21363: DRY up package re-download code
[arvados.git] / build / run-library.sh
1 #!/bin/bash -xe
2 # Copyright (C) The Arvados Authors. All rights reserved.
3 #
4 # SPDX-License-Identifier: AGPL-3.0
5
6 # A library of functions shared by the various scripts in this directory.
7
8 # This is the timestamp about when we merged changed to include licenses
9 # with Arvados packages.  We use it as a heuristic to add revisions for
10 # older packages.
11 LICENSE_PACKAGE_TS=20151208015500
12
13 if [[ -z "$ARVADOS_BUILDING_VERSION" ]]; then
14     RAILS_PACKAGE_ITERATION=1
15 else
16     RAILS_PACKAGE_ITERATION="$ARVADOS_BUILDING_ITERATION"
17 fi
18
19 debug_echo () {
20     echo "$@" >"$STDOUT_IF_DEBUG"
21 }
22
23 find_python_program() {
24     prog="$1"
25     shift
26     for prog in "$@"; do
27         if "$prog" --version >/dev/null 2>&1; then
28             echo "$prog"
29             return 0
30         fi
31     done
32     cat >&2 <<EOF
33 $helpmessage
34
35 Error: $prog (from Python setuptools module) not found
36
37 EOF
38     exit 1
39 }
40
41 format_last_commit_here() {
42     local format="$1"; shift
43     local dir="${1:-.}"; shift
44     TZ=UTC git log -n1 --first-parent "--format=format:$format" "$dir"
45 }
46
47 version_from_git() {
48     # Output the version being built, or if we're building a
49     # dev/prerelease, output a version number based on the git log for
50     # the given $subdir.
51     local subdir="$1"; shift
52     if [[ -n "$ARVADOS_BUILDING_VERSION" ]]; then
53         echo "$ARVADOS_BUILDING_VERSION"
54         return
55     fi
56
57     local git_ts git_hash
58     declare $(format_last_commit_here "git_ts=%ct git_hash=%h" "$subdir")
59     ARVADOS_BUILDING_VERSION="$($WORKSPACE/build/version-at-commit.sh $git_hash)"
60     echo "$ARVADOS_BUILDING_VERSION"
61 }
62
63 nohash_version_from_git() {
64     local subdir="$1"; shift
65     if [[ -n "$ARVADOS_BUILDING_VERSION" ]]; then
66         echo "$ARVADOS_BUILDING_VERSION"
67         return
68     fi
69     version_from_git $subdir | cut -d. -f1-4
70 }
71
72 timestamp_from_git() {
73     local subdir="$1"; shift
74     format_last_commit_here "%ct" "$subdir"
75 }
76
77 calculate_python_sdk_cwl_package_versions() {
78   python_sdk_version=$(cd sdk/python && python3 arvados_version.py)
79   cwl_runner_version=$(cd sdk/cwl && python3 arvados_version.py)
80 }
81
82 # Usage: get_native_arch
83 get_native_arch() {
84   # Only amd64 and aarch64 are supported at the moment
85   local native_arch=""
86   case "$HOSTTYPE" in
87     x86_64)
88       native_arch="amd64"
89       ;;
90     aarch64)
91       native_arch="arm64"
92       ;;
93     *)
94       echo "Error: architecture not supported"
95       exit 1
96       ;;
97   esac
98   echo $native_arch
99 }
100
101 handle_ruby_gem() {
102     local gem_name="$1"; shift
103     local gem_version="$(nohash_version_from_git)"
104     local gem_src_dir="$(pwd)"
105
106     if [[ -n "$ONLY_BUILD" ]] && [[ "$gem_name" != "$ONLY_BUILD" ]] ; then
107         return 0
108     fi
109
110     if ! [[ -e "${gem_name}-${gem_version}.gem" ]]; then
111         find -maxdepth 1 -name "${gem_name}-*.gem" -delete
112
113         # -q appears to be broken in gem version 2.2.2
114         gem build "$gem_name.gemspec" $DASHQ_UNLESS_DEBUG >"$STDOUT_IF_DEBUG" 2>"$STDERR_IF_DEBUG"
115     fi
116 }
117
118 # Usage: package_workbench2
119 package_workbench2() {
120     local pkgname=arvados-workbench2
121     local src=services/workbench2
122     local dst=/var/www/arvados-workbench2/workbench2
123     local description="Arvados Workbench 2"
124     if [[ -n "$ONLY_BUILD" ]] && [[ "$pkgname" != "$ONLY_BUILD" ]] ; then
125         return 0
126     fi
127     cd "$WORKSPACE/$src"
128     local version="$(version_from_git)"
129     rm -rf ./build
130     NODE_ENV=production yarn install
131     VERSION="$version" BUILD_NUMBER="$(default_iteration "$pkgname" "$version" yarn)" GIT_COMMIT="$(git rev-parse HEAD | head -c9)" yarn build
132     cd "$WORKSPACE/packages/$TARGET"
133     fpm_build "${WORKSPACE}/$src" "${WORKSPACE}/$src/build/=$dst" "$pkgname" dir "$version" \
134               --license="GNU Affero General Public License, version 3.0" \
135               --description="${description}" \
136               --config-files="/etc/arvados/$pkgname/workbench2.example.json" \
137               "$WORKSPACE/services/workbench2/etc/arvados/workbench2/workbench2.example.json=/etc/arvados/$pkgname/workbench2.example.json"
138 }
139
140 calculate_go_package_version() {
141   # $__returnvar has the nameref attribute set, which means it is a reference
142   # to another variable that is passed in as the first argument to this function.
143   # see https://www.gnu.org/software/bash/manual/html_node/Shell-Parameters.html
144   local -n __returnvar="$1"; shift
145   local oldpwd="$PWD"
146
147   cd "$WORKSPACE"
148   go mod download
149
150   # Update the version number and build a new package if the vendor
151   # bundle has changed, or the command imports anything from the
152   # Arvados SDK and the SDK has changed.
153   declare -a checkdirs=(go.mod go.sum)
154   while [ -n "$1" ]; do
155       checkdirs+=("$1")
156       shift
157   done
158   # Even our rails packages (version calculation happens here!) depend on a go component (arvados-server)
159   # Everything depends on the build directory.
