❯ asdf install ruby 3.0.1
Downloading openssl-1.1.1k.tar.gz...
-> https://dqw8nmjcqpjn7.cloudfront.net/892a0875b9872acd04a9fde79b1f943075d5ea162415de3047c327df33fbaee5
Installing openssl-1.1.1k...
Installed openssl-1.1.1k to /Users/okonomi/.asdf/installs/ruby/3.0.1

Downloading ruby-3.0.1.tar.gz...
-> https://cache.ruby-lang.org/pub/ruby/3.0/ruby-3.0.1.tar.gz
Installing ruby-3.0.1...
ruby-build: using readline from homebrew

BUILD FAILED (macOS 11.4 using ruby-build 20210423)

Inspect or clean up the working tree at /var/folders/z3/9l1cmgy92175ph5q9dxg9h080000gp/T/ruby-build.20210612170008.31086.JdPjRE
Results logged to /var/folders/z3/9l1cmgy92175ph5q9dxg9h080000gp/T/ruby-build.20210612170008.31086.log

Last 10 log lines:
The Ruby yaml extension was not compiled.
ERROR: Ruby install aborted due to missing extensions
Configure options used:
  --prefix=/Users/okonomi/.asdf/installs/ruby/3.0.1
  --with-openssl-dir=/Users/okonomi/.asdf/installs/ruby/3.0.1/openssl
  --enable-shared
  --with-readline-dir=/opt/homebrew/opt/readline
  CC=clang
  LDFLAGS=-L/Users/okonomi/.asdf/installs/ruby/3.0.1/lib
  CPPFLAGS=-I/Users/okonomi/.asdf/installs/ruby/3.0.1/include

❯ tail -n 20 /var/folders/z3/9l1cmgy92175ph5q9dxg9h080000gp/T/ruby-build.20210612170008.31086.log
                                    power_assert 1.2.0
                                    rake 13.0.3
                                    test-unit 3.3.7
                                    rexml 3.2.5
                                    rss 0.2.9
                                    rbs 1.0.4
                                    typeprof 0.12.0
installing bundled gem cache:       /Users/okonomi/.asdf/installs/ruby/3.0.1/lib/ruby/gems/3.0.0/cache
/Users/okonomi/.asdf/installs/ruby/3.0.1/lib/ruby/3.0.0/yaml.rb:3: warning: It seems your ruby installation is missing psych (for YAML output).
To eliminate this warning, please install libyaml and reinstall your ruby.
The Ruby yaml extension was not compiled.
ERROR: Ruby install aborted due to missing extensions
Configure options used:
  --prefix=/Users/okonomi/.asdf/installs/ruby/3.0.1
  --with-openssl-dir=/Users/okonomi/.asdf/installs/ruby/3.0.1/openssl
  --enable-shared
  --with-readline-dir=/opt/homebrew/opt/readline
  CC=clang
  LDFLAGS=-L/Users/okonomi/.asdf/installs/ruby/3.0.1/lib
  CPPFLAGS=-I/Users/okonomi/.asdf/installs/ruby/3.0.1/include

    failed = %w[openssl readline zlib yaml].reject do |lib|
      begin
        require lib
      rescue LoadError
        $stderr.puts "The Ruby #{lib} extension was not compiled."
      end
    end

❯ vi ~/.asdf/plugins/ruby/ruby-build/share/ruby-build/3.0.1
install_package "openssl-1.1.1k" "https://www.openssl.org/source/openssl-1.1.1k.tar.gz#892a0875b9872acd04a9fde79b1f943075d5ea162415de3047c327df33fbaee5" mac_openssl --if has_broken_mac_openssl
install_package "ruby-3.0.1" "https://cache.ruby-lang.org/pub/ruby/3.0/ruby-3.0.1.tar.gz#369825db2199f6aeef16b408df6a04ebaddb664fb9af0ec8c686b0ce7ab77727" ldflags_dirs enable_shared standard

❯ asdf install ruby 3.0.1
Downloading openssl-1.1.1k.tar.gz...
-> https://dqw8nmjcqpjn7.cloudfront.net/892a0875b9872acd04a9fde79b1f943075d5ea162415de3047c327df33fbaee5
Installing openssl-1.1.1k...
Installed openssl-1.1.1k to /Users/okonomi/.asdf/installs/ruby/3.0.1

Downloading ruby-3.0.1.tar.gz...
-> https://cache.ruby-lang.org/pub/ruby/3.0/ruby-3.0.1.tar.gz
Installing ruby-3.0.1...
ruby-build: using readline from homebrew
Installed ruby-3.0.1 to /Users/okonomi/.asdf/installs/ruby/3.0.1
❯ asdf global ruby 3.0.1
❯ ruby -v
ruby 3.0.1p64 (2021-04-05 revision 0fb782ee38) [arm64-darwin20]

