108 lines
3.5 KiB
Go
108 lines
3.5 KiB
Go
package main
|
|
|
|
import (
|
|
"context"
|
|
"encoding/xml"
|
|
"fmt"
|
|
"os"
|
|
"path"
|
|
"time"
|
|
|
|
"dagger.io/dagger"
|
|
)
|
|
|
|
type info struct {
|
|
Version string `xml:"version"`
|
|
}
|
|
|
|
func main() {
|
|
ctx := context.Background()
|
|
|
|
// initialize Dagger client
|
|
client, err := dagger.Connect(ctx, dagger.WithLogOutput(os.Stderr))
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
defer client.Close()
|
|
|
|
keySecret := loadSecret(client, "scimserviceprovider.key")
|
|
certSecret := loadSecret(client, "scimserviceprovider.crt")
|
|
s3Secret := client.SetSecret("s3", fmt.Sprintf("https://%s:%s@hot-objects.liiib.re", os.Getenv("S3_ACCESSKEY"), os.Getenv("S3_SECRETKEY")))
|
|
ncSecret := client.SetSecret("nc", os.Getenv("NC_STORE_TOKEN"))
|
|
|
|
i := loadInfo()
|
|
|
|
archiveName := fmt.Sprintf("scimserviceprovider-v%s.tar.gz", i.Version)
|
|
|
|
fmt.Println("cc", i.Version)
|
|
|
|
// execute
|
|
vendor := client.Container().From("docker.io/composer:2.6").
|
|
WithFile("composer.json", client.Host().File("composer.json")).
|
|
WithFile("composer.lock", client.Host().File("composer.lock")).
|
|
WithExec([]string{"composer", "i", "--no-dev", "--ignore-platform-reqs"}).
|
|
WithExec([]string{"rm", "-rf", "vendor/audriga/scim-server-php/.git"}).
|
|
Directory("vendor")
|
|
|
|
output := client.Container().From("docker.io/nextcloud:28").
|
|
WithWorkdir("/scimserviceprovider").
|
|
WithDirectory("vendor", vendor).
|
|
WithDirectory(".", client.Host().Directory(".", dagger.HostDirectoryOpts{
|
|
Include: []string{"appinfo", "lib", "LICENSE"},
|
|
})).
|
|
WithMountedSecret("/scimserviceprovider.crt", certSecret).
|
|
WithMountedSecret("/scimserviceprovider.key", keySecret).
|
|
WithExec([]string{"php", "/usr/src/nextcloud/occ", "integrity:sign-app", "--path=/scimserviceprovider", "--privateKey=/scimserviceprovider.key", "--certificate=/scimserviceprovider.crt"}).
|
|
WithExec([]string{"mkdir", "/output"}).
|
|
WithExec([]string{"tar", "czf", path.Join("/output", archiveName), "/scimserviceprovider"}).
|
|
WithExec([]string{"bash", "-c", "openssl dgst -sha512 -sign /scimserviceprovider.key " + path.Join("/output", archiveName) + " | openssl base64 > " + path.Join("/output", archiveName+".sign")}).
|
|
Directory("/output")
|
|
|
|
_, err = client.Container().From("docker.io/minio/mc").
|
|
WithSecretVariable("MC_HOST_repo", s3Secret).
|
|
WithDirectory("/output", output).
|
|
WithExec([]string{"mc", "cp", "-r", "/output/", "repo/artifacts/"}).
|
|
Sync(ctx)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
_, err = client.Container().From("docker.io/alpine").
|
|
WithExec([]string{"apk", "add", "--no-cache", "curl"}).
|
|
WithWorkdir("/output").
|
|
WithDirectory("/output", output).
|
|
WithEnvVariable("ARCHIVE_NAME", archiveName).
|
|
WithSecretVariable("TOKEN", ncSecret).
|
|
WithEnvVariable("CACHEBUSTER", time.Now().String()).
|
|
WithExec([]string{"sh", "-c",
|
|
`printf '{"download":"https://hot-objects.liiib.re/artifacts/%s", "signature": "%s"}' "$ARCHIVE_NAME" "$(cat ${ARCHIVE_NAME}.sign)" | curl --fail-with-body -s -X POST https://apps.nextcloud.com/api/v1/apps/releases -H "Authorization: Token ${TOKEN}" -H "Content-Type: application/json" -d @-`}).
|
|
Sync(ctx)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
}
|
|
|
|
func loadSecret(client *dagger.Client, name string) *dagger.Secret {
|
|
home, err := os.UserHomeDir()
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
data, err := os.ReadFile(path.Join(home, ".nextcloud/certificates/", name))
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
return client.SetSecret(name, string(data))
|
|
}
|
|
|
|
func loadInfo() info {
|
|
data, err := os.ReadFile("appinfo/info.xml")
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
i := info{}
|
|
err = xml.Unmarshal(data, &i)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
return i
|
|
}
|