chiark / gitweb /
Add --no-refresh to the completion
[fdroidserver.git] / fdroidserver / update.py
1 #!/usr/bin/env python2
2 # -*- coding: utf-8 -*-
3 #
4 # update.py - part of the FDroid server tools
5 # Copyright (C) 2010-2015, Ciaran Gultnieks, ciaran@ciarang.com
6 # Copyright (C) 2013-2014 Daniel Martí <mvdan@mvdan.cc>
7 #
8 # This program is free software: you can redistribute it and/or modify
9 # it under the terms of the GNU Affero General Public License as published by
10 # the Free Software Foundation, either version 3 of the License, or
11 # (at your option) any later version.
12 #
13 # This program is distributed in the hope that it will be useful,
14 # but WITHOUT ANY WARRANTY; without even the implied warranty of
15 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16 # GNU Affero General Public License for more details.
17 #
18 # You should have received a copy of the GNU Affero General Public License
19 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
20
21 import sys
22 import os
23 import shutil
24 import glob
25 import re
26 import socket
27 import zipfile
28 import hashlib
29 import pickle
30 from xml.dom.minidom import Document
31 from optparse import OptionParser
32 import time
33 from pyasn1.error import PyAsn1Error
34 from pyasn1.codec.der import decoder, encoder
35 from pyasn1_modules import rfc2315
36 from hashlib import md5
37 from binascii import hexlify, unhexlify
38
39 from PIL import Image
40 import logging
41
42 import common
43 import metadata
44 from common import FDroidPopen, SdkToolsPopen
45 from metadata import MetaDataException
46
47
48 def get_densities():
49     return ['640', '480', '320', '240', '160', '120']
50
51
52 def dpi_to_px(density):
53     return (int(density) * 48) / 160
54
55
56 def px_to_dpi(px):
57     return (int(px) * 160) / 48
58
59
60 def get_icon_dir(repodir, density):
61     if density is None:
62         return os.path.join(repodir, "icons")
63     return os.path.join(repodir, "icons-%s" % density)
64
65
66 def get_icon_dirs(repodir):
67     for density in get_densities():
68         yield get_icon_dir(repodir, density)
69     yield os.path.join(repodir, "icons")
70
71
72 def update_wiki(apps, sortedids, apks):
73     """Update the wiki
74
75     :param apps: fully populated list of all applications
76     :param apks: all apks, except...
77     """
78     logging.info("Updating wiki")
79     wikicat = 'Apps'
80     wikiredircat = 'App Redirects'
81     import mwclient
82     site = mwclient.Site((config['wiki_protocol'], config['wiki_server']),
83                          path=config['wiki_path'])
84     site.login(config['wiki_user'], config['wiki_password'])
85     generated_pages = {}
86     generated_redirects = {}
87
88     for appid in sortedids:
89         app = apps[appid]
90
91         wikidata = ''
92         if app['Disabled']:
93             wikidata += '{{Disabled|' + app['Disabled'] + '}}\n'
94         if app['AntiFeatures']:
95             for af in app['AntiFeatures'].split(','):
96                 wikidata += '{{AntiFeature|' + af + '}}\n'
97         wikidata += '{{App|id=%s|name=%s|added=%s|lastupdated=%s|source=%s|tracker=%s|web=%s|changelog=%s|donate=%s|flattr=%s|bitcoin=%s|litecoin=%s|dogecoin=%s|license=%s|root=%s}}\n' % (
98             appid,
99             app['Name'],
100             time.strftime('%Y-%m-%d', app['added']) if 'added' in app else '',
101             time.strftime('%Y-%m-%d', app['lastupdated']) if 'lastupdated' in app else '',
102             app['Source Code'],
103             app['Issue Tracker'],
104             app['Web Site'],
105             app['Changelog'],
106             app['Donate'],
107             app['FlattrID'],
108             app['Bitcoin'],
109             app['Litecoin'],
110             app['Dogecoin'],
111             app['License'],
112             app.get('Requires Root', 'No'))
113
114         if app['Provides']:
115             wikidata += "This app provides: %s" % ', '.join(app['Summary'].split(','))
116
117         wikidata += app['Summary']
118         wikidata += " - [https://f-droid.org/repository/browse/?fdid=" + appid + " view in repository]\n\n"
119
120         wikidata += "=Description=\n"
121         wikidata += metadata.description_wiki(app['Description']) + "\n"
122
123         wikidata += "=Maintainer Notes=\n"
124         if 'Maintainer Notes' in app:
125             wikidata += metadata.description_wiki(app['Maintainer Notes']) + "\n"
126         wikidata += "\nMetadata: [https://gitlab.com/fdroid/fdroiddata/blob/master/metadata/{0}.txt current] [https://gitlab.com/fdroid/fdroiddata/commits/master/metadata/{0}.txt history]\n".format(appid)
127
128         # Get a list of all packages for this application...
129         apklist = []
130         gotcurrentver = False
131         cantupdate = False
132         buildfails = False
133         for apk in apks:
134             if apk['id'] == appid:
135                 if str(apk['versioncode']) == app['Current Version Code']:
136                     gotcurrentver = True
137                 apklist.append(apk)
138         # Include ones we can't build, as a special case...
139         for thisbuild in app['builds']:
140             if thisbuild['disable']:
141                 if thisbuild['vercode'] == app['Current Version Code']:
142                     cantupdate = True
143                 # TODO: Nasty: vercode is a string in the build, and an int elsewhere
144                 apklist.append({'versioncode': int(thisbuild['vercode']),
145                                 'version': thisbuild['version'],
146                                 'buildproblem': thisbuild['disable']
147                                 })
148             else:
149                 builtit = False
150                 for apk in apklist:
151                     if apk['versioncode'] == int(thisbuild['vercode']):
152                         builtit = True
153                         break
154                 if not builtit:
155                     buildfails = True
156                     apklist.append({'versioncode': int(thisbuild['vercode']),
157                                     'version': thisbuild['version'],
158                                     'buildproblem': "The build for this version appears to have failed. Check the [[{0}/lastbuild_{1}|build log]].".format(appid, thisbuild['vercode'])
159                                     })
160         if app['Current Version Code'] == '0':
161             cantupdate = True
162         # Sort with most recent first...
163         apklist = sorted(apklist, key=lambda apk: apk['versioncode'], reverse=True)
164
165         wikidata += "=Versions=\n"
166         if len(apklist) == 0:
167             wikidata += "We currently have no versions of this app available."
