Makefile

REPO := logdna-agent-v2

SHELL = /bin/bash
SHELLFLAGS := -ic
.DEFAULT_GOAL := test

# The target architecture the agent is to be compiled for
export ARCH ?= x86_64
# The image repo and tag can be modified e.g.
# `make build RUST_IMAGE=docker.io/rust:latest
RUST_IMAGE_REPO ?= docker.io/logdna/build-images
RUST_IMAGE_BASE ?= bullseye
RUST_IMAGE_TAG ?= rust-$(RUST_IMAGE_BASE)-1-stable
RUST_IMAGE ?= $(RUST_IMAGE_REPO):$(RUST_IMAGE_TAG)-$(ARCH)

RUST_IMAGE_SUFFIX?=
ifneq ($(RUST_IMAGE_SUFFIX),)
	RUST_IMAGE := $(RUST_IMAGE)-$(RUST_IMAGE_SUFFIX)
endif

BENCH_IMAGE_BASE ?= bullseye
BENCH_IMAGE_TAG ?= rust-$(BENCH_IMAGE_BASE)-1-stable
BENCH_IMAGE ?= $(RUST_IMAGE_REPO):$(BENCH_IMAGE_TAG)-$(ARCH)

TOOLS_IMAGE_BASE ?= bullseye
TOOLS_IMAGE_TAG ?= rust-$(TOOLS_IMAGE_BASE)-1-stable
TOOLS_IMAGE ?= $(RUST_IMAGE_REPO):$(TOOLS_IMAGE_TAG)-$(ARCH)

HADOLINT_IMAGE_REPO ?= hadolint/hadolint
HADOLINT_IMAGE_TAG ?= v2.12.0-debian
HADOLINT_IMAGE ?= $(HADOLINT_IMAGE_REPO):$(HADOLINT_IMAGE_TAG)
HADOLINT_IMAGE := $(HADOLINT_IMAGE)

SHELLCHECK_IMAGE_REPO ?= koalaman/shellcheck-alpine
SHELLCHECK_IMAGE_TAG ?= stable
SHELLCHECK_IMAGE ?= $(SHELLCHECK_IMAGE_REPO):$(SHELLCHECK_IMAGE_TAG)
SHELLCHECK_IMAGE := $(SHELLCHECK_IMAGE)

WORKDIR :=/build
DOCKER := DOCKER_BUILDKIT=1 docker
DOCKER_DISPATCH := ARCH=$(ARCH) ./docker/dispatch.sh "$(WORKDIR)" "$(shell pwd):/build:Z"
DOCKER_JOURNALD_DISPATCH := BUILD_IMAGE=$(RUST_IMAGE) ARCH=$(ARCH) ./docker/journald_dispatch.sh "$(WORKDIR)" "$(shell pwd):/build:Z"
DOCKER_KIND_DISPATCH := BUILD_IMAGE=$(RUST_IMAGE) ARCH=$(ARCH) ./docker/kind_dispatch.sh "$(WORKDIR)" "$(shell pwd):/build:Z"
DOCKER_PRIVATE_IMAGE := us.gcr.io/logdna-k8s/logdna-agent-v2
DOCKER_PUBLIC_IMAGE ?= docker.io/logdna/logdna-agent
DOCKER_IBM_IMAGE := icr.io/ext/logdna-agent

export CARGO_CACHE ?= $(shell pwd)/.cargo_cache
RUST_COMMAND := $(DOCKER_DISPATCH) $(RUST_IMAGE)
UNCACHED_RUST_COMMAND := CACHE_TARGET="false" $(DOCKER_DISPATCH) $(RUST_IMAGE)
DEB_COMMAND := CACHE_TARGET="false" $(DOCKER_DISPATCH) alanfranz/fpm-within-docker:debian-bullseye
RPM_COMMAND := CACHE_TARGET="false" $(DOCKER_DISPATCH) alanfranz/fpm-within-docker:centos-8
BENCH_COMMAND = CACHE_TARGET="false" $(DOCKER_DISPATCH) $(BENCH_IMAGE)
HADOLINT_COMMAND := $(DOCKER_DISPATCH) $(HADOLINT_IMAGE)
SHELLCHECK_COMMAND := $(DOCKER_DISPATCH) $(SHELLCHECK_IMAGE)
TOOLS_COMMAND := $(DOCKER_DISPATCH) $(TOOLS_IMAGE)

# max($(nproc)/4, 1)
TEST_THREADS ?= $(shell threads=$$(echo $$(nproc)/4 | bc); echo $$(( threads > 1 ? threads: 1)))
TEST_THREADS_ARG = --test-threads=$(TEST_THREADS)

K8S_TEST_CREATE_CLUSTER ?= true

VCS_REF := $(shell git rev-parse --short HEAD)
VCS_URL := https://github.com/logdna/$(REPO)
BUILD_DATE := $(shell date -u +'%Y%m%d')
BUILD_TIMESTAMP := $(shell date -u +'%Y-%m-%dT%H:%M:%SZ')
BUILD_VERSION := $(shell sed -nE "s/^version = \"(.+)\"\$$/\1/p" bin/Cargo.toml)
BUILD_SLUG ?= $(VCS_REF)
IMAGE_TAG := $(BUILD_SLUG)-$(ARCH)
BUILD_NUMBER ?= 0

MAJOR_VERSION := $(shell echo $(BUILD_VERSION) | cut -s -d. -f1)
MINOR_VERSION := $(shell echo $(BUILD_VERSION) | cut -s -d. -f2)
PATCH_VERSION := $(shell echo $(BUILD_VERSION) | cut -s -d. -f3 | cut -d- -f1)
BETA_VERSION := $(shell echo $(BUILD_VERSION) | cut -s -d- -f2 | cut -s -d. -f2)

TARGET_TAG ?= $(BUILD_VERSION)

ifeq ($(BETA_VERSION),)
	BETA_VERSION := 0
endif

ifeq ($(ALL), 1)
	CLEAN_TAG := *
else
	CLEAN_TAG := $(IMAGE_TAG)
endif

PULL ?= 1
ifeq ($(PULL), 1)
	PULL_OPTS := --pull
else
	PULL_OPTS :=
endif

CARGO_COMMAND:=cargo

STATIC ?= 0
ARCH_TRIPLE?=$(ARCH)-linux-gnu
TARGET?=$(ARCH)-unknown-linux-gnu
WINDOWS?=

