mirror of
https://github.com/freedomofpress/dangerzone.git
synced 2025-04-28 18:02:38 +02:00
c4c46a0a8d
This commit fixes 3 small issues with the way we produce our Qubes RPM: 1. The `.exists()` method follows symlinks by default, whereas we want to check if a symlink exists. This functionality has been added in Python 3.12. Instead of checking if a symlink exists and then removing it, simply remove it and don't throw an error if it doesn't exist in the first place. 2. The `dz.Convert*` policies were not installed with the executable bit set, therefore the qube could not start. 3. The `dz.ConvertDev` policy in particular had an ambiguous shebang, thus we change it to explicitly call Python3
115 lines
3.5 KiB
Python
Executable file
115 lines
3.5 KiB
Python
Executable file
#!/usr/bin/env python3
|
|
# -*- coding: utf-8 -*-
|
|
import argparse
|
|
import inspect
|
|
import os
|
|
import pathlib
|
|
import shutil
|
|
import subprocess
|
|
import tempfile
|
|
|
|
root = pathlib.Path(__file__).parent.parent.parent
|
|
|
|
with open(os.path.join(root, "share", "version.txt")) as f:
|
|
version = f.read().strip()
|
|
|
|
|
|
def remove_contents(d):
|
|
"""Remove all the contents of a directory."""
|
|
for p in d.iterdir():
|
|
if p.is_file() or p.is_symlink():
|
|
p.unlink()
|
|
else:
|
|
shutil.rmtree(p)
|
|
|
|
|
|
def build(qubes=False):
|
|
"""Build an RPM package in a temporary directory.
|
|
|
|
The build process is the following:
|
|
|
|
1. Clean up any stale data from previous runs under ./dist. Note that this directory
|
|
is used by `poetry build` and `rpmbuild`.
|
|
2. Create the necessary RPM project structure under ./install/linux/rpm-build, and
|
|
use symlinks to point to ./dist, so that we don't need to move files explicitly.
|
|
3. Create a Python source distribution using `poetry build`. If we are building a
|
|
Qubes package and there is a container image under `share/`, stash it temporarily
|
|
under a different directory.
|
|
4. Build both binary and source RPMs using rpmbuild. Optionally, pass to the SPEC
|
|
`_qubes` flag, that denotes we want to build a package for Qubes.
|
|
"""
|
|
build_dir = root / "install" / "linux" / "rpm-build"
|
|
dist_path = root / "dist"
|
|
specfile_name = "dangerzone.spec"
|
|
specfile_path = root / "install" / "linux" / specfile_name
|
|
sdist_name = f"dangerzone-{version}.tar.gz"
|
|
|
|
print("* Deleting old dist")
|
|
if os.path.exists(dist_path):
|
|
remove_contents(dist_path)
|
|
else:
|
|
dist_path.mkdir()
|
|
|
|
print(f"* Creating RPM project structure under {build_dir}")
|
|
for d in ["BUILD", "BUILDROOT", "RPMS", "SOURCES", "SPECS"]:
|
|
subdir = build_dir / d
|
|
subdir.mkdir(exist_ok=True)
|
|
remove_contents(subdir)
|
|
|
|
shutil.copy2(specfile_path, build_dir / "SPECS")
|
|
rpm_dir = build_dir / "RPMS" / "x86_64"
|
|
srpm_dir = build_dir / "SRPMS"
|
|
srpm_dir.unlink(missing_ok=True)
|
|
os.symlink(dist_path, rpm_dir)
|
|
os.symlink(dist_path, srpm_dir)
|
|
|
|
print("* Creating a Python sdist")
|
|
container_tar_gz = root / "share" / "container.tar.gz"
|
|
container_tar_gz_bak = root / "container.tar.gz.bak"
|
|
stash_container = qubes and container_tar_gz.exists()
|
|
if stash_container:
|
|
container_tar_gz.rename(container_tar_gz_bak)
|
|
try:
|
|
subprocess.run(["poetry", "build", "-f", "sdist"], cwd=root, check=True)
|
|
os.rename(dist_path / sdist_name, build_dir / "SOURCES" / sdist_name)
|
|
finally:
|
|
if stash_container:
|
|
container_tar_gz_bak.rename(container_tar_gz)
|
|
|
|
print("* Building RPM package")
|
|
cmd = [
|
|
"rpmbuild",
|
|
"-v",
|
|
"--define",
|
|
f"_topdir {build_dir}",
|
|
"-ba",
|
|
"--nodebuginfo",
|
|
f"{build_dir}/SPECS/dangerzone.spec",
|
|
]
|
|
|
|
# In case of qubes, set the `%{_qubes}` SPEC variable to 1. See the dangerzone.spec
|
|
# file for more details on how that's used.
|
|
if qubes:
|
|
cmd += [
|
|
"--define",
|
|
f"_qubes 1",
|
|
]
|
|
subprocess.run(cmd, check=True)
|
|
|
|
print("")
|
|
print("The following files have been created:")
|
|
print("\n".join([str(p) for p in dist_path.iterdir()]))
|
|
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument(
|
|
"--qubes", action="store_true", help="Build RPM package for a Qubes OS system"
|
|
)
|
|
args = parser.parse_args()
|
|
|
|
build(args.qubes)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|