160   checkdirs+=(sdk/go lib build)
161   local timestamp=0
162   for dir in ${checkdirs[@]}; do
163       cd "$WORKSPACE"
164       ts="$(timestamp_from_git "$dir")"
165       if [[ "$ts" -gt "$timestamp" ]]; then
166           version=$(version_from_git "$dir")
167           timestamp="$ts"
168       fi
169   done
170   cd "$oldpwd"
171   __returnvar="$version"
172 }
173
174 # Usage: package_go_binary services/foo arvados-foo [deb|rpm] [amd64|arm64] "Compute foo to arbitrary precision" [apache-2.0.txt]
175 package_go_binary() {
176   local src_path="$1"; shift
177   local prog="$1"; shift
178   local package_format="$1"; shift
179   local target_arch="$1"; shift
180   local description="$1"; shift
181   local license_file="${1:-agpl-3.0.txt}"; shift
182
183   if [[ -n "$ONLY_BUILD" ]] && [[ "$prog" != "$ONLY_BUILD" ]]; then
184       debug_echo -e "Skipping build of $prog package."
185       return 0
186   fi
187
188   native_arch=$(get_native_arch)
189
190   if [[ "$native_arch" != "amd64" ]] && [[ -n "$target_arch" ]] && [[ "$native_arch" != "$target_arch" ]]; then
191     echo "Error: no cross compilation support for Go on $native_arch, can not build $prog for $target_arch"
192     return 1
193   fi
194
195   case "$package_format-$TARGET" in
196     # Ubuntu 20.04 does not support cross compilation because the
197     # libfuse package does not support multiarch. See
198     # <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=983477>.
199     # Red Hat-based distributions do not support native cross compilation at
200     # all (they use a qemu-based solution we haven't implemented yet).
201     deb-ubuntu2004|rpm-*)
202       cross_compilation=0
203       if [[ "$native_arch" == "amd64" ]] && [[ -n "$target_arch" ]] && [[ "$native_arch" != "$target_arch" ]]; then
204         echo "Error: no cross compilation support for Go on $native_arch for $TARGET, can not build $prog for $target_arch"
205         return 1
206       fi
207       ;;
208     *)
209       cross_compilation=1
210       ;;
211   esac
212
213   if [[ -n "$target_arch" ]]; then
214     archs=($target_arch)
215   else
216     # No target architecture specified, default to native target. When on amd64
217     # also crosscompile arm64 (when supported).
218     archs=($native_arch)
219     if [[ $cross_compilation -ne 0 ]]; then
220       archs+=("arm64")
221     fi
222   fi
223
224   for ta in ${archs[@]}; do
225     package_go_binary_worker "$src_path" "$prog" "$package_format" "$description" "$native_arch" "$ta" "$license_file"
226     retval=$?
227     if [[ $retval -ne 0 ]]; then
228       return $retval
229     fi
230   done
231 }
232
233 # Usage: package_go_binary services/foo arvados-foo deb "Compute foo to arbitrary precision" [amd64/arm64] [amd64/arm64] [apache-2.0.txt]
234 package_go_binary_worker() {
235     local src_path="$1"; shift
236     local prog="$1"; shift
237     local package_format="$1"; shift
238     local description="$1"; shift
239     local native_arch="${1:-amd64}"; shift
240     local target_arch="${1:-amd64}"; shift
241     local license_file="${1:-agpl-3.0.txt}"; shift
242
243     debug_echo "package_go_binary $src_path as $prog (native arch: $native_arch, target arch: $target_arch)"
244     local basename="${src_path##*/}"
245     calculate_go_package_version go_package_version $src_path
246
247     cd $WORKSPACE/packages/$TARGET
248     test_package_presence "$prog" "$go_package_version" "go" "" "$target_arch"
249     if [[ $? -ne 0 ]]; then
250       return 0
251     fi
252
253     echo "Building $package_format ($target_arch) package for $prog from $src_path"
254     if [[ "$native_arch" == "amd64" ]] && [[ "$target_arch" == "arm64" ]]; then
255       CGO_ENABLED=1 CC=aarch64-linux-gnu-gcc GOARCH=${target_arch} go install -ldflags "-X git.arvados.org/arvados.git/lib/cmd.version=${go_package_version} -X main.version=${go_package_version}" "git.arvados.org/arvados.git/$src_path"
256     else
257       GOARCH=${arch} go install -ldflags "-X git.arvados.org/arvados.git/lib/cmd.version=${go_package_version} -X main.version=${go_package_version}" "git.arvados.org/arvados.git/$src_path"
258     fi
259
260     local -a switches=()
261
262     binpath=$GOPATH/bin/${basename}
263     if [[ "${target_arch}" != "${native_arch}" ]]; then
264       switches+=("-a${target_arch}")
265       binpath="$GOPATH/bin/linux_${target_arch}/${basename}"
266     fi
267
268     case "$package_format" in
269         # As of April 2024 we package identical Go binaries under different
270         # packages and names. This upsets the build id database, so don't
271         # register ourselves there.
272         rpm) switches+=(--rpm-rpmbuild-define="_build_id_links none") ;;
273     esac
274
275     systemd_unit="$WORKSPACE/${src_path}/${prog}.service"
276     if [[ -e "${systemd_unit}" ]]; then
277         switches+=(
278             --after-install "${WORKSPACE}/build/go-python-package-scripts/postinst"
279             --before-remove "${WORKSPACE}/build/go-python-package-scripts/prerm"
280             "${systemd_unit}=/lib/systemd/system/${prog}.service")
281     fi
282     switches+=("$WORKSPACE/${license_file}=/usr/share/doc/$prog/${license_file}")
283
284     fpm_build "${WORKSPACE}/${src_path}" "$binpath=/usr/bin/${prog}" "${prog}" dir "${go_package_version}" "--url=https://arvados.org" "--license=GNU Affero General Public License, version 3.0" "--description=${description}" "${switches[@]}"
285 }
286
287 # Usage: package_go_so lib/foo arvados_foo.so arvados-foo deb amd64 "Arvados foo library"
288 package_go_so() {
289     local src_path="$1"; shift
290     local sofile="$1"; shift
291     local pkg="$1"; shift
292     local package_format="$1"; shift
293     local target_arch="$1"; shift # supported: amd64, arm64
294     local description="$1"; shift
295
296     if [[ -n "$ONLY_BUILD" ]] && [[ "$pkg" != "$ONLY_BUILD" ]]; then
297       debug_echo -e "Skipping build of $pkg package."
