sanitize repo

Change-Id: I0b20007d89302b52155198bb266b6d7f7b2c36dd

Author: aojea

.gitignore

@@ -72,3 +72,5 @@ dkms.conf
 
 # Go workspace file
 go.work
+
+bin/

Dockerfile

@@ -17,7 +17,7 @@ COPY ./main.go ./go.mod ./go.sum ./
 RUN go mod download
 RUN CGO_ENABLED=0 go build -o /go/bin/nat64 .
 
-FROM registry.k8s.io/build-image/distroless-iptables:v0.5.1
+FROM registry.k8s.io/build-image/distroless-iptables:v0.6.2
 COPY --from=ebpf-builder --chown=root:root /go/src/app/bpf/nat64.o /bpf/nat64.o
 COPY --from=builder --chown=root:root /go/bin/nat64 /nat64
 CMD ["/nat64"]

Makefile

@@ -0,0 +1,50 @@
+REPO_ROOT:=${CURDIR}
+OUT_DIR=$(REPO_ROOT)/bin
+BINARY_NAME?=na64
+
+# go1.9+ can autodetect GOROOT, but if some other tool sets it ...
+GOROOT:=
+# enable modules
+GO111MODULE=on
+# disable CGO by default for static binaries
+CGO_ENABLED=0
+export GOROOT GO111MODULE CGO_ENABLED
+
+
+test:
+	CGO_ENABLED=1 go test -v -race -count 1 ./...
+
+# code linters
+lint:
+	hack/lint.sh
+
+update:
+	go mod tidy
+
+# get image name from directory we're building
+IMAGE_NAME=nat64
+# docker image registry, default to upstream
+REGISTRY?=docker.io/aojea
+# tag based on date-sha
+TAG?=$(shell echo "$$(date +v%Y%m%d)-$$(git describe --always --dirty)")
+# the full image tag
+KNP_IMAGE?=$(REGISTRY)/$(IMAGE_NAME):$(TAG)
+PLATFORMS?=linux/amd64
+# PLATFORMS?=linux/amd64,linux/arm64
+.PHONY: ensure-buildx
+ensure-buildx:
+	./hack/init-buildx.sh
+
+image-build:
+	docker buildx build . \
+		--tag="${KNP_IMAGE}" \
+		--load
+
+image-push:
+	docker buildx build . \
+		--platform="${PLATFORMS}" \
+		--tag="${KNP_IMAGE}" \
+		--push
+
+.PHONY: release # Build a multi-arch docker image
+release: ensure-buildx image-push

hack/init-buildx.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+# Copyright 2020 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+set -o errexit -o nounset -o pipefail
+
+# We can skip setup if the current builder already has multi-arch
+# AND if it isn't the docker driver, which doesn't work
+current_builder="$(docker buildx inspect)"
+# linux/amd64, linux/arm64, linux/riscv64, linux/ppc64le, linux/s390x, linux/386, linux/arm/v7, linux/arm/v6
+if ! grep -q "^Driver: docker$" <<<"${current_builder}" && \
+     grep -q "linux/amd64" <<<"${current_builder}" && \
+     grep -q "linux/arm64" <<<"${current_builder}"; then
+  exit 0
+fi
+
+# Ensure qemu is in binfmt_misc
+# Docker desktop already has these in versions recent enough to have buildx
+# We only need to do this setup on linux hosts
+if [ "$(uname)" == 'Linux' ]; then
+  # NOTE: this is pinned to a digest for a reason!
+  docker run --rm --privileged tonistiigi/binfmt:qemu-v7.0.0-28@sha256:66e11bea77a5ea9d6f0fe79b57cd2b189b5d15b93a2bdb925be22949232e4e55 --install all
+fi
+
+# Ensure we use a builder that can leverage it (the default on linux will not)
+docker buildx rm knp-builder || true
+docker buildx create --use --name=knp-builder

hack/lint.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+
+set -o errexit
+set -o nounset
+set -o pipefail
+
+REPO_ROOT=$(dirname "${BASH_SOURCE[0]}")/..
+
+cd $REPO_ROOT
+docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v1.56.2 golangci-lint run -v

main.go

@@ -117,7 +117,7 @@ func main() {
 	http.Handle("/metrics", promhttp.Handler())
 	go func() {
 		log.Printf("starting metrics server listening in %s", metricsBindAddress)
-		http.ListenAndServe(metricsBindAddress, nil)
+		http.ListenAndServe(metricsBindAddress, nil) // nolint:errcheck
 	}()
 
 	// Remove resource limits for kernels <5.11.