init 4.9 docker compose standalone profile with CI

.github/workflows/ci-docker-compose-integration.yml

@@ -0,0 +1,85 @@
+---
+name: Docker Compose Integration
+on:
+  pull_request:
+    branches:
+      - '**'
+  push:
+    branches:
+      - '**'
+  workflow_dispatch:
+
+jobs:
+  integration:
+    strategy:
+      fail-fast: false
+      matrix:
+        env:
+          - { TEST_PROFILE: standalone, HUB_TEST_MARKS: "deployment_standalone or all" }
+
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v4
+        with:
+          python-version: "3.10"
+
+      - name: (Linux) Install docker compose
+        run: |
+          curl -L -o /tmp/docker-compose https://github.com/docker/compose/releases/download/v2.29.1/docker-compose-linux-x86_64
+          install /tmp/docker-compose /usr/local/bin/
+
+      - name: sudo apt update
+        run: |
+          sudo apt update
+
+      - name: Install python requirements and podman
+        run: |
+          sudo apt-get install -y libsasl2-dev python-dev-is-python3 libldap2-dev libssl-dev podman
+
+      - name: Spin up dev/compose/${{ matrix.env.TEST_PROFILE }}.yaml
+        run: |
+          docker compose -f dev/compose/${{ matrix.env.TEST_PROFILE }}.yaml up --detach
+
+      - name: Export environment variables to host
+        if: ${{ matrix.env.TEST_PROFILE != 'certified-sync' }}
+        run: |
+          docker compose -f dev/compose/${{ matrix.env.TEST_PROFILE }}.yaml exec manager /bin/bash -c 'env | grep -v -w "HOME"' >> $GITHUB_ENV
+
+      - name: Export environment variables to host (certified-sync)
+        if: ${{ matrix.env.TEST_PROFILE == 'certified-sync' }}
+        run: |
+          docker compose -f dev/compose/${{ matrix.env.TEST_PROFILE }}.yaml exec standalone-manager /bin/bash -c 'env | grep -v -w "HOME"' >> $GITHUB_ENV
+
+      - run: cat $GITHUB_ENV
+
+      - name: Wait for API online status
+        run: |
+          max_runs=10
+          for i in $(seq 1 $max_runs); do
+            echo "$i: checking api status..."
+            RESPONSE=$(curl -s -o /dev/null -w "%{http_code}" -u "${{ env.DJANGO_SUPERUSER_USERNAME }}:${{ env.DJANGO_SUPERUSER_PASSWORD }}" -LI http://localhost:5001/api/galaxy/pulp/api/v3/status/)
+            if [ "$RESPONSE" -ne 200 ]; then
+              echo "API is down. Retrying in 10 seconds..."
+              sleep 10
+            else
+              echo "API online."
+              exit 0
+            fi
+          done
+
+      - name: Install integration requirements
+        run: |
+          pip install -r integration_requirements.txt
+
+      - name: Run integration tests
+        run: |
+          pytest -v -r sx --color=yes -m '${{ matrix.env.HUB_TEST_MARKS }}' galaxy_ng/tests/integration
+        env:
+          GALAXYKIT_SLEEP_SECONDS_POLLING: ".5"
+          GALAXYKIT_SLEEP_SECONDS_ONETIME: ".5"
+          GALAXYKIT_POLLING_MAX_ATTEMPTS: "50"
+          GALAXY_SLEEP_SECONDS_POLLING: ".5"
+          GALAXY_SLEEP_SECONDS_ONETIME: ".5"
+          GALAXY_POLLING_MAX_ATTEMPTS: "50"

.github/workflows/ci_oci-env-integration.yml

@@ -17,7 +17,7 @@ jobs:
         env:
           - TEST_PROFILE: ldap
           - TEST_PROFILE: keycloak
-          - TEST_PROFILE: standalone
+          # - TEST_PROFILE: standalone
           - TEST_PROFILE: rbac
           - TEST_PROFILE: certified-sync
           - TEST_PROFILE: insights

