read Nexus credentials from shared Vault path

.drone.yml

@@ -1,22 +1,167 @@
 kind: pipeline
 name: default
 
-steps:
-#  docker 打包
-  - name: docker
-    image: plugins/docker
-    settings:
-      context: ./
-      dockerfile: ./Dockerfile
-      username:
-        from_secret: docker_username
-      password:
-        from_secret: docker_password
-      registry: https://registry.cn-hangzhou.aliyuncs.com
-      repo:  registry.cn-hangzhou.aliyuncs.com/loghub/mysql
-      tags:
-        - 8.4
+clone:
+  retries: 3
 
-volumes:
-  - name: ruoyi_cache
-    temp: {}
+concurrency:
+  limit: 1
+
+steps:
+  # 拉取并打包 Shopee WES
+  - name: deploy
+    image: gradle:9-alpine
+    pull: if-not-exists
+    environment:
+      DOCKER_CONFIG: /home/gradle/.docker
+      JIB_USERNAME:
+        from_secret: docker_username
+      JIB_PASSWORD:
+        from_secret: docker_password
+      NEXUS_USERNAME:
+        from_secret: nexus_username
+      NEXUS_PASSWORD:
+        from_secret: nexus_password
+      NPM_USERNAME:
+        from_secret: nexus_username
+      NPM_PASSWORD:
+        from_secret: nexus_password
+    commands:
+      - |
+        if grep -qs ' /cache ' /proc/self/mountinfo && [ -w /cache ]; then
+          export GRADLE_USER_HOME=/cache/wes-loghub/gradle-9.6.1
+          export WES_WORKSPACE=/cache/wes-loghub/workspace
+          mkdir -p "$GRADLE_USER_HOME" "$(dirname "$WES_WORKSPACE")"
+          echo "===== persistent Gradle cache enabled: $GRADLE_USER_HOME ====="
+          echo "===== persistent WES workspace enabled: $WES_WORKSPACE ====="
+        else
+          export GRADLE_USER_HOME=/opt/gradle-user-home
+          export WES_WORKSPACE=/drone/src/wes-loghub
+          echo "===== WARNING: /cache is not mounted; using ephemeral Gradle cache ====="
+        fi
+      - git --version
+      - |
+        test -n "${NEXUS_USERNAME:-${NPM_USERNAME:-}}" || {
+          echo "Nexus username secret is missing"
+          exit 1
+        }
+        test -n "${NEXUS_PASSWORD:-${NPM_PASSWORD:-}}" || {
+          echo "Nexus password secret is missing"
+          exit 1
+        }
+      - |
+        if [ -d "$WES_WORKSPACE/.git" ]; then
+          echo "===== updating persistent WES workspace ====="
+          time git -C "$WES_WORKSPACE" fetch \
+            --depth 1 \
+            --no-tags \
+            https://zwzeng:glpat-nuzkafsdgYKM0KAgvpL4Bm86MQp1OnkH.01.0w0tr4xa1@git.ittx.com.cn/wms/wes-loghub.git \
+            proj-shopee-test
+          git -C "$WES_WORKSPACE" checkout -B proj-shopee-test FETCH_HEAD
+        else
+          echo "===== creating persistent WES workspace ====="
+          time git clone \
+            -b proj-shopee-test \
+            --depth 1 \
+            --no-tags \
+            https://zwzeng:glpat-nuzkafsdgYKM0KAgvpL4Bm86MQp1OnkH.01.0w0tr4xa1@git.ittx.com.cn/wms/wes-loghub.git \
+            "$WES_WORKSPACE"
+        fi
+        git -C "$WES_WORKSPACE" remote set-url origin https://git.ittx.com.cn/wms/wes-loghub.git
+      - git -C "$WES_WORKSPACE" log -1 --format='===== WES commit %H %s ====='
+      - cd "$WES_WORKSPACE"
+      - |
+        (
+          gradle_pids() {
+            for proc_path in /proc/[0-9]*; do
+              [ -r "$proc_path/cmdline" ] || continue
+              proc_cmd=$(tr '\0' ' ' < "$proc_path/cmdline" 2>/dev/null)
+              case "$proc_cmd" in
+                *GradleDaemon*|*GradleWorkerMain*) basename "$proc_path" ;;
+              esac
+            done
