Merge pull request #2133 from rksharma95/systemd-release-ci

chore(CI): cross compile system monitor for systemd release

Author: Aryan-sharma11

.github/workflows/ci-systemd-release.yml

@@ -16,7 +16,14 @@ permissions: read-all
 
 jobs:
   goreleaser:
-    runs-on: ubuntu-22.04
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        include:
+          - arch: amd64
+            os: ubuntu-22.04
+          - arch: arm64
+            os: ubuntu-22.04-arm
     if: github.repository == 'kubearmor/kubearmor'
     permissions:
       id-token: write # requires for cosign keyless signing
@@ -97,6 +104,17 @@ jobs:
             git checkout "${RELEASE_TAG}"
           fi
 
+      - name: Install yq
+        run: |
+          wget https://github.com/mikefarah/yq/releases/latest/download/yq_linux_${{ matrix.arch }} -O /usr/local/bin/yq &&\
+          chmod +x /usr/local/bin/yq
+          yq --version
+
+      - name: Patch goarch
+        working-directory: KubeArmor
+        run: |
+           yq -i '.builds[0].goarch = ["${{ matrix.arch }}"]' /tmp/.goreleaser.yaml
+
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v5
         with:
@@ -107,6 +125,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GORELEASER_CURRENT_TAG: ${{ steps.vars.outputs.GORELEASER_CURRENT_TAG }}
+          ARCH: ${{ matrix.arch }}
 
       - name: Setup ORAS
         uses: oras-project/setup-oras@v1
@@ -116,5 +135,4 @@ jobs:
       - name: Publish release artifacts to Dockerhub
         working-directory: KubeArmor/dist
         run: |
-          oras push docker.io/kubearmor/kubearmor-systemd:${{ steps.vars.outputs.tag }}_linux-amd64 kubearmor_${{ steps.vars.outputs.tag }}_linux-amd64.tar.gz
-          oras push docker.io/kubearmor/kubearmor-systemd:${{ steps.vars.outputs.tag }}_linux-arm64 kubearmor_${{ steps.vars.outputs.tag }}_linux-arm64.tar.gz
+          oras push docker.io/kubearmor/kubearmor-systemd:${{ steps.vars.outputs.tag }}_linux-${{ matrix.arch }} kubearmor_${{ steps.vars.outputs.tag }}_linux-${{ matrix.arch }}.tar.gz

.github/workflows/ci-test-ginkgo.yml

@@ -249,7 +249,11 @@ jobs:
         if: ${{ always() }}
         run: |
           ls -l
-          go tool cover -func coverage_k8s_${{ matrix.os }}_${{ matrix.runtime }}.out
+          if [ -f coverage_k8s_${{ matrix.os }}_${{ matrix.runtime }}.out ]; then
+            go tool cover -func coverage_k8s_${{ matrix.os }}_${{ matrix.runtime }}.out
+          else
+            echo "Coverage file not found, skipping coverage report."
+          fi
         working-directory: KubeArmor
         env:
           GOPATH: /home/runner/go

KubeArmor/.goreleaser.yaml

@@ -7,7 +7,6 @@ builds:
       - linux
     goarch:
       - amd64
-      - arm64
     env:
       - CGO_ENABLED=0
     ldflags:
@@ -21,6 +20,10 @@ release:
   mode: replace
   make_latest: false
 
+# to handle checksum name conflict
+checksum:
+  name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Env.ARCH }}_checksums.txt"
+
 signs:
   - cmd: cosign
     certificate: '${artifact}.cert'

KubeArmor/Makefile

@@ -126,7 +126,7 @@ ifeq (, $(shell which goreleaser))
 endif
 	cd $(CURDIR)/BPF; make clean
 	cd $(CURDIR)/BPF; make
-	cd $(CURDIR); VERSION=$(shell git describe --tags --always --dirty) goreleaser release --clean --skip=publish,sign,validate --snapshot
+	cd $(CURDIR);ARCH=$(shell go env GOARCH) VERSION=$(shell git describe --tags --always --dirty) goreleaser release --clean --skip=publish,sign,validate --snapshot
 
 .PHONY: scan
 scan: 

contribution/self-managed-k8s/crio/install_crio.sh

@@ -15,10 +15,10 @@ OS="x${NAME}_${VERSION_ID}"
 VERSION=$(curl -w '%{url_effective}' -L -s -S https://update.k3s.io/v1-release/channels/stable -o /dev/null | sed -e 's|.*/||' | cut -d '.' -f1,2)
 echo "Installing CRI-O version $VERSION"
 
-curl -fsSL https://pkgs.k8s.io/addons:/cri-o://stable:/$VERSION/deb/Release.key |
+curl -fsSL https://download.opensuse.org/repositories/isv:/cri-o:/stable:/$VERSION/deb/Release.key |
     sudo gpg --dearmor -o /etc/apt/keyrings/cri-o-apt-keyring.gpg
 
-echo "deb [signed-by=/etc/apt/keyrings/cri-o-apt-keyring.gpg] https://pkgs.k8s.io/addons:/cri-o:/stable:/$VERSION/deb/ /" |
+echo "deb [signed-by=/etc/apt/keyrings/cri-o-apt-keyring.gpg] https://download.opensuse.org/repositories/isv:/cri-o:/stable:/$VERSION/deb/ /" |
     sudo tee /etc/apt/sources.list.d/cri-o.list
 
 # install

tests/k8s_env/blockposture/block_test.go

@@ -69,7 +69,7 @@ var _ = Describe("Posture", func() {
 			Expect(err).To(BeNil())
 
 			// wait for policy creation, added due to flaky behaviour
-			time.Sleep(5 * time.Second)
+			time.Sleep(10 * time.Second)
 
 			// Start Kubearmor Logs
 			err = KarmorLogStart("policy", "wordpress-mysql", "File", wp)