❯ irb
<internal:/Users/okonomi/.asdf/installs/ruby/3.0.1/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require': incompatible library version - /Users/okonomi/.gem/ruby/3.0.0/gems/io-console-0.5.9/lib/io/console.bundle (LoadError)
        from <internal:/Users/okonomi/.asdf/installs/ruby/3.0.1/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
        from /Users/okonomi/.gem/ruby/3.0.0/gems/reline-0.2.5/lib/reline.rb:1:in `<top (required)>'
        from <internal:/Users/okonomi/.asdf/installs/ruby/3.0.1/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
        from <internal:/Users/okonomi/.asdf/installs/ruby/3.0.1/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
        from /Users/okonomi/.gem/ruby/3.0.0/gems/irb-1.3.5/lib/irb.rb:13:in `<top (required)>'
        from <internal:/Users/okonomi/.asdf/installs/ruby/3.0.1/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
        from <internal:/Users/okonomi/.asdf/installs/ruby/3.0.1/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
        from /Users/okonomi/.gem/ruby/3.0.0/gems/irb-1.3.5/exe/irb:9:in `<top (required)>'
        from /Users/okonomi/.asdf/installs/ruby/3.0.1/bin/irb:23:in `load'
        from /Users/okonomi/.asdf/installs/ruby/3.0.1/bin/irb:23:in `<main>'

❯ mv ~/.gem/ruby/3.0.0 ~/.gem/ruby/3.0.0_

❯ irb
irb(main):001:0> require 'yaml'
=> true

❯ vi ~/.asdf/plugins/ruby/ruby-build/share/ruby-build/3.0.1
❯ asdf uninstall ruby 3.0.1
❯ asdf install ruby 3.0.1
Downloading openssl-1.1.1k.tar.gz...
-> https://dqw8nmjcqpjn7.cloudfront.net/892a0875b9872acd04a9fde79b1f943075d5ea162415de3047c327df33fbaee5
Installing openssl-1.1.1k...
Installed openssl-1.1.1k to /Users/okonomi/.asdf/installs/ruby/3.0.1

Downloading ruby-3.0.1.tar.gz...
-> https://cache.ruby-lang.org/pub/ruby/3.0/ruby-3.0.1.tar.gz
Installing ruby-3.0.1...
ruby-build: using readline from homebrew
Installed ruby-3.0.1 to /Users/okonomi/.asdf/installs/ruby/3.0.1

class ViewComponent
  def render_in(view_context)
    'hello'
  end
end

<%= render ViewComponent.new %>

RenderingHelper supports rendering objects that respond_to? :render_in.

• 1月
  • フォードVSフェラーリ
  • ナイブズ・アウト
• 2月
  • 1917
• 3月
  • ミッド・サマー
  • ザ・ウォーク
  • 劇場版ＧのレコンギスタⅡ
  • デジモンアドベンチャー LAST EVOLUTION 絆
• 4月
  • イエスマン
  • スノーデン
  • デジモンアドベンチャー
  • キャスト・アウェイ
  • ゴーン・ガール
  • コンテイジョン
  • タイラー・レイク
  • スターシップ9
• 5月
  • 攻殻機動隊
  • イノセンス
  • 人狼 JIN-ROH
  • ブラックマジック M-66
  • プライベートライアン
  • デジモンアドベンチャー 僕らのウォーゲーム
  • デジモンアドベンチャー02 ディアボロモンの逆襲
  • レディ・プレイヤー1
  • パプリカ
• 6月
  • スノーピアサー
  • アイアン・スカイ／第三帝国の逆襲
  • ハーレイ・クインの華麗なる覚醒
• 7月
  • シンクロナイズドモンスター
  • 泣きたい私は猫をかぶる
• 8月
  • ジュピター
  • マクマホン・ファイル
  • ゼイラム
  • Fate/Stay night Heaven’s Feel Ⅲ
  • 007/カジノ・ロワイヤル
  • 9人の翻訳家 囚われたベストセラー
• 9月
  • ソードフィッシュ
  • TENET
• 10月
  • WXIII パトレイバー3
  • プラダを着た悪魔
  • インセプション
  • 劇場版 ヴァイオレット・エヴァーガーデン
  • 機動警察パトレイバー 2 the Movie
• 11月
  • ボーン・アイデンティティ
  • ボーン・スプレマシー
  • ボーン・アルティメイタム
  • 蜘蛛の巣を払う女
  • 2012
  • 劇場版∀ガンダムI 地球光・II 月光蝶
  • 魔女見習いをさがして
  • ボーン・レガシー
  • ソルト
  • ザ・シューター
  • ドラゴンタトゥーの女
  • 6アンダーグラウンド
• 12月
  • ゾディアック
  • 劇場版 SHIROBAKO
  • ミッドナイト・スカイ