+          }
+          heartbeat_count=0
+          while true; do
+            heartbeat_count=$((heartbeat_count + 1))
+            echo "===== build heartbeat $(date -Iseconds) ====="
+            echo "load: $(cat /proc/loadavg)"
+            awk '/MemTotal|MemAvailable/ { printf "%s %s kB  ", $1, $2 } END { print "" }' /proc/meminfo
+            echo "===== active Gradle tasks ====="
+            cat /tmp/gradle-active-tasks 2>/dev/null || echo "none"
+            echo "===== top processes ====="
+            if command -v top >/dev/null 2>&1; then
+              top -b -n 1 2>/dev/null | head -n 20
+            else
+              ps -ef
+            fi
+            echo "===== Gradle JVM I/O ====="
+            for pid in $(gradle_pids); do
+              echo "--- pid=$pid cmd=$(tr '\0' ' ' < /proc/$pid/cmdline 2>/dev/null)"
+              awk '/read_bytes|write_bytes|cancelled_write_bytes/ { printf "%s ", $0 } END { print "" }' "/proc/$pid/io" 2>/dev/null || true
+            done
+            if [ $((heartbeat_count % 15)) -eq 0 ]; then
+              echo "===== Gradle JVM thread dump after $((heartbeat_count * 60)) seconds ====="
+              for pid in $(gradle_pids); do
+                jcmd "$pid" Thread.print -l || true
+              done
+            fi
+            sleep 60
+          done
+        ) &
+        echo $! > /tmp/build-heartbeat.pid
+        trap 'kill "$(cat /tmp/build-heartbeat.pid)" 2>/dev/null || true' EXIT
+      - >
+        time gradle jib -stacktrace
+        --init-script=/drone/src/gradle-repositories.init.gradle
+        --init-script=/drone/src/gradle-diagnostics.init.gradle
+        --no-daemon
+        --info
+        --console=plain
+        --warning-mode=summary
+        --build-cache
+        --configure-on-demand
+        --parallel
+        --max-workers=8
+        -x test 
+        -PdockerBuild=true  
+        -Dcybertrans.idp.enabled=false 
+        -Djib.disableUpdateChecks=true
+        -Djib.baseImageCache=$GRADLE_USER_HOME/caches/jib/base
+        -Djib.applicationCache=$GRADLE_USER_HOME/caches/jib/application
+        -Djib.from.image=registry.cn-hangzhou.aliyuncs.com/ttx/amazoncorretto:25-alpine3.23-jdk
+        -Djib.from.auth.username=$JIB_USERNAME
+        -Djib.from.auth.password=$JIB_PASSWORD
+        -Djib.to.auth.username=$JIB_USERNAME
+        -Djib.to.auth.password=$JIB_PASSWORD
+        -Djib.to.image=registry.cn-hangzhou.aliyuncs.com/loghub/wes:shopee-wes-test-3
+        -Djib.to.tags=shopee-wes-test-3
+        -Djib.container.entrypoint='INHERIT'
+        -Djib.container.args='java,-Dfile.encoding=utf-8,-Dspring.profiles.active=k8s,-Dserver.port=9210,-cp,/app/resources:/app/classes:/app/libs/*,com.ittx.Application'
+      - >
+        kill "$(cat /tmp/build-heartbeat.pid)" 2>/dev/null || true
+
+---
+kind: secret
+name: docker_username
+get:
+  path: drone/data/docker_username
+  name: docker_username
+---
+kind: secret
+name: docker_password
+get:
+  path: drone/data/docker_password
+  name: docker_password
+---
+kind: secret
+name: nexus_username
+get:
+  path: drone/data/nexus
+  name: nexus_username
+---
+kind: secret
+name: nexus_password
+get:
+  path: drone/data/nexus
+  name: nexus_password

.gitignore

@@ -0,0 +1 @@
+.idea/

Dockerfile

@@ -1,112 +0,0 @@
-FROM oraclelinux:9-slim-fips
-
-RUN set -eux; \
-	groupadd --system --gid 999 mysql; \
-	useradd --system --uid 999 --gid 999 --home-dir /var/lib/mysql --no-create-home mysql
- 
-COPY gosu-amd64  /usr/local/bin/gosu
