86 lines
3.4 KiB
Bash
Executable File
86 lines
3.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -Eeuo pipefail
|
|
source /opt/rust-package-builder/scripts/lib.sh
|
|
|
|
REPOSITORY="$DATA_DIR/repository"
|
|
CURRENT="$REPOSITORY/current"
|
|
|
|
linux_release_complete_for_commit() {
|
|
local sha=$1
|
|
[[ -d "$CURRENT" ]] || return 1
|
|
[[ -f "$CURRENT/apt/dists/$REPO_DISTRIBUTION/InRelease" ]] || return 1
|
|
[[ -f "$CURRENT/rpm/x86_64/repodata/repomd.xml" ]] || return 1
|
|
# A new builder revision must repackage even when RustProxy's SHA is unchanged.
|
|
[[ -f "$CURRENT/LINUX-BUILD-INFO.txt" ]] || return 1
|
|
grep -Fqx "packaging_revision=$PACKAGING_REVISION" "$CURRENT/LINUX-BUILD-INFO.txt" || return 1
|
|
|
|
if grep -Fqx "source_commit=$sha" "$CURRENT/LINUX-BUILD-INFO.txt"; then
|
|
return 0
|
|
fi
|
|
|
|
local state_sha=""
|
|
[[ -r "$DATA_DIR/state/last_linux_commit" ]] && state_sha=$(cat "$DATA_DIR/state/last_linux_commit")
|
|
[[ "$state_sha" == "$sha" ]] && return 0
|
|
|
|
# Migration from the older unified/Linux-only builder. Its last_commit
|
|
# represented the Linux publication before per-branch state existed.
|
|
local legacy_sha=""
|
|
[[ -r "$DATA_DIR/state/last_commit" ]] && legacy_sha=$(cat "$DATA_DIR/state/last_commit")
|
|
[[ "$legacy_sha" == "$sha" ]] || return 1
|
|
return 0
|
|
}
|
|
|
|
opnsense_release_complete_for_commit() {
|
|
local sha=$1
|
|
local opnsense="$CURRENT/opnsense"
|
|
local package_dir="$opnsense/$OPNSENSE_ABI/amd64"
|
|
|
|
[[ -d "$CURRENT" ]] || return 1
|
|
[[ -f "$opnsense/meta.conf" ]] || return 1
|
|
[[ -f "$opnsense/packagesite.pkg" ]] || return 1
|
|
[[ -f "$opnsense/data.pkg" ]] || return 1
|
|
[[ -f "$opnsense/RustProxy.conf" ]] || return 1
|
|
[[ -f "$opnsense/BUILD-INFO.txt" ]] || return 1
|
|
[[ -f "$opnsense/os-rustproxy-latest.pkg" ]] || return 1
|
|
grep -Fqx "source_commit=$sha" "$opnsense/BUILD-INFO.txt" || return 1
|
|
grep -Fqx "opnsense_series=$OPNSENSE_ABI" "$opnsense/BUILD-INFO.txt" || return 1
|
|
grep -Fqx "packaging_revision=$PACKAGING_REVISION" "$opnsense/BUILD-INFO.txt" || return 1
|
|
[[ -d "$package_dir" ]] || return 1
|
|
find "$package_dir" -maxdepth 1 -type f -name 'os-rustproxy-*.pkg' -print -quit | grep -q . || return 1
|
|
return 0
|
|
}
|
|
|
|
log "checking repository"
|
|
REMOTE_SHA=$(git ls-remote "$SOURCE_REPO" "refs/heads/$SOURCE_BRANCH" | awk 'NR == 1 {print $1}')
|
|
[[ "$REMOTE_SHA" =~ ^[0-9a-fA-F]{40}$ ]] || fatal "cannot resolve branch $SOURCE_BRANCH from $SOURCE_REPO"
|
|
|
|
BUILD_LINUX=1
|
|
BUILD_OPNSENSE=1
|
|
if linux_release_complete_for_commit "$REMOTE_SHA"; then
|
|
BUILD_LINUX=0
|
|
# Persist migrated per-branch state when an older installation already has
|
|
# a valid Linux repository for this exact commit.
|
|
printf '%s\n' "$REMOTE_SHA" | atomic_write "$DATA_DIR/state/last_linux_commit"
|
|
fi
|
|
if opnsense_release_complete_for_commit "$REMOTE_SHA"; then
|
|
BUILD_OPNSENSE=0
|
|
printf '%s\n' "$REMOTE_SHA" | atomic_write "$DATA_DIR/state/last_opnsense_commit"
|
|
fi
|
|
|
|
if [[ "$BUILD_LINUX" == "0" && "$BUILD_OPNSENSE" == "0" ]]; then
|
|
printf '%s\n' "$REMOTE_SHA" | atomic_write "$DATA_DIR/state/last_commit"
|
|
log "no changes: Linux and OPNsense are complete for $REMOTE_SHA"
|
|
exit 0
|
|
fi
|
|
|
|
if [[ "$BUILD_LINUX" == "1" && "$BUILD_OPNSENSE" == "1" ]]; then
|
|
REASON="new-or-missing-both"
|
|
elif [[ "$BUILD_LINUX" == "1" ]]; then
|
|
REASON="repair-linux"
|
|
else
|
|
REASON="repair-opnsense"
|
|
fi
|
|
|
|
log "build required: commit=$REMOTE_SHA linux=$BUILD_LINUX opnsense=$BUILD_OPNSENSE reason=$REASON"
|
|
/opt/rust-package-builder/scripts/build-release.sh "$REMOTE_SHA" "$REASON" "$BUILD_LINUX" "$BUILD_OPNSENSE"
|