librerelease


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128

#!/bin/bash
# Librerelease
# Uploads packages into [staging]

# Copyright 2010 Nicolás Reynolds

# ---------- GNU General Public License 3 ----------

# This file is part of Parabola.

# Parabola is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.

# Parabola is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.

# You should have received a copy of the GNU General Public License
# along with Parabola. If not, see <http://www.gnu.org/licenses/>.

source /etc/libretools.conf
custom_config=$XDG_CONFIG_HOME/libretools/libretools.conf

function usage {
    echo "$(gettext "Usage: $0")"
    echo
    echo "$(gettext "This script uploads packages on $WORKDIR/stagging")"
    echo "$(gettext "to parabola server.")"
    echo
    echo "$(gettext "OPTIONS:")"
    echo "$(gettext "   -h this message.")"
    echo "$(gettext "   -l only list packages but not upload them.")"
    echo "$(gettext "   -c clean packages on $WORKDIR/staging.")"
    echo "$(gettext "   -n dry-run")"
}

function list_packages {
    repos=($(find "$WORKDIR/staging/" -mindepth 1 -type d \! -empty -printf '%f ' 2>/dev/null))
    for _repo in ${repos[@]}; do
        msg2 "$_repo"
        find ${WORKDIR}/staging/${_repo} -type f -printf "%f\n"
    done
    unset repos
}

function sign_packages {
    if [ -z "${GPG_AGENT_INFO}" ]; then
        warning "It's better to use gpg-agent to sign packages in batches"
    fi

    packages=($(find "${WORKDIR}/staging/" -type f -iname '*.pkg.tar.?z'))
    for package in ${packages[@]}; do
        if [ -f "${package}${SIGEXT}" ]; then

            warning "Package signature found, verifying..."

# Verify that the signature is correct, else remove for re-signing
            if ! gpg --quiet --verify "${package}${SIGEXT}" >/dev/null 2>&1; then
                error "Failed! Resigning..."
                rm -f "${package}${SIGEXT}"
            else
                continue
            fi
        fi

        gpg --default-key "${SIGID}" --output "${package}${SIGEXT}" --detach-sig "${package}"
    done
}

# Remove everything that's not a package or a signature
function clean_non_packages {
    find $WORKDIR/staging/ -type f \
         \! -iname "*.pkg.tar.?z" -a \! -iname "*.pkg.tar.?z.sig" \
         -delete
}

# Clean everything if not on dry-run mode
function clean {
    [ -z ${dryrun} ] && \
    find ${WORKDIR}/staging/ -type f -delete
}

while getopts 'hlcn' arg; do
    case $arg in
        h) usage; exit 0 ;;
        l) list_packages; exit 0 ;;
        c) clean; exit $? ;;
        n) dryrun="--dry-run" ;;
    esac
done

[[ -e $custom_config ]] && source $custom_config

[[ ! -z ${HOOKPRERELEASE} ]] && bash -c "${HOOKPRERELEASE}"

clean_non_packages
if [ ! -z "${SIGID}" ]; then
    sign_packages
else 
    error "Package signing is *required*"
    exit 1
fi

msg "Uploading packages..."
rsync --recursive \
      ${dryrun} \
      --no-group \
      --no-perms \
      --copy-links \
      --hard-links \
      --partial \
      --prune-empty-dirs \
      --human-readable \
      --progress \
      -e "ssh " \
      ${WORKDIR}/staging \
      ${PARABOLAHOST}:${LIBREDESTDIR}/ || {
          error "Sync failed, try again"
          exit 1
      }

msg "Removing packages from local [staging]"
clean

exit 0