168         elif not gotcurrentver:
169             wikidata += "We don't have the current version of this app."
170         else:
171             wikidata += "We have the current version of this app."
172         wikidata += " (Check mode: " + app['Update Check Mode'] + ") "
173         wikidata += " (Auto-update mode: " + app['Auto Update Mode'] + ")\n\n"
174         if len(app['No Source Since']) > 0:
175             wikidata += "This application has partially or entirely been missing source code since version " + app['No Source Since'] + ".\n\n"
176         if len(app['Current Version']) > 0:
177             wikidata += "The current (recommended) version is " + app['Current Version']
178             wikidata += " (version code " + app['Current Version Code'] + ").\n\n"
179         validapks = 0
180         for apk in apklist:
181             wikidata += "==" + apk['version'] + "==\n"
182
183             if 'buildproblem' in apk:
184                 wikidata += "We can't build this version: " + apk['buildproblem'] + "\n\n"
185             else:
186                 validapks += 1
187                 wikidata += "This version is built and signed by "
188                 if 'srcname' in apk:
189                     wikidata += "F-Droid, and guaranteed to correspond to the source tarball published with it.\n\n"
190                 else:
191                     wikidata += "the original developer.\n\n"
192             wikidata += "Version code: " + str(apk['versioncode']) + '\n'
193
194         wikidata += '\n[[Category:' + wikicat + ']]\n'
195         if len(app['No Source Since']) > 0:
196             wikidata += '\n[[Category:Apps missing source code]]\n'
197         if validapks == 0 and not app['Disabled']:
198             wikidata += '\n[[Category:Apps with no packages]]\n'
199         if cantupdate and not app['Disabled']:
200             wikidata += "\n[[Category:Apps we can't update]]\n"
201         if buildfails and not app['Disabled']:
202             wikidata += "\n[[Category:Apps with failing builds]]\n"
203         elif not gotcurrentver and not cantupdate and not app['Disabled'] and app['Update Check Mode'] != "Static":
204             wikidata += '\n[[Category:Apps to Update]]\n'
205         if app['Disabled']:
206             wikidata += '\n[[Category:Apps that are disabled]]\n'
207         if app['Update Check Mode'] == 'None' and not app['Disabled']:
208             wikidata += '\n[[Category:Apps with no update check]]\n'
209         for appcat in app['Categories']:
210             wikidata += '\n[[Category:{0}]]\n'.format(appcat)
211
212         # We can't have underscores in the page name, even if they're in
213         # the package ID, because MediaWiki messes with them...
214         pagename = appid.replace('_', ' ')
215
216         # Drop a trailing newline, because mediawiki is going to drop it anyway
217         # and it we don't we'll think the page has changed when it hasn't...
218         if wikidata.endswith('\n'):
219             wikidata = wikidata[:-1]
220
221         generated_pages[pagename] = wikidata
222
223         # Make a redirect from the name to the ID too, unless there's
224         # already an existing page with the name and it isn't a redirect.
225         noclobber = False
226         apppagename = app['Name'].replace('_', ' ')
227         apppagename = apppagename.replace('{', '')
228         apppagename = apppagename.replace('}', ' ')
229         apppagename = apppagename.replace(':', ' ')
230         # Drop double spaces caused mostly by replacing ':' above
231         apppagename = apppagename.replace('  ', ' ')
232         for expagename in site.allpages(prefix=apppagename,
233                                         filterredir='nonredirects',
234                                         generator=False):
235             if expagename == apppagename:
236                 noclobber = True
237         # Another reason not to make the redirect page is if the app name
238         # is the same as it's ID, because that will overwrite the real page
239         # with an redirect to itself! (Although it seems like an odd
240         # scenario this happens a lot, e.g. where there is metadata but no
241         # builds or binaries to extract a name from.
242         if apppagename == pagename:
243             noclobber = True
244         if not noclobber:
245             generated_redirects[apppagename] = "#REDIRECT [[" + pagename + "]]\n[[Category:" + wikiredircat + "]]"
246
247     for tcat, genp in [(wikicat, generated_pages),
248                        (wikiredircat, generated_redirects)]:
249         catpages = site.Pages['Category:' + tcat]
250         existingpages = []
251         for page in catpages:
252             existingpages.append(page.name)
253             if page.name in genp:
254                 pagetxt = page.edit()
255                 if pagetxt != genp[page.name]:
256                     logging.debug("Updating modified page " + page.name)
257                     page.save(genp[page.name], summary='Auto-updated')
258                 else:
259                     logging.debug("Page " + page.name + " is unchanged")
260             else:
261                 logging.warn("Deleting page " + page.name)
262                 page.delete('No longer published')
263         for pagename, text in genp.items():
264             logging.debug("Checking " + pagename)
265             if pagename not in existingpages:
266                 logging.debug("Creating page " + pagename)
267                 try:
268                     newpage = site.Pages[pagename]
269                     newpage.save(text, summary='Auto-created')
270                 except:
271                     logging.error("...FAILED to create page '{0}'".format(pagename))
272
273     # Purge server cache to ensure counts are up to date
274     site.pages['Repository Maintenance'].purge()
275
276
277 def delete_disabled_builds(apps, apkcache, repodirs):
278     """Delete disabled build outputs.
