chiark / gitweb /
sanitize mirror URLs to prevent path segments from being removed
[fdroidserver.git] / makebuildserver
1 #!/usr/bin/env python3
2
3 import os
4 import requests
5 import sys
6 import subprocess
7 import time
8 import hashlib
9 import yaml
10 from clint.textui import progress
11 from optparse import OptionParser
12
13
14 def vagrant(params, cwd=None, printout=False):
15     """Run vagrant.
16
17     :param: list of parameters to pass to vagrant
18     :cwd: directory to run in, or None for current directory
19     :printout: True to print output in realtime, False to just
20                return it
21     :returns: (ret, out) where ret is the return code, and out
22                is the stdout (and stderr) from vagrant
23     """
24     p = subprocess.Popen(['vagrant'] + params, cwd=cwd,
25                          stdout=subprocess.PIPE, stderr=subprocess.STDOUT,
26                          universal_newlines=True)
27     out = ''
28     if printout:
29         while True:
30             line = p.stdout.readline()
31             if len(line) == 0:
32                 break
33             print(line.rstrip())
34             out += line
35         p.wait()
36     else:
37         out = p.communicate()[0]
38     return (p.returncode, out)
39
40 boxfile = 'buildserver.box'
41 serverdir = 'buildserver'
42
43 parser = OptionParser()
44 parser.add_option("-v", "--verbose", action="store_true", default=False,
45                   help="Spew out even more information than normal")
46 parser.add_option("-c", "--clean", action="store_true", default=False,
47                   help="Build from scratch, rather than attempting to update the existing server")
48 options, args = parser.parse_args()
49
50 # set up default config
51 cachedir = os.path.join(os.getenv('HOME'), '.cache', 'fdroidserver')
52 config = {
53     'basebox': 'jessie64',
54     # TODO in py3, convert this to pathlib.Path(absolute_path_string).as_uri()
55     'baseboxurl': [
56         'file://' + os.path.join(cachedir, 'jessie64.box'),
57         'https://f-droid.org/jessie64.box',
58     ],
59     'debian_mirror': 'http://http.debian.net/debian/',
60     'apt_package_cache': False,
61     'boot_timeout': 600,
62     'cachedir': cachedir,
63     'cpus': 1,
64     'memory': 1024,
65     'hwvirtex': 'off',
66 }
67
68 # load config file, if present
69 if os.path.exists('makebuildserver.config.py'):
70     exec(compile(open('makebuildserver.config.py').read(), 'makebuildserver.config.py', 'exec'), config)
71 elif os.path.exists('makebs.config.py'):
72     # this is the old name for the config file
73     exec(compile(open('makebs.config.py').read(), 'makebs.config.py', 'exec'), config)
74 if '__builtins__' in config:
75     del(config['__builtins__'])  # added by compile/exec
76
77 if not os.path.exists('makebuildserver') or not os.path.exists(serverdir):
78     print('This must be run from the correct directory!')
79     sys.exit(1)
80
81 if os.path.exists(boxfile):
82     os.remove(boxfile)
83
84 if options.clean:
85     vagrant(['destroy', '-f'], cwd=serverdir, printout=options.verbose)
86
87 # Update cached files.
