132 lines
5.6 KiB
Bash
Executable File
132 lines
5.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -Eeuo pipefail
|
|
source /opt/rust-package-builder/scripts/lib.sh
|
|
|
|
: "${SHA:?SHA required}"
|
|
: "${SRC:?SRC required}"
|
|
: "${OUT:?OUT required}"
|
|
: "${VERSION:?VERSION required}"
|
|
: "${BINARY_NAME:?BINARY_NAME required}"
|
|
: "${SOURCE_REVISION:?SOURCE_REVISION required}"
|
|
|
|
REPOSITORY="$DATA_DIR/repository"
|
|
BRANCH_RELEASE_ID="$(date -u '+%Y%m%dT%H%M%SZ')-${SHORT_SHA}-opnsense"
|
|
RELEASE_DIR="$REPOSITORY/releases/$BRANCH_RELEASE_ID"
|
|
PUBLISHED=0
|
|
|
|
cleanup_opnsense_release() {
|
|
if [[ "$PUBLISHED" != "1" && -d "$RELEASE_DIR" ]]; then
|
|
rm -rf "$RELEASE_DIR"
|
|
fi
|
|
}
|
|
trap cleanup_opnsense_release EXIT
|
|
|
|
FREEBSD_BINARY="$OUT/rust-proxy-freebsd"
|
|
/opt/rust-package-builder/scripts/build-opnsense.sh "$SRC" "$FREEBSD_BINARY" "$BINARY_NAME" "$WORK"
|
|
|
|
# PKG needs an increasing version for a packaging-only change at the same
|
|
# application commit, otherwise pkg upgrade would not install the new payload.
|
|
OPNSENSE_PACKAGE_REVISION=$SOURCE_REVISION
|
|
LAST_OPNSENSE_PACKAGE_VERSION=""
|
|
if [[ -r "$DATA_DIR/state/last_opnsense_package_version" ]]; then
|
|
LAST_OPNSENSE_PACKAGE_VERSION=$(cat "$DATA_DIR/state/last_opnsense_package_version")
|
|
elif [[ -r "$REPOSITORY/current/opnsense/BUILD-INFO.txt" ]]; then
|
|
LAST_OPNSENSE_PACKAGE_VERSION=$(sed -n 's/^package_version=//p' "$REPOSITORY/current/opnsense/BUILD-INFO.txt" | head -n1)
|
|
fi
|
|
if [[ "$LAST_OPNSENSE_PACKAGE_VERSION" == "${VERSION}_"* ]]; then
|
|
LAST_OPNSENSE_REVISION=${LAST_OPNSENSE_PACKAGE_VERSION#"${VERSION}_"}
|
|
if [[ "$LAST_OPNSENSE_REVISION" =~ ^[0-9]+$ ]] && (( LAST_OPNSENSE_REVISION >= OPNSENSE_PACKAGE_REVISION )); then
|
|
OPNSENSE_PACKAGE_REVISION=$((LAST_OPNSENSE_REVISION + 1))
|
|
fi
|
|
elif [[ "$LAST_OPNSENSE_PACKAGE_VERSION" == "$VERSION" && "$OPNSENSE_PACKAGE_REVISION" == "0" ]]; then
|
|
OPNSENSE_PACKAGE_REVISION=1
|
|
fi
|
|
if [[ "$OPNSENSE_PACKAGE_REVISION" == "0" ]]; then
|
|
OPNSENSE_PACKAGE_VERSION="$VERSION"
|
|
else
|
|
OPNSENSE_PACKAGE_VERSION="${VERSION}_${OPNSENSE_PACKAGE_REVISION}"
|
|
fi
|
|
OPNSENSE_PACKAGE_FILE="$OUT/os-rustproxy-${OPNSENSE_PACKAGE_VERSION}.pkg"
|
|
/opt/rust-package-builder/scripts/package-opnsense.sh \
|
|
"$SRC" "$FREEBSD_BINARY" "$OPNSENSE_PACKAGE_FILE" "$OPNSENSE_PACKAGE_VERSION"
|
|
|
|
mkdir -p "$RELEASE_DIR/apt" "$RELEASE_DIR/rpm/x86_64" "$RELEASE_DIR/suse/x86_64" "$RELEASE_DIR/opnsense" "$RELEASE_DIR/freebsd"
|
|
CURRENT_TARGET=""
|
|
if [[ -L "$REPOSITORY/current" ]]; then
|
|
CURRENT_LINK=$(readlink "$REPOSITORY/current")
|
|
CURRENT_TARGET="$REPOSITORY/$CURRENT_LINK"
|
|
fi
|
|
|
|
log "staging OPNsense repository snapshot"
|
|
if [[ -n "$CURRENT_TARGET" ]]; then
|
|
for component in apt rpm suse opnsense freebsd; do
|
|
if [[ -d "$CURRENT_TARGET/$component" ]]; then
|
|
rsync -a --delete --link-dest="$CURRENT_TARGET/$component"/ "$CURRENT_TARGET/$component"/ "$RELEASE_DIR/$component"/
|
|
fi
|
|
done
|
|
for file in repo-key.gpg index.html LINUX-BUILD-INFO.txt SUSE-BUILD-INFO.txt; do