-RUN set -eux; \
-	chmod +x /usr/local/bin/gosu; \
-	gosu --version; \
-	gosu nobody true
-
-# add gosu for easy step-down from root
-# https://github.com/tianon/gosu/releases
-# ENV GOSU_VERSION 1.19
-# RUN set -eux; \
-ENV MYSQL_MAJOR=8.4
-
-RUN set -eux; \
-	microdnf update -y; \
-    microdnf upgrade -y;
-
-RUN set -eux; \
-	microdnf install -y \
-		bzip2 \
-		gzip \
-		openssl \
-		xz \
-		zstd \
-		findutils
-
-RUN set -eux; \
-	key='BCA4 3417 C3B4 85DD 128E C6D4 B7B3 B788 A8D3 785C'; \
-	export GNUPGHOME="$(mktemp -d)"; \
-	gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
-	gpg --batch --export --armor "$key" > /etc/pki/rpm-gpg/RPM-GPG-KEY-mysql; \
-	rm -rf "$GNUPGHOME"
-
-
-RUN set -eu; \
-	{ \
-		echo '[mysql8.4-server-minimal]'; \
-		echo 'name=MySQL 8.4 Server Minimal'; \
-		echo 'enabled=1'; \
-		echo 'baseurl=https://repo.mysql.com/yum/mysql-8.4-community/docker/el/9/$basearch/'; \
-		echo 'gpgcheck=1'; \
-		echo 'gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql'; \
-# https://github.com/docker-library/mysql/pull/680#issuecomment-825930524
-		echo 'module_hotfixes=true'; \
-	} | tee /etc/yum.repos.d/mysql-community-minimal.repo
-
-RUN set -eux; \
-	microdnf install -y "mysql-community-server-minimal"; \
-# the "socket" value in the Oracle packages is set to "/var/lib/mysql" which isn't a great place for the socket (we want it in "/var/run/mysqld" instead)
-# https://github.com/docker-library/mysql/pull/680#issuecomment-636121520
-	grep -F 'socket=/var/lib/mysql/mysql.sock' /etc/my.cnf; \
-	sed -i 's!^socket=.*!socket=/var/run/mysqld/mysqld.sock!' /etc/my.cnf; \
-	grep -F 'socket=/var/run/mysqld/mysqld.sock' /etc/my.cnf; \
-	{ echo '[client]'; echo 'socket=/var/run/mysqld/mysqld.sock'; } >> /etc/my.cnf; \
-	\
-# make sure users dumping files in "/etc/mysql/conf.d" still works
-	! grep -F '!includedir' /etc/my.cnf; \
-	{ echo; echo '!includedir /etc/mysql/conf.d/'; } >> /etc/my.cnf; \
-	mkdir -p /etc/mysql/conf.d; \
-# ensure these directories exist and have useful permissions
-# the rpm package has different opinions on the mode of `/var/run/mysqld`, so this needs to be after install
-	mkdir -p /var/lib/mysql /var/run/mysqld; \
-	chown mysql:mysql /var/lib/mysql /var/run/mysqld; \
-# ensure that /var/run/mysqld (used for socket and lock files) is writable regardless of the UID our mysqld instance ends up having at runtime
-	chmod 1777 /var/lib/mysql /var/run/mysqld; \
-	\
-	mkdir /docker-entrypoint-initdb.d; \
-	\
-	mysqld --version; \
-	mysql --version
-
-RUN set -eu; \
-	{ \
-		echo '[mysql-tools-community]'; \
-		echo 'name=MySQL Tools Community'; \
-		echo 'baseurl=https://repo.mysql.com/yum/mysql-tools-8.4-community/el/9/$basearch/'; \
-		echo 'enabled=1'; \
-		echo 'gpgcheck=1'; \
-		echo 'gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql'; \
-# https://github.com/docker-library/mysql/pull/680#issuecomment-825930524
-		echo 'module_hotfixes=true'; \
-	} | tee /etc/yum.repos.d/mysql-community-tools.repo
-
-# 漏洞问题先不安装
-# RUN set -eux; \
-# 	microdnf install -y "mysql-shell"; \
-# 	mysqlsh --version
-
-RUN set -eux; \
-microdnf clean all ; 
-
-VOLUME /var/lib/mysql
-
-COPY docker-entrypoint.sh /usr/local/bin/
-RUN chmod +x /usr/local/bin/docker-entrypoint.sh
-
-ENTRYPOINT ["docker-entrypoint.sh"]
-
-EXPOSE 3306 33060
-CMD ["mysqld"]
-
-RUN set -eux; \
-    rpm -e --nodeps   glib2 libssh libssh-config libcurl curl
-
-# docker build -t  registry.cn-shanghai.aliyuncs.com/hub_z/mysql:8.4  .