279
280     :param apps: list of all applications, as per metadata.read_metadata
281     :param apkcache: current apk cache information
282     :param repodirs: the repo directories to process
283     """
284     for appid, app in apps.iteritems():
285         for build in app['builds']:
286             if build['disable']:
287                 apkfilename = appid + '_' + str(build['vercode']) + '.apk'
288                 for repodir in repodirs:
289                     apkpath = os.path.join(repodir, apkfilename)
290                     ascpath = apkpath + ".asc"
291                     srcpath = os.path.join(repodir, apkfilename[:-4] + "_src.tar.gz")
292                     for name in [apkpath, srcpath, ascpath]:
293                         if os.path.exists(name):
294                             logging.warn("Deleting disabled build output " + apkfilename)
295                             os.remove(name)
296                 if apkfilename in apkcache:
297                     del apkcache[apkfilename]
298
299
300 def resize_icon(iconpath, density):
301
302     if not os.path.isfile(iconpath):
303         return
304
305     try:
306         im = Image.open(iconpath)
307         size = dpi_to_px(density)
308
309         if any(length > size for length in im.size):
310             oldsize = im.size
311             im.thumbnail((size, size), Image.ANTIALIAS)
312             logging.debug("%s was too large at %s - new size is %s" % (
313                 iconpath, oldsize, im.size))
314             im.save(iconpath, "PNG")
315
316     except Exception, e:
317         logging.error("Failed resizing {0} - {1}".format(iconpath, e))
318
319
320 def resize_all_icons(repodirs):
321     """Resize all icons that exceed the max size
322
323     :param repodirs: the repo directories to process
324     """
325     for repodir in repodirs:
326         for density in get_densities():
327             icon_dir = get_icon_dir(repodir, density)
328             icon_glob = os.path.join(icon_dir, '*.png')
329             for iconpath in glob.glob(icon_glob):
330                 resize_icon(iconpath, density)
331
332
333 # A signature block file with a .DSA, .RSA, or .EC extension
334 cert_path_regex = re.compile(r'^META-INF/.*\.(DSA|EC|RSA)$')
335
336
337 def getsig(apkpath):
338     """ Get the signing certificate of an apk. To get the same md5 has that
339     Android gets, we encode the .RSA certificate in a specific format and pass
340     it hex-encoded to the md5 digest algorithm.
341
342     :param apkpath: path to the apk
343     :returns: A string containing the md5 of the signature of the apk or None
344               if an error occurred.
345     """
346
347     cert = None
348
349     # verify the jar signature is correct
350     args = ['jarsigner', '-verify', apkpath]
351     p = FDroidPopen(args)
352     if p.returncode != 0:
353         logging.critical(apkpath + " has a bad signature!")
354         return None
355
356     with zipfile.ZipFile(apkpath, 'r') as apk:
357
358         certs = [n for n in apk.namelist() if cert_path_regex.match(n)]
359
360         if len(certs) < 1:
361             logging.error("Found no signing certificates on %s" % apkpath)
362             return None
363         if len(certs) > 1:
364             logging.error("Found multiple signing certificates on %s" % apkpath)
365             return None
366
367         cert = apk.read(certs[0])
368
369     content = decoder.decode(cert, asn1Spec=rfc2315.ContentInfo())[0]
370     if content.getComponentByName('contentType') != rfc2315.signedData:
371         logging.error("Unexpected format.")
372         return None
373
374     content = decoder.decode(content.getComponentByName('content'),
375                              asn1Spec=rfc2315.SignedData())[0]
376     try:
377         certificates = content.getComponentByName('certificates')
378     except PyAsn1Error:
379         logging.error("Certificates not found.")
380         return None
381
382     cert_encoded = encoder.encode(certificates)[4:]
383
384     return md5(cert_encoded.encode('hex')).hexdigest()
385
386
387 def scan_apks(apps, apkcache, repodir, knownapks):
388     """Scan the apks in the given repo directory.
389
390     This also extracts the icons.
391
392     :param apps: list of all applications, as per metadata.read_metadata
393     :param apkcache: current apk cache information
394     :param repodir: repo directory to scan
395     :param knownapks: known apks info
396     :returns: (apks, cachechanged) where apks is a list of apk information,
397               and cachechanged is True if the apkcache got changed.
398     """
399
400     cachechanged = False
401
402     icon_dirs = get_icon_dirs(repodir)
403     for icon_dir in icon_dirs:
404         if os.path.exists(icon_dir):
405             if options.clean:
406                 shutil.rmtree(icon_dir)
407                 os.makedirs(icon_dir)
408         else:
409             os.makedirs(icon_dir)
410
411     apks = []
412     name_pat = re.compile(".*name='([a-zA-Z0-9._]*)'.*")
413     vercode_pat = re.compile(".*versionCode='([0-9]*)'.*")
414     vername_pat = re.compile(".*versionName='([^']*)'.*")
415     label_pat = re.compile(".*label='(.*?)'(\n| [a-z]*?=).*")
416     icon_pat = re.compile(".*application-icon-([0-9]+):'([^']+?)'.*")
417     icon_pat_nodpi = re.compile(".*icon='([^']+?)'.*")
418     sdkversion_pat = re.compile(".*'([0-9]*)'.*")
419     string_pat = re.compile(".*'([^']*)'.*")
420     for apkfile in glob.glob(os.path.join(repodir, '*.apk')):
421
422         apkfilename = apkfile[len(repodir) + 1:]
423         if ' ' in apkfilename:
424             logging.critical("Spaces in filenames are not allowed.")
425             sys.exit(1)
426
427         # Calculate the sha256...
428         sha = hashlib.sha256()
429         with open(apkfile, 'rb') as f:
430             while True:
431                 t = f.read(16384)
432                 if len(t) == 0:
433                     break
434                 sha.update(t)
435             shasum = sha.hexdigest()
436
437         usecache = False
438         if apkfilename in apkcache:
439             thisinfo = apkcache[apkfilename]
440             if thisinfo['sha256'] == shasum:
441                 logging.debug("Reading " + apkfilename + " from cache")
442                 usecache = True
443             else:
444                 logging.debug("Ignoring stale cache data for " + apkfilename)
445
446         if not usecache:
447             logging.debug("Processing " + apkfilename)
448             thisinfo = {}
449             thisinfo['apkname'] = apkfilename
450             thisinfo['sha256'] = shasum
451             srcfilename = apkfilename[:-4] + "_src.tar.gz"
452             if os.path.exists(os.path.join(repodir, srcfilename)):
453                 thisinfo['srcname'] = srcfilename
454             thisinfo['size'] = os.path.getsize(apkfile)
455             thisinfo['permissions'] = set()
456             thisinfo['features'] = set()
457             thisinfo['icons_src'] = {}
458             thisinfo['icons'] = {}
459             p = SdkToolsPopen(['aapt', 'dump', 'badging', apkfile], output=False)
460             if p.returncode != 0:
461                 if options.delete_unknown:
462                     if os.path.exists(apkfile):
463                         logging.error("Failed to get apk information, deleting " + apkfile)
464                         os.remove(apkfile)
465                     else:
466                         logging.error("Could not find {0} to remove it".format(apkfile))
467                 else:
468                     logging.error("Failed to get apk information, skipping " + apkfile)
469                 continue
470             for line in p.output.splitlines():
471                 if line.startswith("package:"):
472                     try:
473                         thisinfo['id'] = re.match(name_pat, line).group(1)
474                         thisinfo['versioncode'] = int(re.match(vercode_pat, line).group(1))
475                         thisinfo['version'] = re.match(vername_pat, line).group(1)
476                     except Exception, e:
477                         logging.error("Package matching failed: " + str(e))
478                         logging.info("Line was: " + line)
479                         sys.exit(1)
480                 elif line.startswith("application:"):
481                     thisinfo['name'] = re.match(label_pat, line).group(1)
482                     # Keep path to non-dpi icon in case we need it
483                     match = re.match(icon_pat_nodpi, line)
484                     if match:
485                         thisinfo['icons_src']['-1'] = match.group(1)
486                 elif line.startswith("launchable-activity:"):
487                     # Only use launchable-activity as fallback to application
488                     if not thisinfo['name']:
489                         thisinfo['name'] = re.match(label_pat, line).group(1)
490                     if '-1' not in thisinfo['icons_src']:
491                         match = re.match(icon_pat_nodpi, line)
492                         if match:
493                             thisinfo['icons_src']['-1'] = match.group(1)
494                 elif line.startswith("application-icon-"):
495                     match = re.match(icon_pat, line)
496                     if match:
497                         density = match.group(1)
498                         path = match.group(2)
499                         thisinfo['icons_src'][density] = path
500                 elif line.startswith("sdkVersion:"):
501                     m = re.match(sdkversion_pat, line)
502                     if m is None:
503                         logging.error(line.replace('sdkVersion:', '')
504                                       + ' is not a valid minSdkVersion!')
