9242: Refactor Python constant definitions in r-b-p.
[arvados.git] / build / run-build-packages.sh
1 #!/bin/bash
2
3 . `dirname "$(readlink -f "$0")"`/run-library.sh
4 . `dirname "$(readlink -f "$0")"`/libcloud-pin
5
6 read -rd "\000" helpmessage <<EOF
7 $(basename $0): Build Arvados packages
8
9 Syntax:
10         WORKSPACE=/path/to/arvados $(basename $0) [options]
11
12 Options:
13
14 --build-bundle-packages  (default: false)
15     Build api server and workbench packages with vendor/bundle included
16 --debug
17     Output debug information (default: false)
18 --target
19     Distribution to build packages for (default: debian7)
20 --command
21     Build command to execute (defaults to the run command defined in the
22     Docker image)
23
24 WORKSPACE=path         Path to the Arvados source tree to build packages from
25
26 EOF
27
28 EXITCODE=0
29 DEBUG=${ARVADOS_DEBUG:-0}
30 TARGET=debian7
31 COMMAND=
32
33 PARSEDOPTS=$(getopt --name "$0" --longoptions \
34     help,build-bundle-packages,debug,target: \
35     -- "" "$@")
36 if [ $? -ne 0 ]; then
37     exit 1
38 fi
39
40 eval set -- "$PARSEDOPTS"
41 while [ $# -gt 0 ]; do
42     case "$1" in
43         --help)
44             echo >&2 "$helpmessage"
45             echo >&2
46             exit 1
47             ;;
48         --target)
49             TARGET="$2"; shift
50             ;;
51         --debug)
52             DEBUG=1
53             ;;
54         --command)
55             COMMAND="$2"; shift
56             ;;
57         --)
58             if [ $# -gt 1 ]; then
59                 echo >&2 "$0: unrecognized argument '$2'. Try: $0 --help"
60                 exit 1
61             fi
62             ;;
63     esac
64     shift
65 done
66
67 if [[ "$COMMAND" != "" ]]; then
68   COMMAND="/usr/local/rvm/bin/rvm-exec default bash /jenkins/$COMMAND --target $TARGET"
69 fi
70
71 STDOUT_IF_DEBUG=/dev/null
72 STDERR_IF_DEBUG=/dev/null
73 DASHQ_UNLESS_DEBUG=-q
74 if [[ "$DEBUG" != 0 ]]; then
75     STDOUT_IF_DEBUG=/dev/stdout
76     STDERR_IF_DEBUG=/dev/stderr
77     DASHQ_UNLESS_DEBUG=
78 fi
79
80 declare -a PYTHON_BACKPORTS PYTHON3_BACKPORTS
81
82 PYTHON2_VERSION=2.7
83 PYTHON3_VERSION=$(python3 -c 'import sys; print("{v.major}.{v.minor}".format(v=sys.version_info))')
84
85 ## These defaults are suitable for any Debian-based distribution.
86 # You can customize them as needed in distro sections below.
87 PYTHON2_PACKAGE=python$PYTHON2_VERSION
88 PYTHON2_PKG_PREFIX=python
89
90 PYTHON3_PACKAGE=python$PYTHON3_VERSION
91 PYTHON3_PKG_PREFIX=python3
92 ## End Debian Python defaults.
93
94 case "$TARGET" in
95     debian7)
96         FORMAT=deb
97         PYTHON_BACKPORTS=(python-gflags==2.0 google-api-python-client==1.4.2 \
98             oauth2client==1.5.2 pyasn1==0.1.7 pyasn1-modules==0.0.5 \
99             rsa uritemplate httplib2 ws4py pykka six pyexecjs jsonschema \
100             ciso8601 pycrypto backports.ssl_match_hostname llfuse==0.41.1 \
101             'pycurl<7.21.5' contextlib2 pyyaml 'rdflib>=4.2.0' \
102             shellescape mistune typing avro ruamel.ordereddict)
103         PYTHON3_BACKPORTS=(docker-py==1.7.2 six requests websocket-client)
104         ;;
105     debian8)
106         FORMAT=deb
107         PYTHON_BACKPORTS=(python-gflags==2.0 google-api-python-client==1.4.2 \
108             oauth2client==1.5.2 pyasn1==0.1.7 pyasn1-modules==0.0.5 \
109             rsa uritemplate httplib2 ws4py pykka six pyexecjs jsonschema \
110             ciso8601 pycrypto backports.ssl_match_hostname llfuse==0.41.1 \
111             'pycurl<7.21.5' pyyaml 'rdflib>=4.2.0' \
112             shellescape mistune typing avro ruamel.ordereddict)
113         PYTHON3_BACKPORTS=(docker-py==1.7.2 six requests websocket-client)
114         ;;
115     ubuntu1204)
116         FORMAT=deb
117         PYTHON_BACKPORTS=(python-gflags==2.0 google-api-python-client==1.4.2 \
118             oauth2client==1.5.2 pyasn1==0.1.7 pyasn1-modules==0.0.5 \
119             rsa uritemplate httplib2 ws4py pykka six pyexecjs jsonschema \
120             ciso8601 pycrypto backports.ssl_match_hostname llfuse==0.41.1 \
121             contextlib2 'pycurl<7.21.5' pyyaml 'rdflib>=4.2.0' \
122             shellescape mistune typing avro isodate ruamel.ordereddict)
123         PYTHON3_BACKPORTS=(docker-py==1.7.2 six requests websocket-client)
124         ;;
125     ubuntu1404)
126         FORMAT=deb
127         PYTHON_BACKPORTS=(pyasn1==0.1.7 pyasn1-modules==0.0.5 llfuse==0.41.1 ciso8601 \
128             google-api-python-client==1.4.2 six uritemplate oauth2client==1.5.2 httplib2 \
129             rsa 'pycurl<7.21.5' backports.ssl_match_hostname pyyaml 'rdflib>=4.2.0' \
130             shellescape mistune typing avro ruamel.ordereddict)
131         PYTHON3_BACKPORTS=(docker-py==1.7.2 requests websocket-client)
132         ;;
133     centos6)
134         FORMAT=rpm
135         PYTHON2_PACKAGE=$(rpm -qf "$(which python$PYTHON2_VERSION)" --queryformat '%{NAME}\n')
136         PYTHON2_PKG_PREFIX=$PYTHON2_PACKAGE
137         PYTHON3_PACKAGE=$(rpm -qf "$(which python$PYTHON3_VERSION)" --queryformat '%{NAME}\n')
138         PYTHON3_PKG_PREFIX=$PYTHON3_PACKAGE
139         PYTHON_BACKPORTS=(python-gflags==2.0 google-api-python-client==1.4.2 \
140             oauth2client==1.5.2 pyasn1==0.1.7 pyasn1-modules==0.0.5 \
141             rsa uritemplate httplib2 ws4py pykka six pyexecjs jsonschema \
142             ciso8601 pycrypto backports.ssl_match_hostname 'pycurl<7.21.5' \
143             python-daemon lockfile llfuse==0.41.1 'pbr<1.0' pyyaml \
144             'rdflib>=4.2.0' shellescape mistune typing avro requests \
145             isodate pyparsing sparqlwrapper html5lib keepalive \
146             ruamel.ordereddict)
147         PYTHON3_BACKPORTS=(docker-py==1.7.2 six requests websocket-client)
148         export PYCURL_SSL_LIBRARY=nss
149         ;;
150     *)
151         echo -e "$0: Unknown target '$TARGET'.\n" >&2
152         exit 1
153         ;;
154 esac
155
156
157 if ! [[ -n "$WORKSPACE" ]]; then
158   echo >&2 "$helpmessage"
159   echo >&2
160   echo >&2 "Error: WORKSPACE environment variable not set"
161   echo >&2
162   exit 1
163 fi
164
165 # Test for fpm
166 fpm --version >/dev/null 2>&1
167
168 if [[ "$?" != 0 ]]; then
169   echo >&2 "$helpmessage"
170   echo >&2
171   echo >&2 "Error: fpm not found"
172   echo >&2
173   exit 1
174 fi
175
176 EASY_INSTALL2=$(find_easy_install -$PYTHON2_VERSION "")
177 EASY_INSTALL3=$(find_easy_install -$PYTHON3_VERSION 3)
178
179 RUN_BUILD_PACKAGES_PATH="`dirname \"$0\"`"
180 RUN_BUILD_PACKAGES_PATH="`( cd \"$RUN_BUILD_PACKAGES_PATH\" && pwd )`"  # absolutized and normalized
181 if [ -z "$RUN_BUILD_PACKAGES_PATH" ] ; then
182   # error; for some reason, the path is not accessible
183   # to the script (e.g. permissions re-evaled after suid)
184   exit 1  # fail
185 fi
186
187 debug_echo "$0 is running from $RUN_BUILD_PACKAGES_PATH"
188 debug_echo "Workspace is $WORKSPACE"
189
190 if [[ -f /etc/profile.d/rvm.sh ]]; then
191     source /etc/profile.d/rvm.sh
192     GEM="rvm-exec default gem"
193 else
194     GEM=gem
195 fi
196
197 # Make all files world-readable -- jenkins runs with umask 027, and has checked
198 # out our git tree here
199 chmod o+r "$WORKSPACE" -R
200
201 # More cleanup - make sure all executables that we'll package are 755
202 cd "$WORKSPACE"
203 find -type d -name 'bin' |xargs -I {} find {} -type f |xargs -I {} chmod 755 {}
204
205 # Now fix our umask to something better suited to building and publishing
206 # gems and packages
207 umask 0022
208
209 debug_echo "umask is" `umask`
210
211 if [[ ! -d "$WORKSPACE/packages/$TARGET" ]]; then
212   mkdir -p $WORKSPACE/packages/$TARGET
213 fi
214
215 # Perl packages
216 debug_echo -e "\nPerl packages\n"
217
218 cd "$WORKSPACE/sdk/perl"
219
220 if [[ -e Makefile ]]; then
221   make realclean >"$STDOUT_IF_DEBUG"
222 fi
223 find -maxdepth 1 \( -name 'MANIFEST*' -or -name "libarvados-perl*.$FORMAT" \) \
224     -delete
225 rm -rf install
226
227 perl Makefile.PL INSTALL_BASE=install >"$STDOUT_IF_DEBUG" && \
228     make install INSTALLDIRS=perl >"$STDOUT_IF_DEBUG" && \
229     fpm_build install/lib/=/usr/share libarvados-perl \
230     "Curoverse, Inc." dir "$(version_from_git)" install/man/=/usr/share/man \
231     "$WORKSPACE/LICENSE-2.0.txt=/usr/share/doc/libarvados-perl/LICENSE-2.0.txt" && \
232     mv --no-clobber libarvados-perl*.$FORMAT "$WORKSPACE/packages/$TARGET/"
233
234 # Ruby gems
235 debug_echo -e "\nRuby gems\n"
236
237 FPM_GEM_PREFIX=$($GEM environment gemdir)
238
239 cd "$WORKSPACE/sdk/ruby"
240 handle_ruby_gem arvados
241
242 cd "$WORKSPACE/sdk/cli"
243 handle_ruby_gem arvados-cli
244
245 cd "$WORKSPACE/services/login-sync"
246 handle_ruby_gem arvados-login-sync
247
248 # Python packages
249 debug_echo -e "\nPython packages\n"
250
251 cd "$WORKSPACE/sdk/pam"
252 handle_python_package
253
254 cd "$WORKSPACE/sdk/python"
255 handle_python_package
256
257 cd "$WORKSPACE/sdk/cwl"
258 handle_python_package
259
260 cd "$WORKSPACE/services/fuse"
261 handle_python_package
262
263 cd "$WORKSPACE/services/nodemanager"
264 handle_python_package
265
266 # arvados-src
267 (
268     set -e
269
270     cd "$WORKSPACE"
271     COMMIT_HASH=$(format_last_commit_here "%H")
272
273     SRC_BUILD_DIR=$(mktemp -d)
274     # mktemp creates the directory with 0700 permissions by default
275     chmod 755 $SRC_BUILD_DIR
276     git clone $DASHQ_UNLESS_DEBUG "$WORKSPACE/.git" "$SRC_BUILD_DIR"
277     cd "$SRC_BUILD_DIR"
278
279     # go into detached-head state
280     git checkout $DASHQ_UNLESS_DEBUG "$COMMIT_HASH"
281     echo "$COMMIT_HASH" >git-commit.version
282
283     cd "$SRC_BUILD_DIR"
284     PKG_VERSION=$(version_from_git)
285     cd $WORKSPACE/packages/$TARGET
286     fpm_build $SRC_BUILD_DIR/=/usr/local/arvados/src arvados-src 'Curoverse, Inc.' 'dir' "$PKG_VERSION" "--exclude=usr/local/arvados/src/.git" "--url=https://arvados.org" "--license=GNU Affero General Public License, version 3.0" "--description=The Arvados source code" "--architecture=all"
287
288     rm -rf "$SRC_BUILD_DIR"
289 )
290
291 # On older platforms we need to publish a backport of libfuse >=2.9.2,
292 # and we need to build and install it here in order to even build an
293 # llfuse package.
294 cd $WORKSPACE/packages/$TARGET
295 if [[ $TARGET =~ ubuntu1204 ]]; then
296     # port libfuse 2.9.2 to Ubuntu 12.04
297     LIBFUSE_DIR=$(mktemp -d)
298     (
299         cd $LIBFUSE_DIR
300         # download fuse 2.9.2 ubuntu 14.04 source package
301         file="fuse_2.9.2.orig.tar.xz" && curl -L -o "${file}" "http://archive.ubuntu.com/ubuntu/pool/main/f/fuse/${file}"
302         file="fuse_2.9.2-4ubuntu4.14.04.1.debian.tar.xz" && curl -L -o "${file}" "http://archive.ubuntu.com/ubuntu/pool/main/f/fuse/${file}"
303         file="fuse_2.9.2-4ubuntu4.14.04.1.dsc" && curl -L -o "${file}" "http://archive.ubuntu.com/ubuntu/pool/main/f/fuse/${file}"
304
305         # install dpkg-source and dpkg-buildpackage commands
306         apt-get install -y --no-install-recommends dpkg-dev
307
308         # extract source and apply patches
309         dpkg-source -x fuse_2.9.2-4ubuntu4.14.04.1.dsc
310         rm -f fuse_2.9.2.orig.tar.xz fuse_2.9.2-4ubuntu4.14.04.1.debian.tar.xz fuse_2.9.2-4ubuntu4.14.04.1.dsc
311
312         # add new version to changelog
313         cd fuse-2.9.2
314         (
315             echo "fuse (2.9.2-5) precise; urgency=low"
316             echo
317             echo "  * Backported from trusty-security to precise"
318             echo
319             echo " -- Joshua Randall <jcrandall@alum.mit.edu>  Thu, 4 Feb 2016 11:31:00 -0000"
320             echo
321             cat debian/changelog
322         ) > debian/changelog.new
323         mv debian/changelog.new debian/changelog
324
325         # install build-deps and build
326         apt-get install -y --no-install-recommends debhelper dh-autoreconf libselinux-dev
327         dpkg-buildpackage -rfakeroot -b
328     )
329     fpm_build "$LIBFUSE_DIR/fuse_2.9.2-5_amd64.deb" fuse "Ubuntu Developers" deb "2.9.2" --iteration 5
330     fpm_build "$LIBFUSE_DIR/libfuse2_2.9.2-5_amd64.deb" libfuse2 "Ubuntu Developers" deb "2.9.2" --iteration 5
331     fpm_build "$LIBFUSE_DIR/libfuse-dev_2.9.2-5_amd64.deb" libfuse-dev "Ubuntu Developers" deb "2.9.2" --iteration 5
332     dpkg -i \
333         "$WORKSPACE/packages/$TARGET/fuse_2.9.2-5_amd64.deb" \
334         "$WORKSPACE/packages/$TARGET/libfuse2_2.9.2-5_amd64.deb" \
335         "$WORKSPACE/packages/$TARGET/libfuse-dev_2.9.2-5_amd64.deb"
336     apt-get -y --no-install-recommends -f install
337     rm -rf $LIBFUSE_DIR
338 elif [[ $TARGET =~ centos6 ]]; then
339     # port fuse 2.9.2 to centos 6
340     # install tools to build rpm from source
341     yum install -y rpm-build redhat-rpm-config
342     LIBFUSE_DIR=$(mktemp -d)
343     (
344         cd "$LIBFUSE_DIR"
345         # download fuse 2.9.2 centos 7 source rpm
346         file="fuse-2.9.2-6.el7.src.rpm" && curl -L -o "${file}" "http://vault.centos.org/7.2.1511/os/Source/SPackages/${file}"
347         (
348             # modify source rpm spec to remove conflict on filesystem version
349             mkdir -p /root/rpmbuild/SOURCES
350             cd /root/rpmbuild/SOURCES
351             rpm2cpio ${LIBFUSE_DIR}/fuse-2.9.2-6.el7.src.rpm | cpio -i
352             perl -pi -e 's/Conflicts:\s*filesystem.*//g' fuse.spec
353         )
354         # build rpms from source
355         rpmbuild -bb /root/rpmbuild/SOURCES/fuse.spec
356         rm -f fuse-2.9.2-6.el7.src.rpm
357         # move built RPMs to LIBFUSE_DIR
358         mv "/root/rpmbuild/RPMS/x86_64/fuse-2.9.2-6.el6.x86_64.rpm" ${LIBFUSE_DIR}/
359         mv "/root/rpmbuild/RPMS/x86_64/fuse-libs-2.9.2-6.el6.x86_64.rpm" ${LIBFUSE_DIR}/
360         mv "/root/rpmbuild/RPMS/x86_64/fuse-devel-2.9.2-6.el6.x86_64.rpm" ${LIBFUSE_DIR}/
361         rm -rf /root/rpmbuild
362     )
363     fpm_build "$LIBFUSE_DIR/fuse-libs-2.9.2-6.el6.x86_64.rpm" fuse-libs "Centos Developers" rpm "2.9.2" --iteration 5
364     fpm_build "$LIBFUSE_DIR/fuse-2.9.2-6.el6.x86_64.rpm" fuse "Centos Developers" rpm "2.9.2" --iteration 5 --no-auto-depends
365     fpm_build "$LIBFUSE_DIR/fuse-devel-2.9.2-6.el6.x86_64.rpm" fuse-devel "Centos Developers" rpm "2.9.2" --iteration 5 --no-auto-depends
366     yum install -y \
367         "$WORKSPACE/packages/$TARGET/fuse-libs-2.9.2-5.x86_64.rpm" \
368         "$WORKSPACE/packages/$TARGET/fuse-2.9.2-5.x86_64.rpm" \
369         "$WORKSPACE/packages/$TARGET/fuse-devel-2.9.2-5.x86_64.rpm"
370 fi
371
372 # Go binaries
373 cd $WORKSPACE/packages/$TARGET
374 export GOPATH=$(mktemp -d)
375 package_go_binary services/keepstore keepstore \
376     "Keep storage daemon, accessible to clients on the LAN"
377 package_go_binary services/keepproxy keepproxy \
378     "Make a Keep cluster accessible to clients that are not on the LAN"
379 package_go_binary services/keep-web keep-web \
380     "Static web hosting service for user data stored in Arvados Keep"
381 package_go_binary services/datamanager arvados-data-manager \
382     "Ensure block replication levels, report disk usage, and determine which blocks should be deleted when space is needed"
383 package_go_binary services/arv-git-httpd arvados-git-httpd \
384     "Provide authenticated http access to Arvados-hosted git repositories"
385 package_go_binary services/crunchstat crunchstat \
386     "Gather cpu/memory/network statistics of running Crunch jobs"
387 package_go_binary tools/keep-rsync keep-rsync \
388     "Copy all data from one set of Keep servers to another"
389 package_go_binary tools/keep-block-check keep-block-check \
390     "Verify that all data from one set of Keep servers to another was copied"
391 package_go_binary sdk/go/crunchrunner crunchrunner \
392     "Crunchrunner executes a command inside a container and uploads the output"
393
394 # The Python SDK
395 # Please resist the temptation to add --no-python-fix-name to the fpm call here
396 # (which would remove the python- prefix from the package name), because this
397 # package is a dependency of arvados-fuse, and fpm can not omit the python-
398 # prefix from only one of the dependencies of a package...  Maybe I could
399 # whip up a patch and send it upstream, but that will be for another day. Ward,
400 # 2014-05-15
401 cd $WORKSPACE/packages/$TARGET
402 rm -rf "$WORKSPACE/sdk/python/build"
403 fpm_build $WORKSPACE/sdk/python "${PYTHON2_PKG_PREFIX}-arvados-python-client" 'Curoverse, Inc.' 'python' "$(awk '($1 == "Version:"){print $2}' $WORKSPACE/sdk/python/arvados_python_client.egg-info/PKG-INFO)" "--url=https://arvados.org" "--description=The Arvados Python SDK" --deb-recommends=git
404
405 # cwl-runner
406 cd $WORKSPACE/packages/$TARGET
407 rm -rf "$WORKSPACE/sdk/cwl/build"
408 fpm_build $WORKSPACE/sdk/cwl "${PYTHON2_PKG_PREFIX}-arvados-cwl-runner" 'Curoverse, Inc.' 'python' "$(awk '($1 == "Version:"){print $2}' $WORKSPACE/sdk/cwl/arvados_cwl_runner.egg-info/PKG-INFO)" "--url=https://arvados.org" "--description=The Arvados CWL runner" --iteration 2
409
410 # schema_salad. This is a python dependency of arvados-cwl-runner,
411 # but we can't use the usual PYTHONPACKAGES way to build this package due to the
412 # intricacies of how version numbers get generated in setup.py: we need version
413 # 1.7.20160316203940. If we don't explicitly list that version with the -v
414 # argument to fpm, and instead specify it as schema_salad==1.7.20160316203940, we get
415 # a package with version 1.7. That's because our gittagger hack is not being
416 # picked up by self.distribution.get_version(), which is called from
417 # https://github.com/jordansissel/fpm/blob/master/lib/fpm/package/pyfpm/get_metadata.py
418 # by means of this command:
419 #
420 # python2.7 setup.py --command-packages=pyfpm get_metadata --output=metadata.json
421 #
422 # So we build this thing separately.
423 #
424 # Ward, 2016-03-17
425 fpm --maintainer='Ward Vandewege <ward@curoverse.com>' -s python -t $FORMAT --exclude=*/dist-packages/tests/* --exclude=*/site-packages/tests/* --deb-ignore-iteration-in-dependencies -n "${PYTHON2_PKG_PREFIX}-schema-salad" --iteration 1 --python-bin python2.7 --python-easyinstall "$EASY_INSTALL2" --python-package-name-prefix "$PYTHON2_PKG_PREFIX" --depends "$PYTHON2_PACKAGE" -v 1.11.20160506154702 schema_salad
426
427 # And schema_salad now depends on ruamel-yaml, which apparently has a braindead setup.py that requires special arguments to build (otherwise, it aborts with 'error: you have to install with "pip install ."'). Sigh. 
428 # Ward, 2016-05-26
429 fpm --maintainer='Ward Vandewege <ward@curoverse.com>' -s python -t $FORMAT --exclude=*/dist-packages/tests/* --exclude=*/site-packages/tests/* --deb-ignore-iteration-in-dependencies --iteration 1 --python-bin python2.7 --python-easyinstall "$EASY_INSTALL2" --python-package-name-prefix "$PYTHON2_PKG_PREFIX" --depends "$PYTHON2_PACKAGE" --python-setup-py-arguments "--single-version-externally-managed" ruamel.yaml
430
431 # And for cwltool we have the same problem as for schema_salad. Ward, 2016-03-17
432 fpm --maintainer='Ward Vandewege <ward@curoverse.com>' -s python -t $FORMAT --exclude=*/dist-packages/tests/* --exclude=*/site-packages/tests/* --deb-ignore-iteration-in-dependencies -n "${PYTHON2_PKG_PREFIX}-cwltool" --iteration 1 --python-bin python2.7 --python-easyinstall "$EASY_INSTALL2" --python-package-name-prefix "$PYTHON2_PKG_PREFIX" --depends "$PYTHON2_PACKAGE" -v 1.0.20160519182434 cwltool
433
434 # FPM eats the trailing .0 in the python-rdflib-jsonld package when built with 'rdflib-jsonld>=0.3.0'. Force the version. Ward, 2016-03-25
435 fpm --maintainer='Ward Vandewege <ward@curoverse.com>' -s python -t $FORMAT --exclude=*/dist-packages/tests/* --exclude=*/site-packages/tests/* --deb-ignore-iteration-in-dependencies --verbose --log info -n "${PYTHON2_PKG_PREFIX}-rdflib-jsonld" --iteration 1 --python-bin python2.7 --python-easyinstall "$EASY_INSTALL2" --python-package-name-prefix "$PYTHON2_PKG_PREFIX" --depends "$PYTHON2_PACKAGE" -v 0.3.0 rdflib-jsonld
436
437 # The PAM module
438 if [[ $TARGET =~ debian|ubuntu ]]; then
439     cd $WORKSPACE/packages/$TARGET
440     rm -rf "$WORKSPACE/sdk/pam/build"
441     fpm_build $WORKSPACE/sdk/pam libpam-arvados 'Curoverse, Inc.' 'python' "$(awk '($1 == "Version:"){print $2}' $WORKSPACE/sdk/pam/arvados_pam.egg-info/PKG-INFO)" "--url=https://arvados.org" "--description=PAM module for authenticating shell logins using Arvados API tokens" --depends libpam-python
442 fi
443
444 # The FUSE driver
445 # Please see comment about --no-python-fix-name above; we stay consistent and do
446 # not omit the python- prefix first.
447 cd $WORKSPACE/packages/$TARGET
448 rm -rf "$WORKSPACE/services/fuse/build"
449 fpm_build $WORKSPACE/services/fuse "${PYTHON2_PKG_PREFIX}-arvados-fuse" 'Curoverse, Inc.' 'python' "$(awk '($1 == "Version:"){print $2}' $WORKSPACE/services/fuse/arvados_fuse.egg-info/PKG-INFO)" "--url=https://arvados.org" "--description=The Keep FUSE driver"
450
451 # The node manager
452 cd $WORKSPACE/packages/$TARGET
453 rm -rf "$WORKSPACE/services/nodemanager/build"
454 fpm_build $WORKSPACE/services/nodemanager arvados-node-manager 'Curoverse, Inc.' 'python' "$(awk '($1 == "Version:"){print $2}' $WORKSPACE/services/nodemanager/arvados_node_manager.egg-info/PKG-INFO)" "--url=https://arvados.org" "--description=The Arvados node manager"
455
456 # The Docker image cleaner
457 cd $WORKSPACE/packages/$TARGET
458 rm -rf "$WORKSPACE/services/dockercleaner/build"
459 fpm_build $WORKSPACE/services/dockercleaner arvados-docker-cleaner 'Curoverse, Inc.' 'python3' "$(awk '($1 == "Version:"){print $2}' $WORKSPACE/services/dockercleaner/arvados_docker_cleaner.egg-info/PKG-INFO)" "--url=https://arvados.org" "--description=The Arvados Docker image cleaner"
460
461 # The Arvados crunchstat-summary tool
462 cd $WORKSPACE/packages/$TARGET
463 rm -rf "$WORKSPACE/tools/crunchstat-summary/build"
464 fpm_build $WORKSPACE/tools/crunchstat-summary ${PYTHON2_PKG_PREFIX}-crunchstat-summary 'Curoverse, Inc.' 'python' "$(awk '($1 == "Version:"){print $2}' $WORKSPACE/tools/crunchstat-summary/crunchstat_summary.egg-info/PKG-INFO)" "--url=https://arvados.org" "--description=Crunchstat-summary reads Arvados Crunch log files and summarize resource usage"
465
466 # Forked libcloud
467 LIBCLOUD_DIR=$(mktemp -d)
468 (
469     cd $LIBCLOUD_DIR
470     git clone $DASHQ_UNLESS_DEBUG https://github.com/curoverse/libcloud.git .
471     git checkout apache-libcloud-$LIBCLOUD_PIN
472     # libcloud is absurdly noisy without -q, so force -q here
473     OLD_DASHQ_UNLESS_DEBUG=$DASHQ_UNLESS_DEBUG
474     DASHQ_UNLESS_DEBUG=-q
475     handle_python_package
476     DASHQ_UNLESS_DEBUG=$OLD_DASHQ_UNLESS_DEBUG
477 )
478 fpm_build $LIBCLOUD_DIR "$PYTHON2_PKG_PREFIX"-apache-libcloud
479 rm -rf $LIBCLOUD_DIR
480
481 # Python 2 dependencies
482 declare -a PIP_DOWNLOAD_SWITCHES=(--no-deps)
483 # Add --no-use-wheel if this pip knows it.
484 pip wheel --help >/dev/null 2>&1
485 case "$?" in
486     0) PIP_DOWNLOAD_SWITCHES+=(--no-use-wheel) ;;
487     2) ;;
488     *) echo "WARNING: `pip wheel` test returned unknown exit code $?" ;;
489 esac
490
491 for deppkg in "${PYTHON_BACKPORTS[@]}"; do
492     outname=$(echo "$deppkg" | sed -e 's/^python-//' -e 's/[<=>].*//' -e 's/_/-/g' -e "s/^/${PYTHON2_PKG_PREFIX}-/")
493     case "$deppkg" in
494         httplib2|google-api-python-client)
495             # Work around 0640 permissions on some package files.
496             # See #7591 and #7991.
497             pyfpm_workdir=$(mktemp --tmpdir -d pyfpm-XXXXXX) && (
498                 set -e
499                 cd "$pyfpm_workdir"
500                 pip install "${PIP_DOWNLOAD_SWITCHES[@]}" --download . "$deppkg"
501                 # Sometimes pip gives us a tarball, sometimes a zip file...
502                 DOWNLOADED=`ls $deppkg-*`
503                 [[ "$DOWNLOADED" =~ ".tar" ]] && tar -xf $DOWNLOADED
504                 [[ "$DOWNLOADED" =~ ".zip" ]] && unzip $DOWNLOADED
505                 cd "$deppkg"-*/
506                 "python$PYTHON2_VERSION" setup.py $DASHQ_UNLESS_DEBUG egg_info build
507                 chmod -R go+rX .
508                 set +e
509                 # --iteration 2 provides an upgrade for previously built
510                 # buggy packages.
511                 fpm_build . "$outname" "" python "" --iteration 2
512                 # The upload step uses the package timestamp to determine
513                 # whether it's new.  --no-clobber plays nice with that.
514                 mv --no-clobber "$outname"*.$FORMAT "$WORKSPACE/packages/$TARGET"
515             )
516             if [ 0 != "$?" ]; then
517                 echo "ERROR: $deppkg build process failed"
518                 EXITCODE=1
519             fi
520             if [ -n "$pyfpm_workdir" ]; then
521                 rm -rf "$pyfpm_workdir"
522             fi
523             ;;
524         *)
525             fpm_build "$deppkg" "$outname"
526             ;;
527     esac
528 done
529
530 # Python 3 dependencies
531 for deppkg in "${PYTHON3_BACKPORTS[@]}"; do
532     outname=$(echo "$deppkg" | sed -e 's/^python-//' -e 's/[<=>].*//' -e 's/_/-/g' -e "s/^/${PYTHON3_PKG_PREFIX}-/")
533     # The empty string is the vendor argument: these aren't Curoverse software.
534     fpm_build "$deppkg" "$outname" "" python3
535 done
536
537 # Build the API server package
538 handle_rails_package arvados-api-server "$WORKSPACE/services/api" \
539     "$WORKSPACE/agpl-3.0.txt" --url="https://arvados.org" \
540     --description="Arvados API server - Arvados is a free and open source platform for big data science." \
541     --license="GNU Affero General Public License, version 3.0"
542
543 # Build the workbench server package
544 (
545     set -e
546     cd "$WORKSPACE/apps/workbench"
547
548     # We need to bundle to be ready even when we build a package without vendor directory
549     # because asset compilation requires it.
550     bundle install --path vendor/bundle >"$STDOUT_IF_DEBUG"
551
552     # clear the tmp directory; the asset generation step will recreate tmp/cache/assets,
553     # and we want that in the package, so it's easier to not exclude the tmp directory
554     # from the package - empty it instead.
555     rm -rf tmp
556     mkdir tmp
557
558     # Set up application.yml and production.rb so that asset precompilation works
559     \cp config/application.yml.example config/application.yml -f
560     \cp config/environments/production.rb.example config/environments/production.rb -f
561     sed -i 's/secret_token: ~/secret_token: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/' config/application.yml
562
563     RAILS_ENV=production RAILS_GROUPS=assets bundle exec rake assets:precompile >/dev/null
564
565     # Remove generated configuration files so they don't go in the package.
566     rm config/application.yml config/environments/production.rb
567 )
568
569 if [[ "$?" != "0" ]]; then
570   echo "ERROR: Asset precompilation failed"
571   EXITCODE=1
572 else
573   handle_rails_package arvados-workbench "$WORKSPACE/apps/workbench" \
574       "$WORKSPACE/agpl-3.0.txt" --url="https://arvados.org" \
575       --description="Arvados Workbench - Arvados is a free and open source platform for big data science." \
576       --license="GNU Affero General Public License, version 3.0"
577 fi
578
579 # clean up temporary GOPATH
580 rm -rf "$GOPATH"
581
582 exit $EXITCODE