dodo.py

@@ -31,29 +31,22 @@ PARAM_APPLE_ID = {
 }
 
 
-def list_files(path, recursive=False):
+def list_files(path):
     filepaths = []
     for root, _, files in os.walk(path):
         for f in files:
             if f.endswith(".pyc"):
                 continue
             filepaths.append(Path(root) / f)
-        if not recursive:
-            break
     return filepaths
 
 
 def copy_dz_dir(src, dst):
-    shutil.rmtree(dst, ignore_errors=True)
+    shutil.rmtree(dst)
+    dst.mkdir(exist_ok=True)
     shutil.copytree(src, dst)
 
 
-def create_release_dir():
-    RELEASE_DIR.mkdir(parents=True, exist_ok=True)
-    (RELEASE_DIR / "assets").mkdir(exist_ok=True)
-    (RELEASE_DIR / "tmp").mkdir(exist_ok=True)
-
-
 def cmd_build_linux_pkg(distro, version, cwd, qubes=False):
     pkg = "rpm" if distro == "fedora" else "deb"
     cmd = [
@@ -64,13 +57,12 @@ def cmd_build_linux_pkg(distro, version, cwd, qubes=False):
         "--version",
         version,
         "run",
-        "--no-gui",
+        "--dev"
-        "--dev",
         f"./dangerzone/install/linux/build-{pkg}.py"
     ]
     if qubes:
         cmd += ["--qubes"]
-    return CmdAction(" ".join(cmd), cwd=cwd)
+    return CmdAction(cmd, cwd=cwd)
 
 
 def task_clean_container_runtime():
@@ -78,24 +70,35 @@ def task_clean_container_runtime():
     return {
         "actions": None,
         "clean": [
-            [CONTAINER_RUNTIME, "system", "prune", "-a", "-f"],
+            [CONTAINER_RUNTIME, "system", "prune", "-f"],
         ],
     }
 
 
-#def task_check_python():
+def task_clean_git():
-#    """Check that the latest supported Python version is installed (WIP).
+    """Clean the Git repo."""
-#
+    return {
-#    This task does not work yet, and is currently short-circuited.
+        "actions": None,
-#    """
+        "clean": [
-#    def check_python_updated():
+            "git clean -fdx",
-#        # FIXME: Check that the latest supported Python release is installed. Use the
+            "git checkout -f",
-#        # same logic as we do in dev_scripts/qa.py.
+        ],
-#        return True
+    }
-#
+
-#    return {
+
-#        "actions": [check_python_updated],
+def task_check_python():
-#    }
+    """Check that the latest supported Python version is installed (WIP).
+
+    This task does not work yet, and is currently short-circuited.
+    """
+    def check_python():
+        # FIXME: Check that the latest supported Python release is installed. Use the
+        # same logic as we do in dev_scripts/qa.py.
+        return True
+
+    return {
+        "actions": [check_python],
+    }
 
 
 def task_check_container_runtime():
@@ -113,7 +116,7 @@ def task_check_system():
     return {
         "actions": None,
         "task_dep": [
-            #"check_python",
+            "check_python",
             "check_container_runtime",
         ],
     }
@@ -129,26 +132,26 @@ def task_macos_check_cert():
     }
 
 
-#def task_macos_check_docker_containerd():
+def task_macos_check_docker_containerd():
-#    """Test that Docker uses the containard image store."""
+    """Test that Docker uses the containard image store."""
-#    def check_containerd_store():
+    def check_containerd_store():
-#        cmd = ["docker", "info", "-f", "{{ .DriverStatus }}"]
+        cmd = ["docker", "info", "-f", "{{ .DriverStatus }}"]
-#        driver = subprocess.check_output(cmd, text=True).strip()
+        driver = subprocess.check_output(cmd, text=True).strip()
-#        if driver != "[[driver-type io.containerd.snapshotter.v1]]":
+        if driver != "[[driver-type io.containerd.snapshotter.v1]]":
-#            raise RuntimeError(
+            raise RuntimeError(
-#                f"Probing the Docker image store with {cmd} returned {driver}."
+                f"Probing the Docker image store with {cmd} returned {driver}."
-#                " Switch to Docker's containerd image store from the Docker Desktop"
+                " Switch to Docker's containerd image store from the Docker Desktop"
-#                " settings."
+                " settings."
-#            )
+            )
-#
+
-#    return {
+    return {
-#        "actions": [
+        "actions": [
-#            "which docker",
+            "which docker",
-#            "docker ps",
+            "docker ps",
-#            check_containerd_store,
+            check_containerd_store,
-#        ],
+        ],
-#        "params": [PARAM_APPLE_ID],
+        "params": [PARAM_APPLE_ID],
-#    }
+    }
 
