first commit

2026-10-06 23:03:38 +02:00
commit 3d6c49df65
@@ -0,0 +1,227 @@
+#!/usr/bin/env bash
+set -Eeuo pipefail
+source /opt/rust-package-builder/scripts/lib.sh
+
+SRC=${1:?source path required}
+PKG=${2:?package workspace required}
+BINARY_PATH=${3:?binary path required}
+
+rm -rf "$PKG"
+mkdir -p "$PKG/payload" "$PKG/scripts"
+install -D -m 0755 "$BINARY_PATH" "$PKG/payload/usr/bin/$BINARY_NAME"
+
+SERVICE_SRC="$SRC/debian/${PACKAGE_NAME}.service"
+ENV_SRC="$SRC/debian/${PACKAGE_NAME}.environment"
+LOGROTATE_SRC="$SRC/debian/${PACKAGE_NAME}.logrotate"
+TMPFILES_SRC="$SRC/debian/${PACKAGE_NAME}.tmpfiles"
+POSTINST_SRC="$SRC/debian/${PACKAGE_NAME}.postinst"
+
+if [[ -r "$SERVICE_SRC" ]]; then
+    install -D -m 0644 "$SERVICE_SRC" "$PKG/payload/usr/lib/systemd/system/${PACKAGE_NAME}.service"
+else
+    mkdir -p "$PKG/payload/usr/lib/systemd/system"
+    cat > "$PKG/payload/usr/lib/systemd/system/${PACKAGE_NAME}.service" <<UNIT
+[Unit]
+Description=$DESCRIPTION
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/$BINARY_NAME
+Restart=on-failure
+RestartSec=3
+
+[Install]
+WantedBy=multi-user.target
+UNIT
+fi
+
+if [[ -r "$ENV_SRC" ]]; then
+    install -D -m 0640 "$ENV_SRC" "$PKG/payload/etc/${PACKAGE_NAME}/environment"
+fi
+if [[ -r "$LOGROTATE_SRC" ]]; then
+    install -D -m 0644 "$LOGROTATE_SRC" "$PKG/payload/etc/logrotate.d/${PACKAGE_NAME}"
+fi
+if [[ -r "$TMPFILES_SRC" ]]; then
+    install -D -m 0644 "$TMPFILES_SRC" "$PKG/payload/usr/lib/tmpfiles.d/${PACKAGE_NAME}.conf"
+fi
+
+# Preserve optional project-owned monitoring assets used by RustProxy's existing Debian package.
+if [[ -r "$SRC/grafana/rustproxy-overview.json" ]]; then
+    install -D -m 0644 "$SRC/grafana/rustproxy-overview.json" "$PKG/payload/usr/share/${PACKAGE_NAME}/grafana/rustproxy-overview.json"
+fi
+if [[ -r "$SRC/grafana/README.md" ]]; then
+    install -D -m 0644 "$SRC/grafana/README.md" "$PKG/payload/usr/share/doc/${PACKAGE_NAME}/grafana/README.md"
+fi
+
+cat > "$PKG/scripts/deb-postinstall.sh" <<'SCRIPT'
+#!/bin/sh
+set -e
+SCRIPT
+if [[ -r "$POSTINST_SRC" ]]; then
+    sed -e '/^#![[:space:]]*\/bin\/sh/d' \
+        -e '/^[[:space:]]*#DEBHELPER#[[:space:]]*$/d' \
+        -e '/^[[:space:]]*exit[[:space:]]\+0[[:space:]]*$/d' \
+        "$POSTINST_SRC" >> "$PKG/scripts/deb-postinstall.sh"
+else
+    cat >> "$PKG/scripts/deb-postinstall.sh" <<SCRIPT