gem "rails", "6.1.0"

bundle install

bin/rails app:update

bin/rails db:migrate

• oknmjp/serverless-ses-forwarder
• arithmetric/aws-lambda-ses-forwarder: Serverless email forwarding using AWS Lambda and SES

2020-04-12T12:04:23.599633+00:00 app[web.1]: I, [2020-04-12T21:04:23.599545 #3]  INFO -- : [14cc8621-cf83-41f0-bc6f-a6ce692ec238] Started POST "/auth/github?origin=https://oknm.jp/auth" for 175.131.16.228 at 2020-04-12 21:04:23 +0900
2020-04-12T12:04:23.600394+00:00 app[web.1]: I, [2020-04-12T21:04:23.600343 #3]  INFO -- : [14cc8621-cf83-41f0-bc6f-a6ce692ec238] (github) Request phase initiated.
2020-04-12T12:04:23.604646+00:00 heroku[router]: at=info method=POST path="/auth/github?origin=https://oknm.jp/auth" host=oknm.jp request_id=14cc8621-cf83-41f0-bc6f-a6ce692ec238 fwd="175.131.16.228" dyno=web.1 connect=1ms service=8ms status=302 bytes=1307 protocol=http
2020-04-12T12:04:24.167130+00:00 heroku[router]: at=info method=GET path="/auth/github/callback?error=redirect_uri_mismatch&error_description=The+redirect_uri+MUST+match+the+registered+callback+URL+for+this+application.&error_uri=https%3A%2F%2Fdeveloper.github.com%2Fapps%2Fmanaging-oauth-apps%2Ftroubleshooting-authorization-request-errors%2F%23redirect-uri-mismatch&state=adaf9f33d654c539841482c559e8b4b77c46a2f239aa5efa" host=oknm.jp request_id=58139b4d-7aa9-41b7-9037-6436dc4f6c24 fwd="175.131.16.228" dyno=web.1 connect=1ms service=8ms status=302 bytes=816 protocol=https
2020-04-12T12:04:24.162186+00:00 app[web.1]: I, [2020-04-12T21:04:24.162082 #3]  INFO -- : [58139b4d-7aa9-41b7-9037-6436dc4f6c24] Started GET "/auth/github/callback?error=redirect_uri_mismatch&error_description=The+redirect_uri+MUST+match+the+registered+callback+URL+for+this+application.&error_uri=https%3A%2F%2Fdeveloper.github.com%2Fapps%2Fmanaging-oauth-apps%2Ftroubleshooting-authorization-request-errors%2F%23redirect-uri-mismatch&state=adaf9f33d654c539841482c559e8b4b77c46a2f239aa5efa" for 175.131.16.228 at 2020-04-12 21:04:24 +0900
2020-04-12T12:04:24.163086+00:00 app[web.1]: I, [2020-04-12T21:04:24.163019 #3]  INFO -- : [58139b4d-7aa9-41b7-9037-6436dc4f6c24] (github) Callback phase initiated.
2020-04-12T12:04:24.163635+00:00 app[web.1]: E, [2020-04-12T21:04:24.163560 #3] ERROR -- : [58139b4d-7aa9-41b7-9037-6436dc4f6c24] (github) Authentication failure! redirect_uri_mismatch: OmniAuth::Strategies::OAuth2::CallbackError, redirect_uri_mismatch | The redirect_uri MUST match the registered callback URL for this application. | https://developer.github.com/apps/managing-oauth-apps/troubleshooting-authorization-request-errors/#redirect-uri-mismatch
2020-04-12T12:04:24.364745+00:00 app[web.1]: I, [2020-04-12T21:04:24.364644 #3]  INFO -- : [54454333-96e9-4f35-9fd3-606895a438f2] Started GET "/auth/failure?message=redirect_uri_mismatch&origin=https%3A%2F%2Foknm.jp%2Fauth&strategy=github" for 175.131.16.228 at 2020-04-12 21:04:24 +0900

