#!/usr/bin/env bash
set -Eeuo pipefail
source /opt/rustbox-package-builder/scripts/lib.sh
: "${SOURCE_REPO:?SOURCE_REPO required}"
: "${REPOSITORY_URL:?REPOSITORY_URL required}"
: "${SOURCE_BRANCH:=master}"
: "${POLL_INTERVAL:=300}"
: "${REPO_DISTRIBUTION:=stable}"
: "${REPO_COMPONENT:=main}"
: "${PACKAGE_RELEASE:=auto}"
: "${RUN_LINUX_TESTS:=compile}"
: "${MAX_GLIBC_VERSION:=2.34}"
: "${RELEASE_RETENTION:=10}"
: "${PACKAGE_RETENTION:=10}"
: "${CLEAN_BUILD_CACHE:=1}"
: "${BUILD_TMP_DIR:=/tmp/rustbox-package-builder}"
require_positive_integer RELEASE_RETENTION "$RELEASE_RETENTION"
require_positive_integer PACKAGE_RETENTION "$PACKAGE_RETENTION"
export SOURCE_BRANCH POLL_INTERVAL REPO_DISTRIBUTION REPO_COMPONENT PACKAGE_RELEASE RUN_LINUX_TESTS MAX_GLIBC_VERSION RELEASE_RETENTION PACKAGE_RETENTION CLEAN_BUILD_CACHE BUILD_TMP_DIR
mkdir -p "$DATA_DIR"/{state,repository,work,packages} "$BUILD_TMP_DIR" /tmp/rustbox-gnupg
chmod 0700 /tmp/rustbox-gnupg

# Migration/maintenance cleanup for older builder versions which stored large
# cargo targets and package work directories on the persistent data volume.
rm -rf -- "$DATA_DIR/work/out" "$DATA_DIR/work/package" "$DATA_DIR/cargo/target"
rmdir "$DATA_DIR/cargo" 2>/dev/null || true
rm -rf -- "$BUILD_TMP_DIR/out" "$BUILD_TMP_DIR/package"
if is_true "$CLEAN_BUILD_CACHE"; then
  rm -rf -- "$BUILD_TMP_DIR/cargo-target"
fi

# Apply file-level retention at startup as well, so stale raw package pools and
# old atomic release directories are reduced even before the next source build.
prune_package_files "$DATA_DIR/packages/deb" 'rustbox_*.deb' "$PACKAGE_RETENTION"
prune_package_files "$DATA_DIR/packages/rpm/x86_64" 'rustbox-*.x86_64.rpm' "$PACKAGE_RETENTION"
prune_package_files "$DATA_DIR/packages/suse/x86_64" 'rustbox-*.suse.x86_64.rpm' "$PACKAGE_RETENTION"
prune_release_dirs "$DATA_DIR/repository/releases" "$RELEASE_RETENTION" "$(readlink -f "$DATA_DIR/repository/current" 2>/dev/null || true)"

export GNUPGHOME=/tmp/rustbox-gnupg
GPG_PRIVATE_KEY_FILE=/run/secrets/gpg/private-key.asc
[[ -s "$GPG_PRIVATE_KEY_FILE" ]] || fatal "missing GPG private key: $GPG_PRIVATE_KEY_FILE"
gpg --batch --import "$GPG_PRIVATE_KEY_FILE" >/dev/null 2>&1
GPG_KEY_ID=$(gpg --batch --with-colons --list-secret-keys | awk -F: '/^sec:/ {seen=1; next} seen && /^fpr:/ {print $10; exit}')
[[ -n "$GPG_KEY_ID" ]] || fatal "cannot resolve GPG signing key"
export GPG_PRIVATE_KEY_FILE GPG_KEY_ID
/opt/rustbox-package-builder/scripts/init-storage.sh
while true; do
  if ! /opt/rustbox-package-builder/scripts/check-and-build.sh; then
    log "build cycle failed; retrying after ${POLL_INTERVAL}s"
  fi
  sleep "$POLL_INTERVAL"
done