505                     else:
506                         thisinfo['sdkversion'] = m.group(1)
507                 elif line.startswith("maxSdkVersion:"):
508                     thisinfo['maxsdkversion'] = re.match(sdkversion_pat, line).group(1)
509                 elif line.startswith("native-code:"):
510                     thisinfo['nativecode'] = []
511                     for arch in line[13:].split(' '):
512                         thisinfo['nativecode'].append(arch[1:-1])
513                 elif line.startswith("uses-permission:"):
514                     perm = re.match(string_pat, line).group(1)
515                     if perm.startswith("android.permission."):
516                         perm = perm[19:]
517                     thisinfo['permissions'].add(perm)
518                 elif line.startswith("uses-feature:"):
519                     perm = re.match(string_pat, line).group(1)
520                     # Filter out this, it's only added with the latest SDK tools and
521                     # causes problems for lots of apps.
522                     if perm != "android.hardware.screen.portrait" \
523                             and perm != "android.hardware.screen.landscape":
524                         if perm.startswith("android.feature."):
525                             perm = perm[16:]
526                         thisinfo['features'].add(perm)
527
528             if 'sdkversion' not in thisinfo:
529                 logging.warn("No SDK version information found in {0}".format(apkfile))
530                 thisinfo['sdkversion'] = 0
531
532             # Check for debuggable apks...
533             if common.isApkDebuggable(apkfile, config):
534                 logging.warn('{0} is set to android:debuggable="true"'.format(apkfile))
535
536             # Get the signature (or md5 of, to be precise)...
537             logging.debug('Getting signature of {0}'.format(apkfile))
538             thisinfo['sig'] = getsig(os.path.join(os.getcwd(), apkfile))
539             if not thisinfo['sig']:
540                 logging.critical("Failed to get apk signature")
541                 sys.exit(1)
542
543             apk = zipfile.ZipFile(apkfile, 'r')
544
545             iconfilename = "%s.%s.png" % (
546                 thisinfo['id'],
547                 thisinfo['versioncode'])
548
549             # Extract the icon file...
550             densities = get_densities()
551             empty_densities = []
552             for density in densities:
553                 if density not in thisinfo['icons_src']:
554                     empty_densities.append(density)
555                     continue
556                 iconsrc = thisinfo['icons_src'][density]
557                 icon_dir = get_icon_dir(repodir, density)
558                 icondest = os.path.join(icon_dir, iconfilename)
559
560                 try:
561                     iconfile = open(icondest, 'wb')
562                     iconfile.write(apk.read(iconsrc))
563                     iconfile.close()
564                     thisinfo['icons'][density] = iconfilename
565
566                 except:
567                     logging.warn("Error retrieving icon file")
568                     del thisinfo['icons'][density]
569                     del thisinfo['icons_src'][density]
570                     empty_densities.append(density)
571
572             if '-1' in thisinfo['icons_src']:
573                 iconsrc = thisinfo['icons_src']['-1']
574                 iconpath = os.path.join(
575                     get_icon_dir(repodir, None), iconfilename)
576                 iconfile = open(iconpath, 'wb')
577                 iconfile.write(apk.read(iconsrc))
578                 iconfile.close()
579                 try:
580                     im = Image.open(iconpath)
581                     dpi = px_to_dpi(im.size[0])
582                     for density in densities:
583                         if density in thisinfo['icons']:
584                             break
585                         if density == densities[-1] or dpi >= int(density):
586                             thisinfo['icons'][density] = iconfilename
587                             shutil.move(iconpath,
588                                         os.path.join(get_icon_dir(repodir, density), iconfilename))
589                             empty_densities.remove(density)
590                             break
591                 except Exception, e:
592                     logging.warn("Failed reading {0} - {1}".format(iconpath, e))
593
594             if thisinfo['icons']:
595                 thisinfo['icon'] = iconfilename
596
597             apk.close()
598
599             # First try resizing down to not lose quality
600             last_density = None
601             for density in densities:
602                 if density not in empty_densities:
603                     last_density = density
604                     continue
605                 if last_density is None:
606                     continue
607                 logging.debug("Density %s not available, resizing down from %s"
608                               % (density, last_density))
609
610                 last_iconpath = os.path.join(
611                     get_icon_dir(repodir, last_density), iconfilename)
612                 iconpath = os.path.join(
613                     get_icon_dir(repodir, density), iconfilename)
614                 try:
615                     im = Image.open(last_iconpath)
616                 except:
617                     logging.warn("Invalid image file at %s" % last_iconpath)
618                     continue
619
620                 size = dpi_to_px(density)
621
622                 im.thumbnail((size, size), Image.ANTIALIAS)
623                 im.save(iconpath, "PNG")
624                 empty_densities.remove(density)
625
626             # Then just copy from the highest resolution available
627             last_density = None
628             for density in reversed(densities):
629                 if density not in empty_densities:
630                     last_density = density
631                     continue
632                 if last_density is None:
633                     continue
634                 logging.debug("Density %s not available, copying from lower density %s"
635                               % (density, last_density))
636
637                 shutil.copyfile(
638                     os.path.join(get_icon_dir(repodir, last_density), iconfilename),
639                     os.path.join(get_icon_dir(repodir, density), iconfilename))
640
641                 empty_densities.remove(density)
642
643             for density in densities:
644                 icon_dir = get_icon_dir(repodir, density)
645                 icondest = os.path.join(icon_dir, iconfilename)
646                 resize_icon(icondest, density)
647
648             # Copy from icons-mdpi to icons since mdpi is the baseline density
649             baseline = os.path.join(get_icon_dir(repodir, '160'), iconfilename)
650             if os.path.isfile(baseline):
651                 shutil.copyfile(baseline,
652                                 os.path.join(get_icon_dir(repodir, None), iconfilename))
653
654             # Record in known apks, getting the added date at the same time..