-# docker push  registry.cn-shanghai.aliyuncs.com/hub_z/mysql:8.4
-# syft  --scope  squashed  registry.cn-shanghai.aliyuncs.com/hub_z/mysql:8.4    -o  spdx-json=mysql.json

docker-entrypoint.sh

@@ -1,420 +0,0 @@
-#!/usr/bin/env bash
-set -eo pipefail
-shopt -s nullglob
-
-# logging functions
-mysql_log() {
-	local type="$1"; shift
-	# accept argument string or stdin
-	local text="$*"; if [ "$#" -eq 0 ]; then text="$(cat)"; fi
-	local dt; dt="$(date --rfc-3339=seconds)"
-	printf '%s [%s] [Entrypoint]: %s\n' "$dt" "$type" "$text"
-}
-mysql_note() {
-	mysql_log Note "$@"
-}
-mysql_warn() {
-	mysql_log Warn "$@" >&2
-}
-mysql_error() {
-	mysql_log ERROR "$@" >&2
-	exit 1
-}
-
-# usage: file_env VAR [DEFAULT]
-#    ie: file_env 'XYZ_DB_PASSWORD' 'example'
-# (will allow for "$XYZ_DB_PASSWORD_FILE" to fill in the value of
-#  "$XYZ_DB_PASSWORD" from a file, especially for Docker's secrets feature)
-file_env() {
-	local var="$1"
-	local fileVar="${var}_FILE"
-	local def="${2:-}"
-	if [ "${!var:-}" ] && [ "${!fileVar:-}" ]; then
-		mysql_error "Both $var and $fileVar are set (but are exclusive)"
-	fi
-	local val="$def"
-	if [ "${!var:-}" ]; then
-		val="${!var}"
-	elif [ "${!fileVar:-}" ]; then
-		val="$(< "${!fileVar}")"
-	fi
-	export "$var"="$val"
-	unset "$fileVar"
-}
-
-# check to see if this file is being run or sourced from another script
-_is_sourced() {
-	# https://unix.stackexchange.com/a/215279
-	[ "${#FUNCNAME[@]}" -ge 2 ] \
-		&& [ "${FUNCNAME[0]}" = '_is_sourced' ] \
-		&& [ "${FUNCNAME[1]}" = 'source' ]
-}
-
-# usage: docker_process_init_files [file [file [...]]]
-#    ie: docker_process_init_files /always-initdb.d/*
-# process initializer files, based on file extensions
-docker_process_init_files() {
-	# mysql here for backwards compatibility "${mysql[@]}"
-	mysql=( docker_process_sql )
-
-	echo
-	local f
-	for f; do
-		case "$f" in
-			*.sh)
-				# https://github.com/docker-library/postgres/issues/450#issuecomment-393167936
-				# https://github.com/docker-library/postgres/pull/452
-				if [ -x "$f" ]; then
-					mysql_note "$0: running $f"
-					"$f"
-				else
-					mysql_note "$0: sourcing $f"
-					. "$f"
-				fi
-				;;
-			*.sql)     mysql_note "$0: running $f"; docker_process_sql < "$f"; echo ;;
-			*.sql.bz2) mysql_note "$0: running $f"; bunzip2 -c "$f" | docker_process_sql; echo ;;
-			*.sql.gz)  mysql_note "$0: running $f"; gunzip -c "$f" | docker_process_sql; echo ;;
-			*.sql.xz)  mysql_note "$0: running $f"; xzcat "$f" | docker_process_sql; echo ;;
-			*.sql.zst) mysql_note "$0: running $f"; zstd -dc "$f" | docker_process_sql; echo ;;
-			*)         mysql_warn "$0: ignoring $f" ;;
-		esac
-		echo
-	done
-}
-
-# arguments necessary to run "mysqld --verbose --help" successfully (used for testing configuration validity and for extracting default/configured values)
-_verboseHelpArgs=(
-	--verbose --help
-	--log-bin-index="$(mktemp -u)" # https://github.com/docker-library/mysql/issues/136
-)
-
-mysql_check_config() {
-	local toRun=( "$@" "${_verboseHelpArgs[@]}" ) errors
-	if ! errors="$("${toRun[@]}" 2>&1 >/dev/null)"; then
-		mysql_error $'mysqld failed while attempting to check config\n\tcommand was: '"${toRun[*]}"$'\n\t'"$errors"
-	fi
-}
-
-# Fetch value from server config
-# We use mysqld --verbose --help instead of my_print_defaults because the
-# latter only show values present in config files, and not server defaults
-mysql_get_config() {
-	local conf="$1"; shift
-	"$@" "${_verboseHelpArgs[@]}" 2>/dev/null \
-		| awk -v conf="$conf" '$1 == conf && /^[^ \t]/ { sub(/^[^ \t]+[ \t]+/, ""); print; exit }'
-	# match "datadir      /some/path with/spaces in/it here" but not "--xyz=abc\n     datadir (xyz)"
-}
-
-# Ensure that the package default socket can also be used
-# since rpm packages are compiled with a different socket location
-# and "mysqlsh --mysql" doesn't read the [client] config
-# related to https://github.com/docker-library/mysql/issues/829
-mysql_socket_fix() {
-	local defaultSocket
-	defaultSocket="$(mysql_get_config 'socket' mysqld --no-defaults)"
-	if [ "$defaultSocket" != "$SOCKET" ]; then
-		ln -sfTv "$SOCKET" "$defaultSocket" || :
-	fi
-}
-
-# Do a temporary startup of the MySQL server, for init purposes
-docker_temp_server_start() {
-	# For 5.7+ the server is ready for use as soon as startup command unblocks
-	if ! "$@" --daemonize --skip-networking --default-time-zone=SYSTEM --socket="${SOCKET}"; then
-		mysql_error "Unable to start server."