dev/compose/Dockerfile.dev

@@ -0,0 +1,24 @@
+# This Dockerfile is meant to extend the main Dockerfile.rhel8
+# Moving files to the required places
+# Installing extra development libraries and tools
+FROM localhost/galaxy_ng/galaxy_ng:base
+
+ARG GNUPGHOME
+ENV GNUPGHOME $GNUPGHOME
+
+USER root
+
+RUN /app/dev/compose/signing/setup_gpg_workarounds.sh
+
+RUN set -ex; \
+    install -Dm 0775 /app/dev/compose/database/database_fields.symmetric.key /etc/pulp/certs/database_fields.symmetric.key && \
+    install -Dm 0775 /app/dev/compose/signing/signing-secret.key /etc/pulp/certs/signing-secret.key && \
+    install -Dm 0775 /app/dev/compose/signing/signing-secret.key.password.txt /etc/pulp/certs/signing-secret.key.password.txt && \
+    install -Dm 0775 /app/dev/compose/signing/signing-secret.key /etc/pulp/certs/signing-public.key && \
+    install -Dm 0775 /app/dev/compose/signing/collection_sign.sh /var/lib/pulp/scripts/collection_sign.sh && \
+    install -Dm 0775 /app/dev/compose/signing/container_sign.sh /var/lib/pulp/scripts/container_sign.sh && \
+    chmod +x /var/lib/pulp/scripts/*_sign.sh
+
+RUN /app/dev/compose/signing/setup_gpg_keys.sh
+
+RUN ${VIRTUAL_ENV}/bin/python3 -m pip install ipython ipdb django-extensions