655             added = knownapks.recordapk(thisinfo['apkname'], thisinfo['id'])
656             if added:
657                 thisinfo['added'] = added
658
659             apkcache[apkfilename] = thisinfo
660             cachechanged = True
661
662         apks.append(thisinfo)
663
664     return apks, cachechanged
665
666
667 repo_pubkey_fingerprint = None
668
669
670 # Generate a certificate fingerprint the same way keytool does it
671 # (but with slightly different formatting)
672 def cert_fingerprint(data):
673     digest = hashlib.sha256(data).digest()
674     ret = []
675     ret.append(' '.join("%02X" % ord(b) for b in digest))
676     return " ".join(ret)
677
678
679 def extract_pubkey():
680     global repo_pubkey_fingerprint
681     if 'repo_pubkey' in config:
682         pubkey = unhexlify(config['repo_pubkey'])
683     else:
684         p = FDroidPopen(['keytool', '-exportcert',
685                          '-alias', config['repo_keyalias'],
686                          '-keystore', config['keystore'],
687                          '-storepass:file', config['keystorepassfile']]
688                         + config['smartcardoptions'], output=False)
689         if p.returncode != 0 or len(p.output) < 20:
690             msg = "Failed to get repo pubkey!"
691             if config['keystore'] == 'NONE':
692                 msg += ' Is your crypto smartcard plugged in?'
693             logging.critical(msg)
694             sys.exit(1)
695         pubkey = p.output
696     repo_pubkey_fingerprint = cert_fingerprint(pubkey)
697     return hexlify(pubkey)
698
699
700 def make_index(apps, sortedids, apks, repodir, archive, categories):
701     """Make a repo index.
702
703     :param apps: fully populated apps list
704     :param apks: full populated apks list
705     :param repodir: the repo directory
706     :param archive: True if this is the archive repo, False if it's the
707                     main one.
708     :param categories: list of categories
709     """
710
711     doc = Document()
712
713     def addElement(name, value, doc, parent):
714         el = doc.createElement(name)
715         el.appendChild(doc.createTextNode(value))
716         parent.appendChild(el)
717
718     def addElementNonEmpty(name, value, doc, parent):
719         if not value:
720             return
721         addElement(name, value, doc, parent)
722
723     def addElementCDATA(name, value, doc, parent):
724         el = doc.createElement(name)
725         el.appendChild(doc.createCDATASection(value))
726         parent.appendChild(el)
727
728     root = doc.createElement("fdroid")
729     doc.appendChild(root)
730
731     repoel = doc.createElement("repo")
732
733     if archive:
734         repoel.setAttribute("name", config['archive_name'])
735         if config['repo_maxage'] != 0:
736             repoel.setAttribute("maxage", str(config['repo_maxage']))
737         repoel.setAttribute("icon", os.path.basename(config['archive_icon']))
738         repoel.setAttribute("url", config['archive_url'])
739         addElement('description', config['archive_description'], doc, repoel)
740
741     else:
742         repoel.setAttribute("name", config['repo_name'])
743         if config['repo_maxage'] != 0:
744             repoel.setAttribute("maxage", str(config['repo_maxage']))
745         repoel.setAttribute("icon", os.path.basename(config['repo_icon']))
746         repoel.setAttribute("url", config['repo_url'])
747         addElement('description', config['repo_description'], doc, repoel)
748
749     repoel.setAttribute("version", "13")
750     repoel.setAttribute("timestamp", str(int(time.time())))
751
752     nosigningkey = False
753     if not options.nosign:
754         if 'repo_keyalias' not in config:
755             nosigningkey = True
756             logging.critical("'repo_keyalias' not found in config.py!")
757         if 'keystore' not in config:
758             nosigningkey = True
759             logging.critical("'keystore' not found in config.py!")
760         if 'keystorepass' not in config and 'keystorepassfile' not in config:
761             nosigningkey = True
762             logging.critical("'keystorepass' not found in config.py!")
763         if 'keypass' not in config and 'keypassfile' not in config:
764             nosigningkey = True
765             logging.critical("'keypass' not found in config.py!")
766         if not os.path.exists(config['keystore']):
767             nosigningkey = True
768             logging.critical("'" + config['keystore'] + "' does not exist!")
769         if nosigningkey:
770             logging.warning("`fdroid update` requires a signing key, you can create one using:")
771             logging.warning("\tfdroid update --create-key")
772             sys.exit(1)
773
774     repoel.setAttribute("pubkey", extract_pubkey())
775     root.appendChild(repoel)
776
777     for appid in sortedids:
778         app = apps[appid]
779
780         if app['Disabled'] is not None:
781             continue
782
783         # Get a list of the apks for this app...
784         apklist = []
785         for apk in apks:
786             if apk['id'] == appid:
787                 apklist.append(apk)
788
789         if len(apklist) == 0:
790             continue
791
792         apel = doc.createElement("application")
793         apel.setAttribute("id", app['id'])
794         root.appendChild(apel)
795
796         addElement('id', app['id'], doc, apel)
797         if 'added' in app:
798             addElement('added', time.strftime('%Y-%m-%d', app['added']), doc, apel)
799         if 'lastupdated' in app:
800             addElement('lastupdated', time.strftime('%Y-%m-%d', app['lastupdated']), doc, apel)
801         addElement('name', app['Name'], doc, apel)
802         addElement('summary', app['Summary'], doc, apel)
803         if app['icon']:
804             addElement('icon', app['icon'], doc, apel)
805
806         def linkres(appid):
807             if appid in apps:
808                 return ("fdroid.app:" + appid, apps[appid]['Name'])
809             raise MetaDataException("Cannot resolve app id " + appid)
810
811         addElement('desc',
812                    metadata.description_html(app['Description'], linkres),
813                    doc, apel)
814         addElement('license', app['License'], doc, apel)
815         if 'Categories' in app and app['Categories']:
816             addElement('categories', ','.join(app["Categories"]), doc, apel)
817             # We put the first (primary) category in LAST, which will have
818             # the desired effect of making clients that only understand one
819             # category see that one.
