huawei-cloud-kunpeng-source-code-migrate

Imported from huaweicloud/huaweicloud-skills (skills/computing/kunpeng/huawei-cloud-kunpeng-source-code-migrate/SKILL.md). Install upstream with npx skills add huaweicloud/huaweicloud-skills --skill huawei-cloud-kunpeng-source-code-migrate. Copyright stays with the author.

Kunpeng Source Code Migration Assessment

Analyze the migrability of C/C++/ASM/Fortran/Go/Java/Python/Scala source code to Kunpeng (ARM64) platform using Huawei DevKit CLI tool.

Overview

This skill assesses source code migrability to the Kunpeng (ARM64) platform using Huawei DevKit CLI. It connects to a source server via SSH (or installs locally), installs DevKit, scans source code, and generates a migration assessment report. If the user has no remote server, it can automatically provision a Kunpeng ECS instance on Huawei Cloud (Guiyang Region 1) via hcloud CLI.

⚠️ Analysis depth varies by language (DevKit limitation): C/C++/ASM = deep analysis; Fortran = shallow; Go/Java/Python/Scala = file-level stats only (architecture-dependent code like JNI/CGo/ctypes/unsafe will NOT be detected — manual review required). See Supported Languages for details.

Architecture: Local detection + remote execution + SFTP transfer. All SSH operations use the unified scripts/ssh_client.py (paramiko + password env var), cross-platform consistent.

Applicable scenarios: Assess source code portability to Kunpeng ARM; scan C/C++/ASM/Fortran/Go/Java/Python/Scala code; generate a migration report; check ARM64 compatibility; provision a Kunpeng server on Huawei Cloud.

Report save path: Windows → C:\devkit-report\, Linux/macOS → ~/devkit-report/ (resolved from current user's home, NOT hardcoded /home/).

Prerequisites

CLI version requirements:

Authentication:

• Root access required (default install path): install_devkit.sh installs to /usr/local and creates a /usr/local/bin/devkit symlink, which requires root. Non-root users MUST use the --no-sudo flag (installs to $HOME/.local/devkit) and add DevKit to PATH manually: export PATH=$HOME/.local/devkit:$PATH. If system dependencies (python3, pip3, curl) are missing and --no-sudo is set, the script will error out — install them first or run as root.
• SSH user: The default SSH user is root (see KUNPENG_SERVER_USER). Non-root SSH users are supported, but the remote install path and report download path will be under that user's home directory (see --no-sudo above).
• SSH credentials (existing server, Step 3c): User must set env vars KUNPENG_SERVER_HOST, KUNPENG_SERVER_PORT (default 22), KUNPENG_SERVER_USER (default root), MIGRATE_SSH_PASS in their own terminal. AI must NEVER ask for or echo these values.
• Huawei Cloud AK/SK (provisioning path, Step 3d): User must run hcloud configure set --cli-region=cn-southwest-2 --cli-access-key=<your-ak> --cli-secret-key=<your-sk> in their own terminal. AI must NEVER ask for AK/SK.

IAM permissions (Step 3d only): Required for provisioning a Kunpeng ECS on Huawei Cloud. Minimum set: ECS create/list/delete, VPC create/get/delete, Subnet, SecurityGroup, EIP create/delete, IMS list, IAM projects list. See references/iam-policies.md for the full policy JSON and setup instructions.

OS support: DevKit local install supports openEuler/CentOS/Ubuntu/Kylin/UOS/EulerOS/Debian/SUSE/NeoKylin. Windows and macOS are NOT supported for local install — must use a remote Linux server.

Core Commands

1. Local OS detection:

python <skill_dir>/scripts/detect_os.py

2. SSH connection & remote execution (unified paramiko client):

python <skill_dir>/scripts/ssh_client.py test                              # Test SSH connection
python <skill_dir>/scripts/ssh_client.py exec "uname -a" 30                # Execute remote command
python <skill_dir>/scripts/ssh_client.py put <local> <remote>              # SFTP upload single file
python <skill_dir>/scripts/ssh_client.py put-dir <local_dir> <remote_dir>  # SFTP upload directory
python <skill_dir>/scripts/ssh_client.py get-report                        # Download migration report