|
|
if [[ -f "$CURRENT_TARGET/$file" ]]; then
|
|
cp -a "$CURRENT_TARGET/$file" "$RELEASE_DIR/$file"
|
|
fi
|
|
done
|
|
fi
|
|
|
|
OPNSENSE_PACKAGE_DIR="$RELEASE_DIR/opnsense/$OPNSENSE_ABI/amd64"
|
|
mkdir -p "$OPNSENSE_PACKAGE_DIR"
|
|
rm -f \
|
|
"$OPNSENSE_PACKAGE_DIR/$(basename "$OPNSENSE_PACKAGE_FILE")" \
|
|
"$RELEASE_DIR/opnsense/RustProxy.conf" \
|
|
"$RELEASE_DIR/opnsense/os-rustproxy-latest.pkg" \
|
|
"$RELEASE_DIR/opnsense/SHA256" \
|
|
"$RELEASE_DIR/opnsense/BUILD-INFO.txt" \
|
|
"$RELEASE_DIR/opnsense/index.html"
|
|
cp -f "$OPNSENSE_PACKAGE_FILE" "$OPNSENSE_PACKAGE_DIR/"
|
|
/opt/rust-package-builder/scripts/generate-opnsense-repo.py "$RELEASE_DIR/opnsense" --retention "$OPNSENSE_RETENTION"
|
|
cat > "$RELEASE_DIR/opnsense/RustProxy.conf" <<REPOCONF
|
|
RustProxy: {
|
|
url: "${OPNSENSE_REPOSITORY_URL%/}",
|
|
enabled: yes,
|
|
mirror_type: "none",
|
|
signature_type: "none"
|
|
}
|
|
REPOCONF
|
|
cp -f "$OPNSENSE_PACKAGE_FILE" "$RELEASE_DIR/opnsense/os-rustproxy-latest.pkg"
|
|
(cd "$RELEASE_DIR/opnsense" && sha256sum "$OPNSENSE_ABI/amd64/$(basename "$OPNSENSE_PACKAGE_FILE")") > "$RELEASE_DIR/opnsense/SHA256"
|
|
cat > "$RELEASE_DIR/opnsense/BUILD-INFO.txt" <<INFO
|
|
app_version=$VERSION
|
|
built_at=$(date -u "+%Y-%m-%dT%H:%M:%SZ")
|
|
package_version=$OPNSENSE_PACKAGE_VERSION
|
|
source_url=$SOURCE_REPO
|
|
source_ref=$SOURCE_BRANCH
|
|
source_commit=$SHA
|
|
build_reason=$BUILD_REASON
|
|
source_revision=$SOURCE_REVISION
|
|
packaging_revision=$OPNSENSE_PACKAGING_REVISION
|
|
opnsense_series=$OPNSENSE_ABI
|
|
freebsd_release=$FREEBSD_RELEASE
|
|
freebsd_abi=$FREEBSD_ABI
|
|
freebsd_arch=$FREEBSD_ARCH
|
|
package=$OPNSENSE_ABI/amd64/$(basename "$OPNSENSE_PACKAGE_FILE")
|
|
INFO
|
|
/opt/rust-package-builder/scripts/generate-opnsense-index.sh "$RELEASE_DIR/opnsense/index.html"
|
|
|
|
[[ -s "$RELEASE_DIR/opnsense/index.html" ]]
|
|
[[ -f "$RELEASE_DIR/opnsense/meta.conf" ]]
|
|
[[ -f "$RELEASE_DIR/opnsense/packagesite.pkg" ]]
|
|
[[ -f "$RELEASE_DIR/opnsense/data.pkg" ]]
|
|
[[ -f "$RELEASE_DIR/opnsense/os-rustproxy-latest.pkg" ]]
|
|
bsdtar -tf "$RELEASE_DIR/opnsense/packagesite.pkg" | grep -Fx 'packagesite.yaml' >/dev/null || fatal "invalid OPNsense packagesite.pkg"
|
|
bsdtar -xOf "$OPNSENSE_PACKAGE_DIR/$(basename "$OPNSENSE_PACKAGE_FILE")" +COMPACT_MANIFEST >/dev/null || fatal "invalid OPNsense package manifest"
|
|
|
|
log "publishing OPNsense repository branch"
|
|
rm -f "$REPOSITORY/current.new"
|
|
ln -s "releases/$BRANCH_RELEASE_ID" "$REPOSITORY/current.new"
|
|
mv -Tf "$REPOSITORY/current.new" "$REPOSITORY/current"
|
|
PUBLISHED=1
|
|
|
|
printf '%s\n' "$SHA" | atomic_write "$DATA_DIR/state/last_opnsense_commit"
|
|
printf '%s\n' "$OPNSENSE_PACKAGE_VERSION" | atomic_write "$DATA_DIR/state/last_opnsense_package_version"
|
|
printf '%s\n' "$BRANCH_RELEASE_ID" | atomic_write "$DATA_DIR/state/last_opnsense_release"
|
|
printf '%s\n' "$BRANCH_RELEASE_ID" | atomic_write "$DATA_DIR/state/last_release"
|
|
log "OPNsense publication completed: package=$OPNSENSE_PACKAGE_VERSION commit=$SHA"
|