298       return 0
299     fi
300
301     debug_echo "package_go_so $src_path as $pkg"
302
303     calculate_go_package_version go_package_version $src_path
304     cd $WORKSPACE/packages/$TARGET
305     test_package_presence $pkg $go_package_version go || return 1
306     cd $WORKSPACE/$src_path
307     go build -buildmode=c-shared -o ${GOPATH}/bin/${sofile}
308     cd $WORKSPACE/packages/$TARGET
309     local -a fpmargs=(
310         "--url=https://arvados.org"
311         "--license=Apache License, Version 2.0"
312         "--description=${description}"
313         "$WORKSPACE/apache-2.0.txt=/usr/share/doc/$pkg/apache-2.0.txt"
314     )
315     if [[ -e "$WORKSPACE/$src_path/pam-configs-arvados" ]]; then
316         fpmargs+=("$WORKSPACE/$src_path/pam-configs-arvados=/usr/share/doc/$pkg/pam-configs-arvados-go")
317     fi
318     if [[ -e "$WORKSPACE/$src_path/README" ]]; then
319         fpmargs+=("$WORKSPACE/$src_path/README=/usr/share/doc/$pkg/README")
320     fi
321     fpm_build "${WORKSPACE}/${src_path}" "$GOPATH/bin/${sofile}=/usr/lib/${sofile}" "${pkg}" dir "${go_package_version}" "${fpmargs[@]}"
322 }
323
324 default_iteration() {
325     if [[ -n "$ARVADOS_BUILDING_VERSION" ]]; then
326         echo "$ARVADOS_BUILDING_ITERATION"
327         return
328     fi
329     local package_name="$1"; shift
330     local package_version="$1"; shift
331     local package_type="$1"; shift
332     local iteration=1
333     if [[ $package_version =~ ^0\.1\.([0-9]{14})(\.|$) ]] && \
334            [[ ${BASH_REMATCH[1]} -le $LICENSE_PACKAGE_TS ]]; then
335         iteration=2
336     fi
337     echo $iteration
338 }
339
340 _build_rails_package_scripts() {
341     local pkgname="$1"; shift
342     local destdir="$1"; shift
343     local srcdir="$RUN_BUILD_PACKAGES_PATH/rails-package-scripts"
344     for scriptname in postinst prerm postrm; do
345         cat "$srcdir/$pkgname.sh" "$srcdir/step2.sh" "$srcdir/$scriptname.sh" \
346             >"$destdir/$scriptname" || return $?
347     done
348 }
349
350 rails_package_version() {
351     local pkgname="$1"; shift
352     local srcdir="$1"; shift
353     if [[ -n "$ARVADOS_BUILDING_VERSION" ]]; then
354         echo "$ARVADOS_BUILDING_VERSION"
355         return
356     fi
357     local version="$(version_from_git)"
358     if [ $pkgname = "arvados-api-server" ] ; then
359         calculate_go_package_version version cmd/arvados-server "$srcdir"
360     fi
361     echo $version
362 }
363
364 test_rails_package_presence() {
365   local pkgname="$1"; shift
366   local srcdir="$1"; shift
367
368   if [[ -n "$ONLY_BUILD" ]] && [[ "$pkgname" != "$ONLY_BUILD" ]] ; then
369     return 1
370   fi
371
372   tmppwd=`pwd`
373
374   cd $srcdir
375
376   local version="$(rails_package_version "$pkgname" "$srcdir")"
377
378   cd $tmppwd
379
380   test_package_presence $pkgname $version rails "$RAILS_PACKAGE_ITERATION"
381 }
382
383 get_complete_package_name() {
384   # if the errexit flag is set, unset it until this function returns
385   # otherwise, the shift calls below will abort the program if optional arguments are not supplied
386   if [ -o errexit ]; then
387     set +e
388     trap 'set -e' RETURN
389   fi
390   # $__returnvar has the nameref attribute set, which means it is a reference
391   # to another variable that is passed in as the first argument to this function.
392   # see https://www.gnu.org/software/bash/manual/html_node/Shell-Parameters.html
393   local -n __returnvar="$1"; shift
394   local pkgname="$1"; shift
395   local version="$1"; shift
396   local pkgtype="$1"; shift
397   local iteration="$1"; shift
398   local arch="$1"; shift
399   if [[ "$iteration" == "" ]]; then
400       iteration="$(default_iteration "$pkgname" "$version" "$pkgtype")"
401   fi
402
403   if [[ "$arch" == "" ]]; then
404     native_arch=$(get_native_arch)
405     rpm_native_arch="x86_64"
406     if [[ "$HOSTTYPE" == "aarch64" ]]; then
407       rpm_native_arch="arm64"
408     fi
409     rpm_architecture="$rpm_native_arch"
410     deb_architecture="$native_arch"
411
412     if [[ "$pkgtype" =~ ^(src)$ ]]; then
413       rpm_architecture="noarch"
414       deb_architecture="all"
415     fi
416   else
417     rpm_architecture=$arch
418     deb_architecture=$arch
419   fi
420
421   local complete_pkgname="${pkgname}_$version${iteration:+-$iteration}_$deb_architecture.deb"
422   if [[ "$FORMAT" == "rpm" ]]; then
423       # rpm packages get iteration 1 if we don't supply one
424       iteration=${iteration:-1}
425       complete_pkgname="$pkgname-$version-${iteration}.$rpm_architecture.rpm"
426   fi
427   __returnvar=${complete_pkgname}
428 }
429
430 # Test if the package already exists, if not return 0, if it does return 1
431 test_package_presence() {
432     local pkgname="$1"; shift
433     local version="$1"; shift
434     local pkgtype="$1"; shift
435     local iteration="$1"; shift
436     local arch="$1"; shift
437     if [[ -n "$ONLY_BUILD" ]] && [[ "$pkgname" != "$ONLY_BUILD" ]] ; then
438         return 1
439     fi
440
441     local full_pkgname
442     get_complete_package_name full_pkgname "$pkgname" "$version" "$pkgtype" "$iteration" "$arch"
443
444     # See if we can skip building the package, only if it already exists in the
445     # processed/ directory. If so, move it back to the packages directory to make
446     # sure it gets picked up by the test and/or upload steps.
