gitsync/README.md

# Building the Docker container

```
$ docker build -t gcr.io/bazel-public/gitsync .
$ docker push gcr.io/bazel-public/gitsync
```

# Starting the VM that hosts the Docker container

```
$ gcloud compute instances delete --project bazel-public gitsync
$ gcloud compute instances create-with-container \
    --project bazel-public \
    --boot-disk-size 200GB \
    --container-image gcr.io/bazel-public/gitsync:latest \
    --machine-type n1-standard-2 \
    --zone us-central1-a \
    --image-project cos-cloud \
    --image-family cos-stable \
    --metadata cos-metrics-enabled=true \
    --scopes cloud-platform \
    --service-account gitsync@bazel-public.iam.gserviceaccount.com \
    gitsync
```

# About the service account

The service account used for the container must have at least the following
permissions:

- `Cloud KMS Decryption` for the gitcookies and SSH key files only.
- `Logging > Logs Writer` to write the Docker logs to Google Cloud Logging.

# Getting logs from the container

You can view the Docker logs by navigating to the VM in GCE and then by either clicking on "Stackdriver logging" or ssh-ing into the machine and running `docker logs`.