-	fi
-}
-
-# Stop the server. When using a local socket file mysqladmin will block until
-# the shutdown is complete.
-docker_temp_server_stop() {
-	if ! mysqladmin --defaults-extra-file=<( _mysql_passfile ) shutdown -uroot --socket="${SOCKET}"; then
-		mysql_error "Unable to shut down server."
-	fi
-}
-
-# Verify that the minimally required password settings are set for new databases.
-docker_verify_minimum_env() {
-	if [ -z "$MYSQL_ROOT_PASSWORD" -a -z "$MYSQL_ALLOW_EMPTY_PASSWORD" -a -z "$MYSQL_RANDOM_ROOT_PASSWORD" ]; then
-		mysql_error <<-'EOF'
-			Database is uninitialized and password option is not specified
-			    You need to specify one of the following as an environment variable:
-			    - MYSQL_ROOT_PASSWORD
-			    - MYSQL_ALLOW_EMPTY_PASSWORD
-			    - MYSQL_RANDOM_ROOT_PASSWORD
-		EOF
-	fi
-
-	# This will prevent the CREATE USER from failing (and thus exiting with a half-initialized database)
-	if [ "$MYSQL_USER" = 'root' ]; then
-		mysql_error <<-'EOF'
-			MYSQL_USER="root", MYSQL_USER and MYSQL_PASSWORD are for configuring a regular user and cannot be used for the root user
-			    Remove MYSQL_USER="root" and use one of the following to control the root user password:
-			    - MYSQL_ROOT_PASSWORD
-			    - MYSQL_ALLOW_EMPTY_PASSWORD
-			    - MYSQL_RANDOM_ROOT_PASSWORD
-		EOF
-	fi
-
-	# warn when missing one of MYSQL_USER or MYSQL_PASSWORD
-	if [ -n "$MYSQL_USER" ] && [ -z "$MYSQL_PASSWORD" ]; then
-		mysql_warn 'MYSQL_USER specified, but missing MYSQL_PASSWORD; MYSQL_USER will not be created'
-	elif [ -z "$MYSQL_USER" ] && [ -n "$MYSQL_PASSWORD" ]; then
-		mysql_warn 'MYSQL_PASSWORD specified, but missing MYSQL_USER; MYSQL_PASSWORD will be ignored'
-	fi
-}
-
-# creates folders for the database
-# also ensures permission for user mysql of run as root
-docker_create_db_directories() {
-	local user; user="$(id -u)"
-
-	local -A dirs=( ["$DATADIR"]=1 )
-	local dir
-	dir="$(dirname "$SOCKET")"
-	dirs["$dir"]=1
-
-	# "datadir" and "socket" are already handled above (since they were already queried previously)
-	local conf
-	for conf in \
-		general-log-file \
-		keyring_file_data \
-		pid-file \
-		secure-file-priv \
-		slow-query-log-file \
-	; do
-		dir="$(mysql_get_config "$conf" "$@")"
-
-		# skip empty values
-		if [ -z "$dir" ] || [ "$dir" = 'NULL' ]; then
-			continue
-		fi
-		case "$conf" in
-			secure-file-priv)
-				# already points at a directory
-				;;
-			*)
-				# other config options point at a file, but we need the directory
-				dir="$(dirname "$dir")"
-				;;
-		esac
-
-		dirs["$dir"]=1
-	done
-
-	mkdir -p "${!dirs[@]}"
-
-	if [ "$user" = "0" ]; then
-		# this will cause less disk access than `chown -R`
-		find "${!dirs[@]}" \! -user mysql -exec chown --no-dereference mysql '{}' +
-	fi
-}
-
-# initializes the database directory
-docker_init_database_dir() {
-	mysql_note "Initializing database files"
-	"$@" --initialize-insecure --default-time-zone=SYSTEM --autocommit=1
-	# explicitly enable autocommit to combat https://bugs.mysql.com/bug.php?id=110535 (TODO remove this when 8.0 is EOL; see https://github.com/mysql/mysql-server/commit/7dbf4f80ed15f3c925cfb2b834142f23a2de719a)
-	mysql_note "Database files initialized"
-}
-
-# Loads various settings that are used elsewhere in the script
