cmd/buildlet/stage0: add LUCI environment setup

Improve run-worker to successfully start up LUCI. It depends on sudo, so
add it to all of our images.

The resulting image is up and running as a LUCI worker, and debugnewvm
on it also works fine.

Change-Id: Ibcac4acf5f9849e5847ae926e333002108c08a0d
Reviewed-on: https://go-review.googlesource.com/c/build/+/508866
Run-TryBot: Heschi Kreinick <[email protected]>
Auto-Submit: Heschi Kreinick <[email protected]>
Reviewed-by: Carlos Amedee <[email protected]>
TryBot-Result: Gopher Robot <[email protected]>

Author: heschi

cmd/buildlet/stage0/run-worker.sh

@@ -4,10 +4,27 @@
 # license that can be found in the LICENSE file.
 
 set -o pipefail
+
+trap "exit 10" SIGUSR1
+
 project=$(curl -s -H "Metadata-Flavor: Google" http://metadata.google.internal/computeMetadata/v1/project/project-id)
 
-worker=stage0
-if [[ $project =~ "luci" ]]; then
-    worker=bootstrapswarm
+if [[ ! $project =~ "luci" ]]; then
+    exec $(dirname $0)/stage0
+fi
+
+if ! id swarming >& /dev/null; then
+    useradd -m swarming
 fi
-exec $(dirname $0)/$worker
+
+echo "%swarming ALL = NOPASSWD: /sbin/shutdown" > /etc/sudoers.d/swarming
+echo -e '#!/bin/bash\nkill -SIGUSR1 1' > /sbin/shutdown
+chmod 0755 /sbin/shutdown
+
+SWARM_DIR=/b/swarming
+mkdir -p $SWARM_DIR
+chown swarming:swarming $SWARM_DIR
+
+su -c "$(dirname $0)/bootstrapswarm" swarming &
+wait %1
+exit $?

env/android-amd64-emu/Dockerfile

@@ -50,6 +50,7 @@ RUN apt-get update && apt-get install -y \
 	openjdk-8-jdk \
 	python \
 	lib32z1 \
+	sudo \
 	&& rm -rf /var/lib/apt/lists/*
 
 RUN mkdir -p /go1.4-amd64 \

env/crosscompile/linux-armel-cross/Dockerfile

@@ -32,6 +32,7 @@ RUN dpkg --add-architecture armel \
 	procps \
 	lsof \
 	psmisc \
+	sudo \
 	--no-install-recommends \
 	&& rm -rf /var/lib/apt/lists/*
 

env/crosscompile/linux-armhf-cross/Dockerfile

@@ -30,6 +30,7 @@ RUN dpkg --add-architecture armhf \
 	procps \
 	lsof \
 	psmisc \
+	sudo \
 	--no-install-recommends \
 	&& rm -rf /var/lib/apt/lists/*
 

env/crosscompile/linux-s390x-cross/Dockerfile

@@ -29,6 +29,7 @@ RUN apt-get update && apt-get install -y \
 	procps \
 	lsof \
 	psmisc \
+	sudo \
 	--no-install-recommends \
 	&& rm -rf /var/lib/apt/lists/*
 

env/linux-x86-alpine/Dockerfile

@@ -28,7 +28,8 @@ RUN apk add --no-cache \
 	make \
 	openssh \
 	procps \
-	strace
+	strace \
+	sudo
 
 RUN ssh-keygen -A
 RUN bash -c "(echo ChallengeResponseAuthentication no; echo PasswordAuthentication no; echo PermitRootLogin yes) > /etc/ssh/sshd_config"

env/linux-x86-bookworm/Dockerfile

@@ -57,6 +57,7 @@ RUN apt-get update && apt-get install -y \
 	psmisc \
 	strace \
 	subversion \
+	sudo \
 	swig \
 	&& rm -rf /var/lib/apt/lists/*
 

env/linux-x86-bullseye/Dockerfile

@@ -57,6 +57,7 @@ RUN apt-get update && apt-get install -y \
 	psmisc \
 	strace \
 	subversion \
+	sudo \
 	swig \
 	&& rm -rf /var/lib/apt/lists/*
 

env/linux-x86-buster/Dockerfile

@@ -39,6 +39,7 @@ RUN apt-get update && apt-get install -y \
 	openssh-server \
 	iptables \
 	make \
+	sudo \
 	&& rm -rf /var/lib/apt/lists/*
 
 RUN mkdir -p /go1.4-amd64 \

env/linux-x86-clang/Dockerfile

@@ -29,6 +29,7 @@ RUN apt-get update && apt-get install -y \
 	openssh-server \
 	netbase \
 	make \
+	sudo \
 	&& rm -rf /var/lib/apt/lists/* \
 	&& rm -f /usr/bin/gcc