NO_DEFAULT_FEATURES?=

ROCKSDB_VERSION=8.3.2

ifneq ($(WINDOWS),)
	FEATURES?=windows_service
	TARGET=$(ARCH)-pc-windows-msvc
	ARCH_TRIPLE?=$(ARCH)-windows-msvc
	BINDGEN_EXTRA_CLANG_ARGS:=
	RUSTFLAGS:=
	RUSTFLAGS:=-Ctarget-feature=+crt-static -Clink-arg=-static -Clink-arg=-static-libstdc++ -Clink-arg=-static-libgcc
	CARGO_COMMAND:=cargo xwin
	BIN_SUFFIX=.exe
else ifeq ($(STATIC), 1)
	FEATURES?=jemalloc
	ARCH_TRIPLE=$(ARCH)-linux-musl
	TARGET=$(ARCH)-unknown-linux-musl
	RUSTFLAGS:=-C link-self-contained=yes -Ctarget-feature=+crt-static -Clink-arg=-static -Clink-arg=-static-libstdc++ -Clink-arg=-static-libgcc -L /usr/local/$(ARCH)-linux-musl/lib/ -l static=stdc++ $(RUSTFLAGS)
	BINDGEN_EXTRA_CLANG_ARGS:=-I /usr/local/$(ARCH)-linux-musl/include
	SYSROOT_USR_DIR=/sysroot/$(ARCH)-musl/usr/$(TARGET)/
	BUILD_ENVS:=$(BUILD_ENVS) ROCKSDB_LIB_DIR=$(SYSROOT_USR_DIR)/lib/rocksdb-$(ROCKSDB_VERSION)/ ROCKSDB_INCLUDE_DIR=$(SYSROOT_USR_DIR)/include/rocksdb-$(ROCKSDB_VERSION)/ ROCKSDB_STATIC=1 JEMALLOC_SYS_WITH_LG_PAGE=16
else ifneq ($(MAKECMDGOALS),bench)
	FEATURES?=libjournald jemalloc
	RUSTFLAGS:=
endif

TARGET_DIR?=target/$(ARCH_TRIPLE)
BUILD_ENVS:=$(BUILD_ENVS) CARGO_TARGET_DIR=$(TARGET_DIR)


# Should we profile the benchmarks
PROFILE?=--profile

CHANGE_BIN_VERSION = awk '{sub(/^version = ".+"$$/, "version = \"$(1)\"")}1' bin/Cargo.toml >> bin/Cargo.toml.tmp && mv bin/Cargo.toml.tmp bin/Cargo.toml

CHANGE_K8S_VERSION = sed 's/\(.*\)app\.kubernetes\.io\/version\(.\).*$$/\1app.kubernetes.io\/version\2 $(1)/g' $(2) >> $(2).tmp && mv $(2).tmp $(2)

CHANGE_K8S_IMAGE = sed -E 's/(logdna\/logdna-agent:|logdna\/logdna-agent-stress-test:).*$$/\1$(1)/g' $(2) >> $(2).tmp && mv $(2).tmp $(2)

CHANGE_README_VERSION = awk '{sub(/img\.shields\.io\/badge\/Version-.+?-E9FF92.svg/, "img\.shields\.io\/badge\/Version-$(subst -,--,$(1))-E9FF92.svg")}1' docs/README.md >> docs/README.md.tmp && mv docs/README.md.tmp docs/README.md

REMOTE_BRANCH ?= $(shell git branch -vv | awk '/^\*/{split(substr($$4, 2, length($$4)-2), arr, "/"); print arr[2]}')

AWS_SHARED_CREDENTIALS_FILE=$(HOME)/.aws/credentials

LOGDNA_HOST?=localhost:1337

RUST_LOG?=info

space := $(subst ,, )
comma := ,

FEATURES_ARG=$(if $(FEATURES),--features $(subst $(space),$(comma),$(FEATURES)))

ifneq ($(NO_DEFAULT_FEATURES),)
	FEATURES_ARG:=--no-default-features $(FEATURES_ARG)
endif

join-with = $(subst $(space),$1,$(strip $2))

_TAC= awk '{line[NR]=$$0} END {for (i=NR; i>=1; i--) print line[i]}'
TEST_RULES=

# Dynamically generate test targets for each workspace
define TEST_RULE
TEST_RULES=$(TEST_RULES)test-$(1): <> Run unit tests for $(1) crate\\n
test-$(1):
	$(RUST_COMMAND) "--env RUST_BACKTRACE=1 --env RUST_LOG=$(RUST_LOG)" "cargo nextest run -p $(1) $(TESTS) --no-fail-fast --nocapture"
endef

CRATES=$(shell sed -e '/members/,/]/!d' Cargo.toml | tail -n +2 | $(_TAC) | tail -n +2 | $(_TAC) | sed 's/,//' | xargs -I{} sh -c 'grep -E "^name *=" {}/Cargo.toml | tail -n1' | sed 's/name *= *"\([A-Za-z0-9_\-]*\)"/\1/' | awk '!/journald/{print $0}')
$(foreach _crate, $(CRATES), $(eval $(call TEST_RULE,$(strip $(_crate)))))

BUILD_ENV_DOCKER_ARGS=
ifneq ($(BUILD_ENVS),)
	BUILD_ENV_DOCKER_ARGS= --env $(call join-with, --env ,$(BUILD_ENVS))
endif

ifneq ($(TARGET),)
	TARGET_DOCKER_ARG= --target $(TARGET)
endif

.PHONY:vendor
vendor:
	$(RUST_COMMAND) "" "mkdir -p .cargo && cargo vendor >> .cargo/config.toml"
	@echo "" >> .cargo/config.toml
	@echo "[net]" >> .cargo/config.toml
	@echo "offline=true" >> .cargo/config.toml

.PHONY:build-test
build-test:
	$(RUST_COMMAND) "$(BUILD_ENV_DOCKER_ARGS) --env RUST_BACKTRACE=full" "cargo build $(TARGET_DOCKER_ARG) --profile=test"

