Add statically linked binary for GitHub Release (#3)

* Allow auto-publishing when there is new tag

* Bump version and change to tfzignore

* Fix travis build issue

* Fix missing .env-build file

.env-build

@@ -0,0 +1 @@
+HOME=/volume

.travis.yml

@@ -1,59 +1,91 @@
 language: rust
 
+env:
+  global:
+  - BINARY_NAME=terraform-zap
+  - REPO_USERNAME=guangie88
+  - REPO_NAME=terraform-zap
+
 matrix:
   include:
-    - services: docker
-      env:
-        - LINT=true
-    - services: docker
-      env:
-        - COVERAGE=true
-    - rust: stable
-      sudo: false
-      env:
-        - DOC=true
-    - rust: stable
-      sudo: false
-    - rust: beta
-      sudo: false
-    - rust: nightly
-      sudo: false
+  - services: docker
+    env:
+      - LINT=true
+      - PUBLISH=true
+  - services: docker
+    env:
+      - ARTIFACT=true
+      - ARTIFACTS_DIR=./artifacts
+  - services: docker
+    env:
+      - COVERAGE=true
+  - rust: stable
+    sudo: false
+  - rust: beta
+    sudo: false
+  - rust: nightly
+    sudo: false
   fast_finish: true
 
 before_script:
-  - set -e
-  - |
-    if [ "$LINT" = "true" ]; then
-      docker-compose -f docker-compose.lint-test.yml build lint-test
-    elif [ "$COVERAGE" = "true" ]; then
-      echo "Coverage does not deal with before_script"
-    elif [ "$DOC" = "true" ]; then
-      echo "Doc does not deal with before_script"
-    else
-      cargo test --all --no-run --verbose
-    fi
+- set -e
+- |
+  if [ "$LINT" = "true" ]; then
+    docker-compose -f docker-compose.lint-test.yml build lint-test
+  elif [ "$ARTIFACT" = "true" ]; then
+    echo "Artifact not dealing with 'before_script'"
+  elif [ "$COVERAGE" = "true" ]; then
+    echo "Coverage not dealing with 'before_script'"
+  else
+    cargo test --all --no-run --verbose
+  fi
 
 script:
-  - |
-    if [ "$LINT" = "true" ]; then
-      docker-compose -f docker-compose.lint-test.yml run lint-test
-    elif [ "$COVERAGE" = "true" ]; then
-      echo "Coverage does not deal with script"
-    elif [ "$DOC" = "true" ]; then
-      cargo doc --all
-    else
-      cargo test --all --verbose
-    fi
+- |
+  if [ "$LINT" = "true" ]; then
+    docker-compose -f docker-compose.lint-test.yml run lint-test
+  elif [ "$ARTIFACT" = "true" ]; then
+    docker-compose -f docker-compose.build.yml run -u $UID:`id -g` build
+    mkdir $ARTIFACTS_DIR
+    cp ./target/x86_64-unknown-linux-musl/release/$BINARY_NAME $ARTIFACTS_DIR
+  elif [ "$COVERAGE" = "true" ]; then
+    echo "Coverage not dealing with 'script'"
+  else
+    cargo doc --all
+    cargo test --all --verbose
+  fi
 
 after_success:
-  - |
-    if [ "$COVERAGE" = "true" ]; then
-      docker run --security-opt seccomp=unconfined -v "$PWD:/volume" \
-        guangie88/ubuntu-cargo-tarpaulin:xenial-stable "
-          cargo tarpaulin --all --out Xml \
-          && bash <(curl -s https://codecov.io/bash) -t $CODECOV_TOKEN"
-    fi
+- |
+  if [ "$PUBLISH" = "true" ] && [ -n "$TRAVIS_TAG" ]; then
+    # publish when this is a new tag
+    cargo login "$CRATES_TOKEN"
+    cargo publish
+  elif [ "$ARTIFACT" = "true" ] && [ -n "$TRAVIS_TAG" ]; then
+    # upload binary artifact when this is a new tag
+    # this needs to be jq processed to extract out the `id` value
+    export TAG_ID=$(curl -X GET \
+      -H "Authorization: token $GITHUB_TOKEN" \
+      "https://api.github.com/repos/$REPO_USERNAME/$REPO_NAME/releases" \
+      | jq -r '.[] | select(.tag_name == "'$TRAVIS_TAG'").id')
+
+    # formulate zip
+    export ZIP_FILE=$BINARY_NAME-$TRAVIS_TAG.zip
+    zip -j $ZIP_FILE "$ARTIFACTS_DIR/$BINARY_NAME"
+
+    curl -X POST \
+      -H "Authorization: token $GITHUB_TOKEN" \
+      -H "Content-Type: application/zip" \
+      --upload-file $ZIP_FILE \
+      "https://uploads.github.com/repos/$REPO_USERNAME/$REPO_NAME/releases/$TAG_ID/assets?name=$ZIP_FILE"
+  elif [ "$COVERAGE" = "true" ] && [ -z "$TRAVIS_TAG" ]; then
+    docker run --security-opt seccomp=unconfined -v "$PWD:/volume" \
+      guangie88/ubuntu-cargo-tarpaulin:xenial-stable "
+        cargo tarpaulin --all --out Xml \
+        && bash <(curl -s https://codecov.io/bash) -t $CODECOV_TOKEN"
+  fi
 
 branches:
   only:
-    - master
+  - master
+  - /^v\d+\.\d+\.\d+(-\S*)?$/

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "terraform-zap"
-version = "0.1.0"
+version = "0.2.0"
 authors = ["Chen Weiguang <[email protected]>"]
 description = "Script wrapper to perform finer terraform destroy"
 repository = "https://github.com/guangie88/terraform-zap"
@@ -19,7 +19,7 @@ is_executable = "=0.1.0"
 structopt = "=0.2.7"
 structopt-derive = "=0.2.7"
 subprocess = "=0.1.12"
-terraform-zap-ignore-lib = { path = "ignore-lib", version = "0.1.0" }
+terraform-zap-ignore-lib = { path = "ignore-lib", version = "0.2.0" }
 toml = "=0.4.6"
 which = "=2.0.0"
 whiteread = "=0.4.3"

README.md

@@ -10,10 +10,14 @@ must still be installed and residing within `PATH` environment variable.
 Currently if any of the `.tf` files contain `prevent_destroy = true` for any of
 the resources, `terraform destroy` will fail and there is no flag to force
 `terraform` to skip all resources. This script wrapper helps to alleviate the
-issue by parsing `.tfignore` file in the current working directory, where the
+issue by parsing `.tfzignore` file in the current working directory, where the
 `.tf` files are residing in.
 
-## Example `.tfignore` format
+Previously the ignore file was named `.tfignore` up to `v0.1.1`, however this
+clashes with the Microsoft Team Foundation ignore file naming, so this has been
+changed to `.tfzignore`.
+
+## Example `.tfzignore` format
 
 ```toml
 exact = [
@@ -38,7 +42,7 @@ and install into your Cargo installation binary directory.
 
 ## How to run
 
-With `.tfignore` file in place, simply run `terraform-zap`. You should see
+With `.tfzignore` file in place, simply run `terraform-zap`. You should see
 mainly `terraform destroy` logs in place, but the ignored resources should now
 no longer appear during the confirmation.
 

docker-compose.build.yml

@@ -0,0 +1,19 @@
+version: '2'
+services:
+  build:
+    image: 'clux/muslrust:stable'
+    command:
+      - cargo
+      - build
+      - '--release'
+    volumes:
+      - '.:/volume'
+    env_file: .env-build
+  clean:
+    image: 'clux/muslrust:stable'
+    command:
+      - cargo
+      - clean
+    volumes:
+      - '.:/volume'
+    env_file: .env-build

ignore-lib/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "terraform-zap-ignore-lib"
-version = "0.1.0"
+version = "0.2.0"
 authors = ["Chen Weiguang <[email protected]>"]
 description = "Provides ignore implementation to terraform-zap"
 documentation = "https://docs.rs/terraform-zap-ignore-lib"

src/error.rs

@@ -16,7 +16,7 @@ pub enum Error {
     #[fail(display = "{}", _0)]
     Io(#[cause] io::Error),
 
-    #[fail(display = "Missing .tfignore file")]
+    #[fail(display = "Missing .tfzignore file")]
     MissingIgnore,
 
     #[fail(display = "{}", _0)]

src/main.rs

@@ -3,7 +3,15 @@
 
 //! # terraform-zap
 //!
-//! Script wrapper to perform finer terraform destroy
+//! Script wrapper to perform finer terraform destroy. This means that
+//! `terraform` must still be installed and residing within `PATH` environment
+//! variable.
+//!
+//! Currently if any of the `.tf` files contain `prevent_destroy = true` for any
+//! of the resources, `terraform destroy` will fail and there is no flag to
+//! force `terraform` to skip all resources. This script wrapper helps to
+//! alleviate the issue by parsing `.tfzignore` file in the current working
+//! directory, where the `.tf` files are residing in.
 
 #[macro_use]
 extern crate derive_more;
@@ -41,7 +49,7 @@ use terraform_zap_ignore_lib::Ignore;
 use yansi::Paint;
 
 const TF_CMD: &str = "terraform";
-const TFIGNORE_FILE: &str = ".tfignore";
+const TFZIGNORE_FILE: &str = ".tfzignore";
 
 fn find_ignore() -> Result<Ignore> {
     let roots = {
@@ -60,10 +68,10 @@ fn find_ignore() -> Result<Ignore> {
     let ignore_path = roots
         .into_iter()
         .map(|mut root| {
-            root.push(PathBuf::from(TFIGNORE_FILE));
+            root.push(PathBuf::from(TFZIGNORE_FILE));
             root
         })
-        .inspect(|root| v2!("Found .tfignore path: {:?}", root))
+        .inspect(|root| v2!("Found .tfzignore path: {:?}", root))
         .find(|ignore_path| Path::exists(ignore_path));
 
     if let Some(ignore_path) = ignore_path {