Balena Supervisor: balena's agent on devices.
Go to file
Pagan Gazzard 8c1838fd5e CI: Use docker 18 client to match remote
Change-type: patch
2020-05-08 12:31:36 +01:00
.github Add 20k-ultra to codeowners 2020-05-07 12:09:29 -04:00
.versionbot v11.3.6 2020-05-07 22:58:31 +03:00
automation 📖 Update README with sync information 2020-04-06 10:50:00 +01:00
build-utils Move build files into build-conf and rename to build-utils 2020-05-05 17:55:28 +01:00
docs docs: Clarify update locks for multicontainer applications 2020-03-16 14:09:28 -07:00
src Move SupervisorAPI state change logs to appropriate functions 2020-05-07 13:48:12 -04:00
sync Use lstat rather than stat to avoid error with symlinks in sync 2020-05-06 09:59:23 +01:00
test Move SupervisorAPI state change logs to appropriate functions 2020-05-07 13:48:12 -04:00
tools Update synchronisation scripts for supervisor development 2020-04-06 13:05:38 +01:00
typings Actually remove dbus-native dependency 2020-04-21 14:27:47 +01:00
.dockerignore Switch to using knex migrations to set up the database, and change the database format to use integers for ids instead of strings. 2018-03-06 10:32:28 -08:00
.editorconfig Add mocha to enable unit testing 2018-04-04 13:22:17 +01:00
.gitattributes Add a .gitattributes file to make sure files for use on linux have linux style line-endings. 2015-10-13 13:03:14 -03:00
.gitignore Allow writing test files in typescript 2019-06-19 10:55:15 +01:00
.gitmodules Switch to balenaos-in-container 2019-11-12 13:50:05 +00:00
.lintstagedrc Don't skip linting of webpack.conf.js 2020-04-13 10:07:17 +01:00
.resinci.yml Add a .resinci.yml to disable regular docker and npm builds 2018-11-01 18:44:13 -07:00
avahi-daemon.conf network: Add MDNS support for .local domains 2018-08-23 18:41:55 +01:00
CHANGELOG.md v11.3.6 2020-05-07 22:58:31 +03:00
circle.yml CI: Use docker 18 client to match remote 2020-05-08 12:31:36 +01:00
dindctl Switch to balenaos-in-container 2019-11-12 13:50:05 +00:00
Dockerfile Move build files into build-conf and rename to build-utils 2020-05-05 17:55:28 +01:00
entry.sh Fix livepush predicate for POSIX sh in entry.sh 2020-04-21 12:56:58 +01:00
knexfile.js Fix migrations directory path in knexfile for local development 2018-03-21 18:20:15 -03:00
LICENSE.md Add license and reorganize README headings 2015-10-27 11:07:46 -03:00
package-lock.json v11.3.6 2020-05-07 22:58:31 +03:00
package.json v11.3.6 2020-05-07 22:58:31 +03:00
README.md Added punctuation to sentence in README 2020-04-30 14:52:30 -04:00
repo.yml Add ESR information to repo.yml 2020-05-05 12:08:33 +01:00
tsconfig.js.json Move build files into build-conf and rename to build-utils 2020-05-05 17:55:28 +01:00
tsconfig.json 🚀 Update supervisor to node12 2020-04-13 14:36:59 +01:00
tsconfig.release.json Convert test/12-logger.spec.coffee to javascript 2020-03-31 16:25:57 +01:00
tslint.json Update to balena-lint and enable javascript linting 2020-03-24 09:28:12 +00:00
VERSION v11.3.6 2020-05-07 22:58:31 +03:00
webpack.config.js Move build files into build-conf and rename to build-utils 2020-05-05 17:55:28 +01:00

balenaSupervisor

balenaSupervisor is balena's on-device agent, responsible for monitoring and applying changes to an IoT device. It communicates with balenaCloud and handles the lifecycle of an IoT application.

Using the balenaEngine's (our IoT-centric container engine) remote API, balenaSupervisor will install, start, stop and monitor IoT applications, delivered and ran as OCI compliant containers.

balenaSupervisor is developed using Node.js.

Contributing

If you're interested in contributing, that's awesome!

Contributions are not only pull requests! Bug reports and feature requests are also extremely value additions.

Issues

Feature request and bug reports should be submitted via issues. One of the balenaSupervisor team will reply and work with the community to plan a route forward. Although we may never implement the feature, taking the time to let us know what you as a user would like to see really helps our decision making processes!

Pull requests

Here's a few guidelines to make the process easier for everyone involved.

  • Every PR should have an associated issue, and the PR's opening comment should say "Fixes #issue" or "Closes #issue".
  • We use Versionist to manage versioning (and in particular, semantic versioning) and generate the changelog for this project.
  • At least one commit in a PR should have a Change-Type: type footer, where type can be patch, minor or major. The subject of this commit will be added to the changelog.
  • Commits should be squashed as much as makes sense.
  • Commits should be signed-off (git commit -s)

Developing the supervisor

By far the most convenient way to develop the supervisor is to download a development image of balenaOS from the dashboard, and run it on a device you have to hand. You can then use the local network to sync changes using livepush and npm run sync.

If you do not have a device available, it's possible to run a supervisor locally, using balenaOS-in-container. These steps are detailed below.

Sync

Example:

$ npm run sync -- d19baeb.local

> balena-supervisor@10.11.3 sync /home/cameron/Balena/modules/balena-supervisor
> ts-node --project tsconfig.json sync/sync.ts "d19baeb.local"

Step 1/23 : ARG ARCH=amd64
Step 2/23 : ARG NODE_VERSION=10.19.0
Step 3/23 : FROM balenalib/$ARCH-alpine-supervisor-base:3.11 as BUILD
...

