Files
rustproxy-opnsense-repo/builder/debian/hourly-build.sh
T
2026-09-29 13:37:57 +02:00

87 lines
2.7 KiB
Bash
Executable File

#!/bin/bash
set -euo pipefail
CONFIG_FILE="${RUSTPROXY_BUILDER_CONFIG:-/etc/rustproxy-opnsense-builder.env}"
if [[ ! -r "$CONFIG_FILE" ]]; then
echo "Missing builder config: $CONFIG_FILE" >&2
exit 1
fi
# shellcheck disable=SC1090
source "$CONFIG_FILE"
: "${PACKAGING_REPO_URL:?PACKAGING_REPO_URL is required}"
: "${PACKAGING_REPO_REF:=main}"
: "${PACKAGING_WORKDIR:=/srv/rustproxy-opnsense/packaging}"
: "${APP_REPO_URL:=https://git.linuxiarz.pl/gru/RustProxy}"
: "${APP_REPO_REF:=HEAD}"
: "${APP_WORKDIR:=/srv/rustproxy-opnsense/source/RustProxy}"
: "${STATE_DIR:=/var/lib/rustproxy-opnsense-builder}"
mkdir -p "$STATE_DIR" "$(dirname "$PACKAGING_WORKDIR")" "$(dirname "$APP_WORKDIR")"
exec 9>"$STATE_DIR/build.lock"
if ! flock -n 9; then
echo "Another build is running; exiting."
exit 0
fi
SYNC_COMMIT=""
sync_checkout()
{
local dir="$1"
local url="$2"
local ref="$3"
if [[ ! -d "$dir/.git" ]]; then
rm -rf "$dir"
mkdir -p "$dir"
git -C "$dir" init
git -C "$dir" remote add origin "$url"
else
git -C "$dir" remote set-url origin "$url"
fi
echo "Fetching $url ($ref)" >&2
git -C "$dir" fetch --prune --tags origin "$ref" >&2
SYNC_COMMIT="$(git -C "$dir" rev-parse FETCH_HEAD)"
git -C "$dir" checkout --detach -f "$SYNC_COMMIT" >&2
git -C "$dir" reset --hard "$SYNC_COMMIT" >&2
git -C "$dir" clean -ffd >&2
}
# Refresh the packaging repository first so the newest build logic is used.
sync_checkout "$PACKAGING_WORKDIR" "$PACKAGING_REPO_URL" "$PACKAGING_REPO_REF"
packaging_commit="$SYNC_COMMIT"
# RustProxy is intentionally NOT vendored in the packaging repository.
# Fetch the application directly from its upstream repository every run.
sync_checkout "$APP_WORKDIR" "$APP_REPO_URL" "$APP_REPO_REF"
app_commit="$SYNC_COMMIT"
app_revision="$(git -C "$APP_WORKDIR" rev-list --count "$app_commit")"
if [[ ! -f "$APP_WORKDIR/Cargo.toml" ]]; then
echo "Upstream checkout does not contain Cargo.toml: $APP_WORKDIR" >&2
exit 1
fi
state_file="$STATE_DIR/last-successful-build"
current_state="packaging=$packaging_commit app=$app_commit"
last_state="$(cat "$state_file" 2>/dev/null || true)"
if [[ "$current_state" == "$last_state" ]]; then
echo "No changes. packaging=$packaging_commit app=$app_commit"
exit 0
fi
echo "Building RustProxy commit $app_commit (revision $app_revision)"
echo "Using packaging commit $packaging_commit"
RUSTPROXY_SOURCE_DIR="$APP_WORKDIR" \
RUSTPROXY_SOURCE_URL="$APP_REPO_URL" \
RUSTPROXY_SOURCE_REF="$APP_REPO_REF" \
RUSTPROXY_SOURCE_COMMIT="$app_commit" \
RUSTPROXY_SOURCE_REVISION="$app_revision" \
"$PACKAGING_WORKDIR/ci/build-release.sh"
printf '%s\n' "$current_state" > "$state_file"
echo "Build completed: $current_state"