refresh_rhcos.sh

#!/usr/bin/env bash

set -eu
set -o pipefail

function show_usage() {
    echo "Refresh RHCOS image on cloud"
    echo ""
    echo "  $0 [-h] [-b <BRANCH>]"
    echo ""
    echo "Options:"
    echo "  -b <BRANCH> The branch name. Example: 4.18"
    echo "  -h          Show this help text."
    exit 0
}

if [ -z "$OS_CLOUD" ]; then
    echo 'Set your OS_CLOUD environment variable'
    exit 1
fi

BRANCH="4.2"

opts=$(getopt -n "$0" -o "b:h" --long 'branch:,help' -- "$@")

eval set "--$opts"

CACHE_DIR="${XDG_CACHE_HOME:-${HOME}/.cache}/openshift-installer/image_cache"
mkdir -p "$CACHE_DIR"

while [[ $# -gt 0 ]]; do
    case "$1" in
        -h|--help)
            show_usage
            ;;
        -b|--branch)
            BRANCH=$2
            shift 2
            ;;
        *)
            break
            ;;
    esac
done

if [ "$BRANCH" == "4.2" ]; then
    REAL_BRANCH_NAME="release-$BRANCH"
    # We want to leave 4.2 image under the rhcos name
    IMAGE_NAME="rhcos"
else
    REAL_BRANCH_NAME="release-$BRANCH"
    IMAGE_NAME="rhcos-$BRANCH"
fi

RHCOS_VERSIONS_FILE="$(mktemp)"
if [[ "$BRANCH" =~ ^4\..$ ]]; then
    FILE_URL="https://raw.githubusercontent.com/openshift/installer/${REAL_BRANCH_NAME}/data/data/rhcos.json"
    curl --silent -o "$RHCOS_VERSIONS_FILE" "$FILE_URL"
    IMAGE_SHA="$(jq --raw-output '.images.openstack."uncompressed-sha256"' "$RHCOS_VERSIONS_FILE")"
    IMAGE_URL="$(jq --raw-output '.baseURI + .images.openstack.path' "$RHCOS_VERSIONS_FILE")"
    IMAGE_VERSION="$(jq --raw-output '."ostree-version"' "$RHCOS_VERSIONS_FILE")"
else
    FILE_URL="https://raw.githubusercontent.com/openshift/installer/${REAL_BRANCH_NAME}/data/data/coreos/rhcos.json"
    curl --silent -o "$RHCOS_VERSIONS_FILE" "$FILE_URL"
    IMAGE_SHA="$(jq --raw-output '.architectures.x86_64.artifacts.openstack.formats."qcow2.gz".disk."uncompressed-sha256"' "$RHCOS_VERSIONS_FILE")"
    IMAGE_URL="$(jq --raw-output '.architectures.x86_64.artifacts.openstack.formats."qcow2.gz".disk.location' "$RHCOS_VERSIONS_FILE")"
    IMAGE_VERSION="$(jq --raw-output '.architectures.x86_64.artifacts.openstack.release' "$RHCOS_VERSIONS_FILE")"
fi

current_image_version="$(mktemp)"
openstack image show -c properties -f json "$IMAGE_NAME" > "$current_image_version" || true

if grep -q "$IMAGE_VERSION" "$current_image_version"; then
    echo "RHCOS image '${IMAGE_NAME}' already at the latest version '$IMAGE_VERSION'"
    exit
fi

LOCAL_IMAGE_FILE="${CACHE_DIR}/$(echo -n "${IMAGE_URL}?sha256=${IMAGE_SHA}" | md5sum | cut -d ' ' -f1)"

if [ -f "$LOCAL_IMAGE_FILE" ]; then
    echo "Found cached image $LOCAL_IMAGE_FILE"
else
    echo "Downloading RHCOS image from:"
    echo "$IMAGE_URL"

    if [[ "$IMAGE_URL" == *.gz ]]; then
        curl --insecure --compressed -L -o "${LOCAL_IMAGE_FILE}.gz" "$IMAGE_URL"
        gunzip -f "${LOCAL_IMAGE_FILE}.gz"
    else
        curl --insecure --compressed -L -o "$LOCAL_IMAGE_FILE" "$IMAGE_URL"
    fi
fi

echo "Verifying image..."
if ! sha256sum --quiet -c <(echo -n "${IMAGE_SHA}  ${LOCAL_IMAGE_FILE}"); then
    echo 'Image is corrupted. Exiting...'
    exit 1
fi

echo "Uploading image to '${OS_CLOUD}' as '${IMAGE_NAME}-new'"
new_image_id="$(openstack image create "${IMAGE_NAME}-new" --container-format bare --disk-format qcow2 --file "$LOCAL_IMAGE_FILE" --private --property version="$IMAGE_VERSION" --format value --column id)"

echo "Replace old '$IMAGE_NAME' image with new one on '${OS_CLOUD}'"

# Always only keep one backup of rhcos image
openstack image delete "${IMAGE_NAME}-old" || true

# Then swap the images
openstack image set --name "${IMAGE_NAME}-old" "$IMAGE_NAME" || true
openstack image set --name "$IMAGE_NAME" "$new_image_id"

echo Done