Note: For .local resolution to work you must have installed and enabled MDNS. Alternatively you can use the device's local IP.

Sync will first run a new build on the target device (or balenaOS container), after livepush has processed the livepush specific commands and will start the new supervisor image on device.

The supervisor logs are then streamed back from the device, and livepush will then watch for changes on the local FS, and sync any relevant file changes to the running supervisor container. It will then decide if the container should be restarted, or let nodemon handle the changes.

Using balenaOS-in-container

This process will allow you to run a development instance of the supervisor on your local computer. It is not recommended for production scenarios, but allows someone developing on the supervisor to test changes quickly. The supervisor is run inside a balenaOS instance running in a container, so effectively it's a Docker-in-Docker instance (or more precisely, balenaEngine-in-Docker).

Set up config.json

To configure the supervisor, you'll need a tools/dind/config.json file. There's two options on how to get this file:

  • Log in to the balenaCloud dashboard, create or select an application, click "Add device" and on the Advanced section select "Download configuration file only". Make sure you use an x86 or amd64 device type for your application, for example Intel NUC.
  • Install the balena CLI with npm install -g balena-cli, then login with balena login and finally run balena config generate --app <appName> -o config.json (choose the default settings whenever prompted).

The config.json file should look something like this:

(Please note we've added comments to the JSON for better explanation - the actual file should be valid json without such comments)

{
	"applicationId": "2167", /* Id of the app this supervisor will run */
	"apiKey": "supersecretapikey", /* The API key to provision the device on the balena API */
	"userId": "141", /* User ID for the user who owns the app */
	"username": "gh_pcarranzav", /* User name for the user who owns the app */
	"deviceType": "intel-nuc", /* The device type corresponding to the test application */
	"apiEndpoint": "https://api.balena-cloud.com", /* Endpoint for the balena API */
	"deltaEndpoint": "https://delta.balena-cloud.com", /* Endpoint for the delta server to download Docker binary diffs */
	"vpnEndpoint": "vpn.balena-cloud.com", /* Endpoint for the balena VPN server */
	"listenPort": 48484, /* Listen port for the supervisor API */
	"mixpanelToken": "aaaaaaaaaaaaaaaaaaaaaaaaaa", /* Mixpanel token to report events */
}

Additionally, the uuid, registered_at and deviceId fields will be added by the supervisor upon registration with the balena API. Other fields may be present (the format has evolved over time and will likely continue to do so) but they are not used by the supervisor.

Start the supervisor instance

Ensure your kernel supports aufs (in Ubuntu, install linux-image-extra-$(uname -r)) and the aufs module is loaded (if necessary, run sudo modprobe aufs).

./dindctl run --image balena/amd64-supervisor:master

This will setup a Docker-in-Docker instance with an image that runs the supervisor image. You can replace :master for a specific tag (see the tags in Dockerhub) to run a supervisor from a branch or specific version. The script will pull the image if it is not already available in your local Docker instance.

If you want to develop and test your changes, you can run:

./dindctl run --image balena/amd64-supervisor:master --mount-dist

Note: Using --mount-dist requires a Node.js 6.x installed on your computer.

This will mount the ./dist folder into the supervisor container and build the code before starting the instance, so that any changes you make can be added to the running supervisor with:

./dindctl refresh

Testing with preloaded apps

To test preloaded apps, run balena preload (see the balena CLI docs on an OS image for the app you are testing with. Then copy the apps.json file from the resin-data partition into tools/dind/apps.json.

This file has a format equivalent to the local part of the target state endpoint on the balena API.

Make sure the config.json file doesn't have uuid, registered_at or deviceId populated from a previous run.

Then run the supervisor like this:

./dindctl run --image balena/amd64-supervisor:master --preload

This will make the Docker-in-Docker instance pull the image specified in apps.json before running the supervisor, simulating a preloaded balenaOS image.

View the supervisor's logs

./dindctl logs

This will show the output of journalctl inside the Docker-in-Docker container. You can pass additional options, for instance, to see the logs from the supervisor service:

./dindctl logs -fn 100 -u resin-supervisor

Stop the supervisor

./dindctl stop

This will stop the container and remove it, also removing its volumes.

Developing using a production image or device

A production balena image does not have an open docker socket, required for livepush to work. In this situation, the tools/sync.js script can be used. Note that this process is no longer actively developed, so your mileage may vary.

Bug reports and pull requests are still accepted for changes to sync.js, but the balenaSupervisor team will focus on npm run sync in the future.

Building

Docker images

To build a docker image for amd64 targets, it's as simple as:

docker build . -t my-supervisor

For other architectures, one must use the script automation/build.sh. This is because of emulation specific changes we have made to our base images to allow cross-compilation.

For example, to build for the raspberry pi 3:

ARCH=armv7hf automation/build.sh

This will produce an image balena/armv7hf-supervisor:<git branch name>. To avoid using the branch name, you can set a TAG variable in your shell, before using the build script.

Available architectures: amd64, i386, aarch64, armv7hf and rpi

Testing

You can run some unit tests with:

npm test

The supervisor runs on Node v10.19.0, so using that specific version will ensure tests run in the same environment as production.

Alternatively, tests will be run when building the image, which ensures that the environment is exactly the same.

Running specific tests quickly

You can run specific tests quickly with the test:fast script by matching with test suites (describe) or test cases (it) using a string or regexp:

npm run test:fast -- --grep spawnJournalctl

npm run test:fast -- --grep "detect a V2 delta"

npm run test:fast -- --grep (GET|POST|PUT|DELETE)

The --grep option, when specified, will trigger mocha to only run tests matching the given pattern which is internally compiled to a RegExp.

License

Copyright 2020 Balena Ltd.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.