820             addElement('category', app["Categories"][0], doc, apel)
821         addElement('web', app['Web Site'], doc, apel)
822         addElement('source', app['Source Code'], doc, apel)
823         addElement('tracker', app['Issue Tracker'], doc, apel)
824         addElementNonEmpty('changelog', app['Changelog'], doc, apel)
825         addElementNonEmpty('donate', app['Donate'], doc, apel)
826         addElementNonEmpty('bitcoin', app['Bitcoin'], doc, apel)
827         addElementNonEmpty('litecoin', app['Litecoin'], doc, apel)
828         addElementNonEmpty('dogecoin', app['Dogecoin'], doc, apel)
829         addElementNonEmpty('flattr', app['FlattrID'], doc, apel)
830
831         # These elements actually refer to the current version (i.e. which
832         # one is recommended. They are historically mis-named, and need
833         # changing, but stay like this for now to support existing clients.
834         addElement('marketversion', app['Current Version'], doc, apel)
835         addElement('marketvercode', app['Current Version Code'], doc, apel)
836
837         if app['AntiFeatures']:
838             af = app['AntiFeatures'].split(',')
839             if af:
840                 addElementNonEmpty('antifeatures', ','.join(af), doc, apel)
841         if app['Provides']:
842             pv = app['Provides'].split(',')
843             addElementNonEmpty('provides', ','.join(pv), doc, apel)
844         if app['Requires Root']:
845             addElement('requirements', 'root', doc, apel)
846
847         # Sort the apk list into version order, just so the web site
848         # doesn't have to do any work by default...
849         apklist = sorted(apklist, key=lambda apk: apk['versioncode'], reverse=True)
850
851         # Check for duplicates - they will make the client unhappy...
852         for i in range(len(apklist) - 1):
853             if apklist[i]['versioncode'] == apklist[i + 1]['versioncode']:
854                 logging.critical("duplicate versions: '%s' - '%s'" % (
855                     apklist[i]['apkname'], apklist[i + 1]['apkname']))
856                 sys.exit(1)
857
858         current_version_code = 0
859         current_version_file = None
860         for apk in apklist:
861             # find the APK for the "Current Version"
862             if current_version_code < apk['versioncode']:
863                 current_version_code = apk['versioncode']
864             if current_version_code < int(app['Current Version Code']):
865                 current_version_file = apk['apkname']
866
867             apkel = doc.createElement("package")
868             apel.appendChild(apkel)
869             addElement('version', apk['version'], doc, apkel)
870             addElement('versioncode', str(apk['versioncode']), doc, apkel)
871             addElement('apkname', apk['apkname'], doc, apkel)
872             if 'srcname' in apk:
873                 addElement('srcname', apk['srcname'], doc, apkel)
874             for hash_type in ['sha256']:
875                 if hash_type not in apk:
876                     continue
877                 hashel = doc.createElement("hash")
878                 hashel.setAttribute("type", hash_type)
879                 hashel.appendChild(doc.createTextNode(apk[hash_type]))
880                 apkel.appendChild(hashel)
881             addElement('sig', apk['sig'], doc, apkel)
882             addElement('size', str(apk['size']), doc, apkel)
883             addElement('sdkver', str(apk['sdkversion']), doc, apkel)
884             if 'maxsdkversion' in apk:
885                 addElement('maxsdkver', str(apk['maxsdkversion']), doc, apkel)
886             if 'added' in apk:
887                 addElement('added', time.strftime('%Y-%m-%d', apk['added']), doc, apkel)
888             addElementNonEmpty('permissions', ','.join(apk['permissions']), doc, apkel)
889             if 'nativecode' in apk:
890                 addElement('nativecode', ','.join(apk['nativecode']), doc, apkel)
891             addElementNonEmpty('features', ','.join(apk['features']), doc, apkel)
892
893         if current_version_file is not None \
894                 and config['make_current_version_link'] \
895                 and repodir == 'repo':  # only create these
896             sanitized_name = re.sub('''[ '"&%?+=/]''', '',
897                                     app[config['current_version_name_source']])
898             apklinkname = sanitized_name + '.apk'
899             current_version_path = os.path.join(repodir, current_version_file)
900             if os.path.exists(apklinkname):
901                 os.remove(apklinkname)
902             os.symlink(current_version_path, apklinkname)
903             # also symlink gpg signature, if it exists
904             for extension in ('.asc', '.sig'):
905                 sigfile_path = current_version_path + extension
906                 if os.path.exists(sigfile_path):
907                     siglinkname = apklinkname + extension
908                     if os.path.exists(siglinkname):
909                         os.remove(siglinkname)
910                     os.symlink(sigfile_path, siglinkname)
911
912     of = open(os.path.join(repodir, 'index.xml'), 'wb')
913     if options.pretty:
914         output = doc.toprettyxml()
915     else:
916         output = doc.toxml()
917     of.write(output)
918     of.close()
919
920     if 'repo_keyalias' in config:
921
922         if options.nosign:
923             logging.info("Creating unsigned index in preparation for signing")
924         else:
925             logging.info("Creating signed index with this key (SHA256):")
926             logging.info("%s" % repo_pubkey_fingerprint)
927
928         # Create a jar of the index...
929         jar_output = 'index_unsigned.jar' if options.nosign else 'index.jar'
930         p = FDroidPopen(['jar', 'cf', jar_output, 'index.xml'], cwd=repodir)
931         if p.returncode != 0:
932             logging.critical("Failed to create {0}".format(jar_output))
933             sys.exit(1)
934
935         # Sign the index...