447     # Get the list of packages from the repos
448
449     local pkg_url
450     if [[ "$FORCE_BUILD" == "1" ]]; then
451       echo "Package $full_pkgname build forced with --force-build, building"
452       return 0
453     elif [[ "$FORMAT" == "deb" ]]; then
454       local codename
455       case "$TARGET" in
456           debian11) codename=bullseye ;;
457           debian12) codename=bookworm ;;
458           ubuntu2004) codename=focal ;;
459           ubuntu2204) codename=jammy ;;
460           *)
461               echo "FIXME: Don't know deb URL path for $TARGET, building"
462               return 0
463               ;;
464       esac
465       local repo_subdir
466       if [ ${pkgname:0:3} = "lib" ]; then
467         repo_subdir=${pkgname:0:4}
468       else
469         repo_subdir=${pkgname:0:1}
470       fi
471       pkg_url="http://apt.arvados.org/$codename/pool/main/$repo_subdir/$pkgname/$full_pkgname"
472     else
473       local rpm_root
474       case "$TARGET" in
475         rocky8) rpm_root="CentOS/8/dev" ;;
476         *)
477           echo "FIXME: Don't know RPM URL path for $TARGET, building"
478           return 0
479           ;;
480       esac
481       pkg_url="http://rpm.arvados.org/$rpm_root/$arch/$full_pkgname"
482     fi
483
484     if curl -fs -o "$WORKSPACE/packages/$TARGET/$full_pkgname" "$pkg_url"; then
485       echo "Package $full_pkgname exists upstream, not rebuilding, downloading instead!"
486       return 1
487     elif [[ -f "$WORKSPACE/packages/$TARGET/processed/$full_pkgname" ]]; then
488       echo "Package $full_pkgname exists, not rebuilding!"
489       return 1
490     else
491       echo "Package $full_pkgname not found, building"
492       return 0
493     fi
494 }
495
496 handle_rails_package() {
497     local pkgname="$1"; shift
498
499     if [[ -n "$ONLY_BUILD" ]] && [[ "$pkgname" != "$ONLY_BUILD" ]] ; then
500         return 0
501     fi
502     local srcdir="$1"; shift
503     cd "$srcdir"
504     local license_path="$1"; shift
505     local version="$(rails_package_version "$pkgname" "$srcdir")"
506     echo "$version" >package-build.version
507     local scripts_dir="$(mktemp --tmpdir -d "$pkgname-XXXXXXXX.scripts")" && \
508     (
509         set -e
510         _build_rails_package_scripts "$pkgname" "$scripts_dir"
511         cd "$srcdir"
512         mkdir -p tmp
513         git rev-parse HEAD >git-commit.version
514         # Please make sure you read `bundle help config` carefully before you
515         # modify any of these settings. Some of their names are not intuitive.
516         #
517         # `bundle cache` caches from Git and paths, not just rubygems.org.
518         bundle config set cache_all true
519         # Disallow changes to Gemfile.
520         bundle config set deployment true
521         # Avoid loading system-wide gems (although this seems to not work 100%).
522         bundle config set disable_shared_gems true
523         # `bundle cache` only downloads gems, doesn't install them.
524         # Our Rails postinst script does the install step.
525         bundle config set no_install true
526         # As of April 2024/Bundler 2.4, `bundle cache` seems to skip downloading
527         # gems that are already available system-wide... and then it complains
528         # that your bundle is incomplete. Work around this by fetching gems
529         # manually.
530         # TODO: Once all our supported distros have Ruby 3+, we can modify
531         # the awk script to print "NAME:VERSION" output, and pipe that directly
532         # to `xargs -0r gem fetch` for reduced overhead.
533         mkdir -p vendor/cache
534         awk -- '
535 BEGIN { OFS="\0"; ORS="\0"; }
536 (/^[A-Z ]*$/) { level1=$0; }
537 (/^  [[:alpha:]]+:$/) { level2=substr($0, 3, length($0) - 3); next; }
538 (/^ {0,3}[[:alpha:]]/) { level2=""; next; }
539 (level1 == "GEM" && level2 == "specs" && NF == 2 && $1 ~ /^[[:alpha:]][-_[:alnum:]]*$/ && $2 ~ /\([[:digit:]]+[-_+.[:alnum:]]*\)$/) {
540     print "--version", substr($2, 2, length($2) - 2), $1;
541 }
542 ' Gemfile.lock | env -C vendor/cache xargs -0r --max-args=3 gem fetch
543         # Despite the bug, we still run `bundle cache` to make sure Bundler is
544         # happy for later steps.
545         bundle cache
546     )
547     if [[ 0 != "$?" ]] || ! cd "$WORKSPACE/packages/$TARGET"; then
548         echo "ERROR: $pkgname package prep failed" >&2
549         rm -rf "$scripts_dir"
550         EXITCODE=1
551         return 1
552     fi
553     local railsdir="/var/www/${pkgname%-server}/current"
554     local -a pos_args=("$srcdir/=$railsdir" "$pkgname" dir "$version")
555     local license_arg="$license_path=$railsdir/$(basename "$license_path")"
556     local -a switches=(--after-install "$scripts_dir/postinst"
557                        --before-remove "$scripts_dir/prerm"
558                        --after-remove "$scripts_dir/postrm")
559     if [[ -z "$ARVADOS_BUILDING_VERSION" ]]; then
560         switches+=(--iteration $RAILS_PACKAGE_ITERATION)
561     fi
562     # For some reason fpm excludes need to not start with /.
563     local exclude_root="${railsdir#/}"
564     for exclude in tmp log coverage Capfile\* \
565                        config/deploy\* \
566                        config/application.yml \
567                        config/database.yml; do
568         switches+=(-x "$exclude_root/$exclude")
569     done
570     fpm_build "${srcdir}" "${pos_args[@]}" "${switches[@]}" \
571               -x "$exclude_root/vendor/cache-*" \
572               -x "$exclude_root/vendor/bundle" "$@" "$license_arg"
573     rm -rf "$scripts_dir"
574 }
575
576 # Usage: handle_api_server [amd64|arm64]
577 handle_api_server () {
578   local target_arch="${1:-amd64}"; shift
579
580   if [[ -n "$ONLY_BUILD" ]] && [[ "$ONLY_BUILD" != "arvados-api-server" ]] ; then
581     debug_echo -e "Skipping build of arvados-api-server package."
