package-build/build at main · gardenlinux/package-build · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
#!/usr/bin/env bash

set -exufo pipefail

src_dir="$(dirname "$(realpath "${BASH_SOURCE[0]}")")"

container=
arch=amd64
skip_source=
skip_binary=
build=binary
build_dep_dir=
leave_artifacts=
edit=

while [ $# -gt 0 ]; do
	case "$1" in
		--container)
			container="$2"
			shift 2
			;;
		--arch)
			arch="$2"
			shift 2
			;;
		--source-only)
			skip_binary=true
			shift
			;;
		--binary-only)
			skip_source=true
			shift
			;;
		--build)
			build="$2"
			shift 2
			;;
		--build-dependencies)
			build_dep_dir="$(realpath "$2")"
			shift 2
			;;
		--leave-artifacts)
			leave_artifacts=true
			shift
			;;
		--edit)
			edit=true
			shift
			;;
		*)
			break
			;;
	esac
done

dir="$(realpath "$1")"

if [ -z "$container" ]; then
	if [ -e "$dir/.container" ]; then
		container="$(cat "$dir/.container")"
	else
		container=ghcr.io/gardenlinux/repo-debian-snapshot
	fi
fi

mount_opts=(
	-v "$src_dir/bin:/opt/package_build/bin:Z"
	-v "$dir:/opt/package_build/workdir:Z"
)

if [ -n "$build_dep_dir" ]; then
	mount_opts+=(-v "$build_dep_dir:/opt/package_build/workdir/build_dep:Z")
fi

if [ -n "$edit" ]; then
  podman run --security-opt seccomp=unconfined --arch "$arch" -ti --rm "${mount_opts[@]}" -w "/opt/package_build/workdir/output" -e leave_artifacts="$leave_artifacts" "$container" /opt/package_build/bin/patchenv-init
  exit $?
fi

if [ -z "$skip_source" ]; then
  if [ "$leave_artifacts" = "true" ]; then
    mkdir -p $dir/output
  fi
    podman run --security-opt seccomp=unconfined --arch "$arch" --rm "${mount_opts[@]}" -w "/opt/package_build/workdir" -e leave_artifacts="$leave_artifacts" "$container" /opt/package_build/bin/source
fi
if [ -z "$skip_binary" ]; then
	podman run --security-opt seccomp=unconfined --arch "$arch" --rm "${mount_opts[@]}" -w "/opt/package_build/workdir" "$container" /opt/package_build/bin/binary "$build"
fi