Command Line Toolsをインストールする

Command Line Toolsを切り替える

$ xcode-select --print-path
/Applications/Xcode.app/Contents/Developer

$ sudo xcode-select --switch /Library/Developer/CommandLineTools/

$ xcode-select --print-path
/Library/Developer/CommandLineTools

Xcodeをアンインストールする

結果

はじめにまとめ

1. 環境変数: ENV["SECRET_KEY_BASE"]
2. credencials: config/credentials.yml.enc
3. secrets: config/secrets.yml （Encrypted secretsが有効ならconfig/secrets.yml.enc）
4. tmp/development_secret.txt

1. developmentかtestなら、secrets、tmp/development_secret.txtの順
2. それ以外の環境なら、環境変数、credencials、secretsの順

secret_key_baseの取得

 Rails.applicatin.secret_key_base
#=> "bb7a320962dda4262e21262f80229946f5a3b3c05cc8968d71d1ae9e40c64b5d7afb5340c196134089590b69d8a51a05ee801217b90eb859236bf4b14f8d5a76"

secret_key_baseの定義場所

 module Rails
   # snip
 
   class Application < Engine
     # snip
 
     def secret_key_base
       if Rails.env.development? || Rails.env.test?
         secrets.secret_key_base ||= generate_development_secret
       else
         validate_secret_key_base(
           ENV["SECRET_KEY_BASE"] || credentials.secret_key_base || secrets.secret_key_base
         )
       end
     end
   end
 end

• 環境がdevelopmentかtestの場合
  • secrets.secret_key_baseが未設定なら、generate_development_secretを実行し結果をsecrets.secret_key_baseに保存する
  • secrets.secret_key_baseを返す
• それ以外の場合
  • ENV["SECRET_KEY_BASE"]、credentials.secret_key_base、secrets.secret_key_baseの順番で評価してバリデーションした上で結果を返す

secrets.secret_key_baseとは

     def secrets
       @secrets ||= begin
         secrets = ActiveSupport::OrderedOptions.new
         files = config.paths["config/secrets"].existent
         files = files.reject { |path| path.end_with?(".enc") } unless config.read_encrypted_secrets
         secrets.merge! Rails::Secrets.parse(files, env: Rails.env)
 
         # Fallback to config.secret_key_base if secrets.secret_key_base isn't set
         secrets.secret_key_base ||= config.secret_key_base
 
         secrets
       end
     end

• config/secrets.ymlを読み込む
• Rails 5.1で導入されたEncrypted secretsが有効ならconfig/secrets.yml.encを読み込む
• config/secrets.ymlにsecret_key_baseが未定義ならconfigから読み込む

generate_development_secretとは

       def generate_development_secret
         if secrets.secret_key_base.nil?
           key_file = Rails.root.join("tmp/development_secret.txt")
 
           if !File.exist?(key_file)
             random_key = SecureRandom.hex(64)
             FileUtils.mkdir_p(key_file.dirname)
             File.binwrite(key_file, random_key)
           end
 
           secrets.secret_key_base = File.binread(key_file)
         end
 
         secrets.secret_key_base
       end

まとめ

•  開発中はsecret_key_baseが自動生成されるので未設定で良さそう
•  本番環境は環境変数、credencials、secretsなど適切な方法で設定しておく

class User < ApplicationRecord
  before_create :set_remember_token

  private

    def set_remember_token
      self.remember_token = generate_remember_token
    end

    def generate_remember_token
      SecureRandom.hex(20)
    end
end

<!DOCTYPE html>
<html>
  <head>
    <title>Sample</title>
  </head>
  <body>
    <p>Hello</p>
  </body>
</html>

version: "3.7"

services:
  web: &app_base
    build: .
    ports:
      - "3000:3000"
    volumes:
      - .:/app
      - bundle:/app/.bundle
      - node_modules:/app/node_modules
      - home:/root
    environment:
      BUNDLE_PATH: /app/.bundle
      BUNDLE_JOBS: 4
      WEBPACKER_DEV_SERVER_HOST: webpacker
    command: /bin/sh -c "rm -f tmp/pids/server.pid && bin/rails s -p 3000 -b '0.0.0.0'"
    depends_on:
      - db
  webpacker:
    <<: *app_base
    ports:
      - "3035:3035"
    command: bin/webpack-dev-server
  db:
    image: postgres:11.2
    ports:
      - "5432:5432"
    volumes:
      - pg_data:/data
    environment:
      PGDATA: /data

volumes:
  bundle:
  node_modules:
  pg_data:
  home:

