mirror of
https://github.com/freedomofpress/dangerzone.git
synced 2025-05-06 13:31:50 +02:00
Compare commits
No commits in common. "0cfa86bf580c9d1d8df540484655d6084c55da70" and "0e79d01ed6861fd3fc6fe0d7b40d116727c7b72c" have entirely different histories.
0cfa86bf58
...
0e79d01ed6
1 changed files with 134 additions and 129 deletions
217
dodo.py
217
dodo.py
|
@ -31,29 +31,22 @@ PARAM_APPLE_ID = {
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
def list_files(path, recursive=False):
|
def list_files(path):
|
||||||
filepaths = []
|
filepaths = []
|
||||||
for root, _, files in os.walk(path):
|
for root, _, files in os.walk(path):
|
||||||
for f in files:
|
for f in files:
|
||||||
if f.endswith(".pyc"):
|
if f.endswith(".pyc"):
|
||||||
continue
|
continue
|
||||||
filepaths.append(Path(root) / f)
|
filepaths.append(Path(root) / f)
|
||||||
if not recursive:
|
|
||||||
break
|
|
||||||
return filepaths
|
return filepaths
|
||||||
|
|
||||||
|
|
||||||
def copy_dz_dir(src, dst):
|
def copy_dz_dir(src, dst):
|
||||||
shutil.rmtree(dst, ignore_errors=True)
|
shutil.rmtree(dst)
|
||||||
|
dst.mkdir(exist_ok=True)
|
||||||
shutil.copytree(src, dst)
|
shutil.copytree(src, dst)
|
||||||
|
|
||||||
|
|
||||||
def create_release_dir():
|
|
||||||
RELEASE_DIR.mkdir(parents=True, exist_ok=True)
|
|
||||||
(RELEASE_DIR / "assets").mkdir(exist_ok=True)
|
|
||||||
(RELEASE_DIR / "tmp").mkdir(exist_ok=True)
|
|
||||||
|
|
||||||
|
|
||||||
def cmd_build_linux_pkg(distro, version, cwd, qubes=False):
|
def cmd_build_linux_pkg(distro, version, cwd, qubes=False):
|
||||||
pkg = "rpm" if distro == "fedora" else "deb"
|
pkg = "rpm" if distro == "fedora" else "deb"
|
||||||
cmd = [
|
cmd = [
|
||||||
|
@ -64,13 +57,12 @@ def cmd_build_linux_pkg(distro, version, cwd, qubes=False):
|
||||||
"--version",
|
"--version",
|
||||||
version,
|
version,
|
||||||
"run",
|
"run",
|
||||||
"--no-gui",
|
"--dev"
|
||||||
"--dev",
|
|
||||||
f"./dangerzone/install/linux/build-{pkg}.py"
|
f"./dangerzone/install/linux/build-{pkg}.py"
|
||||||
]
|
]
|
||||||
if qubes:
|
if qubes:
|
||||||
cmd += ["--qubes"]
|
cmd += ["--qubes"]
|
||||||
return CmdAction(" ".join(cmd), cwd=cwd)
|
return CmdAction(cmd, cwd=cwd)
|
||||||
|
|
||||||
|
|
||||||
def task_clean_container_runtime():
|
def task_clean_container_runtime():
|
||||||
|
@ -78,24 +70,35 @@ def task_clean_container_runtime():
|
||||||
return {
|
return {
|
||||||
"actions": None,
|
"actions": None,
|
||||||
"clean": [
|
"clean": [
|
||||||
[CONTAINER_RUNTIME, "system", "prune", "-a", "-f"],
|
[CONTAINER_RUNTIME, "system", "prune", "-f"],
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
#def task_check_python():
|
def task_clean_git():
|
||||||
# """Check that the latest supported Python version is installed (WIP).
|
"""Clean the Git repo."""
|
||||||
#
|
return {
|
||||||
# This task does not work yet, and is currently short-circuited.
|
"actions": None,
|
||||||
# """
|
"clean": [
|
||||||
# def check_python_updated():
|
"git clean -fdx",
|
||||||
# # FIXME: Check that the latest supported Python release is installed. Use the
|
"git checkout -f",
|
||||||
# # same logic as we do in dev_scripts/qa.py.
|
],
|
||||||
# return True
|
}
|
||||||
#
|
|
||||||
# return {
|
|
||||||
# "actions": [check_python_updated],
|
def task_check_python():
|
||||||
# }
|
"""Check that the latest supported Python version is installed (WIP).
|
||||||
|
|
||||||
|
This task does not work yet, and is currently short-circuited.
