cirruslabs / cirrus-cli

Cirrus CLI > [!IMPORTANT] > > **macOS 15 (Sequoia) or later** > > The newly introduced "Local Network" permission in macOS Sequoia requires accepting a GUI pop-up on each host machine that runs or and Tart VMs. > > To work around this, there are two options. The first one is to invoke the or as with an additional command-line argument, which takes a name of your regular, non-privileged user on the host machine. > > This will cause the Cirrus CLI to start a small process in the background and then drop the privileges to the specified user. > >The helper process is privileged and needed to establish network connections on behalf of the Cirrus CLI without triggering a GUI pop-up. > >This approach is more secure than simply running or as , because only a small part of Cirrus CLI runs privileged and the only functionality that this part has is establishing new connections. > > The second workaround is to set the local network privacy preferences so that all IPv4 private address space that could potentially be used for Tart VMs is excluded: > > > > ...and then reboot. Cirrus CLI is a tool for running containerized tasks reproducibly in any environment. Most commonly, Cirrus tasks are used as part of continuous integration workflows but can also be used as part of local development process as a hermetic replacement of helper scripts/Makefiles. Cirrus CLI runs your tasks locally the same way they are executed in CI or on your colleague's machine. Immutability of containers ensures the tasks will be executed the same way years from now regardless what versions of packages you'll have locally. Installation • Homebrew • Debian-based distributions (Debian, Ubuntu, etc.) • RPM-based distributions (Fedora, CentOS, etc.) • Prebuilt Binary • Golang • CI integrations • GitHub Actions • Travis CI • Circle CI • TeamCity • Cloud Build • Cirrus CI Usage Cirrus CLI reuses the same YAML configuration format as Cirrus CI which allows to reuse a large list of examples created by Cirrus CI community. **Note:** Cirrus CLI can be used in any environment that has Docker or Podman installed. It can be your laptop or any CI system you already have like Jenkins, GitHub Actions, Travis CI, etc. With Cirrus CLI it's no longer a requirement to use Cirrus CI in order to benefit from Cirrus configuration format that we (Cirrus Labs) have crafted for so long and really proud of. Here is an example of configuration file for testing a Go application with several Go versions: Note: implies the architecture. If you're running on , please use with the instead. Running Cirrus Tasks To run Cirrus tasks, simply switch to a directory where the is located and run: By default, working directory will be ed into a container while respecting configuration. This makes sure Cirrus Tasks are executed from a clean state only with source code changes. In case -ing the whole working directory is too costly, you can pass a flag which will result in all operations being done against the actual working directory (and not it's ed copy): Since most linters and code-analysis tools are read-only by their nature there is no need in extra precautions and the potentially costly -ing can be safely avoided. It is also possible to run a particular task by name: Or pass some extra environment variables with flag: **Note:** Cirrus CLI only supports Linux and VMs at the moment. Linux containers support the Dockerfile as a CI environment feature. Validating Cirrus Configuration To validate a Cirrus configuration, simply switch to a directory where the is located and run: Caching By default, Cirrus CLI stores blob artifacts produced by the cache instruction in the user-specific cached data folder. Similar to Cirrus Cloud the CLI can use a caching HTTP server for more efficient sharing of cached artifacts between tasks executed on different physical hosts. Caching HTTP server should support a single REST endpoint with , and methods available for uploading, downloading and checking availability of a cached artifact under key respectively. There are reference implementations of such HTTP servers for Google Cloud Storage and AWS S3 and Azure's Blob Storage. To start using your own HTTP caching server simply pass it's hostname as to command: Security Cirrus CLI aims to run in different environments, but in some environments we choose to provide more usability at the cost of some security trade-offs: • SELinux • both the task container and the helper container (that copies the project directory into a per-task container volume using ) run unconfined Please open an issue if your use-case requires a different approach. FAQ What is the relationship between Cirrus CI and Cirrus CLI? Cirrus CI was released in the early 2018 with an idea to bring some innovation to CI space. A lot of things have changed in CI-as-a-service space since then but Cirrus CI pioneered many ideas in CI-as-a-service space including per-second billing and support for Linux, Windows and macOS all together. Over the past two and a half years we heard only positive feedback about Cirrus CI's YAML configuration format. Users liked how concise their configuration looked and that it was easy to reason about. Another feedback we heard from users was that it's hard to migrate from one CI to another. There is a need to rewrite CI configurations from one format into another that basically still locks into another vendor. And now in 2020 with Cirrus CLI we are trying to solve the "vendor lock" problem by popularizing Cirrus configuration format and building community around it. Stay tuned for the upcoming option to use Starlark templates instead of YAML! Think of Cirrus CLI as an executor of Cirrus Tasks on a single machine only in Docker containers for simple CI scenarious. And Cirrus CI as an option for more specific cases where Cirrus Tasks can be executed in containers and VMs using a variety of supported compute services or using a managed infrastructure with…