PaaS update: Added setup for Personal PaaS

Author: Devdatta

PaaS/PersonalPaaS/myapp/Dockerfile

@@ -0,0 +1,12 @@
+FROM python:3.9-slim
+
+WORKDIR /app
+
+# Requirement 1: Copy requirements.txt
+
+# Requirement 2: Install requirements.txt
+
+# Copy code into the current working directory
+COPY . .
+
+# Requirement 3: Add the CMD command

PaaS/PersonalPaaS/myapp/app.py

@@ -0,0 +1,10 @@
+from flask import Flask
+
+app = Flask(__name__)
+
+@app.route("/")
+def hello():
+    return "Hello from Personal PaaS!"
+
+if __name__ == "__main__":
+    app.run(host="0.0.0.0", port=5000)

PaaS/PersonalPaaS/myapp/requirements.txt

@@ -0,0 +1 @@
+flask

PaaS/PersonalPaaS/steps.txt

@@ -0,0 +1,74 @@
+PersonalPaaS Detailed Steps
+
+Assumptions used below:
+- AWS region: us-west-2
+- EC2 KeyPair name: assignment4
+- Private key file: assignment4.pem
+- Working directory: assignment5 (contains template.yaml, steps.txt, myapp/app.py, myapp/Dockerfile, myapp/requirements.txt)
+
+1. Go to the assignment folder
+cd assignment5
+
+2. Create EC2 VM for your personal PaaS
+aws cloudformation create-stack \
+  --stack-name personal-paas \
+  --template-body file://template.yaml \
+  --parameters ParameterKey=KeyName,ParameterValue=assignment4 \
+  --region us-west-2
+  --capabilities CAPABILITY_NAMED_IAM
+
+3. Wait for the Stack to complete
+aws cloudformation wait stack-create-complete \
+  --stack-name personal-paas \
+  --region us-west-2
+
+4. Get the EC2 VM's public ip address
+EC2_IP=$(aws cloudformation describe-stacks \
+  --stack-name personal-paas \
+  --query "Stacks[0].Outputs[0].OutputValue" \
+  --output text \
+  --region us-west-2
+)
+echo "$EC2_IP"
+
+5. Initialize the repo
+cd myapp
+git init -b main
+
+# add files
+git add .
+git commit -m "initial commit"
+
+6. Add the EC2 VM as a Git remote for your application
+git remote add paas ubuntu@"$EC2_IP":/home/ubuntu/app.git
+
+7. Push to the remote to trigger deployment
+GIT_SSH_COMMAND='ssh -i "<Path to your assignment4.pem>" -o StrictHostKeyChecking=accept-new' \
+git push paas main
+
+8. Verify deployment from browser or curl
+curl http://"$EC2_IP"
+# expected output: Hello from Personal PaaS!
+
+9. Test update flow
+sed -i '' 's/Hello from Personal PaaS!/Hello from Personal PaaS v2!/' app.py
+git add app.py
+git commit -m "update greeting"
+GIT_SSH_COMMAND='ssh -i "<Path to your assignment4.pem>" -o StrictHostKeyChecking=accept-new' \
+git push paas main
+sleep 5
+curl http://"$EC2_IP"
+# expected output: Hello from Personal PaaS v2!
+
+10. Optional debug commands (if deployment fails)
+ssh -i "<Path to your assignment4.pem>" ubuntu@"$EC2_IP" \
+  "sudo docker ps -a; echo '---'; sudo tail -n 100 /var/log/paas-deploy.log"
+
+11. Clean up AWS resources after testing
+aws cloudformation delete-stack \
+  --stack-name personal-paas \
+  --region us-west-2
+
+aws cloudformation wait stack-delete-complete \
+  --stack-name personal-paas \
+  --region us-west-2