582     return 0
583   fi
584
585   native_arch=$(get_native_arch)
586   if [[ "$target_arch" != "$native_arch" ]]; then
587     echo "Error: no cross compilation support for Rails yet, can not build arvados-api-server for $ARCH"
588     echo
589     exit 1
590   fi
591
592   # Build the API server package
593   test_rails_package_presence arvados-api-server "$WORKSPACE/services/api"
594   if [[ "$?" == "0" ]]; then
595     calculate_go_package_version arvados_server_version cmd/arvados-server
596     arvados_server_iteration=$(default_iteration "arvados-server" "$arvados_server_version" "go")
597     handle_rails_package arvados-api-server "$WORKSPACE/services/api" \
598         "$WORKSPACE/agpl-3.0.txt" --url="https://arvados.org" \
599         --description="Arvados API server - Arvados is a free and open source platform for big data science." \
600         --license="GNU Affero General Public License, version 3.0" --depends "arvados-server = ${arvados_server_version}-${arvados_server_iteration}"
601   fi
602 }
603
604 # Usage: handle_arvados_src
605 handle_arvados_src () {
606   if [[ -n "$ONLY_BUILD" ]] && [[ "$ONLY_BUILD" != "arvados-src" ]] ; then
607     debug_echo -e "Skipping build of arvados-src package."
608     return 0
609   fi
610   # arvados-src
611   (
612       cd "$WORKSPACE"
613       COMMIT_HASH=$(format_last_commit_here "%H")
614       arvados_src_version="$(version_from_git)"
615
616       cd $WORKSPACE/packages/$TARGET
617       test_package_presence arvados-src "$arvados_src_version" src ""
618
619       if [[ "$?" == "0" ]]; then
620         cd "$WORKSPACE"
621         SRC_BUILD_DIR=$(mktemp -d)
622         # mktemp creates the directory with 0700 permissions by default
623         chmod 755 $SRC_BUILD_DIR
624         git clone $DASHQ_UNLESS_DEBUG "$WORKSPACE/.git" "$SRC_BUILD_DIR"
625         cd "$SRC_BUILD_DIR"
626
627         # go into detached-head state
628         git checkout $DASHQ_UNLESS_DEBUG "$COMMIT_HASH"
629         echo "$COMMIT_HASH" >git-commit.version
630
631         cd $WORKSPACE/packages/$TARGET
632         fpm_build "$WORKSPACE" $SRC_BUILD_DIR/=/usr/local/arvados/src arvados-src 'dir' "$arvados_src_version" "--exclude=usr/local/arvados/src/.git" "--url=https://arvados.org" "--license=GNU Affero General Public License, version 3.0" "--description=The Arvados source code" "--architecture=all"
633
634         rm -rf "$SRC_BUILD_DIR"
635       fi
636   )
637 }
638
639 setup_build_virtualenv() {
640     PYTHON_BUILDROOT="$(mktemp --directory --tmpdir pybuild.XXXXXXXX)"
641     "$PYTHON3_EXECUTABLE" -m venv "$PYTHON_BUILDROOT/venv"
642     "$PYTHON_BUILDROOT/venv/bin/pip" install --upgrade build piprepo setuptools wheel
643     mkdir "$PYTHON_BUILDROOT/wheelhouse"
644 }
645
646 # Build python packages with a virtualenv built-in
647 # Usage: fpm_build_virtualenv arvados-python-client sdk/python [deb|rpm] [amd64|arm64]
648 fpm_build_virtualenv () {
649   local pkg=$1; shift
650   local pkg_dir=$1; shift
651   local package_format="$1"; shift
652   local target_arch="${1:-amd64}"; shift
653
654   native_arch=$(get_native_arch)
655   if [[ -n "$target_arch" ]] && [[ "$native_arch" == "$target_arch" ]]; then
656       fpm_build_virtualenv_worker "$pkg" "$pkg_dir" "$package_format" "$native_arch" "$target_arch"
657   elif [[ -z "$target_arch" ]]; then
658     fpm_build_virtualenv_worker "$pkg" "$pkg_dir" "$package_format" "$native_arch" "$native_arch"
659   else
660     echo "Error: no cross compilation support for Python yet, can not build $pkg for $target_arch"
661     return 1
662   fi
663 }
664
665 # Build python packages with a virtualenv built-in
666 # Usage: fpm_build_virtualenv_worker arvados-python-client sdk/python python3 [deb|rpm] [amd64|arm64] [amd64|arm64]
667 fpm_build_virtualenv_worker () {
668   PKG=$1; shift
669   PKG_DIR=$1; shift
670   local package_format="$1"; shift
671   local native_arch="${1:-amd64}"; shift
672   local target_arch=${1:-amd64}; shift
673
674   # Set up
675   STDOUT_IF_DEBUG=/dev/null
676   STDERR_IF_DEBUG=/dev/null
677   DASHQ_UNLESS_DEBUG=-q
678   if [[ "$DEBUG" != "0" ]]; then
679       STDOUT_IF_DEBUG=/dev/stdout
680       STDERR_IF_DEBUG=/dev/stderr
681       DASHQ_UNLESS_DEBUG=
682   fi
683   if [[ "$ARVADOS_BUILDING_ITERATION" == "" ]]; then
684     ARVADOS_BUILDING_ITERATION=1
685   fi
686
687   PACKAGE_PREFIX=$PYTHON3_PKG_PREFIX
688   if [[ "$PKG" != "arvados-docker-cleaner" ]]; then
689     PYTHON_PKG=$PACKAGE_PREFIX-$PKG
690   else
691     # Exception to our package naming convention
692     PYTHON_PKG=$PKG
693   fi
694
695   # We must always add a wheel to our repository, even if we're not building
696   # this distro package, because it might be a dependency for a later
697   # package we do build.
698   if [[ "$PKG_DIR" =~ ^.=[0-9]+\. ]]; then
699       # Not source to build, but a version to download.
700       # The rest of the function expects a filesystem path, so set one afterwards.