-# This should be called after mysql_check_config, but before any other functions
-docker_setup_env() {
-	# Get config
-	declare -g DATADIR SOCKET
-	DATADIR="$(mysql_get_config 'datadir' "$@")"
-	SOCKET="$(mysql_get_config 'socket' "$@")"
-
-	# Initialize values that might be stored in a file
-	file_env 'MYSQL_ROOT_HOST' '%'
-	file_env 'MYSQL_DATABASE'
-	file_env 'MYSQL_USER'
-	file_env 'MYSQL_PASSWORD'
-	file_env 'MYSQL_ROOT_PASSWORD'
-
-	declare -g DATABASE_ALREADY_EXISTS
-	if [ -d "$DATADIR/mysql" ]; then
-		DATABASE_ALREADY_EXISTS='true'
-	fi
-}
-
-# Execute sql script, passed via stdin
-# usage: docker_process_sql [--dont-use-mysql-root-password] [mysql-cli-args]
-#    ie: docker_process_sql --database=mydb <<<'INSERT ...'
-#    ie: docker_process_sql --dont-use-mysql-root-password --database=mydb <my-file.sql
-docker_process_sql() {
-	passfileArgs=()
-	if [ '--dont-use-mysql-root-password' = "$1" ]; then
-		passfileArgs+=( "$1" )
-		shift
-	fi
-	# args sent in can override this db, since they will be later in the command
-	if [ -n "$MYSQL_DATABASE" ]; then
-		set -- --database="$MYSQL_DATABASE" "$@"
-	fi
-
-	mysql --defaults-extra-file=<( _mysql_passfile "${passfileArgs[@]}") --protocol=socket -uroot -hlocalhost --socket="${SOCKET}" --comments "$@"
-}
-
-# Initializes database with timezone info and root password, plus optional extra db/user
-docker_setup_db() {
-	# Load timezone info into database
-	if [ -z "$MYSQL_INITDB_SKIP_TZINFO" ]; then
-		# sed is for https://bugs.mysql.com/bug.php?id=20545
-		mysql_tzinfo_to_sql /usr/share/zoneinfo \
-			| sed 's/Local time zone must be set--see zic manual page/FCTY/' \
-			| docker_process_sql --dont-use-mysql-root-password --database=mysql
-			# tell docker_process_sql to not use MYSQL_ROOT_PASSWORD since it is not set yet
-	fi
-	# Generate random root password
-	if [ -n "$MYSQL_RANDOM_ROOT_PASSWORD" ]; then
-		MYSQL_ROOT_PASSWORD="$(openssl rand -base64 24)"; export MYSQL_ROOT_PASSWORD
-		mysql_note "GENERATED ROOT PASSWORD: $MYSQL_ROOT_PASSWORD"
-	fi
-	# Sets root password and creates root users for non-localhost hosts
-	local rootCreate=
-	# default root to listen for connections from anywhere
-	if [ -n "$MYSQL_ROOT_HOST" ] && [ "$MYSQL_ROOT_HOST" != 'localhost' ]; then
-		# no, we don't care if read finds a terminating character in this heredoc
-		# https://unix.stackexchange.com/questions/265149/why-is-set-o-errexit-breaking-this-read-heredoc-expression/265151#265151
-		read -r -d '' rootCreate <<-EOSQL || true
-			CREATE USER 'root'@'${MYSQL_ROOT_HOST}' IDENTIFIED BY '${MYSQL_ROOT_PASSWORD}' ;
-			GRANT ALL ON *.* TO 'root'@'${MYSQL_ROOT_HOST}' WITH GRANT OPTION ;
-		EOSQL
-	fi
-
-	local passwordSet=
-	# no, we don't care if read finds a terminating character in this heredoc (see above)
-	read -r -d '' passwordSet <<-EOSQL || true
-		ALTER USER 'root'@'localhost' IDENTIFIED BY '${MYSQL_ROOT_PASSWORD}' ;
-	EOSQL
-
-	# tell docker_process_sql to not use MYSQL_ROOT_PASSWORD since it is just now being set
-	docker_process_sql --dont-use-mysql-root-password --database=mysql <<-EOSQL
-		-- enable autocommit explicitly (in case it was disabled globally)
-		SET autocommit = 1;
-
-		-- What's done in this file shouldn't be replicated
-		--  or products like mysql-fabric won't work
