app-launcher draft

common/src/main/groovy/org/openforis/sepal/user/GoogleTokens.groovy

@@ -4,7 +4,7 @@ import groovy.transform.Immutable
 
 @Immutable
 class GoogleTokens {
-    static final int REFRESH_IF_EXPIRES_IN_MINUTES = 10
+    private static final int REFRESH_IF_EXPIRES_IN_MINUTES = 10
 
     String refreshToken
     String accessToken

dev-env/config/deps.json

@@ -20,6 +20,15 @@
             "logger"
         ]
     },
+    "app-launcher" : {
+        "lib": [
+            "shared"
+        ],
+        "build": {},
+        "run": [
+            "logger"
+        ]
+    },
     "email": {
         "lib": [
             "shared"

dev-env/config/groups.json

@@ -15,7 +15,9 @@
         "terminal",
         "user",
         "user-files",
-        "user-storage"
+        "user-storage",
+        "ceo-gateway",
+        "app-launcher"
     ],
     "process": [
         "gateway",
@@ -26,7 +28,9 @@
         "mysql",
         "rabbitmq",
         "sepal-server",
-        "user"
+        "user",
+        "ceo-gateway",
+        "app-launcher"
     ],
     "apps": [
         "app-manager",
@@ -39,7 +43,8 @@
         "sepal-server",
         "ssh-gateway",
         "terminal",
-        "user"
+        "user",
+        "app-launcher"
     ],
     "node": [
         "app-manager",
@@ -53,6 +58,8 @@
         "task",
         "terminal",
         "user-files",
-        "user-storage"
+        "user-storage",
+        "ceo-gateway",
+        "app-launcher"
     ]
 }

modules/app-launcher/Dockerfile

@@ -0,0 +1,68 @@
+FROM node:20-bookworm
+
+EXPOSE 5011
+
+ENV MODULE_NAME app-launcher
+ENV MODULE /usr/local/src/sepal/modules/${MODULE_NAME}
+ENV SHARED /usr/local/src/sepal/lib/js/shared
+
+RUN npm install -g nodemon
+
+RUN apt-get update && apt-get install -y \
+    apt-utils \
+    git \
+    curl \
+    cmake \
+    ca-certificates \
+    gnupg \
+    inetutils-ping \
+    lsb-release \
+    nano \
+    unzip \
+    zip \
+    sudo
+
+RUN adduser node sudo && echo 'node      ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers
+
+# Set bash prompt
+RUN echo "export PS1='[\[\033[1;34m\]\u@${MODULE_NAME}\[\033[0m\]:\w]\$ '" >> /home/node/.bashrc
+RUN echo "export PS1='[\[\033[1;34m\]\u@${MODULE_NAME}\[\033[0m\]:\w]\$ '" >> /root/.bashrc
+
+# Install docker-cli (as we do in dev-env)
+
+RUN curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
+
+RUN echo \
+    "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian \
+    $(lsb_release -cs) stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null
+
+RUN apt-get update && apt-get install -y docker-ce-cli
+
+# Install docker compose
+
+RUN mkdir -p /usr/local/lib/docker/cli-plugins
+RUN curl -SL https://github.com/docker/compose/releases/download/v2.29.2/docker-compose-linux-x86_64 -o /usr/local/lib/docker/cli-plugins/docker-compose
+RUN chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
+
+
+# ADD lib/js/shared ${SHARED}
+# WORKDIR ${SHARED}/js/shared
+# USER root
+# RUN chown -R node: ${SHARED}
+# USER node
+# RUN npm install
+
+ADD modules/${MODULE_NAME}/package.json ${MODULE}/
+ADD modules/${MODULE_NAME}/package-lock.json ${MODULE}/
+WORKDIR ${MODULE}
+USER root
+RUN mkdir src && chown -R node: ${MODULE}
+USER node
+RUN npm install
+
+ADD modules/${MODULE_NAME}/src ${MODULE}/src
+ADD modules/${MODULE_NAME}/config ${MODULE}/config
+ADD modules/${MODULE_NAME}/start.sh /usr/local/bin
+ADD modules/${MODULE_NAME}/update-app.sh /usr/local/bin/update-app
+
+CMD start.sh

modules/app-launcher/config/log.json

@@ -0,0 +1,9 @@
+{
+    "port": 5104,
+    "categories": {
+        "main": "debug",
+        "proxy": "debug",
+        "user": "debug",
+        "terminal": "debug"
+    }
+}

modules/app-launcher/docker-compose.override.yml

@@ -0,0 +1,13 @@
+services:
+  app-launcher:
+    extends:
+      file: ../docker-compose.logger.override.yml
+      service: logger
+    environment:
+      SEPAL_HOST_PROJECT_DIR: "${SEPAL_PROJECT_DIR}"
+    extra_hosts:
+      - 'host.docker.internal:host-gateway'
+    volumes:  # To allow dynamic reloading in dev
+      - ${SEPAL_PROJECT_DIR}/lib/js/shared:/usr/local/src/sepal/lib/js/shared
+      - ${SEPAL_PROJECT_DIR}/modules/app-launcher:/usr/local/src/sepal/modules/app-launcher
+      - ${SEPAL_PROJECT_DIR}/modules/app-launcher/update-app.sh:/usr/local/bin/update-app

modules/app-launcher/docker-compose.yml

@@ -0,0 +1,47 @@
+services:
+  app-launcher:
+    extends:
+      file: ../docker-compose.logger.yml
+      service: logger
+    build:
+      context: ../..
+      dockerfile: ./modules/app-launcher/Dockerfile
+      ulimits:
+        nofile:
+          soft: 65536
+          hard: 65536
+    image: "${DOCKER_REGISTRY_HOST:-localhost}/openforis/app-launcher:${SEPAL_VERSION:-latest}"
+    container_name: app-launcher
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - "${SEPAL_DATA_DIR}/app-manager/apps.json:/var/lib/sepal/app-manager/apps.json"
+      - "${SEPAL_DATA_DIR}/sepal/shared/apps:/var/lib/sepal/app-manager/apps"
+      - "${SEPAL_DATA_DIR}/app-launcher:/var/lib/sepal/app-launcher"
+    init: true
+    environment:
+      SEPAL_HOST: "${SEPAL_HOST}"
+      USERS_HOME_PATH: "${SEPAL_DATA_DIR}/sepal/home"
+      EE_CREDENTIALS_PATH: "${SEPAL_DATA_DIR}/app-launcher/service-account-credentials.json"
+      DOCKER_REGISTRY_HOST: "${DOCKER_REGISTRY_HOST}"
+      SEPAL_DATA_DIR: "${SEPAL_DATA_DIR}"
+      DEPLOY_ENVIRONMENT : "${DEPLOY_ENVIRONMENT}"
+      EE_ACCOUNT: "${EE_ACCOUNT}"
+      EE_PRIVATE_KEY: "${EE_PRIVATE_KEY}"
+      GOOGLE_PROJECT_ID: "${GOOGLE_PROJECT_ID}"
+      GOOGLE_MAPS_API_KEY: "${GOOGLE_MAPS_API_KEY}"
+      NICFI_PLANET_API_KEY: "${NICFI_PLANET_API_KEY}"
+
+    # healthcheck:
+    #   test: bash -c "exec 6<> /dev/tcp/localhost/5011"
+    #   timeout: 60s
+    #   interval: 1s
+    #   retries: 60
+    networks:
+      - sepal
+    restart: always
+    ulimits:
+      core: 0
+
+networks:
+  sepal:
+    external: true