701       "$PYTHON_BUILDROOT/venv/bin/pip" download --dest="$PYTHON_BUILDROOT/wheelhouse" "$PKG$PKG_DIR" \
702           && PKG_DIR="$PYTHON_BUILDROOT/nonexistent"
703   else
704       # Make PKG_DIR absolute.
705       PKG_DIR="$(env -C "$WORKSPACE" readlink -e "$PKG_DIR")"
706       if [[ -e "$PKG_DIR/pyproject.toml" ]]; then
707           "$PYTHON_BUILDROOT/venv/bin/python" -m build --outdir="$PYTHON_BUILDROOT/wheelhouse" "$PKG_DIR"
708       else
709           env -C "$PKG_DIR" "$PYTHON_BUILDROOT/venv/bin/python" setup.py bdist_wheel --dist-dir="$PYTHON_BUILDROOT/wheelhouse"
710       fi
711   fi
712   if [[ $? -ne 0 ]]; then
713     printf "Error, unable to download/build wheel for %s @ %s\n" "$PKG" "$PKG_DIR"
714     exit 1
715   fi
716
717   if [[ -n "$ONLY_BUILD" ]] && [[ "$PYTHON_PKG" != "$ONLY_BUILD" ]] && [[ "$PKG" != "$ONLY_BUILD" ]]; then
718     return 0
719   elif ! "$PYTHON_BUILDROOT/venv/bin/piprepo" build "$PYTHON_BUILDROOT/wheelhouse"; then
720     printf "Error, unable to update local wheel repository\n"
721     exit 1
722   fi
723
724   local venv_dir="$PYTHON_BUILDROOT/$PYTHON_PKG"
725   echo "Creating virtualenv..."
726   if ! "$PYTHON3_EXECUTABLE" -m venv "$venv_dir"; then
727     printf "Error, unable to run\n  %s -m venv %s\n" "$PYTHON3_EXECUTABLE" "$venv_dir"
728     exit 1
729   # We must have the dependency resolver introduced in late 2020 for the rest
730   # of our install process to work.
731   # <https://blog.python.org/2020/11/pip-20-3-release-new-resolver.html>
732   elif ! "$venv_dir/bin/pip" install "pip>=20.3"; then
733     printf "Error, unable to run\n  %s/bin/pip install 'pip>=20.3'\n" "$venv_dir"
734     exit 1
735   fi
736
737   local pip_wheel="$(ls --sort=time --reverse "$PYTHON_BUILDROOT/wheelhouse/$(echo "$PKG" | sed s/-/_/g)-"*.whl | tail -n1)"
738   if [[ -z "$pip_wheel" ]]; then
739     printf "Error, unable to find built wheel for $PKG\n"
740     exit 1
741   elif ! "$venv_dir/bin/pip" install $DASHQ_UNLESS_DEBUG $CACHE_FLAG --extra-index-url="file://$PYTHON_BUILDROOT/wheelhouse/simple" "$pip_wheel"; then
742     printf "Error, unable to run
743   %s/bin/pip install $DASHQ_UNLESS_DEBUG $CACHE_FLAG --extra-index-url=file://%s %s
744 " "$venv_dir" "$PYTHON_BUILDROOT/wheelhouse/simple" "$pip_wheel"
745     exit 1
746   fi
747
748   # Determine the package version from the wheel
749   PYTHON_VERSION="$("$venv_dir/bin/python" "$WORKSPACE/build/pypkg_info.py" metadata "$PKG" Version)"
750   UNFILTERED_PYTHON_VERSION="$(echo "$PYTHON_VERSION" | sed 's/\.dev/~dev/; s/\([0-9]\)rc/\1~rc/')"
751
752   # See if we actually need to build this package; does it exist already?
753   # We can't do this earlier than here, because we need PYTHON_VERSION.
754   if ! test_package_presence "$PYTHON_PKG" "$UNFILTERED_PYTHON_VERSION" python3 "$ARVADOS_BUILDING_ITERATION" "$target_arch"; then
755     return 0
756   fi
757   echo "Building $package_format ($target_arch) package for $PKG from $PKG_DIR"
758
759   # Replace the shebang lines in all python scripts, and handle the activate
760   # scripts too. This is a functional replacement of the 237 line
761   # virtualenv_tools.py script that doesn't work in python3 without serious
762   # patching, minus the parts we don't need (modifying pyc files, etc).
763   local sys_venv_dir="/usr/lib/$PYTHON_PKG"
764   local sys_venv_py="$sys_venv_dir/bin/python$PYTHON3_VERSION"
765   find "$venv_dir/bin" -type f | while read binfile; do
766     if file --mime "$binfile" | grep -q binary; then
767       :  # Nothing to do for binary files
768     elif [[ "$binfile" =~ /activate(.csh|.fish|)$ ]]; then
769       sed -ri "s@VIRTUAL_ENV(=| )\".*\"@VIRTUAL_ENV\\1\"$sys_venv_dir\"@" "$binfile"
770     else
771       # Replace shebang line
772       sed -ri "1 s@^#\![^[:space:]]+/bin/python[0-9.]*@#\!$sys_venv_py@" "$binfile"
773     fi
774   done
775
776   # Using `env -C` sets the directory where the package is built.
777   # Using `fpm --chdir` sets the root directory for source arguments.
778   declare -a COMMAND_ARR=(
779       env -C "$PYTHON_BUILDROOT" fpm
780       --chdir="$venv_dir"
781       --name="$PYTHON_PKG"
782       --version="$UNFILTERED_PYTHON_VERSION"
783       --input-type=dir
784       --output-type="$package_format"
785       --depends="$PYTHON3_PACKAGE"
786       --iteration="$ARVADOS_BUILDING_ITERATION"
787       --replaces="python-$PKG"
788       --url="https://arvados.org"
789   )
790   # Append fpm flags corresponding to Python package metadata.
