241 lines
6.5 KiB
Bash
241 lines
6.5 KiB
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
set -euo pipefail
|
||
|
|
|
||
|
|
# verify_artifact.sh is the top-level script that implements the logic to decide
|
||
|
|
# which individual verification script to invoke. It decides which verification
|
||
|
|
# script to use based on artifact name it is given. By putting the logic in here,
|
||
|
|
# it keeps the workflow file simpler and easier to manage. It also doubles as a means
|
||
|
|
# to run verifications locally when necessary.
|
||
|
|
|
||
|
|
# set this so we can locate and execute the individual verification scripts.
|
||
|
|
SCRIPT_DIR="$( cd -- "$(dirname "$0")" >/dev/null 2>&1 ; pwd -P )"
|
||
|
|
|
||
|
|
function usage {
|
||
|
|
echo "verify_artifact.sh <artifact_path> <expect_version>"
|
||
|
|
}
|
||
|
|
|
||
|
|
# Arguments:
|
||
|
|
# $1 - artifact path (eg. /artifacts/consul-1.13.0~dev-1.i386.rpm)
|
||
|
|
# $2 - expected version to match against (eg. v1.13.0-dev)
|
||
|
|
function main {
|
||
|
|
local artifact_path="${1:-}"
|
||
|
|
local expect_version="${2:-}"
|
||
|
|
|
||
|
|
if [[ -z "${artifact_path}" ]]; then
|
||
|
|
echo "ERROR: artifact path argument is required"
|
||
|
|
usage
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [[ -z "${expect_version}" ]]; then
|
||
|
|
echo "ERROR: expected version argument is required"
|
||
|
|
usage
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [[ ! -e "${artifact_path}" ]]; then
|
||
|
|
echo "ERROR: ${artifact_path} does not exist"
|
||
|
|
usage
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# match against the various artifact names:
|
||
|
|
# deb packages: consul_${version}-1_${arch}.deb
|
||
|
|
# rpm packages: consul-${version}-1.${arch}.rpm
|
||
|
|
# zip packages: consul_${version}_${os}_${arch}.zip
|
||
|
|
case "${artifact_path}" in
|
||
|
|
*.rpm) verify_rpm "${artifact_path}" "${expect_version}";;
|
||
|
|
*.deb) verify_deb "${artifact_path}" "${expect_version}";;
|
||
|
|
*.zip) verify_zip "${artifact_path}" "${expect_version}";;
|
||
|
|
*)
|
||
|
|
echo "${artifact_path} did not match known patterns"
|
||
|
|
exit 1
|
||
|
|
;;
|
||
|
|
esac
|
||
|
|
}
|
||
|
|
|
||
|
|
# Arguments:
|
||
|
|
# $1 - path to rpm (eg. consul-1.13.0~dev-1.aarch64.rpm)
|
||
|
|
# $2 - expected version to match against (eg. v1.13.0-dev)
|
||
|
|
function verify_rpm {
|
||
|
|
local artifact_path="${1:-}"
|
||
|
|
local expect_version="${2:-}"
|
||
|
|
local docker_image
|
||
|
|
local docker_platform
|
||
|
|
|
||
|
|
case "${artifact_path}" in
|
||
|
|
*.i386.rpm)
|
||
|
|
docker_platform="linux/386"
|
||
|
|
docker_image="i386/centos:7"
|
||
|
|
;;
|
||
|
|
*.x86_64.rpm)
|
||
|
|
docker_platform="linux/amd64"
|
||
|
|
docker_image="amd64/centos:7"
|
||
|
|
;;
|
||
|
|
*.arm.rpm)
|
||
|
|
docker_platform="linux/arm/v7"
|
||
|
|
docker_image="arm32v7/fedora:36"
|
||
|
|
;;
|
||
|
|
*.aarch64.rpm)
|
||
|
|
docker_platform="linux/arm64"
|
||
|
|
docker_image="arm64v8/fedora:36"
|
||
|
|
;;
|
||
|
|
*)
|
||
|
|
echo "${artifact_path} did not match known patterns for rpms"
|
||
|
|
exit 1
|
||
|
|
;;
|
||
|
|
esac
|
||
|
|
|
||
|
|
echo "executing RPM verification in Docker with these parameters:"
|
||
|
|
echo "PLATFORM=${docker_platform}"
|
||
|
|
echo "IMAGE=${docker_image}"
|
||
|
|
|
||
|
|
docker run \
|
||
|
|
--platform=${docker_platform} \
|
||
|
|
-v $(pwd):/workdir \
|
||
|
|
-v ${SCRIPT_DIR}:/scripts \
|
||
|
|
-w /workdir \
|
||
|
|
${docker_image} \
|
||
|
|
/scripts/verify_rpm.sh \
|
||
|
|
"/workdir/${artifact_path}" \
|
||
|
|
"${expect_version}"
|
||
|
|
}
|
||
|
|
|
||
|
|
# Arguments:
|
||
|
|
# $1 - path to deb (eg. consul_1.13.0~dev-1_arm64.deb)
|
||
|
|
# $2 - expected version to match against (eg. v1.13.0-dev)
|
||
|
|
function verify_deb {
|
||
|
|
local artifact_path="${1:-}"
|
||
|
|
local expect_version="${2:-}"
|
||
|
|
local docker_image
|
||
|
|
local docker_platform
|
||
|
|