-		SET @@SESSION.SQL_LOG_BIN=0;
-
-		${passwordSet}
-		GRANT ALL ON *.* TO 'root'@'localhost' WITH GRANT OPTION ;
-		FLUSH PRIVILEGES ;
-		${rootCreate}
-		DROP DATABASE IF EXISTS test ;
-	EOSQL
-
-	# Creates a custom database and user if specified
-	if [ -n "$MYSQL_DATABASE" ]; then
-		mysql_note "Creating database ${MYSQL_DATABASE}"
-		docker_process_sql --database=mysql <<<"CREATE DATABASE IF NOT EXISTS \`$MYSQL_DATABASE\` ;"
-	fi
-
-	if [ -n "$MYSQL_USER" ] && [ -n "$MYSQL_PASSWORD" ]; then
-		mysql_note "Creating user ${MYSQL_USER}"
-		docker_process_sql --database=mysql <<<"CREATE USER '$MYSQL_USER'@'%' IDENTIFIED BY '$MYSQL_PASSWORD' ;"
-
-		if [ -n "$MYSQL_DATABASE" ]; then
-			mysql_note "Giving user ${MYSQL_USER} access to schema ${MYSQL_DATABASE}"
-			docker_process_sql --database=mysql <<<"GRANT ALL ON \`${MYSQL_DATABASE//_/\\_}\`.* TO '$MYSQL_USER'@'%' ;"
-		fi
-	fi
-}
-
-_mysql_passfile() {
-	# echo the password to the "file" the client uses
-	# the client command will use process substitution to create a file on the fly
-	# ie: --defaults-extra-file=<( _mysql_passfile )
-	if [ '--dont-use-mysql-root-password' != "$1" ] && [ -n "$MYSQL_ROOT_PASSWORD" ]; then
-		cat <<-EOF
-			[client]
-			password="${MYSQL_ROOT_PASSWORD}"
-		EOF
-	fi
-}
-
-# Mark root user as expired so the password must be changed before anything
-# else can be done (only supported for 5.6+)
-mysql_expire_root_user() {
-	if [ -n "$MYSQL_ONETIME_PASSWORD" ]; then
-		docker_process_sql --database=mysql <<-EOSQL
-			ALTER USER 'root'@'%' PASSWORD EXPIRE;
-		EOSQL
-	fi
-}
-
-# check arguments for an option that would cause mysqld to stop
-# return true if there is one
-_mysql_want_help() {
-	local arg
-	for arg; do
-		case "$arg" in
-			-'?'|--help|--print-defaults|-V|--version)
-				return 0
-				;;
-		esac
-	done
-	return 1
-}
-
-_main() {
-	# if command starts with an option, prepend mysqld
-	if [ "${1:0:1}" = '-' ]; then
-		set -- mysqld "$@"
-	fi
-
-	# skip setup if they aren't running mysqld or want an option that stops mysqld
-	if [ "$1" = 'mysqld' ] && ! _mysql_want_help "$@"; then
-		mysql_note "Entrypoint script for MySQL Server ${MYSQL_VERSION} started."
-
-		mysql_check_config "$@"
-		# Load various environment variables
-		docker_setup_env "$@"
-		docker_create_db_directories "$@"
-
-		# If container is started as root user, restart as dedicated mysql user
-		if [ "$(id -u)" = "0" ]; then
-			mysql_note "Switching to dedicated user 'mysql'"
-			exec gosu mysql "$BASH_SOURCE" "$@"
-		fi
-
-		# there's no database, so it needs to be initialized
-		if [ -z "$DATABASE_ALREADY_EXISTS" ]; then
-			docker_verify_minimum_env
-
-			# check dir permissions to reduce likelihood of half-initialized database
-			ls /docker-entrypoint-initdb.d/ > /dev/null
-
-			docker_init_database_dir "$@"
-
-			mysql_note "Starting temporary server"
-			docker_temp_server_start "$@"
-			mysql_note "Temporary server started."
-
-			mysql_socket_fix
-			docker_setup_db
-			docker_process_init_files /docker-entrypoint-initdb.d/*
-
-			mysql_expire_root_user
-
-			mysql_note "Stopping temporary server"
-			docker_temp_server_stop
-			mysql_note "Temporary server stopped"
-
-			echo
-			mysql_note "MySQL init process done. Ready for start up."