791   readarray -d "" -O "${#COMMAND_ARR[@]}" -t COMMAND_ARR < \
792             <("$venv_dir/bin/python3" "$WORKSPACE/build/pypkg_info.py" \
793                                       --delimiter=\\0 --format=fpm \
794                                       metadata "$PKG" License Summary)
795
796   if [[ -n "$target_arch" ]] && [[ "$target_arch" != "amd64" ]]; then
797     COMMAND_ARR+=("-a$target_arch")
798   fi
799
800   if [[ "$MAINTAINER" != "" ]]; then
801     COMMAND_ARR+=('--maintainer' "$MAINTAINER")
802   fi
803
804   if [[ "$VENDOR" != "" ]]; then
805     COMMAND_ARR+=('--vendor' "$VENDOR")
806   fi
807
808   if [[ "$DEBUG" != "0" ]]; then
809     COMMAND_ARR+=('--verbose' '--log' 'info')
810   fi
811
812   systemd_unit="$PKG_DIR/$PKG.service"
813   if [[ -e "${systemd_unit}" ]]; then
814     COMMAND_ARR+=('--after-install' "${WORKSPACE}/build/go-python-package-scripts/postinst")
815     COMMAND_ARR+=('--before-remove' "${WORKSPACE}/build/go-python-package-scripts/prerm")
816   fi
817
818   case "$package_format" in
819       deb)
820           COMMAND_ARR+=(
821               # Avoid warning
822               --deb-no-default-config-files
823           ) ;;
824       rpm)
825           COMMAND_ARR+=(
826               # Conflict with older packages we used to publish
827               --conflicts "rh-python36-python-$PKG"
828               # Do not generate /usr/lib/.build-id links on RH8+
829               # (otherwise our packages conflict with platform-python)
830               --rpm-rpmbuild-define "_build_id_links none"
831           ) ;;
832   esac
833
834   # Append --depends X and other arguments specified by fpm-info.sh in
835   # the package source dir. These are added last so they can override
836   # the arguments added by this script.
837   declare -a fpm_args=()
838   declare -a fpm_depends=()
839
840   fpminfo="$PKG_DIR/fpm-info.sh"
841   if [[ -e "$fpminfo" ]]; then
842     echo "Loading fpm overrides from $fpminfo"
843     if ! source "$fpminfo"; then
844       echo "Error, unable to source $WORKSPACE/$PKG_DIR/fpm-info.sh for $PKG"
845       exit 1
846     fi
847   fi
848
849   for i in "${fpm_depends[@]}"; do
850     COMMAND_ARR+=('--depends' "$i")
851   done
852
853   # make sure the systemd service file ends up in the right place
854   # used by arvados-docker-cleaner
855   if [[ -e "${systemd_unit}" ]]; then
856     COMMAND_ARR+=("share/doc/$PKG/$PKG.service=/lib/systemd/system/$PKG.service")
857   fi
858
859   COMMAND_ARR+=("${fpm_args[@]}")
860
861   while read -d "" binpath; do
862       COMMAND_ARR+=("$binpath=/usr/$binpath")
863   done < <("$venv_dir/bin/python3" "$WORKSPACE/build/pypkg_info.py" --delimiter=\\0 binfiles "$PKG")
864
865   # the python3-arvados-cwl-runner package comes with cwltool, expose that version
866   if [[ "$PKG" == arvados-cwl-runner ]]; then
867     COMMAND_ARR+=("bin/cwltool=/usr/bin/cwltool")
868   fi
869
870   COMMAND_ARR+=(".=$sys_venv_dir")
871
872   debug_echo -e "\n${COMMAND_ARR[@]}\n"
873
874   FPM_RESULTS=$("${COMMAND_ARR[@]}")
875   FPM_EXIT_CODE=$?
876
877   # if something went wrong and debug is off, print out the fpm command that errored
878   if ! fpm_verify $FPM_EXIT_CODE $FPM_RESULTS && [[ "$STDOUT_IF_DEBUG" == "/dev/null" ]]; then
879     echo "fpm returned an error executing the command:"
880     echo
881     echo -e "\n${COMMAND_ARR[@]}\n"
882   else
883     ls "$PYTHON_BUILDROOT"/*."$package_format"
884     mv "$PYTHON_BUILDROOT"/*."$package_format" "$WORKSPACE/packages/$TARGET/"
885   fi
886   echo
887 }
888
889 # Build packages for everything
890 fpm_build() {
891   # Source dir where fpm-info.sh (if any) will be found.
892   SRC_DIR=$1
893   shift
894   # The package source.  Depending on the source type, this can be a
895   # path, or the name of the package in an upstream repository (e.g.,
896   # pip).
897   PACKAGE=$1
898   shift
899   # The name of the package to build.
900   PACKAGE_NAME=$1
901   shift
902   # The type of source package.  Passed to fpm -s.  Default "dir".
903   PACKAGE_TYPE=${1:-dir}
904   shift
905   # Optional: the package version number.  Passed to fpm -v.
906   VERSION=$1
907   shift
908
909   if [[ -n "$ONLY_BUILD" ]] && [[ "$PACKAGE_NAME" != "$ONLY_BUILD" ]] && [[ "$PACKAGE" != "$ONLY_BUILD" ]] ; then
910       return 0
911   fi
912
913   local default_iteration_value="$(default_iteration "$PACKAGE" "$VERSION" "$PACKAGE_TYPE")"
914
915   declare -a COMMAND_ARR=("fpm" "-s" "$PACKAGE_TYPE" "-t" "$FORMAT")
916   if [ python = "$PACKAGE_TYPE" ] && [ deb = "$FORMAT" ]; then
917       # Dependencies are built from setup.py.  Since setup.py will never
918       # refer to Debian package iterations, it doesn't make sense to
919       # enforce those in the .deb dependencies.
920       COMMAND_ARR+=(--deb-ignore-iteration-in-dependencies)
921   fi
922
923   if [[ "$DEBUG" != "0" ]]; then
924     COMMAND_ARR+=('--verbose' '--log' 'info')
925   fi
926
927   if [[ -n "$PACKAGE_NAME" ]]; then
928     COMMAND_ARR+=('-n' "$PACKAGE_NAME")
929   fi
930
931   if [[ "$MAINTAINER" != "" ]]; then
932     COMMAND_ARR+=('--maintainer' "$MAINTAINER")
933   fi
934
935   if [[ "$VENDOR" != "" ]]; then
936     COMMAND_ARR+=('--vendor' "$VENDOR")
937   fi
938
939   if [[ "$VERSION" != "" ]]; then
940     COMMAND_ARR+=('-v' "$VERSION")
941   fi
942   if [[ -n "$default_iteration_value" ]]; then
943       # We can always add an --iteration here.  If another one is specified in $@,
944       # that will take precedence, as desired.
