forked from bitrise-io/devcenter
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
first set of revisions - Getting started (bitrise-io#47)
- Loading branch information
1 parent
7e12176
commit 312d4aa
Showing
5 changed files
with
110 additions
and
49 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,29 +1,52 @@ | ||
# Builds & Workflows | ||
|
||
A *build* is the process specified by the app's *workflow*, which is a collection of *steps*. Every step is an [**open source**](https://github.com/bitrise-io/bitrise-steplib) script repository which you can inspect and modify. | ||
A *build* is the process specified by the app's *workflow*, which is a collection of *steps*. | ||
Every step is an **open source** repository which you can inspect, modify, | ||
and run with the [open source Bitrise CLI](https://www.bitrise.io/cli). | ||
|
||
A Workflow is interpreted as a `yaml`, which you are able to modify at bitrise.io's Workflow editor, or [yaml editor](http://blog.bitrise.io/2016/02/12/edit-your-yaml-files-like-a-boss.html) directly. On the graphical UI of the Workflow editor, you are able to add, remove, and reorder the build steps. Steps represent a block of script execution with predefined input and output variables. Steps can be written in various languages we (our virtual machines) support, like bash, Go, Ruby, Swift, etc. Read more about how workflows and steps are implemented on our [engineering blog](https://tech.bitrise.io/decentralized-automation/). | ||
The app's build configuration can be specified as a `yaml` (`bitrise.yml`) config, | ||
which you can modify in [bitrise.io](https://www.bitrise.io)'s Workflow editor (on your app's Bitrise.io page click the `Workflows` tab), | ||
or [yaml editor](http://blog.bitrise.io/2016/02/12/edit-your-yaml-files-like-a-boss.html) directly. | ||
|
||
When a build is running, these scripts will be downloaded and executed in the order you've defined in your workflow, with the input parameters you set. They will produce the predefined outputs set as environment variables. | ||
On the graphical UI of the Workflow editor, you are able to add, remove, and reorder the build steps. | ||
Steps represent a block of script execution with predefined input and output variables. | ||
Steps can be written in various languages, like bash, Go, Ruby, Swift, etc. | ||
Read more about how workflows and steps are implemented on our [engineering blog](https://tech.bitrise.io/decentralized-automation/). | ||
|
||
## The build process | ||
|
||
There are a lot of things that can be customized when working with Bitrise. The build process has some mutable dimensions as well, from several kind of triggers, through different stacks and preparation types to environment variables. | ||
|
||
1. Trigger builds by | ||
* clicking the "Build" button on the application's page (runs manually) | ||
* scheduling with a selected branch and frequency (runs when scheduled) | ||
* [webhook](doc:adding-webhooks) - after each push or pull request to the given branch (runs when push/pull request arrives) | ||
* our [Build Trigger API](doc:build-trigger-api) | ||
When a build is running, these scripts will be downloaded and executed in the order you've defined in your workflow, | ||
with the input parameters you set. They will produce the predefined outputs set as environment variables. | ||
|
||
2. Environment preparation | ||
Once we've found a suitable machine, a virtual machine will be provisioned and prepared to run the build. Read more about our virtual machines in [Virtual machines](doc:virtual-machines). Build specific environment variables are preset, so you can use these in your steps. Read more about our available stacks and preparation types in [Available Stacks](doc:available-stacks). | ||
|
||
3. Concurrency | ||
Builds over your subscription plan's concurrency count will be marked as *on hold*. They will start whenever your ongoing builds are finished and you have a free build slot. You can always [purchase additional concurrencies](https://www.bitrise.io/me/profile/pricing) with the Pro plan. | ||
|
||
4. Workflow execution | ||
Steps in Workflows are executed in the same order as defined in the Workflow editor of your application, from top to bottom. You can reorder the steps by dragging. The log each step generates will be displayed on the build's details page. | ||
## The build process | ||
|
||
5. Cleanup | ||
After the execution of the build, there will be a summary of the build created and stored on the Bitrise server and **the virtual machine gets rolled back to a predefined state**, erasing every file and every change your build made so your code/files woudn't fall into the wrong hands. | ||
There are a lot of things that can be customized when working with Bitrise. | ||
The build process has some mutable dimensions as well, | ||
from several kind of [triggers](https://bitrise-io.github.io/devcenter/webhooks/trigger-map), | ||
through different stacks and preparation types to environment variables. | ||
|
||
1. Trigger builds by: | ||
* clicking the `Build` button on the application's page (manual build trigger) | ||
* scheduling with a selected branch and frequency (runs when scheduled - you can find this option in the `Build` popup) | ||
* [webhook](https://bitrise-io.github.io/devcenter/webhooks) - after each code/tag push or pull request to the given branch (runs when push/pull request arrives) | ||
