buildscripts: Cleaner Linux release Docker

This is a greatly simplified Docker container compared to that in
compiler/. We really want the docker image to just be a build
environment, and build the specific versions of dependencies as part of
our normal build (not docker build).

It also includes a helper script that lets you easily do build actions
with the docker environment, but into a checkout on the host. This can
dramatically reduce the pain in building from the docker container as
the source doesn't need to be checked out and only caches are lost
between invocations.

buildscripts/grpc-java-releasing/Dockerfile

@@ -0,0 +1,6 @@
+FROM protoc-artifacts:latest
+
+COPY scl-enable-devtoolset.sh /
+
+# Start in devtoolset environment that uses GCC 4.7
+ENTRYPOINT ["/scl-enable-devtoolset.sh"]

buildscripts/grpc-java-releasing/scl-enable-devtoolset.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+set -eu -o pipefail
+
+quote() {
+  local arg
+  for arg in "$@"; do
+    printf "'"
+    printf "%s" "$arg" | sed -e "s/'/'\\\\''/g"
+    printf "' "
+  done
+}
+
+exec scl enable devtoolset-1.1 "$(quote "$@")"

buildscripts/kokoro/unix.sh

@@ -43,6 +43,7 @@ GRADLE_FLAGS="${GRADLE_FLAGS:-}"
 GRADLE_FLAGS+=" -Pcheckstyle.ignoreFailures=false"
 GRADLE_FLAGS+=" -PfailOnWarnings=true"
 GRADLE_FLAGS+=" -PerrorProne=true"
+GRADLE_FLAGS+=" -Dorg.gradle.parallel=true"
 export GRADLE_OPTS="-Xmx512m"
 
 # Make protobuf discoverable by :grpc-compiler
@@ -60,7 +61,7 @@ if [[ -z "${SKIP_CLEAN_CHECK:-}" && ! -z $(git status --porcelain) ]]; then
 fi
 
 # Run tests
-./gradlew build
+./gradlew build $GRADLE_FLAGS
 pushd examples
 ./gradlew build $GRADLE_FLAGS
 # --batch-mode reduces log spam
@@ -69,8 +70,9 @@ popd
 # TODO(zpencer): also build the GAE examples
 
 LOCAL_MVN_TEMP=$(mktemp -d)
-./gradlew clean grpc-compiler:build grpc-compiler:uploadArchives -PtargetArch=x86_64 \
-  -Dorg.gradle.parallel=false -PrepositoryDir=$LOCAL_MVN_TEMP $GRADLE_FLAGS
+# Note that this disables parallel=true from GRADLE_FLAGS
+./gradlew clean grpc-compiler:build grpc-compiler:uploadArchives $GRADLE_FLAGS -PtargetArch=x86_64 \
+  -Dorg.gradle.parallel=false -PrepositoryDir=$LOCAL_MVN_TEMP
 
 if [[ -z "${MVN_ARTIFACTS:-}" ]]; then
   exit 0

buildscripts/run_in_docker.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+set -eu -o pipefail
+
+quote() {
+  local arg
+  for arg in "$@"; do
+    printf "'"
+    printf "%s" "$arg" | sed -e "s/'/'\\\\''/g"
+    printf "' "
+  done
+}
+
+if [[ "${1:-}" != "in-docker" ]]; then
+  readonly grpc_java_dir="$(dirname $(readlink -f "$0"))/.."
+  exec docker run -it --rm=true -v "${grpc_java_dir}:/grpc-java" -w /grpc-java \
+    grpc-java-releasing \
+    ./buildscripts/run_in_docker.sh in-docker "$(id -u)" "$(id -g)" "$@"
+fi
+
+## In Docker
+
+shift
+
+readonly swap_uid="$1"
+readonly swap_gid="$2"
+shift 2
+
+# Java uses NSS to determine the user's home. If that fails it uses '?' in the
+# current directory. So we need to set up the user's home in /etc/passwd.
+# If this wasn't the case, we could have passed -u to docker run and avoided
+# this script inside the container. JAVA_TOOL_OPTIONS is okay, but is noisy.
+groupadd thegroup -g "$swap_gid"
+useradd theuser -u "$swap_uid" -g "$swap_gid" -m
+if [[ "$#" -eq 0 ]]; then
+  exec su theuser
+else
+  # runuser is too old in the container to support the -u flag; if it did, we'd
+  # be able to remove the 'quote' function.
+  exec su theuser -c "$(quote "$@")"
+fi