- init debian package build & test

.gitlab-ci.yml

+variables:
+  VERAPDF_VERSION: "1.24.1"
+  DOCKERFILE_DEB: "${CI_PROJECT_DIR}/gitlab-ci/Dockerfile_DEB"
+  IMAGE_TARGET_DEB: "${CI_REGISTRY_IMAGE}/debian12_verapdf_build_env"
+
+stages:          # List of stages for jobs, and their order of execution
+  - build-env
+  - local-install
+  - package
+  - install-test
+
+.build-env-job:
+  stage: build-env
+  timeout: 10m
+  tags:
+    - "docker"
+  image:
+    # Use Kaniko base image to build a Docker image to use as the base image for later jobs.
+    name: gcr.io/kaniko-project/executor:debug
+    entrypoint: [""]
+  # Do not run the before_script tasks here, they wouldn't be included in the Docker image. Instead, provide an empty list of tasks.
+  before_script: []
+  # docu: https://docs.gitlab.com/ee/ci/docker/using_kaniko.html, this is basically copy-pasted from there
+  script:
+    - mkdir -p /kaniko/.docker
+    - echo "{\"auths\":{\"$CI_REGISTRY\":{\"auth\":\"$(printf "%s:%s" "$CI_REGISTRY_USER" "$CI_REGISTRY_PASSWORD" | base64 | tr -d '\n')\"},\"$(printf "%s" "$CI_DEPENDENCY_PROXY_SERVER" | cut -d':' -f1)\":{\"auth\":\"$(printf "%s:%s" "$CI_DEPENDENCY_PROXY_USER" "$CI_DEPENDENCY_PROXY_PASSWORD" | base64 | tr -d '\n')\"}}}" > /kaniko/.docker/config.json
+    # In this task, Kaniko executor is called to build the Image based on the Dockerfile provided with "--dockerfile".
+    - echo "CI_PROJECT_DIR=${CI_PROJECT_DIR}"
+    - >-
+      /kaniko/executor
+      --context "${CI_PROJECT_DIR}"
+      --dockerfile "${DOCKERFILE}"
+      --destination "${IMAGE_TARGET}:latest"
+      --build-arg "GITDIR=${CI_PROJECT_DIR}"
+      --cache=true
+      --cache-repo=${CI_REGISTRY_IMAGE}
+      --cache-copy-layers=true
+      --snapshotMode=redo
+      --use-new-run
+      --ignore-var-run
+
+build-debian-env-job:
+  extends: .build-env-job
+  variables:
+    DOCKERFILE: ${DOCKERFILE_DEB}
+    IMAGE_TARGET: ${IMAGE_TARGET_DEB}
+
+local-install-debian-job:   # This job runs in the test stage.
+  stage: local-install    # It only starts when the job in the build stage completes successfully.
+  timeout: 5m
+  tags:
+    - "docker"
+  image:
+    name: "${IMAGE_TARGET_DEB}:latest"
+  variables:
+    INSTALL_PATH_DEB: "/usr/local/verapdf"
+  script:
+    # download zipped verapdf installer
+    # HINT: https://software.verapdf.org/rel/1.24/verapdf-greenfield-1.24.1-installer.zip
+    - VERAPDF_VERSION_WITHOUT_PATCHLEVEL="$(echo ${VERAPDF_VERSION} | sed 's#^\([0-9]*\.[0-9]*\).*#\1#g')"
+    - ZIPPED_VERAPDF_INSTALLER_URL="https://software.verapdf.org/rel/${VERAPDF_VERSION_WITHOUT_PATCHLEVEL}/verapdf-greenfield-${VERAPDF_VERSION}-installer.zip"
+    - wget "${ZIPPED_VERAPDF_INSTALLER_URL}"
+    # unpack installer
+    - unzip verapdf-greenfield-${VERAPDF_VERSION}-installer.zip
+    # set absolute file path to xml template for automated install
+    # HINT: /builds/digital-preservation/verapdf_package_build/verapdf-greenfield-1.24.1
+    - VERAPDF_UNZIP_DIR="$(pwd)verapdf-greenfield-${VERAPDF_VERSION}"
+    - AUTO_INSTALL_XML_PATH="${VERAPDF_UNZIP_DIR}/auto-install.DEB.xml"
+    # set installation path in xml template
+    - sed "s#INSTALL_PATH#${INSTALL_PATH_DEB}#g" gitlab-ci/auto-install.xml > "${AUTO_INSTALL_XML_PATH}"
+    # run headless verapdf installation
+    - "${VERAPDF_UNZIP_DIR}/verapdf-install" "${AUTO_INSTALL_XML_PATH}"
+    # test call verapdf
+    - /usr/local/verapdf/verapdf --version | grep "${VERAPDF_VERSION}"
+
+package-debian-job:
+  stage: package
+  timeout: 5m
+  image:
+    name: "${IMAGE_TARGET_DEB}:latest"
+  tags:
+    - "docker"
+  script:
+    # HINT: current working dir == '/builds/digital-preservation/verapdf_package_build' as root
+    # retrieve version infos
+    - REVISION="1"
+    - BRANCH="$(([ -z "${CI_COMMIT_BRANCH}" ] && echo ${CI_COMMIT_TAG} || echo ${CI_COMMIT_BRANCH}) | sed "s#[^A-Za-z0-9\.~+-]##g")" # use tag name in tag pipelines, filter characters based on https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-version
+    - VERSION="$(git rev-list HEAD --count)-${BRANCH}"
+    - ARCHITECTURE="all"
+    # create build dir structure
+    - DEB_BUILD_DIR="verapdf_${VERSION}-${REVISION}_${ARCHITECTURE}"
+    - mkdir -p ${DEB_BUILD_DIR}/DEBIAN
+    # copy project files to be packaged
+    - mkdir -p ${DEB_BUILD_DIR}/usr/local/
+    - cp -r /usr/local/verapdf ${DEB_BUILD_DIR}/usr/local/
+    # copy & rename deb control file template
+    - cp gitlab-ci/verapdf.control ${DEB_BUILD_DIR}/DEBIAN/control
+    # set package version
+    - sed -i "s#VERSION_PLACEHOLDER#$VERSION-$REVISION#g" ${DEB_BUILD_DIR}/DEBIAN/control
+    # add checksums
+    - pushd ${DEB_BUILD_DIR}
+    - md5sum $(find * -type f -not -path 'DEBIAN/*') > DEBIAN/md5sums
+    - popd
+    # build binary deb package
+    - dpkg-deb --build --root-owner-group ${DEB_BUILD_DIR}/
+  artifacts:
+    paths:
+      # package name: verapdf_[VERSION]-[REVISION]_[ARCHITECTURE].deb
+      - "*.deb"
+
+test-install-debian-job:
+  stage: test-install
+  timeout: 5m
+  image:
+    # HINT: debian base image to simulate an installation target
+    name: "sdvharbor.slub-dresden.de/replication/debian:bookworm-slim"
+  tags:
+    - "docker"
+  script:
+    - apt install -y ./verapdf*.deb
+    - /usr/local/verapdf/verapdf --version | grep '${VERAPDF_VERSION}'
\ No newline at end of file