dev/compose/README.md

@@ -0,0 +1,263 @@
+# Galaxy Simplified Compose Stack
+
+Profiles:
+
+- `standalone` - Run galaxy_ng for integration with Ansible Automation Platform
+
+## Requirements
+
+- `docker compose` version `>=2`
+
+## Usage
+
+Pick a profile as needed and on the root of `galaxy_ng` repository.
+
+> Examples assumes `standalone` as the profile, change as needed.
+
+Build images
+```bash
+docker compose -f dev/compose/standalone.yaml build
+```
+
+Run the stack
+```bash
+docker compose -f dev/compose/standalone.yaml up
+# optionally pass `-d` to release the terminal
+```
+
+Exec commands on the `manager` service
+
+Bash
+```console
+$ docker compose -f dev/compose/standalone.yaml exec manager /bin/bash
+bash-4.4#
+```
+Django Admin
+```console
+$  docker compose -f dev/compose/standalone.yaml exec manager pulpcore-manager
+Type 'pulpcore-manager help <subcommand>' for help on a specific subcommand.
+
+Available subcommands:
+
+[app]
+    add-signing-service
+    analyze-publication
+...
+```
+
+Settings
+```console
+$ docker compose -f dev/compose/standalone.yaml exec manager dynaconf get DATABASES | python -m json.tool
+{
+  "default": {
+    "ENGINE": "django.db.backends.postgresql",
+    "HOST": "postgres",
+    "NAME": "galaxy_ng",
+    "PASSWORD": "galaxy_ng",
+    "PORT": 5432,
+    "USER": "galaxy_ng"
+  }
+}
+```
+```console
+$ docker compose -f dev/compose/standalone.yaml exec manager dynaconf list
+CONTENT_ORIGIN<str> 'https://localhost'
+CACHE_ENABLED<bool> False
+CACHE_SETTINGS<dict> {'EXPIRES_TTL': 600}
+ALLOWED_CONTENT_CHECKSUMS<list> ['sha224', 'sha256', 'sha384', 'sha512']
+...
+```
+
+Stopping
+```console
+$ docker compose -f dev/compose/standalone.yaml down
+# add -v to stop and remove volumes
+```
+
+> [!TIP]
+> Stop with Ctrl + C if running without `-d` and then execute the `down` command.
+
+## API Access
+
+Galaxy API is available on:
+
+[http://localhost:5001/api/galaxy/v3/swagger-ui/](http://localhost:5001/api/galaxy/v3/swagger-ui/)
+
+AAP UI and API will be available only if started separately on:
+
+[https://localhost](https://localhost)
+
+
+## Running UI for standalone development
+
+Ansible Hub UI can be started separately as a standalone `npm` run.
+
+```console
+# Assuming galaxy_ng is running on standalone compose.
+
+$ git clone https://github.com/ansible/ansible-hub-ui ~/projects/ansible-hub-ui
+$ git clone https://github.com/ansible/galaxy_ng ~/projects/galaxy_ng
+```
+Open 2 terminals:
+
+On the first terminal:
+
+```console
+$ cd galaxy_ng
+$ docker compose -f dev/compose/standalone.yaml up
+```
+
+On the second terminal:
+
+```console
+cd ansible-hub-ui
+npm install
+npm run start-standalone
+```
+
+UI will be available on http://localhost:8002 and API on http://localhost:5001
+
+
+## Auto Reload and Local Checkouts
+
+To have the services `api`, `worker` and `content` to automatically reload when
+source code changes it is required to set which paths the `reloader` must watch for changes.
+
+Set the variable `DEV_SOURCE_PATH` with the packages you want to add to the reloader list.
+
+Those repositories must be local checkouts located on the same level of the `galaxy_ng` repository.
+
+Example:
+
+Get the repositories locally in the same root path.
+```console
+$ git clone https://github.com/dynaconf/dynaconf  ~/projects/dynaconf
+$ git clone https://github.com/pulp/pulp_ansible ~/projects/pulp_ansible
+$ git clone https://github.com/ansible/galaxy_ng ~/projects/galaxy_ng
+```
+
+> **IMPORTANT** Ensure all the repos are checked out to compatible branches.
+> for example. you may be on galaxy_ng:master and reading `setup.py` you
+> see that it requires `pulp_ansible>2.10,<3` then ensure you checkout `pulp_ansible`
+> to a compatible branch.
+
+Start the compose setting the desired editable paths.
+
+```console
+$ cd ~/projects/galaxy_ng
+$ export DEV_SOURCE_PATH="dynaconf:pulp_ansible:galaxy_ng"
+$ docker compose -f dev/compose/standalone.yaml up --build
+```
+
+Optionally it can be informed in a single line:
+
+```console
+$ DEV_SOURCE_PATH="dynaconf:pulp_ansible:galaxy_ng" docker compose -f dev/compose/app.yaml up --build
+```
+
+> [!NOTE]
+> if passing on the call line, remember to repass the same variable every time you interact with
+>`docker compose` using the `run` command, usually `exec,logs,stats` doesn't require, but commands
+> that starts the service container from scratch needs the variables.
+
+Now when changes are detected on `.py` and `.yaml` files on any of the `DEV_SOURCE_PATH`
+directories it will trigger reload of `api`, `worker`, and `content` services.
+
+
+## Troubleshooting
+
+### VersionConflict error
+
+Example:
+```bash
+api-1         |    raise VersionConflict(dist, req).with_context(dependent_req)
+api-1         | pkg_resources.VersionConflict: (pkg_foo 3.2.6 (/venv/lib/python3.11/site-packages), Requirement.parse('pkg_foo<3.1.13,>=3.1.12'))
+```
+
+Solution 1:
+Clean up local build files:
+
+```bash
+cd ~/projects/galaxy_ng
+rm -rf .eggs
+rm -rf build
+rm -rf galaxy_ng.egg-info
+```
+
+Solution 2:
+
+- Ensure `LOCK_REQUIREMENTS` is set to `0`
+- Ensure all your local checkouts are checked out to compatible branches
+
+### LLB definition error
+
+```bash
+failed to solve: rpc error: code = Unknown desc = failed to solve with frontend dockerfile.v0: failed to create LLB definition: failed to do request: Head "http://localhost/v2/galaxy_ng/galaxy_ng/manifests/base": dial tcp [::1]:80: connect: connection refused
+```
+
+Solution
+
+```bash
+export DOCKER_BUILDKIT=0
+export COMPOSE_DOCKER_CLI_BUILD=0
+```
+
+## Tests
+
+### Unit tests
+Run unit tests with docker compose [Running unit tests](../../galaxy_ng//tests/unit/README.md)
+
+### Integration tests
+Run integration tests with docker compose, check the [Running integration tests](../../galaxy_ng/tests/integration/README.md)
+
+Run with legacy oci-env, check the [Running oci-env integration tests](../../docs/dev/integration_tests.md)
+
+## Tips and Tricks.
+
+---
+
+### Debugging
+
+#### Step 1 - Add the breakpoint
+
+Edit the file you want to debug and add a breakpoint
+
+```python
+__import__("ipdb").set_trace()
+```
+
+> [!TIP]  
+> Replace if you are using a different debugger, however the images has only **pdb** and **ipdb** installed.
+
+If you discover other ways of debugging, like connecting dap protocol or vscode debugger, please update this file!
+
+#### Step 2 - Now execute your stack or just the container you are trying to debug.
+
+Example:
+
+```bash
+$ export DEV_SOURCE_PATH=galaxy_ng 
+$ docker compose -f dev/compose/standalone.yaml up migrations
+# The container will keep running stopped on the breakpoint.
+```
+
+#### Step 3 - Attach
+
+```bash
+$ docker compose -f dev/compose/standalone.yaml attach migrations
+ipdb>
+```
+
+> [!IMPORTANT] 
+> To detach from the container DO NOT use <kbd>Ctrl+c</kbd>,  
+> instead, use <kbd>Ctrl-p Ctrl-q</kbd>
+
+---
+
+**TBD**
+
+### Connecting to Database
+
+### Dumping and restoring the database
+
+### Populating testing data