3. DevKit installation:

bash <skill_dir>/scripts/install_devkit.sh --yes

4. Source code migration scan (DevKit CLI):

# C/C++ project (with build command):
devkit porting src-mig -i /home/project -s 'c, c++, asm' -b make -c 'make all' -p gcc9.3.0 -o /tmp/devkit-report -r all

# Java/Python project (no build command):
devkit porting src-mig -i /home/project -s 'java, python' -o /tmp/devkit-report -r all

5. Kunpeng ECS auto-provisioning (Step 3d only):

bash <skill_dir>/scripts/provision_kunpeng_server.sh --confirm

6. hcloud CLI install & configure (Step 3d only):

curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-linux-amd64.tar.gz"
tar -xzf huaweicloud-cli-linux-amd64.tar.gz && chmod +x hcloud && sudo mv hcloud /usr/local/bin/
hcloud configure set --cli-region=cn-southwest-2 --cli-access-key=<your-ak> --cli-secret-key=<your-sk>
hcloud version   # Expected: >= 3.2.0

Parameter Confirmation

AI must confirm the following parameters with the user before execution.

SSH connection parameters (env vars, set by user in their own terminal):

DevKit scan parameters (confirm with user before scanning):

⚠️ AI MUST ask the user for the source code path before scanning. Do NOT scan or upload local files without user confirmation.

⛔ Prohibited Operations

🚫 Not Supported (Capability Boundary)

The following operations are outside this skill's scope. If a user requests any of them, refuse and suggest the alternative.

If a user requests a prohibited operation, refuse and inform: "Per security constraints, this skill does not allow [specific operation]. Please perform this operation manually if needed."

If a user requests a not-supported operation, refuse and inform: "This skill does not support [specific operation]. [Reason]. Please use [alternative] instead."

Architecture

Kunpeng Source Code Migration Assessment
├── DetectLocalOS     (Detect agent OS → determine DevKit install path)
├── PrepareServer     (Determine where to install DevKit and run scan)
│   ├── LocalInstall  (Install DevKit locally — only if OS is supported)
│   ├── RemoteInstall (Install DevKit on remote server via SSH)
│   │   ├── HasServer (Configure SSH via ssh_client.py: paramiko + password env var)
│   │   └── NoServer  (Install hcloud CLI → Provision Kunpeng ECS → Configure SSH)
│   └── NotSupported  (Local OS not supported → must use remote server)
├── ConnectServer     (SSH connect via paramiko + MIGRATE_SSH_PASS env var)
├── InstallDevKit     (Detect OS and install DevKit CLI tool)
└── ScanSourceCode    (Scan source code → generate report → save to fixed local path)
    └── ReportSave    (Windows: C:\devkit-report\ | Linux/macOS: ~/devkit-report/)

⚠️ Task 0 (DetectLocalOS + PrepareServer) MUST be executed first — it determines the entire workflow path.

SSH Connection Strategy

All SSH operations use the unified scripts/ssh_client.py (paramiko + password from env var). No ssh/scp commands, no ControlMaster, no key injection, no Huawei Cloud region dependency. Works identically on Windows, Linux, and macOS.

⚠️ SSH remote execution limitation: DevKit's src-mig scan may differ between interactive and non-interactive SSH sessions. ssh_client.py exec requests a PTY (get_pty=True) to mitigate this. If scan results look suspicious (0 issues for code with known x86 dependencies), re-run locally via interactive SSH and compare. For critical migrations, validate by compiling on Kunpeng.

Environment variables (set by user in their own terminal; AI never sees values):

Set env vars: Linux/macOS export KUNPENG_SERVER_HOST='<ip>' etc.; Windows PS $env:KUNPENG_SERVER_HOST='<ip>' etc. See references/scripts-guide.md for full setup.

Credential resolution priority (first match wins): (1) current process env vars → (2) /tmp/kunpeng_server_env.sh or %TEMP%/kunpeng_server_env.sh → (3) Windows user-level registry (winreg) → (4) default.

ssh_client.py subcommands:

📦 SFTP-First File Transfer (Critical for Windows + MSYS2)

⚠️ On Windows + MSYS2/Git Bash, the shell converts Unix paths to Windows paths before Python sees them (e.g., /tmp/foo → C:/Users/.../Temp/2/foo). For file transfer, use paramiko SFTP API directly from Python, not ssh_client.py CLI subcommands. See references/scripts-guide.md#sftp-first-file-transfer for the code example and references/troubleshooting.md#7-msys2-path-conversion-error-windows-only.