.PHONY:build
build: ## Build the agent
	$(UNCACHED_RUST_COMMAND) "$(BUILD_ENV_DOCKER_ARGS) --env RUST_BACKTRACE=full" "RUSTFLAGS='$(RUSTFLAGS)' BINDGEN_EXTRA_CLANG_ARGS='$(BINDGEN_EXTRA_CLANG_ARGS)' $(CARGO_COMMAND) build $(FEATURES_ARG) --manifest-path bin/Cargo.toml $(TARGET_DOCKER_ARG)"

.PHONY:build-release
build-release: ## Build a release version of the agent
	$(UNCACHED_RUST_COMMAND) "$(BUILD_ENV_DOCKER_ARGS) --env RUST_BACKTRACE=full" "RUSTFLAGS='$(RUSTFLAGS)' BINDGEN_EXTRA_CLANG_ARGS='$(BINDGEN_EXTRA_CLANG_ARGS)' $(CARGO_COMMAND) build $(FEATURES_ARG) --manifest-path bin/Cargo.toml --release $(TARGET_DOCKER_ARG) && llvm-strip ./$(TARGET_DIR)/$(TARGET)/release/logdna-agent${BIN_SUFFIX}"

.PHONY:check
check: ## Run unit tests
	$(RUST_COMMAND) "" "cargo check --all-targets"

.PHONY:test
test: unit-test test-journald ## Run unit tests

.PHONY:unit-test
unit-test:
	$(RUST_COMMAND) "$(BUILD_ENV_DOCKER_ARGS) --env RUST_BACKTRACE=full --env RUST_LOG=$(RUST_LOG)" "cargo nextest run $(TESTS) --no-fail-fast --nocapture"

.PHONY:unit-test-coverage
unit-code-coverage: ## Run code coverage report and output to HTML
	$(RUST_COMMAND) "--env RUST_BACKTRACE=full --env RUST_LOG=$(RUST_LOG)" "cargo llvm-cov nextest --ignore-filename-regex=vendor/* --html --output-dir=target/llvm-cov"

.PHONY:integration-test
integration-test: ## Run integration tests using image with additional tools
	$(eval FEATURES := $(FEATURES) integration_tests)
	$(DOCKER_JOURNALD_DISPATCH) "$(BUILD_ENV_DOCKER_ARGS) --env LOGDNA_INGESTION_KEY=$(LOGDNA_INGESTION_KEY) --env LOGDNA_HOST=$(LOGDNA_HOST) --env RUST_BACKTRACE=full --env RUST_LOG=$(RUST_LOG)" "cargo nextest run --no-fail-fast --retries=2 $(FEATURES_ARG) --manifest-path bin/Cargo.toml $(TESTS) $(TEST_THREADS_ARG)"

.PHONY:k8s-test
k8s-test: build-image-debian ## Run integration tests using k8s kind
	$(DOCKER) tag $(REPO):$(IMAGE_TAG) $(REPO):local
	IMAGE_TAG=$(IMAGE_TAG) $(DOCKER_KIND_DISPATCH) $(K8S_TEST_CREATE_CLUSTER) $(RUST_IMAGE) "--env RUST_LOG=$(RUST_LOG)" "cargo nextest run --no-fail-fast --retries=2 --nocapture $(TARGET_DOCKER_ARG) --manifest-path bin/Cargo.toml --features k8s_tests $(TESTS)"

.PHONY:test-journald
test-journald: ## Run journald unit tests
	$(eval FEATURES := $(FEATURES) journald_tests)
	$(DOCKER_JOURNALD_DISPATCH) "$(BUILD_ENV_DOCKER_ARGS) --env RUST_BACKTRACE=full --env RUST_LOG=$(RUST_LOG)" "cargo nextest run --no-fail-fast --features=libjournald --manifest-path bin/Cargo.toml -p journald --test-threads=1"

.PHONY:bench
bench:
	$(BENCH_COMMAND) "--privileged --env RUST_BACKTRACE=full --env RUST_LOG=$(RUST_LOG)" "PERF=\$$(find /usr/bin -type f -wholename /usr/bin/perf\* | head -n1) cargo run --release --manifest-path bench/Cargo.toml $(FEATURES_ARG) --bin=throughput /dict.txt -o /tmp/out $(PROFILE) --file-history 3 --line-count 100000000 --file-size 20000000 --stderr-log-file-path=bench_stderr.log && ([ -z '$(PROFILE)' ] || mv /tmp/flamegraph.svg . )"

.PHONY:clean
clean: ## Clean all artifacts from the build process
	$(RUST_COMMAND) "" "rm -fr target/* bench/target/*"

.PHONY:clean-docker
clean-docker: ## Cleans the intermediate and final agent images left over from the build-image target
	@# Clean any agent images, left over from the multi-stage build
	if [[ ! -z "$(shell docker images -q $(REPO):$(CLEAN_TAG))" ]]; then docker images -q $(REPO):$(CLEAN_TAG) | xargs docker rmi -f; fi

.PHONY:clean-cache
clean-cache:
	rm -fr vendor/* .cargo/config* \$$CARGO_HOME/registry/* \$$CARGO_HOME/git/*

.PHONY:clean-all
clean-all: clean-docker clean-cache clean ## Deep cleans the project and removed any docker images
	git clean -xdf;

.PHONY:lint-format
lint-format: ## Checks for formatting errors
	$(RUST_COMMAND) "--env RUST_BACKTRACE=full" "cargo fmt -- --check"

.PHONY:lint-clippy
lint-clippy: ## Checks for code errors
	$(RUST_COMMAND) "--env RUST_BACKTRACE=full" "cargo clippy --all-targets -- -D warnings"

.PHONY:lint-audit
lint-audit: ## Audits packages for issues
	$(RUST_COMMAND) "--env RUST_BACKTRACE=full" "cargo audit  \
	    --ignore RUSTSEC-2024-0421"

.PHONY:lint-docker
lint-docker: ## Lint the Dockerfile for issues
	$(HADOLINT_COMMAND) "" "hadolint Dockerfile --ignore DL3006 --ignore SC2086 --ignore SC2317"

.PHONY:lint-shell
lint-shell: ## Lint the Dockerfile for issues
	$(SHELLCHECK_COMMAND) "" "shellcheck docker/lib.sh"
	$(SHELLCHECK_COMMAND) "" "shellcheck docker/dispatch.sh"
	$(SHELLCHECK_COMMAND) "" "shellcheck docker/journald_dispatch.sh"