 
 def task_macos_check_system():
@@ -158,13 +161,18 @@ def task_macos_check_system():
         "task_dep": [
             "check_system",
             "macos_check_cert",
-            #"macos_check_docker_containerd",
+            "macos_check_docker_containerd",
         ],
     }
 
 
 def task_init_release_dir():
     """Create a directory for release artifacts."""
+    def create_release_dir():
+        RELEASE_DIR.mkdir(parents=True, exist_ok=True)
+        (RELEASE_DIR / "assets").mkdir(exist_ok=True)
+        (RELEASE_DIR / "tmp").mkdir(exist_ok=True)
+
     return {
         "actions": [create_release_dir],
         "clean": [f"rm -rf {RELEASE_DIR}"],
@@ -255,21 +263,20 @@ def task_macos_build_dmg():
              f" --keychain-profile dz-notarytool-release-key {dmg_src}"),
             f"xcrun stapler staple {dmg_src}",
             ["cp", "-r", dmg_src, dmg_dst],
-            ["rm", "-rf", dz_dir],
+            ["rm", "-r", dz_dir],
         ],
         "params": [PARAM_APPLE_ID],
         "file_dep": [
             "poetry.lock",
-            "install/macos/build-app.py",
+            "install/macos/build.app.py",
             *list_files("assets"),
-            *list_files("share", recursive=True),
+            *list_files("share"),
-            *list_files("dangerzone", recursive=True),
+            *list_files("dangerzone"),
             f"share/container-{VERSION}.tar.gz",
         ],
         "task_dep": [
             "init_release_dir",
-            "poetry_install",
+            "poetry_install"
-            "download_tessdata",
         ],
         "targets": [dmg_dst],
         "clean": True,
@@ -307,7 +314,6 @@ def task_debian_env():
                 "build-dev",
             ]
         ],
-        "task_dep": ["check_container_runtime"],
     }
 
 
@@ -322,14 +328,14 @@ def task_debian_deb():
             (copy_dz_dir, [".", dz_dir]),
             cmd_build_linux_pkg("debian", "bookworm", cwd=dz_dir),
             ["cp", deb_src, deb_dst],
-            ["rm", "-rf", dz_dir],
+            ["rm", "-r", dz_dir],
         ],
         "file_dep": [
             "poetry.lock",
             "install/linux/build-deb.py",
             *list_files("assets"),
             *list_files("share"),
-            *list_files("dangerzone", recursive=True),
+            *list_files("dangerzone"),
             f"share/container-{VERSION}.tar.gz",
         ],
         "task_dep": [
@@ -357,81 +363,80 @@ def task_fedora_env():
                     "build-dev",
                 ],
             ],
-            "task_dep": ["check_container_runtime"],
         }
 
 def task_fedora_rpm():
     for version in FEDORA_VERSIONS:
-        for qubes in (True, False):
+        dz_dir = RELEASE_DIR / "tmp" / f"f{version}"
-            qubes_ident = "-qubes" if qubes else ""
+        rpm_names = [
-            dz_dir = RELEASE_DIR / "tmp" / f"f{version}{qubes_ident}"
+            f"dangerzone-{VERSION}-1.fc{version}.x86_64.rpm",
-            rpm_names = [
+            f"dangerzone-{VERSION}-1.fc{version}.src.rpm",
-                f"dangerzone{qubes_ident}-{VERSION}-1.fc{version}.x86_64.rpm",
+            f"dangerzone-qubes-{VERSION}-1.fc{version}.x86_64.rpm",
-                f"dangerzone{qubes_ident}-{VERSION}-1.fc{version}.src.rpm",
+            f"dangerzone-qubes-{VERSION}-1.fc{version}.src.rpm",
-            ]
+        ]
-            rpm_src = [dz_dir / "dist" / rpm_name for rpm_name in rpm_names]
+        rpm_src = [dz_dir / "dist" / rpm_name for rpm_name in rpm_names]
-            rpm_dst = [RELEASE_DIR / rpm_name for rpm_name in rpm_names]
+        rpm_dst = [RELEASE_DIR / rpm_name for rpm_name in rpm_names]
 