AI agent workflow: (1) File transfer → paramiko SFTP API directly; (2) Command execution → ssh_client.py exec "<cmd>"; (3) Script execution → upload via SFTP, then exec "bash /tmp/script.sh".

Built-in Scripts

AI MUST use these scripts instead of manually executing step-by-step commands.

📄 Detailed guide → references/scripts-guide.md

Supported Languages

⚠️ For Go/Java/Python/Scala projects: DevKit only performs file-level statistics, not deep code analysis. A "Do Not Need Migrated" result does NOT mean the code is architecture-safe. If your project uses JNI, CGo, ctypes, unsafe, sun.misc.Unsafe, native C extensions, or architecture-specific build tags, you MUST manually review those code paths. For reliable migration assessment of such code, consider converting the native/FFI parts to C/C++ and scanning them separately with DevKit.

Core Workflows

Task 0: Detect Local OS and Prepare Environment

This is the FIRST task. It detects the agent's local OS and determines the DevKit installation path.

Step 1: Detect local OS:

python <skill_dir>/scripts/detect_os.py

Outputs os_type, os_name, os_version, arch, local_install_supported as key=value pairs. Works on all platforms without external dependencies.

⚠️ AI MUST use detect_os.py instead of manually running uname -m, cat /etc/os-release, PowerShell, etc.

DevKit-supported local OS list:

Windows and macOS are NOT supported for local DevKit installation. DevKit must be installed on a remote Linux server.

Step 2: Ask user where to install DevKit

• If local OS IS supported (LOCAL_INSTALL_SUPPORTED=true): Ask "local install" or "remote server install"
  • "local install" → Step 3a
  • "remote server install" → Step 3b
• If local OS is NOT supported: Ask "existing remote Linux server" or "provision Kunpeng server on Huawei Cloud"
  • "existing remote Linux server" → Step 3c
  • "provision Kunpeng server" → Step 3d

Step 3a: Local Install

1. Install DevKit: bash <skill_dir>/scripts/install_devkit.sh --yes
   • Root user (default): Installs to /usr/local/devkit, creates /usr/local/bin/devkit symlink.
   • Non-root user: Use bash <skill_dir>/scripts/install_devkit.sh --yes --no-sudo → installs to $HOME/.local/devkit. Then add to PATH: export PATH=$HOME/.local/devkit:$PATH. Requires system deps (python3, pip3, curl) already present; if missing, install them first or use --skip-deps after manual install.
   • --skip-deps: Skip dependency installation (use when python3/pip3/curl are already installed).
2. Ask user for local source code path
3. Run DevKit scan locally (no SSH needed)
4. Skip Task 1 — proceed directly to Task 3 with local paths

📄 Details → references/task-local-devkit.md

Step 3b: Remote Install — Ask about remote server

Ask "existing remote Linux server" or "provision Kunpeng server" → Step 3c or 3d.

Step 3c: User has remote server — Configure SSH

User sets KUNPENG_SERVER_HOST/PORT/USER and MIGRATE_SSH_PASS in their terminal (AI never sees values). Verify:

python <skill_dir>/scripts/ssh_client.py test

⚠️ No region dependency: Remote server can be on any cloud or on-premises. No hcloud CLI needed for SSH.

After verification succeeds, proceed to Task 1.

Step 3d: User has no server — Provision Kunpeng ECS on Huawei Cloud

⛔ CRITICAL: AI MUST use provision_kunpeng_server.sh to create ALL cloud resources. NEVER manually call hcloud APIs individually.