|
||||||
|
"""
|
||||||
|
def check_python():
|
||||||
|
# FIXME: Check that the latest supported Python release is installed. Use the
|
||||||
|
# same logic as we do in dev_scripts/qa.py.
|
||||||
|
return True
|
||||||
|
|
||||||
|
return {
|
||||||
|
"actions": [check_python],
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
def task_check_container_runtime():
|
def task_check_container_runtime():
|
||||||
|
@ -113,7 +116,7 @@ def task_check_system():
|
||||||
return {
|
return {
|
||||||
"actions": None,
|
"actions": None,
|
||||||
"task_dep": [
|
"task_dep": [
|
||||||
#"check_python",
|
"check_python",
|
||||||
"check_container_runtime",
|
"check_container_runtime",
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
@ -129,26 +132,26 @@ def task_macos_check_cert():
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
#def task_macos_check_docker_containerd():
|
def task_macos_check_docker_containerd():
|
||||||
# """Test that Docker uses the containard image store."""
|
"""Test that Docker uses the containard image store."""
|
||||||
# def check_containerd_store():
|
def check_containerd_store():
|
||||||
# cmd = ["docker", "info", "-f", "{{ .DriverStatus }}"]
|
cmd = ["docker", "info", "-f", "{{ .DriverStatus }}"]
|
||||||
# driver = subprocess.check_output(cmd, text=True).strip()
|
driver = subprocess.check_output(cmd, text=True).strip()
|
||||||
# if driver != "[[driver-type io.containerd.snapshotter.v1]]":
|
if driver != "[[driver-type io.containerd.snapshotter.v1]]":
|
||||||
# raise RuntimeError(
|
raise RuntimeError(
|
||||||
# f"Probing the Docker image store with {cmd} returned {driver}."
|
f"Probing the Docker image store with {cmd} returned {driver}."
|
||||||
# " Switch to Docker's containerd image store from the Docker Desktop"
|
" Switch to Docker's containerd image store from the Docker Desktop"
|
||||||
# " settings."
|
" settings."
|
||||||
# )
|
)
|
||||||
#
|
|
||||||
# return {
|
return {
|
||||||
# "actions": [
|
"actions": [
|
||||||
# "which docker",
|
"which docker",
|
||||||
# "docker ps",
|
"docker ps",
|
||||||
# check_containerd_store,
|
check_containerd_store,
|
||||||
# ],
|
],
|
||||||
# "params": [PARAM_APPLE_ID],
|
"params": [PARAM_APPLE_ID],
|
||||||
# }
|
}
|
||||||
|
|
||||||
|
|
||||||
def task_macos_check_system():
|
def task_macos_check_system():
|
||||||
|
@ -158,13 +161,18 @@ def task_macos_check_system():
|
||||||
"task_dep": [
|
"task_dep": [
|
||||||
"check_system",
|
"check_system",
|
||||||
"macos_check_cert",
|
"macos_check_cert",
|
||||||
#"macos_check_docker_containerd",
|
"macos_check_docker_containerd",
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
def task_init_release_dir():
|
def task_init_release_dir():
|
||||||
"""Create a directory for release artifacts."""
|
"""Create a directory for release artifacts."""
|
||||||
|
def create_release_dir():
|
||||||
|
RELEASE_DIR.mkdir(parents=True, exist_ok=True)
|
||||||
|
(RELEASE_DIR / "assets").mkdir(exist_ok=True)
|
||||||
|
(RELEASE_DIR / "tmp").mkdir(exist_ok=True)
|
||||||
|
|
||||||
return {
|
return {
|
||||||
"actions": [create_release_dir],
|
"actions": [create_release_dir],
|
||||||
"clean": [f"rm -rf {RELEASE_DIR}"],
|
"clean": [f"rm -rf {RELEASE_DIR}"],
|
||||||
|
@ -255,21 +263,20 @@ def task_macos_build_dmg():
|
||||||
f" --keychain-profile dz-notarytool-release-key {dmg_src}"),
|
f" --keychain-profile dz-notarytool-release-key {dmg_src}"),
|
||||||
f"xcrun stapler staple {dmg_src}",
|
f"xcrun stapler staple {dmg_src}",
|
||||||
["cp", "-r", dmg_src, dmg_dst],
|
["cp", "-r", dmg_src, dmg_dst],
|
||||||
["rm", "-rf", dz_dir],
|
["rm", "-r", dz_dir],
|
||||||
],
|
],
|
||||||
"params": [PARAM_APPLE_ID],
|
"params": [PARAM_APPLE_ID],
|
||||||
"file_dep": [
|
"file_dep": [
|
||||||
"poetry.lock",
|
"poetry.lock",
|
||||||
"install/macos/build-app.py",
|
"install/macos/build.app.py",
|
||||||
*list_files("assets"),
|
*list_files("assets"),
|
||||||
*list_files("share", recursive=True),
|
*list_files("share"),