-            yield {
+        yield {
-                "name": version + qubes_ident,
+            "name": version,
-                "actions": [
+            "actions": [
-                    (copy_dz_dir, [".", dz_dir]),
+                (copy_dz_dir, [".", dz_dir]),
-                    cmd_build_linux_pkg("fedora", version, cwd=dz_dir, qubes=qubes),
+                cmd_build_linux_pkg("fedora", version, cwd=dz_dir),
-                    ["cp", *rpm_src, RELEASE_DIR],
+                cmd_build_linux_pkg("fedora", version, cwd=dz_dir, qubes=True),
-                    ["rm", "-rf", dz_dir],
+                ["cp", *rpm_src, RELEASE_DIR],
-                ],
+                ["rm", "-r", dz_dir],
-                "file_dep": [
+            ],
-                    "poetry.lock",
+            "file_dep": [
-                    "install/linux/build-rpm.py",
+                "poetry.lock",
-                    *list_files("assets"),
+                "install/linux/build-rpm.py",
-                    *list_files("share"),
+                *list_files("assets"),
-                    *list_files("dangerzone", recursive=True),
+                *list_files("share"),
-                    f"share/container-{VERSION}.tar.gz",
+                *list_files("dangerzone"),
-                ],
+                f"share/container-{VERSION}.tar.gz",
-                "task_dep": [
+            ],
-                    "init_release_dir",
+            "task_dep": [
-                    f"fedora_env:{version}",
+                "init_release_dir",
-                ],
+                f"fedora_env:{version}",
-                "targets": rpm_dst,
+            ],
-                "clean": True,
+            "targets": rpm_dst,
-            }
+            "clean": True,
+        }
 
 
-#def copy_files(dz_dir, apt_dir, src, bookworm_deb, other_debs):
+@task_params([{
-#    # Delete previous Dangerzone files.
+    "name": "apt_tools_prod_dir",
-#    old_files = dz_dir.rglob("dangerzone_*j")
+    "default": "~/release/apt-tools-prod"
-#    for f in old_files:
+}])
-#        f.unlink()
+def task_apt_tools_prod_prep(apt_tools_prod_dir):
-#
+    apt_dir = Path(apt_tools_prod_dir).expanduser()
-#    # Delete DB entries.
+    dz_dir = apt_dir / "dangerzone"
-#    shutil.rmtree(apt_dir / "db")
+
-#    shutil.rmtree(apt_dir / "public" / "dists")
+    src = task_debian_deb()["targets"][0]
-#    shutil.rmtree(apt_dir / "public" / "pool")
+    deb_name = src.name
-#
+    bookworm_deb =  dz_dir / "bookworm" / deb_name
-#    # Copy .deb to bookworm folder.
+    other_debs = [dz_dir / version / deb_name for version in DEBIAN_VERSIONS]
-#    shutil.copy2(src, bookworm_deb)
+
-#
+    def copy_files():
-#    # Create the necessary symlinks
+        # Delete previous Dangerzone files.
-#    for deb in other_debs:
+        old_files = dz_dir.rglob("dangerzone_*j")
-#        deb.symlink_to(f"../bookworm/{deb_name}")
+        for f in old_files:
-#
+            f.unlink()
-#
+
-#@task_params([{
+        # Delete DB entries.
-#    "name": "apt_tools_prod_dir",
+        shutil.rmtree(apt_dir / "db")
-#    "default": "~/release/apt-tools-prod"
+        shutil.rmtree(apt_dir / "public" / "dists")
-#}])
+        shutil.rmtree(apt_dir / "public" / "pool")
-#def task_apt_tools_prod_prep(apt_tools_prod_dir):
+
-#    apt_dir = Path(apt_tools_prod_dir).expanduser()
+        # Copy .deb to bookworm folder.
-#    dz_dir = apt_dir / "dangerzone"
+        shutil.copy2(src, bookworm_deb)
-#
+
-#    src = task_debian_deb()["targets"][0]
+        # Create the necessary symlinks
-#    deb_name = src.name
+        for deb in other_debs:
-#    bookworm_deb =  dz_dir / "bookworm" / deb_name
+            deb.symlink_to(f"../bookworm/{deb_name}")
-#    other_debs = [dz_dir / version / deb_name for version in DEBIAN_VERSIONS]
+
-#
+    return {
-#    return {
+        "actions": [copy_files],
-#        "actions": [(copy_files, [dz_dir, apt_dir, src, bookworm_deb, other_debs])],
+        "file_dep": [src],
-#        "file_dep": [src],
+        "targets": [bookworm_deb, *other_debs],
-#        "targets": [bookworm_deb, *other_debs],
+        "clean": True,
-#        "clean": True,
+    }
-#    }