* our `Build Trigger API` | ||
|
||
2. Environment preparation: | ||
Once we've found a suitable machine, a virtual machine will be provisioned and prepared to run the build. | ||
Build specific environment variables are preset, so you can use these in your steps. | ||
You can find more information about the available `Stacks` on your app's `Settings` tab, | ||
in the `Stack Selector` section. | ||
|
||
3. Concurrency: | ||
Builds over your subscription plan's concurrency count will be marked as __on hold__. | ||
They will start whenever your ongoing builds are finished and you have a free build slot. | ||
You can always [purchase additional concurrencies](https://www.bitrise.io/me/profile/pricing) with the Pro plan | ||
to increase the concurrent builds you can run at the same time. | ||
|
||
4. Workflow execution: | ||
Steps in Workflows are executed in the same order as defined in the Workflow editor of your application, | ||
from top to bottom. You can reorder the steps by dragging. | ||
The log each step generates will be displayed on the build's details page. | ||
|
||
5. Cleanup: | ||
After the execution of the build, there will be a summary of the build | ||
created and stored on the Bitrise server and **the virtual machine gets destroyed**, | ||
so your code/files woudn't fall into the wrong hands. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,14 +1,33 @@ | ||
To guarantee the security of your builds we use [virtual machines](/infrastructure/virtual-machines) for builds. Every build runs in its own, clean virtual machine and we discard the whole virtual machine after the build finishes, erasing every file your build uses and every change you make during your build. | ||
To guarantee the security of your builds we use [virtual machines](/infrastructure/virtual-machines) for builds. | ||
Every build runs in its own, clean virtual machine and we discard the whole virtual machine after the build finishes, | ||
erasing every file your build uses and every change you make during your build. | ||
|
||
This way your builds are always protected by changes made by others and from your previous builds, no one else can access your code and you can use a stable environment to define your build workflow (no state persists between builds). | ||
_This is also true for the Linux/Android stacks, which use Docker containers to run the build. | ||
The build itself still gets a full virtual machine where no other Docker container is started, | ||
only the one used as the environment of the build. In short we only use Docker containers | ||
to manage the environment, not for build environment isolation - that's ensured by using | ||
full virtual machines for every build._ | ||
|
||
This way your builds are always protected by changes made by others and from your previous builds, | ||
no one else can access your code and you can use a stable environment to define your build workflow (no state persists between builds). | ||
|
||
## Source code | ||
We don't store your source code. The source code is only accessed on the build machines (virtual machines) the way you define it in your Bitrise Configuration (workflow). If you don't have a Git Clone step in your configuration, then the source code won't be touched at all. At the end of the build the whole Virtual Machine is destroyed. | ||
|
||
We don't store your source code. The source code is only accessed on the build machines (virtual machines) | ||
the way you define it in your Bitrise Configuration (workflow). If you don't have a Git Clone step in your configuration, | ||
then the source code won't be touched at all. At the end of the build the whole Virtual Machine is destroyed. | ||
|
||
## Code signing and other files | ||
The files you upload in the Workflow Editor (**Code Signing & Files** section of the editor) are stored on `Amazon S3` in a way that it's only accessible for the web servers. | ||
|
||
The required credentials are not stored in any database, it is only available in the web servers' environment. Build servers can't access the files directly either. When a build starts the web server generates a read-only, time limited access URL for these files, using [Amazon S3 presigned URLs](https://docs.aws.amazon.com/aws-sdk-php/v3/guide/service/s3-presigned-url.html). | ||
The files you upload in the Workflow Editor (**Code Signing & Files** section of the editor) | ||
are stored on `Amazon S3` in a way that it's only accessible for the web servers. | ||
|
||
The required credentials are not stored in any database, it is only available in the web servers' environment. | ||
Build servers can't access the files directly either. | ||
When a build starts the web server generates a read-only, | ||
time limited access URL for these files, using [Amazon S3 presigned URLs](https://docs.aws.amazon.com/aws-sdk-php/v3/guide/service/s3-presigned-url.html). | ||
|
||
## Passwords | ||
Passwords are stored in a hashed, encrypted form. We are encrypting the passwords with [bcrypt algorithm](https://en.wikipedia.org/wiki/Bcrypt), using multiple stretches. | ||
|
||
Passwords are stored in a hashed, encrypted form. | ||
We are encrypting the passwords with [bcrypt algorithm](https://en.wikipedia.org/wiki/Bcrypt), using multiple stretches. |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters