mirror of
https://github.com/ivabus/binhost
synced 2024-09-20 00:20:49 +03:00
128 lines
3 KiB
Bash
Executable file
128 lines
3 KiB
Bash
Executable file
#!/bin/sh
|
|
# SPDX-License-Identifier: MIT
|
|
set -e
|
|
|
|
print() {
|
|
echo "$@" >&2
|
|
}
|
|
|
|
fail() {
|
|
print "$@"
|
|
exit 1
|
|
}
|
|
|
|
requireCommands() {
|
|
for cmd in "$@"; do
|
|
if ! command -v "$cmd" > /dev/null 2>&1; then
|
|
fail "Cannot find required command: $cmd"
|
|
fi
|
|
done
|
|
}
|
|
|
|
requireCommands uname cut dd chmod rm realpath expr
|
|
|
|
# Finding alternative, but supported sha256sums
|
|
SHA256SUM=""
|
|
SHASUMFLAGS=""
|
|
PLATFORM="$(uname)"
|
|
ARCH="$(uname -m)"
|
|
if command -v sha256sum > /dev/null 2>&1; then
|
|
SHA256SUM="sha256sum"
|
|
SHASUMFLAGS="-c hashes --ignore-missing"
|
|
else
|
|
if command -v sha256 > /dev/null 2>&1; then
|
|
SHA256SUM="sha256"
|
|
SHASUMFLAGS="-C hashes runner-$PLATFORM-$ARCH"
|
|
fi
|
|
if command -v shasum > /dev/null 2>&1; then
|
|
SHASUMVER=$(shasum -v | cut -c 1)
|
|
if [ "$SHASUMVER" -ge 6 ]; then
|
|
SHA256SUM="shasum -a 256"
|
|
SHASUMFLAGS="-c hashes --ignore-missing"
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [ SHA256SUM = "" ]; then
|
|
fail "Could not find suitable sha256sum executable"
|
|
fi
|
|
|
|
if [ "$(realpath "$SHA256SUM" 2> /dev/null)" = "/bin/busybox" ]; then
|
|
fail "Busybox sha256sum detected, will not work. Refusing to continue"
|
|
fi
|
|
|
|
# Script could be used for any binary
|
|
NAME=${BIN:="{{NAME}}"}
|
|
EXTERNAL_ADDRESS=${EXTERNAL_ADDRESS:="{{EXTERNAL_ADDRESS}}"}
|
|
DOWNLOAD_COMMAND="curl"
|
|
OUTPUT_ARG="-o"
|
|
DIR="/tmp/binhost-$NAME-$(date +%s)"
|
|
FILE="$DIR/$NAME"
|
|
|
|
if ! command -v curl > /dev/null 2>&1; then
|
|
if ! command -v wget > /dev/null 2>&1; then
|
|
fail "No curl or wget found, install one and rerun the script"
|
|
fi
|
|
DOWNLOAD_COMMAND="wget"
|
|
OUTPUT_ARG="-O"
|
|
fi
|
|
|
|
PLATFORM_LIST="{{PLATFORM_LIST}}"
|
|
# Making script truly portable
|
|
if [ ! "{{NAME}}" = $NAME ]; then
|
|
print ":: Fetching platforms"
|
|
PLATFORM_LIST=$($DOWNLOAD_COMMAND $EXTERNAL_ADDRESS/$NAME/platforms $OUTPUT_ARG /dev/stdout)
|
|
fi
|
|
|
|
if ! expr "$PLATFORM_LIST" : "\(.*$(uname)-$(uname -m).*\)" > /dev/null; then
|
|
fail "Platform \"$(uname)-$(uname -m)\" is not supported"
|
|
fi
|
|
|
|
mkdir "$DIR"
|
|
cd "$DIR"
|
|
|
|
print ":: Downloading manifest"
|
|
$DOWNLOAD_COMMAND $EXTERNAL_ADDRESS/runner/manifest $OUTPUT_ARG manifest
|
|
|
|
MANIFEST_HASHSUM=$(cat manifest | $SHA256SUM)
|
|
|
|
if [ -n "$KEY" ]; then
|
|
if [ ! "$KEY" = "$(echo "$MANIFEST_HASHSUM" | cut -c 1-${#KEY})" ]; then
|
|
fail "Invalid manifest hashsum"
|
|
fi
|
|
else
|
|
print "Manifest KEY missing, skipping manifest check"
|
|
fi
|
|
|
|
print ":: Downloading signature"
|
|
$DOWNLOAD_COMMAND "$EXTERNAL_ADDRESS/bin/$NAME/$PLATFORM/$ARCH/sign" $OUTPUT_ARG signature
|
|
|
|
dd if=manifest of=public_key count=32 bs=1 2> /dev/null
|
|
dd if=manifest of=hashes skip=32 bs=1 2> /dev/null
|
|
|
|
print ":: Downloading runner"
|
|
|
|
$DOWNLOAD_COMMAND "$EXTERNAL_ADDRESS/runner/runner-$PLATFORM-$ARCH" $OUTPUT_ARG "runner-$PLATFORM-$ARCH"
|
|
|
|
if ! $SHA256SUM $SHASUMFLAGS >&2 ; then
|
|
fail "Incorrect hashsum of runner"
|
|
fi
|
|
|
|
chmod +x "runner-$PLATFORM-$ARCH"
|
|
|
|
print ":: Downloading binary"
|
|
|
|
$DOWNLOAD_COMMAND "$EXTERNAL_ADDRESS/bin/$NAME/$PLATFORM/$ARCH" $OUTPUT_ARG "$FILE"
|
|
|
|
if ! "./runner-$PLATFORM-$ARCH" "$FILE" >&2; then
|
|
exit 2
|
|
fi
|
|
|
|
chmod +x "$FILE"
|
|
|
|
$FILE $ARGS < /dev/tty
|
|
|
|
cd
|
|
|
|
rm -rf "$DIR"
|