945       COMMAND_ARR+=(--iteration "$default_iteration_value")
946   fi
947
948   # Append --depends X and other arguments specified by fpm-info.sh in
949   # the package source dir. These are added last so they can override
950   # the arguments added by this script.
951   declare -a fpm_args=()
952   declare -a build_depends=()
953   declare -a fpm_depends=()
954   declare -a fpm_conflicts=()
955   declare -a fpm_exclude=()
956   if [[ ! -d "$SRC_DIR" ]]; then
957       echo >&2 "BUG: looking in wrong dir for fpm-info.sh: $pkgdir"
958       exit 1
959   fi
960   fpminfo="${SRC_DIR}/fpm-info.sh"
961   if [[ -e "$fpminfo" ]]; then
962       debug_echo "Loading fpm overrides from $fpminfo"
963       source "$fpminfo"
964   fi
965   for pkg in "${build_depends[@]}"; do
966       if [[ $TARGET =~ debian|ubuntu ]]; then
967           pkg_deb=$(ls "$WORKSPACE/packages/$TARGET/$pkg_"*.deb | sort -rg | awk 'NR==1')
968           if [[ -e $pkg_deb ]]; then
969               echo "Installing build_dep $pkg from $pkg_deb"
970               dpkg -i "$pkg_deb"
971           else
972               echo "Attemping to install build_dep $pkg using apt-get"
973               apt-get install -y "$pkg"
974           fi
975           apt-get -y -f install
976       else
977           pkg_rpm=$(ls "$WORKSPACE/packages/$TARGET/$pkg"-[0-9]*.rpm | sort -rg | awk 'NR==1')
978           if [[ -e $pkg_rpm ]]; then
979               echo "Installing build_dep $pkg from $pkg_rpm"
980               rpm -i "$pkg_rpm"
981           else
982               echo "Attemping to install build_dep $pkg"
983               rpm -i "$pkg"
984           fi
985       fi
986   done
987   for i in "${fpm_depends[@]}"; do
988     COMMAND_ARR+=('--depends' "$i")
989   done
990   for i in "${fpm_conflicts[@]}"; do
991     COMMAND_ARR+=('--conflicts' "$i")
992   done
993   for i in "${fpm_exclude[@]}"; do
994     COMMAND_ARR+=('--exclude' "$i")
995   done
996
997   COMMAND_ARR+=("${fpm_args[@]}")
998
999   # Append remaining function arguments directly to fpm's command line.
1000   for i; do
1001     COMMAND_ARR+=("$i")
1002   done
1003
1004   COMMAND_ARR+=("$PACKAGE")
1005
1006   debug_echo -e "\n${COMMAND_ARR[@]}\n"
1007
1008   FPM_RESULTS=$("${COMMAND_ARR[@]}")
1009   FPM_EXIT_CODE=$?
1010   echo "fpm: exit code $FPM_EXIT_CODE" >>$STDOUT_IF_DEBUG
1011   echo "$FPM_RESULTS" >>$STDOUT_IF_DEBUG
1012
1013   fpm_verify $FPM_EXIT_CODE $FPM_RESULTS
1014
1015   # if something went wrong and debug is off, print out the fpm command that errored
1016   if [[ 0 -ne $? ]] && [[ "$STDOUT_IF_DEBUG" == "/dev/null" ]]; then
1017     echo -e "\n${COMMAND_ARR[@]}\n"
1018   fi
1019 }
1020
1021 # verify build results
1022 fpm_verify () {
1023   FPM_EXIT_CODE=$1
1024   shift
1025   FPM_RESULTS=$@
1026
1027   FPM_PACKAGE_NAME=''
1028   if [[ $FPM_RESULTS =~ ([A-Za-z0-9_\.~-]*\.)(deb|rpm) ]]; then
1029     FPM_PACKAGE_NAME=${BASH_REMATCH[1]}${BASH_REMATCH[2]}
1030   fi
1031
1032   if [[ "$FPM_PACKAGE_NAME" == "" ]]; then
1033     EXITCODE=1
1034     echo
1035     echo "Error: $PACKAGE: Unable to figure out package name from fpm results:"
1036     echo
1037     echo $FPM_RESULTS
1038     echo
1039     return 1
1040   elif [[ "$FPM_RESULTS" =~ "File already exists" ]]; then
1041     echo "Package $FPM_PACKAGE_NAME exists, not rebuilding"
1042     return 0
1043   elif [[ 0 -ne "$FPM_EXIT_CODE" ]]; then
1044     EXITCODE=1
1045     echo "Error building package for $1:\n $FPM_RESULTS"
1046     return 1
1047   fi
1048 }
1049
1050 install_package() {
1051   PACKAGES=$@
1052   if [[ "$FORMAT" == "deb" ]]; then
1053     $SUDO apt-get install $PACKAGES --yes
1054   elif [[ "$FORMAT" == "rpm" ]]; then
1055     $SUDO yum -q -y install $PACKAGES
1056   fi
1057 }
1058
1059 title() {
1060     printf '%s %s\n' "=======" "$1"
1061 }
1062
1063 checkexit() {
1064     if [[ "$1" != "0" ]]; then
1065         title "$2 -- FAILED"
1066         failures+=("$2 (`timer`)")
1067     else
1068         successes+=("$2 (`timer`)")
1069     fi
1070 }
1071
1072 timer_reset() {
1073     t0=$SECONDS
1074 }
1075
1076 timer() {
1077     if [[ -n "$t0" ]]; then
1078         echo -n "$(($SECONDS - $t0))s"
1079     fi
1080 }
1081
1082 report_outcomes() {
1083     for x in "${successes[@]}"
1084     do
1085         echo "Pass: $x"
1086     done
1087
1088     if [[ ${#failures[@]} == 0 ]]
1089     then
1090         if [[ ${#successes[@]} != 0 ]]; then
1091            echo "All test suites passed."
1092         fi
1093     else
1094         echo "Failures (${#failures[@]}):"
1095         for x in "${failures[@]}"
1096         do
1097             echo "Fail: $x"
1098         done
1099     fi
1100 }