-			echo
-		else
-			mysql_socket_fix
-		fi
-	fi
-	exec "$@"
-}
-
-# If we are sourced from elsewhere, don't perform any further actions
-if ! _is_sourced; then
-	_main "$@"
-fi

gradle-diagnostics.init.gradle

@@ -0,0 +1,34 @@
+import java.util.concurrent.ConcurrentHashMap
+import org.gradle.api.tasks.compile.GroovyCompile
+
+def taskStartNanos = new ConcurrentHashMap<String, Long>()
+def activeTasksFile = new File('/tmp/gradle-active-tasks')
+
+def writeActiveTasks = {
+    synchronized (taskStartNanos) {
+        def activeTasks = taskStartNanos.keySet().sort()
+        activeTasksFile.text = activeTasks
+                ? activeTasks.join(System.lineSeparator()) + System.lineSeparator()
+                : "none${System.lineSeparator()}"
+    }
+}
+
+gradle.beforeProject { project ->
+    project.tasks.withType(GroovyCompile).configureEach {
+        options.forkOptions.memoryMaximumSize = '1g'
+    }
+}
+
+gradle.taskGraph.beforeTask { task ->
+    taskStartNanos.put(task.path, System.nanoTime())
+    writeActiveTasks()
+    println "[TASK START] ${task.path}"
+}
+
+gradle.taskGraph.afterTask { task, state ->
+    def startedAt = taskStartNanos.remove(task.path)
+    def elapsedMs = startedAt == null ? 0 : (System.nanoTime() - startedAt) / 1_000_000
+    def outcome = state.failure ? 'FAILED' : state.skipped ? 'SKIPPED' : 'DONE'
+    println "[TASK END] ${task.path} ${outcome} ${elapsedMs} ms"
+    writeActiveTasks()
+}

gradle-repositories.init.gradle

@@ -0,0 +1,71 @@
+def nexusUsername = System.getenv('NEXUS_USERNAME') ?: System.getenv('NPM_USERNAME')
+def nexusPassword = System.getenv('NEXUS_PASSWORD') ?: System.getenv('NPM_PASSWORD')
+
+if (!nexusUsername || !nexusPassword) {
+    throw new GradleException('Nexus credentials are not configured')
+}
+
+buildscript {
+    repositories {
+        mavenLocal()
+        maven { url = 'https://nexus.freeicu.top/repository/maven-public/' }
+        maven {
+            url = 'https://nexus.loghub.com/repository/public/'
+            credentials {
+                username = nexusUsername
+                password = nexusPassword
+            }
+        }
+        maven { url = 'https://repo.huaweicloud.com/repository/maven/huaweicloudsdk' }
+        maven { url = 'https://build.shibboleth.net/nexus/content/repositories/releases/' }
+    }
+}
+
+allprojects {
+    buildscript {
+        repositories {
+            mavenLocal()
+            maven { url = 'https://nexus.freeicu.top/repository/maven-public/' }
+            maven {
+                url = 'https://nexus.loghub.com/repository/public/'
+                credentials {
+                    username = nexusUsername
+                    password = nexusPassword
+                }
+            }
+            maven { url = 'https://repo.huaweicloud.com/repository/maven/huaweicloudsdk' }
+            maven { url = 'https://build.shibboleth.net/nexus/content/repositories/releases/' }
+        }
+    }
+    repositories {
+        mavenLocal()
+        maven { url = 'https://nexus.freeicu.top/repository/maven-public/' }
+        maven {
+            url = 'https://nexus.loghub.com/repository/public/'
+            credentials {
+                username = nexusUsername
+                password = nexusPassword
+            }
+        }
+        maven { url = 'https://repo.huaweicloud.com/repository/maven/huaweicloudsdk' }
+        maven { url = 'https://build.shibboleth.net/nexus/content/repositories/releases/' }
+    }
+}
+
+settingsEvaluated { settings ->
+    settings.pluginManagement {
+        repositories {
+            mavenLocal()
+            maven { url = 'https://nexus.freeicu.top/repository/maven-public/' }
+            maven {
+                url = 'https://nexus.loghub.com/repository/public/'
+                credentials {
+                    username = nexusUsername
+                    password = nexusPassword
+                }
+            }
+            maven { url = 'https://repo.huaweicloud.com/repository/maven/huaweicloudsdk' }
+            maven { url = 'https://build.shibboleth.net/nexus/content/repositories/releases/' }
+        }
+    }
+}