nixos-config/library/jenkins.nix

{ lib, ... }:

with builtins;

{
  # source container url and credentialsId
  job = name: {
    url,
    credentialsId,
    branch ? "master",
    # https://docs.openstack.org/infra/jenkins-job-builder/triggers.html
    triggers ? [
        { pollscm = {
          cron = "H/30 * * * *";
          ignore-post-commit-hooks = true;
        };}
      ], ... }: config: { job = {
    inherit name triggers;
    sandbox = true;
    project-type = "pipeline";
    dsl = let
      stage = elem:
        let
          stageName = head ( attrNames elem );
          stateScripts = map ( stage :
            lib.getAttr (typeOf stage) {
              string = ''
                withEnv(['PATH=/run/current-system/sw/bin/','NIX_PATH=/var/src/']) {
                  sh '${toString stage}'
                }'';
              set =
                let
                  script = ''
                    withEnv(['PATH=/run/current-system/sw/bin/','NIX_PATH=/var/src/']) {
                      sh '${toString stage.script}'
                    }
                  '';
                in
                  if (stage.credentialsId != null)
                  then ''
                    sshagent(['${stage.credentialsId}']) { ${script} }
                  ''
                  else script;
              }
            )( getAttr stageName elem );
        in ''
          stage('${stageName}') {
            steps {
              ${concatStringsSep "\n" stateScripts}
            }
          }
        '';
      stages = map stage config;
    in ''
      pipeline {
        agent any
        stages{
          stage('Pull') {
            steps {
              checkout(
                [$class: 'GitSCM'
                , branches: [[name: '*/${branch}']]
                , doGenerateSubmoduleConfigurations: false
                , extensions: [[$class: 'LocalBranch', localBranch: 'master']]
                , submoduleCfg: []
                , userRemoteConfigs:
                  [[ credentialsId: '${credentialsId}'
                  , url: '${url}']]
                ]
              )
            }
          }
        ${concatStringsSep "\n" stages}
        }
      }
    '';
  };};

  # creates a sync job
  # source and target container url and credentialsId
  syncJob = name: source: target: {
    job = {
      name = name;
      sandbox = true;
      project-type = "pipeline";
      triggers = [ {
        pollscm = {
          cron = "H/30 * * * *";
          ignore-post-commit-hooks = true;
        };
      } ];
      dsl = ''
        pipeline {
          agent any
          stages{
            stage('Pull') {
              steps {
                checkout(
                  [$class: 'GitSCM'
                  , branches: [[name: '*/master']]
                  , doGenerateSubmoduleConfigurations: false
                  , extensions: [[$class: 'LocalBranch', localBranch: 'master']]
                  , submoduleCfg: []
                  , userRemoteConfigs:
                    [[ credentialsId: '${source.credentialsId}'
                    , url: '${source.url}']]
                  ]
                )
              }
            }
            stage('Push') {
              steps {
                sshagent(['${target.credentialsId}']) {
                  withEnv(['PATH=/run/current-system/sw/bin/','NIX_PATH=/var/src/']) {
                    sh "git push -f ${target.url}"
                  }
                }
              }
            }
            stage('Push Tags') {
              steps {
                sshagent(['${target.credentialsId}']) {
                  withEnv(['PATH=/run/current-system/sw/bin/']) {
                    sh "git push -f ${target.url} --tags"
                  }
                }
              }
            }
          }
        }
      '';
    };
  };

}