936         signed = os.path.join(repodir, 'index.jar')
937         if options.nosign:
938             # Remove old signed index if not signing
939             if os.path.exists(signed):
940                 os.remove(signed)
941         else:
942             args = ['jarsigner', '-keystore', config['keystore'],
943                     '-storepass:file', config['keystorepassfile'],
944                     '-digestalg', 'SHA1', '-sigalg', 'MD5withRSA',
945                     signed, config['repo_keyalias']]
946             if config['keystore'] == 'NONE':
947                 args += config['smartcardoptions']
948             else:  # smardcards never use -keypass
949                 args += ['-keypass:file', config['keypassfile']]
950             p = FDroidPopen(args)
951             if p.returncode != 0:
952                 logging.critical("Failed to sign index")
953                 sys.exit(1)
954
955     # Copy the repo icon into the repo directory...
956     icon_dir = os.path.join(repodir, 'icons')
957     iconfilename = os.path.join(icon_dir, os.path.basename(config['repo_icon']))
958     shutil.copyfile(config['repo_icon'], iconfilename)
959
960     # Write a category list in the repo to allow quick access...
961     catdata = ''
962     for cat in categories:
963         catdata += cat + '\n'
964     f = open(os.path.join(repodir, 'categories.txt'), 'w')
965     f.write(catdata)
966     f.close()
967
968
969 def archive_old_apks(apps, apks, archapks, repodir, archivedir, defaultkeepversions):
970
971     for appid, app in apps.iteritems():
972
973         # Get a list of the apks for this app...
974         apklist = []
975         for apk in apks:
976             if apk['id'] == appid:
977                 apklist.append(apk)
978
979         # Sort the apk list into version order...
980         apklist = sorted(apklist, key=lambda apk: apk['versioncode'], reverse=True)
981
982         if app['Archive Policy']:
983             keepversions = int(app['Archive Policy'][:-9])
984         else:
985             keepversions = defaultkeepversions
986
987         if len(apklist) > keepversions:
988             for apk in apklist[keepversions:]:
989                 logging.info("Moving " + apk['apkname'] + " to archive")
990                 shutil.move(os.path.join(repodir, apk['apkname']),
991                             os.path.join(archivedir, apk['apkname']))
992                 if 'srcname' in apk:
993                     shutil.move(os.path.join(repodir, apk['srcname']),
994                                 os.path.join(archivedir, apk['srcname']))
995                     # Move GPG signature too...
996                     sigfile = apk['srcname'] + '.asc'
997                     sigsrc = os.path.join(repodir, sigfile)
998                     if os.path.exists(sigsrc):
999                         shutil.move(sigsrc, os.path.join(archivedir, sigfile))
1000
1001                 archapks.append(apk)
1002                 apks.remove(apk)
1003
1004
1005 config = None
1006 options = None
1007
1008
1009 def main():
1010
1011     global config, options
1012
1013     # Parse command line...
1014     parser = OptionParser()
1015     parser.add_option("--create-key", action="store_true", default=False,
1016                       help="Create a repo signing key in a keystore")
1017     parser.add_option("-c", "--create-metadata", action="store_true", default=False,
1018                       help="Create skeleton metadata files that are missing")
1019     parser.add_option("--delete-unknown", action="store_true", default=False,
1020                       help="Delete APKs without metadata from the repo")
1021     parser.add_option("-v", "--verbose", action="store_true", default=False,
1022                       help="Spew out even more information than normal")
1023     parser.add_option("-q", "--quiet", action="store_true", default=False,
1024                       help="Restrict output to warnings and errors")
1025     parser.add_option("-b", "--buildreport", action="store_true", default=False,
1026                       help="Report on build data status")
1027     parser.add_option("-i", "--interactive", default=False, action="store_true",
1028                       help="Interactively ask about things that need updating.")
1029     parser.add_option("-I", "--icons", action="store_true", default=False,
1030                       help="Resize all the icons exceeding the max pixel size and exit")
1031     parser.add_option("-e", "--editor", default="/etc/alternatives/editor",
1032                       help="Specify editor to use in interactive mode. Default " +
1033                       "is /etc/alternatives/editor")
1034     parser.add_option("-w", "--wiki", default=False, action="store_true",
1035                       help="Update the wiki")
1036     parser.add_option("", "--pretty", action="store_true", default=False,
1037                       help="Produce human-readable index.xml")
1038     parser.add_option("--clean", action="store_true", default=False,
1039                       help="Clean update - don't uses caches, reprocess all apks")
1040     parser.add_option("--nosign", action="store_true", default=False,
1041                       help="When configured for signed indexes, create only unsigned indexes at this stage")
1042     (options, args) = parser.parse_args()
1043
1044     config = common.read_config(options)
1045
1046     repodirs = ['repo']
1047     if config['archive_older'] != 0:
1048         repodirs.append('archive')
1049         if not os.path.exists('archive'):
1050             os.mkdir('archive')
1051
1052     if options.icons:
1053         resize_all_icons(repodirs)
1054         sys.exit(0)
1055
1056     # check that icons exist now, rather than fail at the end of `fdroid update`
1057     for k in ['repo_icon', 'archive_icon']:
1058         if k in config:
1059             if not os.path.exists(config[k]):
1060                 logging.critical(k + ' "' + config[k] + '" does not exist! Correct it in config.py.')
1061                 sys.exit(1)
1062
1063     # if the user asks to create a keystore, do it now, reusing whatever it can
1064     if options.create_key:
1065         if os.path.exists(config['keystore']):
1066             logging.critical("Cowardily refusing to overwrite existing signing key setup!")
1067             logging.critical("\t'" + config['keystore'] + "'")
1068             sys.exit(1)
1069
1070         if 'repo_keyalias' not in config:
1071             config['repo_keyalias'] = socket.getfqdn()
1072             common.write_to_config(config, 'repo_keyalias', config['repo_keyalias'])
1073         if 'keydname' not in config:
1074             config['keydname'] = 'CN=' + config['repo_keyalias'] + ', OU=F-Droid'
1075             common.write_to_config(config, 'keydname', config['keydname'])
1076         if 'keystore' not in config:
1077             config['keystore'] = common.default_config.keystore
1078             common.write_to_config(config, 'keystore', config['keystore'])
1079
1080         password = common.genpassword()
1081         if 'keystorepass' not in config:
1082             config['keystorepass'] = password
1083             common.write_to_config(config, 'keystorepass', config['keystorepass'])
1084         if 'keypass' not in config:
1085             config['keypass'] = password
1086             common.write_to_config(config, 'keypass', config['keypass'])
1087         common.genkeystore(config)
1088
1089     # Get all apps...