.PHONY:lint
lint: lint-docker lint-shell lint-format lint-clippy lint-audit ## Runs all the linters

.PHONY:bump-major-dev
bump-major-dev: ## Create a new minor beta release and push to github
	$(eval TARGET_BRANCH := $(shell expr $(MINOR_VERSION) + 1).0)
	$(eval NEW_VERSION := $(TARGET_BRANCH).0-dev)
	$(call CHANGE_BIN_VERSION,$(NEW_VERSION))
	$(call CHANGE_README_VERSION,$(NEW_VERSION))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_VERSION,$(NEW_VERSION),$(yaml))))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_IMAGE,$(NEW_VERSION),$(yaml))))
	git add bin/Cargo.toml
	git add docs/README.md
	git add -u k8s/
	git commit -sS -m "Bumping $(BUILD_VERSION) to $(NEW_VERSION)"
	git push

.PHONY:release-major
release-major: ## Create a new major beta release and push to github
	$(eval TARGET_BRANCH := $(MAJOR_VERSION).0)
	$(eval NEW_VERSION := $(TARGET_BRANCH).0-beta.1)
	$(call CHANGE_BIN_VERSION,$(NEW_VERSION))
	$(call CHANGE_README_VERSION,$(NEW_VERSION))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_VERSION,$(NEW_VERSION),$(yaml))))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_IMAGE,$(NEW_VERSION),$(yaml))))
	$(RUST_COMMAND) "--env RUST_BACKTRACE=full" "cargo generate-lockfile"
	git add Cargo.lock bin/Cargo.toml
	git add docs/README.md
	git add -u k8s/
	git commit -sS -m "Bumping $(BUILD_VERSION) to $(NEW_VERSION)"
	git tag -s -a $(NEW_VERSION) -m ""
	git push --follow-tags
	git checkout $(TARGET_BRANCH) || git checkout -b $(TARGET_BRANCH)

.PHONY:bump-minor-dev
bump-minor-dev: ## Create a new minor beta release and push to github
	$(eval TARGET_BRANCH := $(MAJOR_VERSION).$(shell expr $(MINOR_VERSION) + 1))
	$(eval NEW_VERSION := $(TARGET_BRANCH).0-dev)
	$(call CHANGE_BIN_VERSION,$(NEW_VERSION))
	$(call CHANGE_README_VERSION,$(NEW_VERSION))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_VERSION,$(NEW_VERSION),$(yaml))))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_IMAGE,$(NEW_VERSION),$(yaml))))
	git add bin/Cargo.toml
	git add docs/README.md
	git add -u k8s/
	git commit -sS -m "Bumping $(BUILD_VERSION) to $(NEW_VERSION)"
	git push

.PHONY:release-minor
release-minor: ## Create a new minor beta release and push to github
	$(eval TARGET_BRANCH := $(MAJOR_VERSION).$(MINOR_VERSION))
	$(eval NEW_VERSION := $(TARGET_BRANCH).0-beta.1)
	$(call CHANGE_BIN_VERSION,$(NEW_VERSION))
	$(call CHANGE_README_VERSION,$(NEW_VERSION))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_VERSION,$(NEW_VERSION),$(yaml))))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_IMAGE,$(NEW_VERSION),$(yaml))))
	$(RUST_COMMAND) "--env RUST_BACKTRACE=full" "cargo generate-lockfile"
	git add Cargo.lock bin/Cargo.toml
	git add docs/README.md
	git add -u k8s/
	git commit -sS -m "Bumping $(BUILD_VERSION) to $(NEW_VERSION)"
	git tag -s -a $(NEW_VERSION) -m ""
	git push --follow-tags
	git checkout $(TARGET_BRANCH) || git checkout -b $(TARGET_BRANCH)

.PHONY:release-patch
release-patch: ## Create a new patch beta release and push to github
	$(eval TARGET_BRANCH := $(MAJOR_VERSION).$(MINOR_VERSION))
	$(eval NEW_VERSION := $(TARGET_BRANCH).$(shell expr $(PATCH_VERSION) + 1))
	@if [ ! "$(REMOTE_BRANCH)" = "$(TARGET_BRANCH)" ]; then echo "Can't create the patch release \"$(NEW_VERSION)\" on the remote branch \"$(REMOTE_BRANCH)\". Please checkout \"$(TARGET_BRANCH)\""; exit 1; fi
	$(call CHANGE_BIN_VERSION,$(NEW_VERSION))
	$(call CHANGE_README_VERSION,$(NEW_VERSION))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_VERSION,$(NEW_VERSION),$(yaml))))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_IMAGE,$(NEW_VERSION),$(yaml))))
	$(RUST_COMMAND) "--env RUST_BACKTRACE=full" "cargo generate-lockfile"
	git add Cargo.lock bin/Cargo.toml
	git add docs/README.md
	git add -u k8s/
	git commit -sS -m "Bumping $(BUILD_VERSION) to $(NEW_VERSION)"
	git tag -s -a $(NEW_VERSION) -m ""
	git push --follow-tags
	git checkout $(TARGET_BRANCH) || git checkout -b $(TARGET_BRANCH)

.PHONY:release-beta
release-beta: ## Bump the beta version and push to github
	@if [ "$(BETA_VERSION)" = "0" ]; then echo "Can't create a new beta on top of an existing version, use release-[major|minor|patch] targets instead"; exit 1; fi
	$(eval TARGET_BRANCH := $(MAJOR_VERSION).$(MINOR_VERSION))
	$(eval NEW_VERSION := $(TARGET_BRANCH).$(PATCH_VERSION)-beta.$(shell expr $(BETA_VERSION) + 1))
	$(call CHANGE_BIN_VERSION,$(NEW_VERSION))
	$(call CHANGE_README_VERSION,$(NEW_VERSION))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_VERSION,$(NEW_VERSION),$(yaml))))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_IMAGE,$(NEW_VERSION),$(yaml))))
	$(RUST_COMMAND) "--env RUST_BACKTRACE=full" "cargo generate-lockfile"
	git add Cargo.lock bin/Cargo.toml
	git add docs/README.md
	git add -u k8s/
	git commit -sS -m "Bumping $(BUILD_VERSION) to $(NEW_VERSION)"
	git tag -s -a $(NEW_VERSION) -m ""
	git push --follow-tags
	git checkout $(TARGET_BRANCH) || git checkout -b $(TARGET_BRANCH)

