerhub:
-  extends:
-    - .docker_base
-  stage: push_dockerhub
   variables:
-    GIT_STRATEGY: none
+    DOCKER_DRIVER: overlay2
-    CI_DOCKERHUB_IMAGE: index.docker.io/evanrich/py-eagle-mqtt
+    DOCKER_HOST: tcp://docker:2375
-    CI_DOCKERHUB_REGISTRY: docker.io
+    DOCKER_TLS_CERTDIR: ""
-  only:
+    FF_GITLAB_REGISTRY_HELPER_IMAGE: 1
-  - tags
   script:
-  - docker pull $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
+    - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
-  - docker tag $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA $CI_DOCKERHUB_IMAGE:$CI_COMMIT_REF_NAME 
+    - docker build -t $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA --build-arg BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ') --build-arg VCS_REF=$CI_COMMIT_SHORT_SHA ./Docker/
-  - docker tag $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA $CI_DOCKERHUB_IMAGE:latest
+    - docker push $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
-  - docker login -u "$CI_DOCKERHUB_USER" -p "$CI_DOCKERHUB_PASSWORD" $CI_DOCKERHUB_REGISTRY
-  - docker push $CI_DOCKERHUB_IMAGE --all-tags
 
 release:
-  image: node:16-alpine3.13
+  image: node:20.10.0-alpine3.18
   stage: release
   only:
     refs:
@@ -89,59 +47,34 @@ release:
   script:
     - touch CHANGELOG.md
     - apk add --no-cache git
-    - npm install @semantic-release/gitlab @semantic-release/changelog
+    - git config user.email "ci-bot@evanshome.io"
-      @semantic-release/git conventional-changelog-eslint
+    - git config user.name "ci-bot"
+    - npm install @semantic-release/gitlab@12.1.1 @semantic-release/changelog@6.0.3
+      @semantic-release/git@10.0.1 conventional-changelog-eslint@5.0.0
     - npx semantic-release
   artifacts:
     paths:
     - CHANGELOG.md
 
-sast:
+push local:
-  stage: test
+  image: docker:24.0.7-dind
-include:
+  stage: push_local
-- template: Security/SAST.gitlab-ci.yml
+  services:
-
+    -  name: docker:24.0.7-dind
-sonarqube-check:
+       command: ["--tls=false"]
-  stage: test
-  image: 
-    name: sonarsource/sonar-scanner-cli:4.6
-    entrypoint: [""]
   variables:
-    SONAR_USER_HOME: "${CI_PROJECT_DIR}/.sonar"  # Defines the location of the analysis task cache
+    DOCKER_DRIVER: overlay2
-    GIT_DEPTH: "0"  # Tells git to fetch all the branches of the project, required by the analysis task
+    DOCKER_HOST: tcp://docker:2375
-  cache:
+    DOCKER_TLS_CERTDIR: ""
-    key: "${CI_JOB_NAME}"
+    GIT_STRATEGY: none
-    paths:
+    FF_GITLAB_REGISTRY_HELPER_IMAGE: 1
-      - .sonar/cache
-  script: 
-    - sonar-scanner
-  allow_failure: true
   only:
-    - master # or the name of your main branch
+  - master
-    - branches
-
-trivy:
-  stage: test
-  extends:
-    - .docker_base
-  before_script:
-    - export TRIVY_VERSION=$(wget -qO - "https://api.github.com/repos/aquasecurity/trivy/releases/latest" | grep '"tag_name":' | sed -E 's/.*"v([^"]+)".*/\1/')
-    - echo $TRIVY_VERSION
-    - wget --no-verbose https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz -O - | tar -zxvf -
-  allow_failure: true
   script:
-    # Build image
+    - echo $CI_COMMIT_TAG
-    - docker build -t $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA ./Docker/
+    - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
-    # Build report
+    - docker pull $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
-    - ./trivy --exit-code 0 --cache-dir .trivycache/ --no-progress --format template --template "@contrib/gitlab.tpl" -o gl-container-scanning-report.json image $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
+    - docker tag $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA $CI_REGISTRY_IMAGE:latest
-    # Print report
+    - docker push $CI_REGISTRY_IMAGE:latest
-    - ./trivy --exit-code 0 --cache-dir .trivycache/ --no-progress --severity HIGH image $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
+
-    # Fail on severe vulnerabilities
+  
-    - ./trivy --exit-code 1 --cache-dir .trivycache/ --severity CRITICAL --no-progress image $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA
-  cache:
-    paths:
-      - .trivycache/
-  # Enables https://docs.gitlab.com/ee/user/application_security/container_scanning/ (Container Scanning report is available on GitLab EE Ultimate or GitLab.com Gold)
-  artifacts:
-    reports:
-      container_scanning: gl-container-scanning-report.json

