templates/packer: add worker-executor service

templates/packer/ansible/roles/common/files/worker-executor.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=Worker Executor Service
+ConditionPathExists=/tmp/worker-run-executor-service
+Wants=cloud-final.service
+After=cloud-final.service
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/libexec/worker-initialization-scripts/worker_executor.sh
+
+[Install]
+WantedBy=multi-user.target

templates/packer/ansible/roles/common/files/worker-initialization-scripts/worker_executor.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+set -euo pipefail
+
+# Subscribe the executor, this can be removed once the worker functions as a proxy for all sources.
+SUBSCRIPTION_MANAGER_COMMAND_ARN=$(
+  secretsmanager list-secrets \
+  --filters Key=name,Values=executor-subscription-manager-command \
+  --query SecretList[0].ARN --output text
+)
+
+/usr/local/bin/aws secretsmanager get-secret-value \
+  --secret-id "${SUBSCRIPTION_MANAGER_COMMAND_ARN}" | jq -r ".SecretString" > /tmp/subscription_manager_command.json
+jq -r ".subscription_manager_command" /tmp/subscription_manager_command.json | bash
+rm -f /tmp/subscription_manager_command.json
+
+echo "Starting osbuild-jobsite-builder."
+/usr/libexec/osbuild-composer/osbuild-jobsite-builder &
+disown $!

templates/packer/ansible/roles/common/files/worker-initialization.service

@@ -19,6 +19,7 @@ ExecStart=/usr/local/libexec/worker-initialization-scripts/get_koji_creds.sh
 ExecStart=/usr/local/libexec/worker-initialization-scripts/get_oci_creds.sh
 ExecStart=/usr/local/libexec/worker-initialization-scripts/get_pulp_creds.sh
 ExecStart=/usr/local/libexec/worker-initialization-scripts/worker_service.sh
+ExecStart=/usr/local/libexec/worker-initialization-scripts/worker_builder.sh
 
 [Install]
 WantedBy=multi-user.target