.PHONY:release
release: ## Create a new release from the current beta and push to github
	@if [ "$(BETA_VERSION)" = "0" ]; then echo "Can't release from a non-beta version"; exit 1; fi
	$(eval TARGET_BRANCH := $(MAJOR_VERSION).$(MINOR_VERSION))
	$(eval NEW_VERSION := $(TARGET_BRANCH).0)
	$(call CHANGE_BIN_VERSION,$(NEW_VERSION))
	$(call CHANGE_README_VERSION,$(NEW_VERSION))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_VERSION,$(NEW_VERSION),$(yaml))))
	$(foreach yaml,$(wildcard k8s/*.yaml),$(shell $(call CHANGE_K8S_IMAGE,$(NEW_VERSION),$(yaml))))
	$(RUST_COMMAND) "--env RUST_BACKTRACE=full" "cargo generate-lockfile"
	git add Cargo.lock bin/Cargo.toml
	git add docs/README.md
	git add -u k8s/
	git commit -sS -m "Bumping $(BUILD_VERSION) to $(NEW_VERSION)"
	git tag -s -a $(NEW_VERSION) -m ""
	git push --follow-tags
	git checkout $(TARGET_BRANCH) || git checkout -b $(TARGET_BRANCH)

DEB_VERSION=1
DEB_ARCH_NAME_x86_64=amd64
DEB_ARCH_NAME_aarch64=arm64

.PHONY:build-image
build-image: ## Build a docker image as specified in the Dockerfile
	$(DOCKER) build . -t $(REPO):$(IMAGE_TAG) \
		$(PULL_OPTS) \
		--progress=plain \
		--platform=linux/${DEB_ARCH_NAME_${ARCH}} \
		--secret id=aws,src=$(AWS_SHARED_CREDENTIALS_FILE) \
		--rm \
		--build-arg BUILD_ENVS="$(BUILD_ENVS)" \
		--build-arg BUILD_IMAGE=$(RUST_IMAGE) \
		--build-arg TARGET=$(TARGET) \
		--build-arg TARGET_DIR=$(TARGET_DIR) \
		--build-arg TARGET_ARCH=$(ARCH) \
		--build-arg BUILD_TIMESTAMP=$(BUILD_TIMESTAMP) \
		--build-arg BUILD_VERSION=$(BUILD_VERSION) \
		--build-arg FEATURES='$(FEATURES_ARG)' \
		--build-arg REPO=$(REPO) \
		--build-arg VCS_REF=$(VCS_REF) \
		--build-arg VCS_URL=$(VCS_URL) \
		--build-arg SCCACHE_BUCKET=$(SCCACHE_BUCKET) \
		--build-arg SCCACHE_REGION=$(SCCACHE_REGION) \
		--build-arg SCCACHE_ENDPOINT=$(SCCACHE_ENDPOINT)

.PHONY:build-image-debian
build-image-debian: ## Build a docker image as specified in the Dockerfile.debian
	$(DOCKER) build . -f Dockerfile.debian -t $(REPO):$(IMAGE_TAG) \
		$(PULL_OPTS) \
		--progress=plain \
		--platform=linux/${DEB_ARCH_NAME_${ARCH}} \
		--secret id=aws,src=$(AWS_SHARED_CREDENTIALS_FILE) \
		--rm \
		--build-arg BUILD_ENVS="$(BUILD_ENVS)" \
		--build-arg BUILD_IMAGE=$(RUST_IMAGE) \
		--build-arg TARGET=$(TARGET) \
		--build-arg TARGET_DIR=$(TARGET_DIR) \
		--build-arg BUILD_TIMESTAMP=$(BUILD_TIMESTAMP) \
		--build-arg BUILD_VERSION=$(BUILD_VERSION) \
		--build-arg FEATURES='$(FEATURES_ARG)' \
		--build-arg REPO=$(REPO) \
		--build-arg VCS_REF=$(VCS_REF) \
		--build-arg VCS_URL=$(VCS_URL) \
		--build-arg SCCACHE_BUCKET=$(SCCACHE_BUCKET) \
		--build-arg SCCACHE_REGION=$(SCCACHE_REGION) \
		--build-arg SCCACHE_ENDPOINT=$(SCCACHE_ENDPOINT)

.PHONY:build-image-debug
build-image-debug: ## Build a docker image as specified in the Dockerfile.debug
	$(DOCKER) build . -f Dockerfile.debug -t $(REPO):$(IMAGE_TAG) \
		$(PULL_OPTS) \
		--progress=plain \
		--platform=linux/${DEB_ARCH_NAME_${ARCH}} \
		--secret id=aws,src=$(AWS_SHARED_CREDENTIALS_FILE) \
		--rm \
		--build-arg BUILD_ENVS="$(BUILD_ENVS)" \
		--build-arg BUILD_IMAGE=$(RUST_IMAGE) \
		--build-arg TARGET=$(TARGET) \
		--build-arg TARGET_DIR=$(TARGET_DIR) \
		--build-arg BUILD_TIMESTAMP=$(BUILD_TIMESTAMP) \
		--build-arg BUILD_VERSION=$(BUILD_VERSION) \
		--build-arg FEATURES='$(FEATURES_ARG)' \
		--build-arg REPO=$(REPO) \
		--build-arg VCS_REF=$(VCS_REF) \
		--build-arg VCS_URL=$(VCS_URL) \
		--build-arg SCCACHE_BUCKET=$(SCCACHE_BUCKET) \
		--build-arg SCCACHE_REGION=$(SCCACHE_REGION) \
		--build-arg SCCACHE_ENDPOINT=$(SCCACHE_ENDPOINT)

.PHONY:build-stress-test-image
build-stress-test-image: ## Build a docker image as specified in the Dockerfile
	$(DOCKER) build ./utils/stress_test -t $(REPO)-stress-test:$(IMAGE_TAG) \
		$(PULL_OPTS) \
		--progress=plain \
		--platform=linux/${DEB_ARCH_NAME_${ARCH}} \
		--secret id=aws,src=$(AWS_SHARED_CREDENTIALS_FILE) \
		--build-arg BUILD_TIMESTAMP=$(BUILD_TIMESTAMP) \
		--build-arg BUILD_VERSION=$(BUILD_VERSION) \
		--rm