1090     apps = metadata.read_metadata()
1091
1092     # Generate a list of categories...
1093     categories = set()
1094     for app in apps.itervalues():
1095         categories.update(app['Categories'])
1096
1097     # Read known apks data (will be updated and written back when we've finished)
1098     knownapks = common.KnownApks()
1099
1100     # Gather information about all the apk files in the repo directory, using
1101     # cached data if possible.
1102     apkcachefile = os.path.join('tmp', 'apkcache')
1103     if not options.clean and os.path.exists(apkcachefile):
1104         with open(apkcachefile, 'rb') as cf:
1105             apkcache = pickle.load(cf)
1106     else:
1107         apkcache = {}
1108     cachechanged = False
1109
1110     delete_disabled_builds(apps, apkcache, repodirs)
1111
1112     # Scan all apks in the main repo
1113     apks, cc = scan_apks(apps, apkcache, repodirs[0], knownapks)
1114     if cc:
1115         cachechanged = True
1116
1117     # Generate warnings for apk's with no metadata (or create skeleton
1118     # metadata files, if requested on the command line)
1119     newmetadata = False
1120     for apk in apks:
1121         if apk['id'] not in apps:
1122             if options.create_metadata:
1123                 if 'name' not in apk:
1124                     logging.error(apk['id'] + ' does not have a name! Skipping...')
1125                     continue
1126                 f = open(os.path.join('metadata', apk['id'] + '.txt'), 'w')
1127                 f.write("License:Unknown\n")
1128                 f.write("Web Site:\n")
1129                 f.write("Source Code:\n")
1130                 f.write("Issue Tracker:\n")
1131                 f.write("Changelog:\n")
1132                 f.write("Summary:" + apk['name'] + "\n")
1133                 f.write("Description:\n")
1134                 f.write(apk['name'] + "\n")
1135                 f.write(".\n")
1136                 f.close()
1137                 logging.info("Generated skeleton metadata for " + apk['id'])
1138                 newmetadata = True
1139             else:
1140                 msg = apk['apkname'] + " (" + apk['id'] + ") has no metadata!"
1141                 if options.delete_unknown:
1142                     logging.warn(msg + "\n\tdeleting: repo/" + apk['apkname'])
1143                     rmf = os.path.join(repodirs[0], apk['apkname'])
1144                     if not os.path.exists(rmf):
1145                         logging.error("Could not find {0} to remove it".format(rmf))
1146                     else:
1147                         os.remove(rmf)
1148                 else:
1149                     logging.warn(msg + "\n\tUse `fdroid update -c` to create it.")
1150
1151     # update the metadata with the newly created ones included
1152     if newmetadata:
1153         apps = metadata.read_metadata()
1154
1155     # Scan the archive repo for apks as well
1156     if len(repodirs) > 1:
1157         archapks, cc = scan_apks(apps, apkcache, repodirs[1], knownapks)
1158         if cc:
1159             cachechanged = True
1160     else:
1161         archapks = []
1162
1163     # Some information from the apks needs to be applied up to the application
1164     # level. When doing this, we use the info from the most recent version's apk.
1165     # We deal with figuring out when the app was added and last updated at the
1166     # same time.
1167     for appid, app in apps.iteritems():
1168         bestver = 0
1169         added = None
1170         lastupdated = None
1171         for apk in apks + archapks:
1172             if apk['id'] == appid:
1173                 if apk['versioncode'] > bestver:
1174                     bestver = apk['versioncode']
1175                     bestapk = apk
1176
1177                 if 'added' in apk:
1178                     if not added or apk['added'] < added:
1179                         added = apk['added']
1180                     if not lastupdated or apk['added'] > lastupdated:
1181                         lastupdated = apk['added']
1182
1183         if added:
1184             app['added'] = added
1185         else:
1186             logging.warn("Don't know when " + appid + " was added")
1187         if lastupdated:
1188             app['lastupdated'] = lastupdated
1189         else:
1190             logging.warn("Don't know when " + appid + " was last updated")
1191
1192         if bestver == 0:
1193             if app['Name'] is None:
1194                 app['Name'] = app['Auto Name'] or appid
1195             app['icon'] = None
1196             logging.warn("Application " + appid + " has no packages")
1197         else:
1198             if app['Name'] is None:
1199                 app['Name'] = bestapk['name']
1200             app['icon'] = bestapk['icon'] if 'icon' in bestapk else None
1201
1202     # Sort the app list by name, then the web site doesn't have to by default.
1203     # (we had to wait until we'd scanned the apks to do this, because mostly the
1204     # name comes from there!)
1205     sortedids = sorted(apps.iterkeys(), key=lambda appid: apps[appid]['Name'].upper())
1206
1207     if len(repodirs) > 1:
1208         archive_old_apks(apps, apks, archapks, repodirs[0], repodirs[1], config['archive_older'])
1209
1210     # Make the index for the main repo...
1211     make_index(apps, sortedids, apks, repodirs[0], False, categories)
1212
1213     # If there's an archive repo,  make the index for it. We already scanned it
1214     # earlier on.
1215     if len(repodirs) > 1:
1216         make_index(apps, sortedids, archapks, repodirs[1], True, categories)
1217
1218     if config['update_stats']:
1219
1220         # Update known apks info...
1221         knownapks.writeifchanged()
1222
1223         # Generate latest apps data for widget
1224         if os.path.exists(os.path.join('stats', 'latestapps.txt')):
1225             data = ''
1226             for line in file(os.path.join('stats', 'latestapps.txt')):
1227                 appid = line.rstrip()
1228                 data += appid + "\t"
1229                 app = apps[appid]
1230                 data += app['Name'] + "\t"
1231                 if app['icon'] is not None:
1232                     data += app['icon'] + "\t"
1233                 data += app['License'] + "\n"
1234             f = open(os.path.join(repodirs[0], 'latestapps.dat'), 'w')
1235             f.write(data)
1236             f.close()
1237
1238     if cachechanged:
1239         with open(apkcachefile, 'wb') as cf:
1240             pickle.dump(apkcache, cf)
1241
1242     # Update the wiki...
1243     if options.wiki:
1244         update_wiki(apps, sortedids, apks + archapks)
1245
1246     logging.info("Finished.")
1247
1248 if __name__ == "__main__":
1249     main()