PaaS/PersonalPaaS/template.yaml

@@ -0,0 +1,105 @@
+AWSTemplateFormatVersion: '2010-09-09'
+Description: Personal PaaS VM (Git-push-to-deploy)
+
+Parameters:
+  KeyName:
+    Type: AWS::EC2::KeyPair::KeyName
+    Description: EC2 KeyPair for SSH access
+
+Resources:
+  PaaSEC2Instance:
+    Type: AWS::EC2::Instance
+    Properties:
+      InstanceType: t2.micro
+      KeyName: "" # Requirement 4: Inject the KeyName provided as a parameter
+      ImageId: "" # Requirement 5: Use Ubuntu 24.04 image for us-west-2
+
+      SecurityGroupIds:
+        - !Ref InstanceSecurityGroup
+
+      UserData:
+        Fn::Base64: !Sub |
+          #!/bin/bash
+          set -e
+
+          apt-get update -y
+          apt-get install -y docker.io git
+
+          systemctl start docker
+          systemctl enable docker
+
+          # Directories for app + logs
+          mkdir -p /home/ubuntu/app
+          mkdir -p /home/ubuntu/logs
+          chown -R ubuntu:ubuntu /home/ubuntu/app /home/ubuntu/logs
+
+          # Bare repo
+          sudo -u ubuntu git init --bare /home/ubuntu/app.git
+          sudo -u ubuntu git --git-dir=/home/ubuntu/app.git symbolic-ref HEAD refs/heads/main
+
+          # Create the deploy script 
+          cat << 'EOF' > /usr/local/bin/deploy.sh
+          #!/bin/bash
+          set -e
+
+          APP_DIR=/home/ubuntu/app
+          REPO_DIR=/home/ubuntu/app.git
+          LOG_FILE=/var/log/paas-deploy.log # Deployment logs
+          APP_LOG_FILE=/home/ubuntu/logs/app.log # App logs
+
+          exec >> $LOG_FILE 2>&1 # Replace the current shell and capture all the log output lines
+
+          echo "==== Deploy started at $(date) ===="
+
+          rm -rf $APP_DIR
+          mkdir -p $APP_DIR
+
+          git --work-tree=$APP_DIR --git-dir=$REPO_DIR checkout -f
+          cd $APP_DIR
+
+	  # Requirement 6: Build the docker container. Tag it myapp
+
+          docker stop myapp-container || true
+          docker rm myapp-container || true
+
+          pkill -f "docker logs -f myapp-container" || true
+
+	  # Requirement 7: Run the Docker container. Map the application port to port 80. Name the container myapp-container
+
+          mkdir -p /home/ubuntu/logs
+          touch $APP_LOG_FILE
+          chown -R ubuntu:ubuntu /home/ubuntu/logs
+
+          docker logs -f myapp-container >> $APP_LOG_FILE 2>&1 &
+
+          echo "==== Deploy finished ===="
+          EOF
+
+          chmod +x /usr/local/bin/deploy.sh
+          echo "ubuntu ALL=(ALL) NOPASSWD: /usr/local/bin/deploy.sh" > /etc/sudoers.d/deploy
+          chmod 440 /etc/sudoers.d/deploy
+
+          # Git post-receive hook
+          cat << 'EOF' > /home/ubuntu/app.git/hooks/post-receive
+          #!/bin/bash
+          sudo /usr/local/bin/deploy.sh
+          EOF
+
+          chmod +x /home/ubuntu/app.git/hooks/post-receive
+          chown -R ubuntu:ubuntu /home/ubuntu/app.git
+
+  InstanceSecurityGroup:
+    Type: AWS::EC2::SecurityGroup
+    Properties:
+      GroupDescription: Allow SSH and HTTP
+      SecurityGroupIngress:
+        - IpProtocol: tcp
+          FromPort: 22
+          ToPort: 22
+          CidrIp: 0.0.0.0/0
+
+        # Requirement 8: Add the security group for Port 80 to allow traffic from anywhere.
+
+Outputs:
+  PublicIP:
+    Value: !GetAtt PaaSEC2Instance.PublicIp