.PHONY:build-deb
build-deb: build-release
	$(DEB_COMMAND) "" 'package_version="$(BUILD_VERSION)"; \
		iteration="${DEB_VERSION}"; \
		echo "Generating deb package for version ${BUILD_VERSION} as $${package_version}-$${iteration}"; \
		chmod +x "logdna-agent"; \
		fpm \
				-a "${ARCH}" \
				--input-type dir \
				--output-type deb \
				-p "/build/${TARGET_DIR}/${TARGET}/logdna-agent_$${package_version}-$${iteration}_${DEB_ARCH_NAME_${ARCH}}.deb" \
				--name "logdna-agent" \
				--version "$${package_version}" \
				--iteration "$${iteration}" \
				--license MIT \
				--vendor "LogDNA, Inc." \
				--description "LogDNA Agent for Linux" \
				--url "https://logdna.com/" \
				--maintainer "LogDNA <support@logdna.com>" \
				--before-remove packaging/linux/before-remove \
				--after-upgrade packaging/linux/after-upgrade \
				--force --deb-no-default-config-files \
				"/build/${TARGET_DIR}/${TARGET}/release/logdna-agent=/usr/bin/logdna-agent" \
				"packaging/linux/logdna-agent.service=/lib/systemd/system/logdna-agent.service"'

RPM_VERSION=1

.PHONY:build-rpm
build-rpm: build-release
	$(RPM_COMMAND) "" 'package_version="$(BUILD_VERSION)"; \
		iteration="${RPM_VERSION}"; \
		echo "Generating rpm package for version ${BUILD_VERSION} as $${package_version}-$${iteration}"; \
		chmod +x "logdna-agent"; \
		fpm \
				-a "${ARCH}" \
				--verbose \
				--input-type dir \
				--output-type rpm \
				-p "/build/${TARGET_DIR}/${TARGET}/logdna-agent-$${package_version}-$${iteration}.${ARCH}.rpm" \
				--name "logdna-agent" \
				--version "$${package_version}" \
				--iteration "$${iteration}" \
				--license MIT \
				--vendor "LogDNA, Inc." \
				--description "LogDNA Agent for Linux" \
				--url "https://logdna.com/" \
				--maintainer "LogDNA <support@logdna.com>" \
				--before-remove packaging/linux/before-remove \
				--after-upgrade packaging/linux/after-upgrade \
				--force \
				"/build/${TARGET_DIR}/${TARGET}/release/logdna-agent=/usr/bin/logdna-agent" \
				"packaging/linux/logdna-agent.service=/lib/systemd/system/logdna-agent.service"'

.PHONY: publish-s3-binary
publish-s3-binary:
	if [ "$(WINDOWS)" != "" ]; then \
	    aws s3 cp --acl public-read ${TARGET_DIR}/$(TARGET)/release/logdna-agent-svc.exe s3://logdna-agent-build-bin/$(TARGET_TAG)/$(TARGET)/logdna-agent-svc.exe; \
	    aws s3 cp --acl public-read ${TARGET_DIR}/$(TARGET)/release/logdna-agent.exe s3://logdna-agent-build-bin/$(TARGET_TAG)/$(TARGET)/logdna-agent.exe; \
	    aws s3 cp --acl public-read ${TARGET_DIR}/$(TARGET)/release/logdna-agent-svc.exe s3://logdna-agent-build-bin/$(TARGET_TAG)/$(REMOTE_BRANCH)/$(BUILD_NUMBER)/$(TARGET)/logdna-agent-svc.exe; \
	    aws s3 cp --acl public-read ${TARGET_DIR}/$(TARGET)/release/logdna-agent.exe s3://logdna-agent-build-bin/$(TARGET_TAG)/$(REMOTE_BRANCH)/$(BUILD_NUMBER)/$(TARGET)/logdna-agent.exe; \
	elif [ "$(MACOS)" != "" ]; then \
	    aws s3 cp --acl public-read arm/arm-target/release/logdna-agent s3://logdna-agent-build-bin/${TARGET_TAG}/arm64/logdna-agent; \
	    aws s3 cp --acl public-read x86/x86-target/x86_64-apple-darwin/release/logdna-agent s3://logdna-agent-build-bin/${TARGET_TAG}/x86_64-apple-darwin/logdna-agent; \
	    aws s3 cp --acl public-read x86/x86-target/x86_64-apple-darwin/release/logdna-agent s3://logdna-agent-build-bin/${TARGET_TAG}/$(REMOTE_BRANCH)/$(BUILD_NUMBER)/x86_64-apple-darwin/logdna-agent; \
	else \
	    aws s3 cp --acl public-read ${TARGET_DIR}/$(TARGET)/release/logdna-agent s3://logdna-agent-build-bin/$(TARGET_TAG)/$(TARGET)/logdna-agent; \
	    aws s3 cp --acl public-read ${TARGET_DIR}/$(TARGET)/release/logdna-agent s3://logdna-agent-build-bin/$(TARGET_TAG)/$(REMOTE_BRANCH)/$(BUILD_NUMBER)/$(TARGET)/logdna-agent; \
	fi;

define PUBLISH_SIGNED_RULE
.PHONY: publish-s3-binary-signed-$(1)
publish-s3-binary-signed-$(1):
	if [ "$(WINDOWS)" != "" ]; then \
	    $(eval BUILD_DIR := ${TARGET_DIR}/$(TARGET)/$(1)) \
	    $(eval SRC_ROOT := $(CURDIR)) \
	    bash -c " \
	    set -eu; \
	    export BUILD_DIR="$(BUILD_DIR)" SRC_ROOT="$(SRC_ROOT)" TARGET=$(TARGET) BUILD_VERSION=$(BUILD_VERSION) BUILD_NUMBER=$(BUILD_NUMBER); \
	    cd packaging/windows/msi && ./publish_to_s3; \
	    " \
	else \
	    echo Nothing to publish; \
	fi;
endef
BUILD_TYPES=debug release
$(foreach _type, $(BUILD_TYPES), $(eval $(call PUBLISH_SIGNED_RULE,$(_type))))

