blob: 5eead41d700e12ddbc05df6bcbd873a97a7d50f7 [file] [log] [blame]
Andrew Geissler3c88e2d2021-01-28 15:18:11 -06001#!/bin/bash -e
2#
3# Purpose:
4# This script is responsible for determining the owner of a gerrit
5# commit, verifying they are within an approved gerrit group, and
6# then updating gerrit with that verification info.
7#
8# Note: It is assumed this script is run as a part of a jenkins job triggered
9# by the gerrit plugin. Therefore it assumes certain env variables
10# provided by that plugin are avialable (i.e. GERRIT_PROJECT, ...)
11#
12# Required Inputs:
13# SSH_KEY: Path to private ssh key used to post messages to gerrit
14
Andrew Geissler37052412022-05-20 15:28:26 -040015GERRIT_COMMAND="curl -s --anyauth -n https://gerrit.openbmc.org"
Patrick Williamsa4d19dc2021-03-15 14:51:06 -050016GERRIT_SSH_CMD=( \
Patrick Williams476a7e92022-12-06 09:52:53 -060017 ssh -o 'StrictHostKeyChecking no' -i "$SSH_KEY" \
18 -p 29418 jenkins-openbmc-ci@gerrit.openbmc.org gerrit \
19 )
Andrew Geissler3c88e2d2021-01-28 15:18:11 -060020
21echo "Checking ${GERRIT_PROJECT}:${GERRIT_BRANCH}:${GERRIT_CHANGE_ID}:${GERRIT_PATCHSET_REVISION}"
22
Patrick Williamsa4d19dc2021-03-15 14:51:06 -050023# shellcheck disable=2086 # GERRIT_COMMAND is purposefully wordsplit.
Andrew Geisslerc4917092022-05-20 16:07:58 -040024COMMITTER_EMAIL=$(${GERRIT_COMMAND}/a/changes/${GERRIT_PROJECT/\//%2F}~${GERRIT_BRANCH}~${GERRIT_CHANGE_ID}/revisions/${GERRIT_PATCHSET_REVISION}/commit | python3 -c "import sys, json; sys.stdin.read(4); print(json.load(sys.stdin)['committer']['email'])")
Ed Tanous5d3031d2022-02-16 15:57:15 -080025if [ "${COMMITTER_EMAIL}" = "" ]; then
Andrew Geissler3c88e2d2021-01-28 15:18:11 -060026 echo "Unable to find committer."
Patrick Williamsa4d19dc2021-03-15 14:51:06 -050027 "${GERRIT_SSH_CMD[@]}" review \
28 "${GERRIT_CHANGE_NUMBER},${GERRIT_PATCHSET_NUMBER}" \
Patrick Williamsf8ee6f02022-01-04 12:03:19 -060029 --ok-to-test=0 "--message='Unable to determine committer'"
Patrick Williamsa4d19dc2021-03-15 14:51:06 -050030 exit 1
Andrew Geissler3c88e2d2021-01-28 15:18:11 -060031fi
32
33#echo "Commit by '${COMMITTER_EMAIL}'"
Patrick Williamsa4d19dc2021-03-15 14:51:06 -050034# shellcheck disable=2086 # GERRIT_COMMAND is purposefully wordsplit.
Andrew Geisslerc4917092022-05-20 16:07:58 -040035COMMITTER_USERNAME=$(${GERRIT_COMMAND}/a/accounts/${COMMITTER_EMAIL} | python3 -c "import sys, json; sys.stdin.read(4); print(json.load(sys.stdin)['username'])")
Andrew Geissler3c88e2d2021-01-28 15:18:11 -060036#COMMITTER_USERNAME=`${GERRIT_COMMAND}/a/accounts/${COMMITTER_EMAIL}`
37echo "USERNAME: $COMMITTER_USERNAME"
Ed Tanous5d3031d2022-02-16 15:57:15 -080038if [ "${COMMITTER_USERNAME}" = "" ]; then
Andrew Geissler3c88e2d2021-01-28 15:18:11 -060039 echo "Unable to determine github user for ${COMMITTER_EMAIL}."
Patrick Williamsa4d19dc2021-03-15 14:51:06 -050040 "${GERRIT_SSH_CMD[@]}" review \
41 "${GERRIT_CHANGE_NUMBER},${GERRIT_PATCHSET_NUMBER}" \
Patrick Williamsf8ee6f02022-01-04 12:03:19 -060042 --ok-to-test=0 "--message='Unable to determine github user'"
Patrick Williamsa4d19dc2021-03-15 14:51:06 -050043 exit 1
Andrew Geissler3c88e2d2021-01-28 15:18:11 -060044fi
45
46# Reset the vote to 0 so jenkins will detect a new +1 on retriggers
Patrick Williamsa4d19dc2021-03-15 14:51:06 -050047"${GERRIT_SSH_CMD[@]}" review \
48 "${GERRIT_CHANGE_NUMBER},${GERRIT_PATCHSET_NUMBER}" \
Patrick Williams8ac8e092022-01-04 12:05:50 -060049 --ok-to-test=0 -t autogenerated:jenkins --notify=NONE
Andrew Geissler3c88e2d2021-01-28 15:18:11 -060050
Patrick Williams47b59dc2022-07-18 16:58:42 -050051# Add reviewers based on OWNERS files.