|
||||||
*list_files("dangerzone", recursive=True),
|
*list_files("dangerzone"),
|
||||||
f"share/container-{VERSION}.tar.gz",
|
f"share/container-{VERSION}.tar.gz",
|
||||||
],
|
],
|
||||||
"task_dep": [
|
"task_dep": [
|
||||||
"init_release_dir",
|
"init_release_dir",
|
||||||
"poetry_install",
|
"poetry_install"
|
||||||
"download_tessdata",
|
|
||||||
],
|
],
|
||||||
"targets": [dmg_dst],
|
"targets": [dmg_dst],
|
||||||
"clean": True,
|
"clean": True,
|
||||||
|
@ -307,7 +314,6 @@ def task_debian_env():
|
||||||
"build-dev",
|
"build-dev",
|
||||||
]
|
]
|
||||||
],
|
],
|
||||||
"task_dep": ["check_container_runtime"],
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
@ -322,14 +328,14 @@ def task_debian_deb():
|
||||||
(copy_dz_dir, [".", dz_dir]),
|
(copy_dz_dir, [".", dz_dir]),
|
||||||
cmd_build_linux_pkg("debian", "bookworm", cwd=dz_dir),
|
cmd_build_linux_pkg("debian", "bookworm", cwd=dz_dir),
|
||||||
["cp", deb_src, deb_dst],
|
["cp", deb_src, deb_dst],
|
||||||
["rm", "-rf", dz_dir],
|
["rm", "-r", dz_dir],
|
||||||
],
|
],
|
||||||
"file_dep": [
|
"file_dep": [
|
||||||
"poetry.lock",
|
"poetry.lock",
|
||||||
"install/linux/build-deb.py",
|
"install/linux/build-deb.py",
|
||||||
*list_files("assets"),
|
*list_files("assets"),
|
||||||
*list_files("share"),
|
*list_files("share"),
|
||||||
*list_files("dangerzone", recursive=True),
|
*list_files("dangerzone"),
|
||||||
f"share/container-{VERSION}.tar.gz",
|
f"share/container-{VERSION}.tar.gz",
|
||||||
],
|
],
|
||||||
"task_dep": [
|
"task_dep": [
|
||||||
|
@ -357,35 +363,35 @@ def task_fedora_env():
|
||||||
"build-dev",
|
"build-dev",
|
||||||
],
|
],
|
||||||
],
|
],
|
||||||
"task_dep": ["check_container_runtime"],
|
|
||||||
}
|
}
|
||||||
|
|
||||||
def task_fedora_rpm():
|
def task_fedora_rpm():
|
||||||
for version in FEDORA_VERSIONS:
|
for version in FEDORA_VERSIONS:
|
||||||
for qubes in (True, False):
|
dz_dir = RELEASE_DIR / "tmp" / f"f{version}"
|
||||||
qubes_ident = "-qubes" if qubes else ""
|
|
||||||
dz_dir = RELEASE_DIR / "tmp" / f"f{version}{qubes_ident}"
|
|
||||||
rpm_names = [
|
rpm_names = [
|
||||||
f"dangerzone{qubes_ident}-{VERSION}-1.fc{version}.x86_64.rpm",
|
f"dangerzone-{VERSION}-1.fc{version}.x86_64.rpm",
|
||||||
f"dangerzone{qubes_ident}-{VERSION}-1.fc{version}.src.rpm",
|
f"dangerzone-{VERSION}-1.fc{version}.src.rpm",
|
||||||
|
f"dangerzone-qubes-{VERSION}-1.fc{version}.x86_64.rpm",
|
||||||
|
f"dangerzone-qubes-{VERSION}-1.fc{version}.src.rpm",
|
||||||
]
|
]
|
||||||
rpm_src = [dz_dir / "dist" / rpm_name for rpm_name in rpm_names]
|
rpm_src = [dz_dir / "dist" / rpm_name for rpm_name in rpm_names]
|
||||||
rpm_dst = [RELEASE_DIR / rpm_name for rpm_name in rpm_names]
|
rpm_dst = [RELEASE_DIR / rpm_name for rpm_name in rpm_names]
|
||||||
|
|
||||||
yield {
|
yield {
|
||||||
"name": version + qubes_ident,
|
"name": version,
|
||||||
"actions": [
|
"actions": [
|
||||||
(copy_dz_dir, [".", dz_dir]),
|
(copy_dz_dir, [".", dz_dir]),
|
||||||
cmd_build_linux_pkg("fedora", version, cwd=dz_dir, qubes=qubes),
|
cmd_build_linux_pkg("fedora", version, cwd=dz_dir),
|
||||||
|
cmd_build_linux_pkg("fedora", version, cwd=dz_dir, qubes=True),
|
||||||
["cp", *rpm_src, RELEASE_DIR],
|
["cp", *rpm_src, RELEASE_DIR],
|
||||||
["rm", "-rf", dz_dir],
|
["rm", "-r", dz_dir],
|
||||||
],
|
],
|
||||||
"file_dep": [
|
"file_dep": [
|
||||||
"poetry.lock",
|
"poetry.lock",
|
||||||
"install/linux/build-rpm.py",
|
"install/linux/build-rpm.py",
|
||||||
*list_files("assets"),
|
*list_files("assets"),
|
||||||
*list_files("share"),
|
*list_files("share"),
|
||||||
*list_files("dangerzone", recursive=True),
|
*list_files("dangerzone"),
|
||||||
f"share/container-{VERSION}.tar.gz",
|
f"share/container-{VERSION}.tar.gz",
|
||||||
],
|
],
|
||||||
"task_dep": [
|
"task_dep": [
|
||||||
|
@ -397,41 +403,40 @@ def task_fedora_rpm():
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
#def copy_files(dz_dir, apt_dir, src, bookworm_deb, other_debs):