+if ! getent group "$PACKAGE_NAME" >/dev/null 2>&1; then
+    addgroup --system "$PACKAGE_NAME" >/dev/null
+fi
+if ! getent passwd "$PACKAGE_NAME" >/dev/null 2>&1; then
+    adduser --system --ingroup "$PACKAGE_NAME" --home "/var/lib/$PACKAGE_NAME" --no-create-home \\
+        --disabled-password --shell /usr/sbin/nologin "$PACKAGE_NAME" >/dev/null
+fi
+install -d -o "$PACKAGE_NAME" -g "$PACKAGE_NAME" -m 0750 "/var/lib/$PACKAGE_NAME" "/var/log/$PACKAGE_NAME"
+SCRIPT
+fi
+cat >> "$PKG/scripts/deb-postinstall.sh" <<SCRIPT
+systemctl daemon-reload >/dev/null 2>&1 || true
+systemctl enable "${PACKAGE_NAME}.service" >/dev/null 2>&1 || true
+systemctl restart "${PACKAGE_NAME}.service" >/dev/null 2>&1 || true
+exit 0
+SCRIPT
+
+cat > "$PKG/scripts/deb-preremove.sh" <<SCRIPT
+#!/bin/sh
+set -e
+case "\${1:-}" in
+  remove|deconfigure) systemctl stop "${PACKAGE_NAME}.service" >/dev/null 2>&1 || true ;;
+esac
+exit 0
+SCRIPT
+
+cat > "$PKG/scripts/deb-postremove.sh" <<SCRIPT
+#!/bin/sh
+set -e
+systemctl daemon-reload >/dev/null 2>&1 || true
+exit 0
+SCRIPT
+
+cat > "$PKG/scripts/rpm-postinstall.sh" <<SCRIPT
+#!/bin/sh
+set -e
+if ! getent group "$PACKAGE_NAME" >/dev/null 2>&1; then
+    groupadd --system "$PACKAGE_NAME"
+fi
+if ! getent passwd "$PACKAGE_NAME" >/dev/null 2>&1; then
+    useradd --system --gid "$PACKAGE_NAME" --home-dir "/var/lib/$PACKAGE_NAME" --no-create-home --shell /sbin/nologin "$PACKAGE_NAME"
+fi
+install -d -o "$PACKAGE_NAME" -g "$PACKAGE_NAME" -m 0750 "/var/lib/$PACKAGE_NAME" "/var/log/$PACKAGE_NAME"
+systemd-tmpfiles --create "/usr/lib/tmpfiles.d/${PACKAGE_NAME}.conf" >/dev/null 2>&1 || true
+systemctl daemon-reload >/dev/null 2>&1 || true
+systemctl enable "${PACKAGE_NAME}.service" >/dev/null 2>&1 || true
+systemctl restart "${PACKAGE_NAME}.service" >/dev/null 2>&1 || true
+exit 0
+SCRIPT
+
+cat > "$PKG/scripts/rpm-preremove.sh" <<SCRIPT
+#!/bin/sh
+set -e
+if [ "\${1:-1}" -eq 0 ]; then
+    systemctl stop "${PACKAGE_NAME}.service" >/dev/null 2>&1 || true
+    systemctl disable "${PACKAGE_NAME}.service" >/dev/null 2>&1 || true
+fi
+exit 0
+SCRIPT
+
+cat > "$PKG/scripts/rpm-postremove.sh" <<SCRIPT
+#!/bin/sh
+set -e
+systemctl daemon-reload >/dev/null 2>&1 || true
+exit 0
+SCRIPT
+
+chmod 0755 "$PKG/scripts"/*.sh
+
+# Build nFPM contents dynamically from project-provided package assets.