52"${WORKSPACE}/openbmc-build-scripts/tools/owners" -p "${WORKSPACE}" reviewers |
53{
54 while read -r reviewer ;
55 do
56 # shellcheck disable=2086 # GERRIT_COMMAND is purposefully wordsplit.
57 ${GERRIT_COMMAND}/a/changes/${GERRIT_PROJECT/\//%2F}~${GERRIT_BRANCH}~${GERRIT_CHANGE_ID}/reviewers \
58 -X POST \
59 -H "Content-Type: application/json" \
60 -d "$reviewer" || true
61 done
62} || true
63
Andrew Geissler3c88e2d2021-01-28 15:18:11 -060064# Write full list of users to a file
Patrick Williamsa4d19dc2021-03-15 14:51:06 -050065GERRIT_CI_GROUPS=( \
Patrick Williams476a7e92022-12-06 09:52:53 -060066 alibaba/ci-authorized \
67 amd/ci-authorized \
68 ami/ci-authorized \
69 ampere/ci-authorized \
70 arm/ci-authorized \
71 aspeed/ci-authorized \
72 bytedance/ci-authorized \
73 code-construct/ci-authorized \
74 depo/ci-authorized \
75 erg/ci-authorized \
76 facebook/ci-authorized \
77 fii/ci-authorized \
78 gager-in/ci-authorized \
79 google/ci-authorized \
80 hcl/ci-authorized \
81 hpe/ci-authorized \
82 ibm/ci-authorized \
83 individual/ci-authorized \
84 inspur/ci-authorized \
85 intel/ci-authorized \
86 inventec/ci-authorized \
87 lenovo/ci-authorized \
88 microsoft/ci-authorized \
89 nineelements/ci-authorized \
90 nuvoton/ci-authorized \
91 nvidia/ci-authorized \
92 openbmc/ci-authorized \
93 pcpartner/ci-authorized \
94 phytium/ci-authorized \
95 quanta/ci-authorized \
96 quic/ci-authorized \
97 rcs/ci-authorized \
98 supermicro/ci-authorized \
Jordan Changfd0e80d2023-03-06 09:49:30 +080099 ufispace/ci-authorized \
Patrick Williams476a7e92022-12-06 09:52:53 -0600100 wistron/ci-authorized \
101 wiwynn/ci-authorized \
102 yadro/ci-authorized \
103 )
Andrew Geissler3c88e2d2021-01-28 15:18:11 -0600104
Patrick Williamsa4d19dc2021-03-15 14:51:06 -0500105rm -f "$WORKSPACE/users.txt"
106for g in "${GERRIT_CI_GROUPS[@]}"; do
107 "${GERRIT_SSH_CMD[@]}" ls-members "$g" --recursive \
108 >> "$WORKSPACE/users.txt"
109done
Andrew Geissler3c88e2d2021-01-28 15:18:11 -0600110
111# grep for the specific username word in the file
Patrick Williamsa4d19dc2021-03-15 14:51:06 -0500112if grep -q -w "${COMMITTER_USERNAME}" "$WORKSPACE/users.txt"; then
113 "${GERRIT_SSH_CMD[@]}" review \
114 "${GERRIT_CHANGE_NUMBER},${GERRIT_PATCHSET_NUMBER}" \
Patrick Williams8ac8e092022-01-04 12:05:50 -0600115 --ok-to-test=1 -t autogenerated:jenkins --notify=NONE \
Patrick Williamsa4d19dc2021-03-15 14:51:06 -0500116 "--message='User approved, CI ok to start'"
Patrick Williams2e93e4e2021-12-30 10:29:38 -0600117
118 # Immediately erase the score to prevent infinite triggers.
119 "${GERRIT_SSH_CMD[@]}" review \
120 "${GERRIT_CHANGE_NUMBER},${GERRIT_PATCHSET_NUMBER}" \
Patrick Williams8ac8e092022-01-04 12:05:50 -0600121 --ok-to-test=0 -t autogenerated:jenkins --notify=NONE
Patrick Williams2e93e4e2021-12-30 10:29:38 -0600122
Andrew Geissler3c88e2d2021-01-28 15:18:11 -0600123 exit 0
124fi
125
126echo "${COMMITTER_USERNAME} is not on the approved list."
Patrick Williamsa4d19dc2021-03-15 14:51:06 -0500127"${GERRIT_SSH_CMD[@]}" review \
128 "${GERRIT_CHANGE_NUMBER},${GERRIT_PATCHSET_NUMBER}" \
Patrick Williamsf8ee6f02022-01-04 12:03:19 -0600129 --ok-to-test=0 -t autogenerated:jenkins \
Patrick Williamsa4d19dc2021-03-15 14:51:06 -0500130 "--message='User not approved, see admin, no CI'"
Andrew Geissler3c88e2d2021-01-28 15:18:11 -0600131
132exit 0