CHANGELOG.md

@@ -1,3 +1,34 @@
+## [1.7.10](https://gitlab.evanshome.io/erichardson/py-eagle-mqtt/compare/v1.7.9...v1.7.10) (2023-12-03)
+
+
+### Build
+
+* fix build pipeline order ([1cf67d1](https://gitlab.evanshome.io/erichardson/py-eagle-mqtt/commit/1cf67d139b8ce3954a42afeeef49262c72d9b0a5))
+
+### CI
+
+* add branches to refs for building ([e0da9b1](https://gitlab.evanshome.io/erichardson/py-eagle-mqtt/commit/e0da9b110e69fc4f18f6588d297589ca71a27c08))
+* Add push latest tag on master ([8e6130d](https://gitlab.evanshome.io/erichardson/py-eagle-mqtt/commit/8e6130d9195c19933054d9a4efbeeb3d025b5301))
+* fix ordering of stages ([385c1d8](https://gitlab.evanshome.io/erichardson/py-eagle-mqtt/commit/385c1d88d85e64591fd0d3814111a7e335ea45f8))
+
+## [1.7.9](https://gitlab.evanshome.io/erichardson/py-eagle-mqtt/compare/v1.7.8...v1.7.9) (2023-12-03)
+
+
+### Build
+
+* bump docker base to python:3.12-alpine ([6489f3d](https://gitlab.evanshome.io/erichardson/py-eagle-mqtt/commit/6489f3d01a71fba8e1a4ac35de2b0bffdf2529bd))
+
+## [1.7.8](https://gitlab.evanshome.io/erichardson/py-eagle-mqtt/compare/v1.7.7...v1.7.8) (2023-12-03)
+
+
+### ci
+
+* fix semantic versioning and docker push to local registry ([9ce6bb5](https://gitlab.evanshome.io/erichardson/py-eagle-mqtt/commit/9ce6bb579847fba7fd31cc7ece4bcbb0661247b8))
+
+### Fix
+
+* semantic versioning and docker push to local registry ([08069d6](https://gitlab.evanshome.io/erichardson/py-eagle-mqtt/commit/08069d61d135eff8c2ee5b210279589c4e4eed8f))
+
 ## [1.7.6](https://gitlab.evanrichardsonphotography.com/erichardson/py-eagle-mqtt/compare/v1.7.5...v1.7.6) (2021-05-10)
 
 

Docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.9.6-alpine3.14
+FROM python:3.12-alpine
 LABEL maintainer="Evan Richardson (evanrich81[at]gmail.com)"
 
 ARG BUILD_DATE
@@ -14,13 +14,20 @@ LABEL org.label-schema.vendor="Evan Richardson"
 LABEL org.label-schema.docker.cmd="docker run --name=py-eagle-mqtt -e MQTT_BROKER_IP=<IP> -e MQTT_BROKER_PORT=1883 -p 22042:22042 -d evanrich/py-eagle-mqtt"
 
 WORKDIR /app
+
 COPY requirements.txt /app
 COPY ./src/conf/logrotate/tHome /etc/logrotate.d/
+
 ENV PYTHONPATH=/app/src/python
-RUN apk --update add --no-cache logrotate \
+
-&& pip3 install --no-cache-dir  --upgrade pip \
+RUN apk --update add --no-cache logrotate && \
-&& pip3 install --no-cache-dir -r requirements.txt
+    apk upgrade && \
+    pip3 install --no-cache-dir --upgrade pip && \
+    pip3 install --no-cache-dir -r requirements.txt && \
+    rm -rf /var/cache/apk/*
+
 COPY . /app
-CMD ["/app/src/bin/tHome-eagle.py", "-c", "/app/src/conf"]
+
+CMD ["python3", "-u", "/app/src/bin/tHome-eagle.py", "-c", "/app/src/conf", "-l", "stdout"]
 
 EXPOSE 22042

Docker/requirements.txt

@@ -1,3 +1,3 @@
-paho-mqtt==1.5.1
+paho-mqtt==1.6.1
-bottle==0.12.19
+bottle==0.12.25
 defusedxml==0.7.1

Docker/src/python/tHome/util/fimport.py

@@ -3,8 +3,9 @@
 # Arbitrary file importing utility.  Does NOT modify sys.modules
 #
 #===========================================================================
-import imp
+#import importlib
 import os
+import types
 
 def fimport( filePath ):
    # Read the file and compile the code.  This will fail if the file
@@ -19,7 +20,7 @@ def fimport( filePath ):
    rootName, ext = os.path.splitext( fileName )
 
    # Create a new module and exec the code in it's context.  
-   m = imp.new_module( rootName )
+   m = types.ModuleType( rootName )
    m.__file__ = absPath
    exec(code, m.__dict__)
 

renovate.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:base",
+    ":semanticCommits"
+  ],
+  "prConcurrentLimit": 5,
+  "labels": [
+      "upgrade", 
+      "bot"
+    ]
+}