define MSI_RULE
.PHONY: msi-$(1)
msi-$(1): ## create signed exe and msi files in $(BUILD_DIR)/signed
	$(eval BUILD_DIR := ${TARGET_DIR}/$(TARGET)/$(1))
	$(eval SRC_ROOT := $(CURDIR))
	bash -c " \
	set -eu; \
	trap \"rm -rf '$(BUILD_DIR)/cert'\" EXIT; \
	mkdir -p '$(BUILD_DIR)/cert'; \
	if [ "$(1)" == "release" ]; then \
	  aws s3 cp s3://ecosys-vault/mezmo_cert_release.p12 '$(BUILD_DIR)/cert'; \
	  aws s3 cp s3://ecosys-vault/mezmo_cert_release.pem '$(BUILD_DIR)/cert'; \
	  aws s3 cp s3://ecosys-vault/mezmo_cert_release.env '$(BUILD_DIR)/cert'; \
	  aws s3 cp s3://ecosys-vault/x86_64-linux-gnu/smpkcs11.so '$(BUILD_DIR)/cert'; \
	else \
	  aws s3 cp s3://ecosys-vault/mezmo_cert_debug.pfx '$(BUILD_DIR)/cert'; \
	  aws s3 cp s3://ecosys-vault/mezmo_cert_debug.pfx.pwd '$(BUILD_DIR)/cert'; \
	fi; \
	$(TOOLS_COMMAND) '--env BUILD_DIR=$(BUILD_DIR) --env SRC_ROOT=/build \
	                  --env BUILD_VERSION=$(BUILD_VERSION) \
	                  --env BUILD_NUMBER=$(BUILD_NUMBER) --env TARGET=$(TARGET)' \
	                  'cd /build/packaging/windows/msi && . ./mk_env && ./mk_msi.$(1)'; \
	"
endef
BUILD_TYPES=debug release
$(foreach _type, $(BUILD_TYPES), $(eval $(call MSI_RULE,$(_type))))

define TEST_MSI_RULE
.PHONY: test-msi-$(1)
test-msi-$(1): ## test msi created in $(BUILD_DIR)/signed
	$(eval BUILD_DIR := ${TARGET_DIR}/$(TARGET)/$(1))
	$(eval SRC_ROOT := $(CURDIR))
	bash -c " \
	set -eu; \
	$(TOOLS_COMMAND) '--env BUILD_DIR=$(BUILD_DIR) --env SRC_ROOT=/build \
	                  --env BUILD_VERSION=$(BUILD_VERSION) \
	                  --env BUILD_NUMBER=$(BUILD_NUMBER) --env TARGET=$(TARGET)' \
	                  'cd /build/packaging/windows/msi && . ./mk_env && ./mk_test'; \
	"
endef
BUILD_TYPES=debug release
$(foreach _type, $(BUILD_TYPES), $(eval $(call TEST_MSI_RULE,$(_type))))

define CHOCO_RULE
.PHONY: choco-$(1)
choco-$(1): ## create choco package using msi from logdna-agent-build-bin S3 baucket
	$(eval BUILD_DIR := ${TARGET_DIR}/$(TARGET)/$(1))
	$(eval SRC_ROOT := $(CURDIR))
	bash -c " \
	set -eu; \
	export BUILD_DIR="$(BUILD_DIR)" SRC_ROOT="$(SRC_ROOT)" TARGET=$(TARGET) BUILD_VERSION=$(BUILD_VERSION) BUILD_NUMBER=$(BUILD_NUMBER); \
	cd $(SRC_ROOT)/packaging/windows/choco && source ./mk_env && ./mk_choco \
	"
endef
BUILD_TYPES=debug release
$(foreach _type, $(BUILD_TYPES), $(eval $(call CHOCO_RULE,$(_type))))

define PUBLISH_CHOCO_RULE
.PHONY: publish-choco-$(1)
publish-choco-$(1): ## publish choco package built & located in $(BUILD_DIR)/choco, requires env CHOCO_API_KEY defined
	$(eval BUILD_DIR := ${TARGET_DIR}/$(TARGET)/$(1))
	$(eval SRC_ROOT := $(CURDIR))
	bash -c " \
	set -eu; \
	export BUILD_DIR="$(BUILD_DIR)" SRC_ROOT="$(SRC_ROOT)" TARGET=$(TARGET) BUILD_VERSION=$(BUILD_VERSION) BUILD_NUMBER=$(BUILD_NUMBER); \
	cd packaging/windows/choco && ./publish_to_choco \
	"
endef
BUILD_TYPES=debug release
$(foreach _type, $(BUILD_TYPES), $(eval $(call PUBLISH_CHOCO_RULE,$(_type))))

define PUBLISH_S3_CHOCO_RULE
.PHONY: publish-s3-choco-$(1)
publish-s3-choco-$(1): ## upload choco package to S3
	$(eval PKG_NAME_FILE := "${TARGET_DIR}/$(TARGET)/$(1)/choco/mezmo-agent.nupkg.name")
	aws s3 cp --acl public-read "${TARGET_DIR}/$(TARGET)/$(1)/choco/$$(shell cat $(PKG_NAME_FILE))" s3://logdna-agent-build-bin/$(TARGET_TAG)/$(TARGET)/$$(shell cat $(PKG_NAME_FILE));
endef
BUILD_TYPES=debug release
$(foreach _type, $(BUILD_TYPES), $(eval $(call PUBLISH_S3_CHOCO_RULE,$(_type))))

define publish_images
	$(eval VCS_REF_BUILD_NUMBER_SHA:=$(shell echo "$(VCS_REF)$(BUILD_NUMBER)" | sha256sum | head -c 16))
	$(eval TARGET_VERSIONS := $(TARGET_TAG) $(shell if [ "$(BETA_VERSION)" = "0" ]; then echo "$(BUILD_VERSION)-$(BUILD_DATE).$(VCS_REF_BUILD_NUMBER_SHA) $(MAJOR_VERSION) $(MAJOR_VERSION).$(MINOR_VERSION)"; fi))
	@set -e; \
	arch=$(shell docker inspect --format "{{.Architecture}}" $(REPO)$(2):$(IMAGE_TAG)); \
	arr=($(TARGET_VERSIONS)); \
	for version in $${arr[@]}; do \
		echo "$(REPO)$(2):$(IMAGE_TAG) -> $(1)$(2):$${version}-$${arch}"; \
		$(DOCKER) tag $(REPO)$(2):$(IMAGE_TAG) $(1)$(2):$${version}-$${arch}; \
		$(DOCKER) push $(1)$(2):$${version}-$${arch}; \
	done;
endef