|
@task_params([{
|
||||||
# # Delete previous Dangerzone files.
|
"name": "apt_tools_prod_dir",
|
||||||
# old_files = dz_dir.rglob("dangerzone_*j")
|
"default": "~/release/apt-tools-prod"
|
||||||
# for f in old_files:
|
}])
|
||||||
# f.unlink()
|
def task_apt_tools_prod_prep(apt_tools_prod_dir):
|
||||||
#
|
apt_dir = Path(apt_tools_prod_dir).expanduser()
|
||||||
# # Delete DB entries.
|
dz_dir = apt_dir / "dangerzone"
|
||||||
# shutil.rmtree(apt_dir / "db")
|
|
||||||
# shutil.rmtree(apt_dir / "public" / "dists")
|
src = task_debian_deb()["targets"][0]
|
||||||
# shutil.rmtree(apt_dir / "public" / "pool")
|
deb_name = src.name
|
||||||
#
|
bookworm_deb = dz_dir / "bookworm" / deb_name
|
||||||
# # Copy .deb to bookworm folder.
|
other_debs = [dz_dir / version / deb_name for version in DEBIAN_VERSIONS]
|
||||||
# shutil.copy2(src, bookworm_deb)
|
|
||||||
#
|
def copy_files():
|
||||||
# # Create the necessary symlinks
|
# Delete previous Dangerzone files.
|
||||||
# for deb in other_debs:
|
old_files = dz_dir.rglob("dangerzone_*j")
|
||||||
# deb.symlink_to(f"../bookworm/{deb_name}")
|
for f in old_files:
|
||||||
#
|
f.unlink()
|
||||||
#
|
|
||||||
#@task_params([{
|
# Delete DB entries.
|
||||||
# "name": "apt_tools_prod_dir",
|
shutil.rmtree(apt_dir / "db")
|
||||||
# "default": "~/release/apt-tools-prod"
|
shutil.rmtree(apt_dir / "public" / "dists")
|
||||||
#}])
|
shutil.rmtree(apt_dir / "public" / "pool")
|
||||||
#def task_apt_tools_prod_prep(apt_tools_prod_dir):
|
|
||||||
# apt_dir = Path(apt_tools_prod_dir).expanduser()
|
# Copy .deb to bookworm folder.
|
||||||
# dz_dir = apt_dir / "dangerzone"
|
shutil.copy2(src, bookworm_deb)
|
||||||
#
|
|
||||||
# src = task_debian_deb()["targets"][0]
|
# Create the necessary symlinks
|
||||||
# deb_name = src.name
|
for deb in other_debs:
|
||||||
# bookworm_deb = dz_dir / "bookworm" / deb_name
|
deb.symlink_to(f"../bookworm/{deb_name}")
|
||||||
# other_debs = [dz_dir / version / deb_name for version in DEBIAN_VERSIONS]
|
|
||||||
#
|
return {
|
||||||
# return {
|
"actions": [copy_files],
|
||||||
# "actions": [(copy_files, [dz_dir, apt_dir, src, bookworm_deb, other_debs])],
|
"file_dep": [src],
|
||||||
# "file_dep": [src],
|
"targets": [bookworm_deb, *other_debs],
|
||||||
# "targets": [bookworm_deb, *other_debs],
|
"clean": True,
|
||||||
# "clean": True,
|
}
|
||||||
# }
|
|
||||||
|
|
Loading…
Reference in a new issue