Add demo_apps/go_https Dockerfile to ease deprecating Go versions and for offsetgen testing

Signed-off-by: Dom Del Nano <ddelnano@gmail.com>

Author: ddelnano

src/stirling/testing/demo_apps/go_https/server/BUILD.bazel

@@ -25,8 +25,7 @@ go_library(
     srcs = ["https_server.go"],
     importpath = "px.dev/pixie/src/stirling/testing/demo_apps/go_https/server",
     deps = [
-        "@com_github_spf13_pflag//:pflag",
-        "@com_github_spf13_viper//:viper",
+        "@org_golang_x_net//http2",
     ],
 )
 

src/stirling/testing/demo_apps/go_https/server/Dockerfile

@@ -0,0 +1,52 @@
+# Copyright 2018- The Pixie Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+
+ARG GO_VERSION
+FROM alpine:3.20 AS certs
+
+RUN apk add --no-cache openssl
+
+WORKDIR /tmp/certs
+
+# Generate private key
+RUN openssl ecparam -genkey -name secp384r1 -out server.key && \
+    openssl req -new -x509 -sha256 \
+        -key server.key \
+        -subj "/C=US/ST=California/L=San Francisco/O=Pixie Labs Inc./CN=127.0.0.1:50101" \
+        -out server.crt \
+        -days 365
+
+# Stage 2: Build Go app and include certs
+FROM golang:${GO_VERSION}-alpine as build
+
+ARG GOLANG_X_NET
+
+WORKDIR /app
+
+# Copy source and build
+COPY https_server.go .
+RUN go mod init https_server && \
+    go get golang.org/x/net@${GOLANG_X_NET} && \
+    go mod tidy
+RUN CGO_ENABLED=0 go build -o https_server .
+
+FROM scratch
+COPY --from=build /app /app
+COPY --from=certs /tmp/certs/server.crt /etc/ssl/server.crt
+COPY --from=certs /tmp/certs/server.key /etc/ssl/server.key
+
+ENTRYPOINT ["/app/https_server"]
+CMD ["--cert", "/etc/ssl/server.crt", "--key", "/etc/ssl/server.key"]

src/stirling/testing/demo_apps/go_https/server/README.md

@@ -0,0 +1,9 @@
+# Go HTTPS server for testing Go TLS tracing
+
+This directory contains a Go HTTPS server for testing Pixie's Go TLS tracing capabilities. This application is built through bazel and by the `update_ghcr.sh` script contained in this directory. The reason for this is that as Go versions fall out of support, maintaining these in our bazel build hinders our ability to upgrade our go deps and to upgrade Pixie's Go version.
+
+In addition to this, Pixie's upcoming opentelemetry-go-instrumentation offsetgen based tracing requires building binaries with Go's toolchain until https://github.com/bazel-contrib/rules_go/issues/3090 is resolved.
+
+As new Go versions are released, the out of support versions should be removed from bazel and added to the `update_ghcr.sh` script in this directory. This will allow our builds to maintain test coverage for older Go versions without complicating our ability to upgrade Pixie's Go version and dependencies.
+
+Run `update_ghcr.sh` in this directory to push the images for each Go version to the ghcr.io repo.

src/stirling/testing/demo_apps/go_https/server/https_server.go

@@ -19,20 +19,24 @@
 package main
 
 import (
+	"flag"
 	"fmt"
 	"io"
 	"log"
 	"net/http"
 
-	"github.com/spf13/pflag"
-	"github.com/spf13/viper"
+	"golang.org/x/net/http2"
 )
 
 const (
 	httpPort  = 50100
 	httpsPort = 50101
 )
 
+// Import the http2 package to ensure golang.org/x/net exists within the binary's
+// buildinfo.
+var s http2.Server //nolint:unused
+
 func basicHandler(w http.ResponseWriter, r *http.Request) {
 	w.Header().Add("Content-Type", "application/json")
 	_, err := io.WriteString(w, `{"status":"ok"}`)
@@ -58,14 +62,12 @@ func listenAndServe(port int) {
 }
 
 func main() {
-	pflag.String("cert", "", "Path to the .crt file.")
-	pflag.String("key", "", "Path to the .key file.")
-	pflag.Parse()
-
-	viper.BindPFlags(pflag.CommandLine)
+	certPath := flag.String("cert", "", "Path to the .crt file.")
+	keyPath := flag.String("key", "", "Path to the .key file.")
+	flag.Parse()
 
 	http.HandleFunc("/", basicHandler)
 
-	go listenAndServeTLS(httpsPort, viper.GetString("cert"), viper.GetString("key"))
+	go listenAndServeTLS(httpsPort, *certPath, *keyPath)
 	listenAndServe(httpPort)
 }

src/stirling/testing/demo_apps/go_https/server/update_ghcr.sh

@@ -0,0 +1,46 @@
+#!/bin/bash -e
+
+# Copyright 2018- The Pixie Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+
+declare -A GO_VERSIONS=(
+  ["1.18"]="v0.35.0"
+  ["1.19"]="v0.35.0"
+  ["1.20"]="v0.35.0"
+  ["1.21"]="v0.35.0"
+  ["1.22"]="v0.35.0"
+)
+version=1.0
+
+IMAGES=()
+
+for go_version in "${!GO_VERSIONS[@]}"; do
+  tag="ghcr.io/pixie-io/golang_${go_version//./_}_https_server_with_buildinfo:$version"
+  x_net_version=${GO_VERSIONS[$go_version]}
+  echo "Building and pushing image: $tag"
+  docker build . --build-arg GO_VERSION="${go_version}" --build-arg GOLANG_X_NET="${x_net_version}" -t "${tag}"
+  docker push "${tag}"
+  sha=$(docker inspect --format='{{index .RepoDigests 0}}' "${tag}" | cut -f2 -d'@')
+  IMAGES+=("${tag}@${sha}")
+done
+
+echo ""
+echo "Images pushed!"
+echo "IMPORTANT: Now update //bazel/container_images.bzl with the following digest: $sha"
+echo "Images:"
+for image in "${IMAGES[@]}"; do
+  echo "  - $image"
+done