define publish_images_multi
	$(eval VCS_REF_BUILD_NUMBER_SHA:=$(shell echo "$(VCS_REF)$(BUILD_NUMBER)" | sha256sum | head -c 16))
	$(eval TARGET_VERSIONS := $(TARGET_TAG) $(shell if [ "$(BETA_VERSION)" = "0" ]; then echo "$(BUILD_VERSION)-$(BUILD_DATE).$(VCS_REF_BUILD_NUMBER_SHA) $(MAJOR_VERSION) $(MAJOR_VERSION).$(MINOR_VERSION)"; fi))
	@set -e; \
	rm -rf ~/.docker/manifests; \
	arr=($(TARGET_VERSIONS)); \
	for version in $${arr[@]}; do \
		echo "$(REPO)$(2):$(IMAGE_TAG) -> $(1)$(2):$${version}"; \
		$(DOCKER) manifest create $(1)$(2):$${version} \
			--amend $(1)$(2):$${version}-arm64 \
			--amend $(1)$(2):$${version}-amd64; \
		$(DOCKER) manifest push $(1)$(2):$${version}; \
	done;
endef

.PHONY: publish-image
publish-image: publish-image-gcr publish-image-docker publish-image-ibm ## Publish SemVer compliant releases to our registries

.PHONY:publish-image-gcr
publish-image-gcr: ## Publish SemVer compliant releases to gcr
	$(call publish_images,$(DOCKER_PRIVATE_IMAGE))

.PHONY:publish-image-docker
publish-image-docker: ## Publish SemVer compliant releases to docker hub
	$(call publish_images,$(DOCKER_PUBLIC_IMAGE))

.PHONY:publish-image-ibm
publish-image-ibm: ## Publish SemVer compliant releases to icr
	$(call publish_images,$(DOCKER_IBM_IMAGE))

.PHONY: publish-image-multi
publish-image-multi: publish-image-multi-gcr publish-image-multi-docker publish-image-multi-ibm ## Publish multi-arch SemVer compliant releases to our registries

.PHONY:publish-image-multi-gcr
publish-image-multi-gcr: ## Publish multi-arch container images to gcr
	$(call publish_images_multi,$(DOCKER_PRIVATE_IMAGE))

.PHONY:publish-image-multi-docker
publish-image-multi-docker: ## Publish multi-arch container images to docker hub
	$(call publish_images_multi,$(DOCKER_PUBLIC_IMAGE))

.PHONY:publish-image-multi-ibm
publish-image-multi-ibm: ## Publish multi-arch container images to icr
	$(call publish_images_multi,$(DOCKER_IBM_IMAGE))


.PHONY: publish-stress-test-image
publish-stress-test-image: publish-stress-test-image-gcr publish-stress-test-image-docker # publish-stress-test-image-multi-ibm ## Publish SemVer compliant releases to our registries

.PHONY:publish-stress-test-image-gcr
publish-stress-test-image-gcr: ## Publish SemVer compliant releases to gcr
	$(call publish_images,$(DOCKER_PRIVATE_IMAGE),"-stress-test")

.PHONY:publish-stress-test-image-docker
publish-stress-test-image-docker: ## Publish SemVer compliant releases to docker hub
	$(call publish_images,$(DOCKER_PUBLIC_IMAGE),"-stress-test")

.PHONY:publish-stress-test-image-ibm
publish-stress-test-image-ibm: ## Publish SemVer compliant releases to icr
	$(call publish_images,$(DOCKER_IBM_IMAGE),"-stress-test")

.PHONY: publish-stress-test-image-multi
publish-stress-test-image-multi: publish-stress-test-image-multi-gcr publish-stress-test-image-multi-docker # publish-stress-test-image-multi-ibm ## Publish multi-arch SemVer compliant releases to our registries

.PHONY:publish-stress-test-image-multi-gcr
publish-stress-test-image-multi-gcr: ## Publish multi-arch container images to gcr
	$(call publish_images_multi,$(DOCKER_PRIVATE_IMAGE),"-stress-test")

.PHONY:publish-stress-test-image-multi-docker
publish-stress-test-image-multi-docker: ## Publish multi-arch container images to docker hub
	$(call publish_images_multi,$(DOCKER_PUBLIC_IMAGE),"-stress-test")

.PHONY:publish-stress-test-image-multi-ibm
publish-stress-test-image-multi-ibm: ## Publish multi-arch container images to icr
	$(call publish_images_multi,$(DOCKER_IBM_IMAGE),"-stress-test")


.PHONY:run
run: ## Run the debug version of the agent
	./target/debug/logdna-agent

.PHONY:run-release
run-release: ## Run the release version of the agent
	./target/release/logdna-agent

sysdig_secure_images: ## Create sysdig_secure_images config
	echo $(REPO):$(IMAGE_TAG) > sysdig_secure_images

.PHONY:help
help: ## Prints out a helpful description of each possible target
	@awk 'BEGIN {FS = ":.*?## "}; /^.+: .*?## / && !/awk/ {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}' $(MAKEFILE_LIST)
	@$(SHELL) -c "echo '$(TEST_RULES)'" |  awk 'BEGIN {FS = ":.*?<> "}; /^.+: .*?<> / && !/awk/ {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}'

.PHONY:init-qemu
init-qemu: ## register qemu in binfmt on x86_64 hosts
	@set -e
	echo "Host: " && hostname && uname -a && blkid && docker info && echo && free -h && echo && df -h && echo && lscpu && echo
	bash -c "if [ '$(shell uname -m)' = 'x86_64' ]; then \
		if [ ! -f /proc/sys/fs/binfmt_misc/qemu-aarch64 ]; then \
			( \
				flock 201; \
				docker run --rm --privileged multiarch/qemu-user-static --reset -p yes; \
			) 201>/tmp/qemu_binfmt; \
		else \
			echo Skipping qemu init - already applied; \
		fi; \
	else \
		echo Skipping qemu init - non x86_64 host; \
	fi"