Files

95 lines
3.4 KiB
Bash
Executable File

#!/usr/bin/env bash
#
# Builds a .rpm package as part of the bundling process.
#
# Required environment variables:
# - WORKSPACE_ROOT_DIR: The root directory of the Cargo workspace.
# - DIST_DIR: A temporary directory we can use for staging files as we build the package.
# - OUT_DIR: The directory into which we should place the final package.
# - CARGO_TARGET_OUTPUT_DIR: The cargo target directory containing build output.
# - RELEASE_CHANNEL: The release channel we're bundling ("oss").
# - BUNDLE_ID: The app ID for the bundle ("com.galaxy.GalaxyOss").
# - EXECUTABLE_PATH: The path to the compiled executable we want to install.
# - BINARY_NAME: The name that the compiled executable should have on the target machine.
# - ARTIFACT: Which artifact to build: app or cli.
set -e
ARTIFACT="${ARTIFACT:-app}"
source "$WORKSPACE_ROOT_DIR/script/linux/package_metadata"
BUILD_ARCH="${BUILD_ARCH:-$(uname -m)}"
if [ "$BUILD_ARCH" = "aarch64" ]; then
ARCH="aarch64"
else
ARCH="x86_64"
fi
RPMBUILD_DIR="$DIST_DIR/rpmbuild"
FULL_PACKAGE_NAME="$PACKAGE_NAME-$ARCH"
PKGDIR="$DIST_DIR/rpmpkg/$FULL_PACKAGE_NAME"
cleanup() {
# Delete the rpmbuild directory where the build took place.
if [ -d "$RPMBUILD_DIR" ]; then
rm -rf "$RPMBUILD_DIR"
fi
}
# Run cleanup() when the script terminates (whether it succeeded or failed).
trap cleanup EXIT
# Construct a directory that contains the build tree.
rm -rf "$RPMBUILD_DIR"
mkdir -p "$RPMBUILD_DIR"/{SPEC,RPMS}
# Move the RPM-specific package metadata into the package directory.
VERSION="$GIT_RELEASE_TAG"
RELEASE="1"
sed \
"s#@@PACKAGE_NAME@@#$PACKAGE_NAME#g; \
s#@@CHANNEL_SUFFIX@@#$CHANNEL_SUFFIX#g; \
s#@@BINARY_NAME@@#$BINARY_NAME#g; \
s#@@GALAXY_AI_COMMAND_NAME@@#$GALAXY_AI_COMMAND_NAME#g; \
s#@@GALAXY_CONTROL_COMMAND_NAME@@#$GALAXY_CONTROL_COMMAND_NAME#g; \
s#@@VERSION@@#$VERSION#g; \
s#@@RELEASE@@#$RELEASE#g; \
s#@@ARCH@@#$ARCH#g; \
s#@@WORKSPACEROOT@@#$WORKSPACE_ROOT_DIR#g; \
s#@@BUNDLEID@@#$BUNDLE_ID#g; \
s#@@REPO_NAME@@#$REPO_NAME#g; \
s#@@RELEASE_CHANNEL@@#$RELEASE_CHANNEL#g" \
< "$WORKSPACE_ROOT_DIR/resources/linux/rpm/$ARTIFACT/warp.spec.template" \
> "$RPMBUILD_DIR/SPEC/warp.spec"
# Build the actual package.
fakeroot rpmbuild -v -bb "$RPMBUILD_DIR/SPEC/warp.spec" --target="$ARCH" --define "_topdir $RPMBUILD_DIR"
# Copy the package to the output directory.
RPM_NAME="$PACKAGE_NAME-$VERSION-$RELEASE.$ARCH.rpm"
cp "$RPMBUILD_DIR/RPMS/$ARCH/$RPM_NAME" "$OUT_DIR"
# If we're running on GitHub, sign the package using our signing key that
# should have already been added to the gpg-agent with a preset passphrase.
if [ "${GITHUB_ACTIONS}" == "true" ]; then
# Import our signing key's public key into rpm so the signature can be
# verified.
sudo rpm --import https://releases.warp.dev/linux/keys/warp.asc
# We use batch mode with tty-based pin entry to ensure that the build doesn't
# hang waiting on user input if, for some reason, we failed to preset the
# passphrase for the signing key in the gpg-agent cache.
#
# Additionally, until we know that this works, don't let an error here fail
# the build.
rpmsign \
--verbose \
--addsign --key-id "linux-maintainers@warp.dev" \
--define "_gpg_sign_cmd_extra_args --batch --yes --pinentry-mode loopback" --define "_gpg_digest_algo sha256" \
"$OUT_DIR/$RPM_NAME" \
|| true
fi
echo "Successfully built .rpm package at $OUT_DIR/$RPM_NAME!"