• 基本的なSEOチェックに。DescriptionやOGPを確認できるChrome拡張META SEO Inspectorの使い方
• シェアデバッガー - 開発者向けFacebook
• Card Validator | Twitter Developers

heroku stack:set container -a oknmjp

{
   "stack": "container"
}

build:
  docker:
    web: Dockerfile.production
  config:
    GITHUB_OAUTH_CLIENT_KEY: xxx
    GITHUB_OAUTH_CLIENT_SECRET: xxx
    SECRET_KEY_BASE: xxx
release:
  image: web
  command:
    - bin/rails db:prepare
run:
  web: bin/rails server -p $PORT

• イメージビルド時にbin/rails assets:precompileを実行しているが、SECRET_KEY_BASEを設定する必要があった
• Railsサーバの起動ポートは$PORTで指定しないといけない

• ビルド時にSECRET_KEY_BASEとかの漏洩しちゃいけない値はどうDockerに渡せばいいのか
  • アプリのConfig Varsはビルド時には参照できない
  • いまはとりあえずダミー値を渡してるけどあんまり良くない気がする

• https://github.com/okonomi/rails-docker-sandbox

FROM ruby:2.6.3-alpine3.9 AS builder

ENV RAILS_ENV production

WORKDIR /app

RUN apk add --update --no-cache \
    build-base \
    libxml2-dev \
    libxslt-dev \
    sqlite-dev \
    nodejs \
    yarn \
    tzdata

# install gems
RUN gem install bundler
COPY Gemfile .
COPY Gemfile.lock .
RUN bundle install --clean --frozen --jobs $(nproc) --without development test

# install npm packages
COPY package.json .
COPY yarn.lock .
RUN yarn install --frozen-lockfile

# compile assets
COPY Rakefile .
COPY bin bin
COPY .browserslistrc .
COPY postcss.config.js .
COPY babel.config.js .
COPY config config
COPY app/assets app/assets
COPY app/javascript app/javascript
RUN bin/rails assets:precompile


FROM ruby:2.6.3-alpine3.9

ENV RAILS_ENV production
ENV RAILS_LOG_TO_STDOUT 1
ENV RAILS_SERVE_STATIC_FILES 1

WORKDIR /app

RUN apk add --update --no-cache \
    sqlite-libs \
    tzdata

COPY --from=builder /usr/local/bundle /usr/local/bundle
COPY --from=builder /app/public/assets /app/public/assets
COPY --from=builder /app/public/packs /app/public/packs
COPY . .

RUN bin/rails db:schema:load

EXPOSE 3000
ENTRYPOINT ["bin/rails"]

.bundle
.dockerignore
.git
.gitignore
Dockerfile
log
node_modules
public/assets
public/packs
README.md
storage
test
tmp

• マルチステージビルドを使って、ビルドステージではgemのインストールとassets:precompileを行う。
• 次のステージでRailsサーバを動かすためだけの最小限のファイルをコピーする。

• Add ActionDispatch::SystemTestCase#fill_in_rich_text_area by georgeclaghorn · Pull Request #35885 · rails/rails

inherit_mode:
  merge:
    - Exclude

AllCops:
  Exclude:
    - "bin/*"

• https://github.com/rubocop-hq/rubocop/blob/master/manual/configuration.md#merging-arrays-using-inherit_mode

• [feature request] Custom toolbar extension API · Issue #613 · basecamp/trix

• 第86回 Ruby関西 勉強会 - Ruby関西 | Doorkeeper

• <input type="datetime-local"> - HTML: HyperText Markup Language | MDN

• RubyとRailsにおけるTime, Date, DateTime, TimeWithZoneの違い - Qiita

• Dependabotの設定ファイルを置くようにした - くりにっき
• Dependabot config files

# c.f. https://dependabot.com/docs/config-file/
version: 1

update_configs:
  - package_manager: "ruby:bundler"
    directory: "/"
    update_schedule: "daily"
    allowed_updates:
      - match:
          update_type: "all"
    automerged_updates:
      - match:
          dependency_type: "development"
          update_type: "all"
      - match:
          dependency_type: "production"
          update_type: "semver:patch"
    version_requirement_updates: "off"
  - package_manager: "javascript"
    directory: "/"
    update_schedule: "daily"
    allowed_updates:
      - match:
          update_type: "all"
    automerged_updates:
      - match:
          dependency_type: "development"
          update_type: "all"
      - match:
          dependency_type: "production"
          update_type: "semver:patch"
    version_requirement_updates: "off"

• Creating a 'Deploy to Heroku' Button | Heroku Dev Center

$ mkdir awesome-rails-app
$ cd awesome-rails-app

$ bundle init

$ bundle add rails --skip-install

$ bundle install --path=vendor/bundle -j4

$ bundle exec rails new . -f

echo /vendor/bundle >> .gitignore