gitlab-ci/Dockerfile_DEB

+FROM sdvharbor.slub-dresden.de/replication/debian:bookworm-slim
+
+ENV DEBIAN_FRONTEND=noninteractive
+RUN apt-get update && \
+    apt-get dist-upgrade -y && \
+    apt-get autoremove -y && \
+    apt-get install -y git coreutils sed default-jre wget unzip && \
+    apt-get autoclean -y

gitlab-ci/auto-install.xml

+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<AutomatedInstallation langpack="eng">
+    <com.izforge.izpack.panels.htmlhello.HTMLHelloPanel id="welcome"/>
+    <com.izforge.izpack.panels.target.TargetPanel id="install_dir">
+	<installpath>INSTALL_PATH</installpath>
+    </com.izforge.izpack.panels.target.TargetPanel>
+    <com.izforge.izpack.panels.packs.PacksPanel id="sdk_pack_select">
+        <pack index="0" name="veraPDF GUI" selected="true"/>
+        <pack index="1" name="veraPDF Mac and *nix Scripts" selected="true"/>
+        <pack index="2" name="veraPDF Validation model" selected="true"/>
+        <pack index="3" name="veraPDF Documentation" selected="true"/>
+        <pack index="4" name="veraPDF Sample Plugins" selected="true"/>
+    </com.izforge.izpack.panels.packs.PacksPanel>
+    <com.izforge.izpack.panels.install.InstallPanel id="install"/>
+    <com.izforge.izpack.panels.finish.FinishPanel id="finish"/>
+</AutomatedInstallation>

gitlab-ci/verapdf.control

+Package: verapdf
+Version: VERSION_PLACEHOLDER
+Architecture: all
+Maintainer: SLUBArchiv.digital <langzeitarchiv@slub-dresden.de>
+Description: veraPDF is a purpose-built, open source, file-format validator covering all PDF/A and PDF/UA parts and conformance levels.
+Homepage: https://git.slub-dresden.de/digital-preservation/verapdf_package_build
+Section: main
+Priority: optional
+Depends: default-jre