|
||
|
|
case "${artifact_path}" in
|
||
|
|
*_i386.deb)
|
||
|
|
docker_platform="linux/386"
|
||
|
|
docker_image="i386/debian:bullseye"
|
||
|
|
;;
|
||
|
|
*_amd64.deb)
|
||
|
|
docker_platform="linux/amd64"
|
||
|
|
docker_image="amd64/debian:bullseye"
|
||
|
|
;;
|
||
|
|
*_arm.deb)
|
||
|
|
docker_platform="linux/arm/v7"
|
||
|
|
docker_image="arm32v7/debian:bullseye"
|
||
|
|
;;
|
||
|
|
*_arm64.deb)
|
||
|
|
docker_platform="linux/arm64"
|
||
|
|
docker_image="arm64v8/debian:bullseye"
|
||
|
|
;;
|
||
|
|
*)
|
||
|
|
echo "${artifact_path} did not match known patterns for debs"
|
||
|
|
exit 1
|
||
|
|
;;
|
||
|
|
esac
|
||
|
|
|
||
|
|
echo "executing DEB verification in Docker with these parameters:"
|
||
|
|
echo "PLATFORM=${docker_platform}"
|
||
|
|
echo "IMAGE=${docker_image}"
|
||
|
|
|
||
|
|
docker run \
|
||
|
|
--platform=${docker_platform} \
|
||
|
|
-v $(pwd):/workdir \
|
||
|
|
-v ${SCRIPT_DIR}:/scripts \
|
||
|
|
-w /workdir \
|
||
|
|
${docker_image} \
|
||
|
|
/scripts/verify_deb.sh \
|
||
|
|
"/workdir/${artifact_path}" \
|
||
|
|
"${expect_version}"
|
||
|
|
}
|
||
|
|
|
||
|
|
# Arguments:
|
||
|
|
# $1 - path to zip (eg. consul_1.13.0-dev_linux_amd64.zip)
|
||
|
|
# $2 - expected version to match against (eg. v1.13.0-dev)
|
||
|
|
function verify_zip {
|
||
|
|
local artifact_path="${1:-}"
|
||
|
|
local expect_version="${2:-}"
|
||
|
|
local machine_os=$(uname -s)
|
||
|
|
local machine_arch=$(uname -m)
|
||
|
|
|
||
|
|
unzip "${artifact_path}"
|
||
|
|
|
||
|
|
if [[ ! -e ./consul ]]; then
|
||
|
|
echo "ERROR: ${artifact_path} did not contain a consul binary"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
case "${artifact_path}" in
|
||
|
|
|
||
|
|
*_darwin_amd64.zip)
|
||
|
|
if [[ "${machine_os}" = 'Darwin' ]]; then
|
||
|
|
# run the darwin binary if the host is Darwin.
|
||
|
|
${SCRIPT_DIR}/verify_bin.sh ./consul ${expect_version}
|
||
|
|
else
|
||
|
|
echo "cannot run darwin binary on a non-darwin host (${machine_os})"
|
||
|
|
fi
|
||
|
|
;;
|
||
|
|
|
||
|
|
*_linux_386.zip | *_linux_amd64.zip)
|
||
|
|
if [[ "${machine_os}" = 'Linux' && "${machine_arch}" = "x86_64" ]]; then
|
||
|
|
# run the binary directly on the host when it's x86_64 Linux
|
||
|
|
${SCRIPT_DIR}/verify_bin.sh ./consul ${expect_version}
|
||
|
|
else
|
||
|
|
# otherwise, use Docker/QEMU
|
||
|
|
docker run \
|
||
|
|
--platform=linux/amd64 \
|
||
|
|
-v $(pwd):/workdir \
|
||
|
|
-v ${SCRIPT_DIR}:/scripts \
|
||
|
|
-w /workdir \
|
||
|
|
amd64/debian \
|
||
|
|
/scripts/verify_bin.sh \
|
||
|
|
./consul \
|
||
|
|
"${expect_version}"
|
||
|
|
fi
|
||
|
|
;;
|
||
|
|
|
||
|
|
*_linux_arm.zip)
|
||
|
|
if [[ "${machine_os}" = 'Linux' && "${machine_arch}" = arm* ]]; then
|
||
|
|
# run the binary directly on the host when it's x86_64 Linux
|
||
|
|
${SCRIPT_DIR}/verify_bin.sh ./consul ${expect_version}
|
||
|
|
else
|
||
|
|
# otherwise, use Docker/QEMU
|
||
|
|
docker run \
|
||
|
|
--platform=linux/arm/v7 \
|
||
|
|
-v $(pwd):/workdir \
|
||
|
|
-v ${SCRIPT_DIR}:/scripts \
|
||
|
|
-w /workdir \
|
||
|
|
arm32v7/debian \
|
||
|
|
/scripts/verify_bin.sh \
|
||
|
|
./consul \
|
||
|
|
"${expect_version}"
|
||
|
|
fi
|
||
|
|
;;
|
||
|
|
|
||
|
|
*_linux_arm64.zip)
|
||
|
|
if [[ "${machine_os}" = 'Linux' && "${machine_arch}" = arm* ]]; then
|
||
|
|
# run the binary directly on the host when it's x86_64 Linux
|
||
|
|
${SCRIPT_DIR}/verify_bin.sh ./consul ${expect_version}
|
||
|
|
else
|
||
|
|
# otherwise, use Docker/QEMU
|
||
|
|
docker run \
|
||
|
|
--platform=linux/arm64 \
|
||
|
|
-v $(pwd):/workdir \
|
||
|
|
-v ${SCRIPT_DIR}:/scripts \
|
||
|
|
-w /workdir \
|
||
|
|
arm64v8/debian \
|
||
|
|
/scripts/verify_bin.sh \
|
||
|
|
./consul \
|
||
|
|
"${expect_version}"
|
||
|
|
fi
|
||
|
|
;;
|
||
|
|
|
||
|
|
*)
|
||
|
|
echo "${artifact_path} did not match known patterns for zips"
|
||
|
|
exit 1
|
||
|
|
;;
|
||
|
|
esac
|
||
|
|
}
|
||
|
|
|
||
|
|
main "$@"
|