Default ECS spec:

• Flavor: kc1.2xlarge.2 (Kunpeng ARM64 8C16G). Flavor inventory is dynamic — if the default is out of stock, override via --flavor (e.g., --flavor kc1.large.2 for 2C4G, --flavor kc1.xlarge.2 for 4C8G). The script will detect flavor-related errors and suggest this option.
• Image: Huawei Cloud EulerOS 2.0 Standard 64 bit for ARM
• Disk: 40GB GPSSD
• Region: cn-southwest-2 (Guiyang 1)

1. Check hcloud CLI installation and authentication
2. Confirm provisioning with user (present spec and estimated cost)
3. Execute: bash <skill_dir>/scripts/provision_kunpeng_server.sh --confirm
   • Creates VPC → Subnet → Security Group + SSH rule → EIP → ECS
   • Generates random root password, saves to /tmp/kunpeng_server_env.sh as MIGRATE_SSH_PASS (chmod 600)
   • To override flavor: bash <skill_dir>/scripts/provision_kunpeng_server.sh --confirm --flavor kc1.large.2
4. Load env: source /tmp/kunpeng_server_env.sh
5. Verify SSH: python <skill_dir>/scripts/ssh_client.py test
6. Proceed to Task 1
7. After scan completes (Task 3): Present Resource Cleanup Reminder

📄 Details → references/task-prepare-server.md

Task 1: Connect to Source Code Server via SSH

Verify connection using python <skill_dir>/scripts/ssh_client.py test. All subsequent operations use ssh_client.py subcommands (see SSH Connection Strategy above).

📄 Details → references/task-connect-server.md

Task 2: Install DevKit CLI Tool

Install DevKit CLI on the target machine using scripts/install_devkit.sh. The script auto-detects OS/architecture, installs dependencies, downloads the correct package, and verifies installation.

⚠️ AI MUST use scripts/install_devkit.sh instead of manually running step-by-step commands.

📄 Details → references/task-install-devkit.md

Task 3: Scan Source Code and Generate Migration Report

⚠️ CRITICAL RULES:

1. MUST ask user for the source code path before scanning. Do NOT scan without user confirmation.
2. MUST NOT scan local source code without permission.
3. MUST NOT upload local files to remote server without permission.
4. CAN list available source code directories on remote server to help user choose.

Report save path (local download):

The skill MUST create the directory if it does not exist. Report files (HTML, JSON, CSV) MUST be saved directly under <save_path>/ (no project_name subdirectory). This path is fixed unless user explicitly requests a different location. On Linux/macOS the path is resolved via os.path.expanduser('~') so it works for any user (root → /root/devkit-report, other users → /home/<user>/devkit-report).

Downloading the report:

# Download with defaults (remote=/tmp/devkit-report, local=C:\devkit-report on Windows):
python <skill_dir>/scripts/ssh_client.py get-report

# Or specify custom paths:
python <skill_dir>/scripts/ssh_client.py get-report /tmp/devkit-report /home/devkit-report

⚠️ AI MUST use get-report (or paramiko SFTP API) to download the report. Do NOT use exec with base64/cat to download files.

📄 Details → references/task-scan-source-code.md

DevKit CLI Command Reference

The primary tool is Kunpeng DevKit CLI (devkit command).

devkit porting src-mig -i <source_path> -o <output_path> -s '<language_list>' [options]

Required: -i (source dir), -o (output dir, must exist), -s (languages, comma-separated: c, c++, asm, fortran, go, java, python, scala).

Optional: -c (build cmd, e.g. 'make all'), -b (build tool: make/cmake/automake/go/bazel/blade), -p (compiler, e.g. gcc9.3.0), -f (Fortran compiler), -t (target OS, auto-detect), -r (report format: all/json/html/csv, default all), -l (log level 0-3), -np (concurrency), --ignore/--ignore-path (exclude rules/paths), --kp-compatibility (cross-gen check).

Compiler versions (-p): gcc4.8.5, gcc7.3.0, gcc9.3.0, gcc10.3.0, gcc12.3.0, bisheng compiler3.0.0/4.0.0, gcc for openeuler3.0.3, etc.

⚠️ The devkit binary must be run from its installation directory (e.g., cd /usr/local/devkit && ./devkit), or the directory must be in PATH. The output directory (-o) must already exist.

📄 Full CLI reference → references/devkit-cli-reference.md

References

Resource Cleanup Reminder

⚠️ After the scan completes and the report is presented, AI MUST remind the user to clean up provisioned resources (Step 3d only). Present as TEXT ONLY — never execute delete commands. Include a table of created resources (ECS, VPC, Subnet, EIP, Security Group) with their IDs, and remind: "Deletion is IRREVERSIBLE. AI will NOT execute these commands. Please run them manually."

For Step 3c (existing server) and Step 3a (local install): No cleanup reminder needed.