+CONTENTS_FILE="$PKG/contents.yaml"
+: > "$CONTENTS_FILE"
+add_content() {
+    local src=$1 dst=$2 mode=$3 type=${4:-}
+    {
+        printf '  - src: %s\n' "$(yaml_quote "$src")"
+        printf '    dst: %s\n' "$(yaml_quote "$dst")"
+        [[ -n "$type" ]] && printf '    type: %s\n' "$(yaml_quote "$type")"
+        printf '    file_info:\n      mode: %s\n' "$mode"
+    } >> "$CONTENTS_FILE"
+}
+
+add_content "$PKG/payload/usr/bin/$BINARY_NAME" "/usr/bin/$BINARY_NAME" 0755
+add_content "$PKG/payload/usr/lib/systemd/system/${PACKAGE_NAME}.service" "/usr/lib/systemd/system/${PACKAGE_NAME}.service" 0644
+[[ -f "$PKG/payload/etc/${PACKAGE_NAME}/environment" ]] && add_content "$PKG/payload/etc/${PACKAGE_NAME}/environment" "/etc/${PACKAGE_NAME}/environment" 0640 'config|noreplace'
+[[ -f "$PKG/payload/etc/logrotate.d/${PACKAGE_NAME}" ]] && add_content "$PKG/payload/etc/logrotate.d/${PACKAGE_NAME}" "/etc/logrotate.d/${PACKAGE_NAME}" 0644 'config|noreplace'
+[[ -f "$PKG/payload/usr/lib/tmpfiles.d/${PACKAGE_NAME}.conf" ]] && add_content "$PKG/payload/usr/lib/tmpfiles.d/${PACKAGE_NAME}.conf" "/usr/lib/tmpfiles.d/${PACKAGE_NAME}.conf" 0644
+[[ -f "$PKG/payload/usr/share/${PACKAGE_NAME}/grafana/rustproxy-overview.json" ]] && add_content "$PKG/payload/usr/share/${PACKAGE_NAME}/grafana/rustproxy-overview.json" "/usr/share/${PACKAGE_NAME}/grafana/rustproxy-overview.json" 0644
+[[ -f "$PKG/payload/usr/share/doc/${PACKAGE_NAME}/grafana/README.md" ]] && add_content "$PKG/payload/usr/share/doc/${PACKAGE_NAME}/grafana/README.md" "/usr/share/doc/${PACKAGE_NAME}/grafana/README.md" 0644
+
+NAME_Q=$(yaml_quote "$PACKAGE_NAME")
+VERSION_Q=$(yaml_quote "$VERSION")
+MAINTAINER_Q=$(yaml_quote "$MAINTAINER")
+DESC_Q=$(yaml_quote "$DESCRIPTION")
+LICENSE_Q=$(yaml_quote "$LICENSE")
+HOMEPAGE_Q=$(yaml_quote "$HOMEPAGE")
+GPG_KEY_Q=$(yaml_quote "$GPG_PRIVATE_KEY_FILE")
+
+cat > "$PKG/nfpm-deb.yaml" <<YAML
+name: $NAME_Q
+arch: amd64
+platform: linux
+version: $VERSION_Q
+release: "$PACKAGE_RELEASE"
+section: net
+priority: optional
+maintainer: $MAINTAINER_Q
+description: $DESC_Q
+license: $LICENSE_Q
+homepage: $HOMEPAGE_Q
+contents:
+$(cat "$CONTENTS_FILE")
+depends:
+  - adduser
+  - ca-certificates
+  - gzip
+  - logrotate
+  - systemd
+scripts:
+  postinstall: "$PKG/scripts/deb-postinstall.sh"
+  preremove: "$PKG/scripts/deb-preremove.sh"
+  postremove: "$PKG/scripts/deb-postremove.sh"
+deb:
+  compression: xz
+  signature:
+    key_file: $GPG_KEY_Q
+    type: origin
+YAML
+
+cat > "$PKG/nfpm-rpm.yaml" <<YAML
+name: $NAME_Q
+arch: amd64
+platform: linux
+version: $VERSION_Q
+release: "$PACKAGE_RELEASE"
+section: net
+priority: optional
+maintainer: $MAINTAINER_Q
+description: $DESC_Q
+license: $LICENSE_Q
+homepage: $HOMEPAGE_Q
+vendor: $NAME_Q
+contents:
+$(cat "$CONTENTS_FILE")
+depends:
+  - ca-certificates
+  - gzip
+  - logrotate
+  - shadow-utils
+  - systemd
+scripts:
+  postinstall: "$PKG/scripts/rpm-postinstall.sh"
+  preremove: "$PKG/scripts/rpm-preremove.sh"
+  postremove: "$PKG/scripts/rpm-postremove.sh"
+rpm:
+  compression: zstd
+  signature:
+    key_file: $GPG_KEY_Q
+YAML