88 cachedir = config['cachedir']
89 if not os.path.exists(cachedir):
90     os.makedirs(cachedir, 0o755)
91
92 if config['apt_package_cache']:
93     config['aptcachedir'] = cachedir + '/apt/archives'
94
95 cachefiles = [
96     ('https://dl.google.com/android/repository/tools_r25.2.1-linux.zip',
97      '03499e02bfc0eb22e1f80318f7f0d74af37e18ed3055af547eb2689decbb963a'),
98     ('https://dl.google.com/android/repository/android_m2repository_r36.zip',
99      '44a45d2f8c4c230f3810e09858153c0c6a2b22efb704750413e29aa6f60a969c'),
100     ('https://dl.google.com/android/repository/android-1.5_r04-linux.zip',
101      '85b6c8f9797e56aa415d3a282428bb640c96b0acb17c11d41621bb2a5302fe64'),
102     ('https://dl.google.com/android/repository/android-1.6_r03-linux.zip',
103      'a8c4e3b32269c6b04c2adeabd112fce42f292dab1a40ef3b08ea7d4212be0df4'),
104     ('https://dl.google.com/android/repository/android-2.0_r01-linux.zip',
105      'e70e2151b49613f23f40828c771ab85e241eed361cab037c6312df77f2612f0a'),
106     ('https://dl.google.com/android/repository/android-2.0.1_r01-linux.zip',
107      'f47b46177b17f6368461f85bc2a27d0d2c437929f588ea27105712bc3185f664'),
108     ('https://dl.google.com/android/repository/android-2.1_r03.zip',
109      'b9cc140a9b879586181b22cfc7d4aa18b979251e16e9b17771c5d0acb71ba940'),
110     ('https://dl.google.com/android/repository/android-2.2_r03.zip',
111      '7c9ea1bd7cb225504bd085d7c93ae27d52bd88d29b621d28108f82fef68177c0'),
112     ('https://dl.google.com/android/repository/android-2.3.1_r02.zip',
113      'b2ab4896d0a4857e4f688f69eb08b0e1a8074709d4445a92a83ece7ec7cd198c'),
114     ('https://dl.google.com/android/repository/android-2.3.3_r02.zip',
115      '54bdb0f1ca06ba5747061ddeea20f431af72c448334fd4d3d7f84ea2ccd29fea'),
116     ('https://dl.google.com/android/repository/android-3.0_r02.zip',
117      '1cacae7b6e1b5a5d73c06f5d29d2ea92d16674df8fd5507681290e77d1647a1c'),
118     ('https://dl.google.com/android/repository/android-3.1_r03.zip',
119      '7570c86a86488a146aa2141a65a24d81800959c1907ff4f1d2c13bbafab230c5'),
120     ('https://dl.google.com/android/repository/android-3.2_r01.zip',
121      'ff6b26ad34d7060a72ba504b0314cef8ba3138005561705adec5ad470a073d9b'),
122     ('https://dl.google.com/android/repository/android-14_r04.zip',
123      'da1af15c77ba41d062eb6d0ef5921cc424ab6167587033b830609d65f04802b6'),
124     ('https://dl.google.com/android/repository/android-15_r05.zip',
125      '5bc1f93aae86b4336ffc4cae9eb8ec41a9a8fd677582dd86a9629798f019bed9'),
126     ('https://dl.google.com/android/repository/android-16_r05.zip',
127      'fd7f269a423d1f1d079eabf9f918ceab49108702a1c6bb2589d57c23393503d3'),
128     ('https://dl.google.com/android/repository/android-17_r03.zip',
129      'b66e73fb2639f8c916fde4369aa29012a5c531e156dbb205fe3788fe998fbbe8'),
130     ('https://dl.google.com/android/repository/android-18_r03.zip',
131      '166ae9cf299747a5faa8f04168f0ee47cd7466a975d8b44acaaa62a43e767568'),
132     ('https://dl.google.com/android/repository/android-19_r04.zip',
133      '5efc3a3a682c1d49128daddb6716c433edf16e63349f32959b6207524ac04039'),
134     ('https://dl.google.com/android/repository/android-20_r02.zip',
135      'ef08c453e16ab6e656cf5d9413ef61cb8c650607d33b24ee4ce08dafdfe965a7'),
136     ('https://dl.google.com/android/repository/android-21_r02.zip',
137      'a76cd7ad3080ac6ce9f037cb935b399a1bad396c0605d4ff42f693695f1dcefe'),
138     ('https://dl.google.com/android/repository/android-22_r02.zip',
139      '45eb581bbe53c9256f34c26b2cea919543c0079140897ac721cf88c0b9f6789e'),
140     ('https://dl.google.com/android/repository/platform-23_r03.zip',
141      '4b4bcddead3319708275c54c76294707bfaa953d767e34f1a5b599f3edd0076c'),
142     ('https://dl.google.com/android/repository/platform-24_r01.zip',
143      '5c9cef4fb7cf55dee7c4b435d2341f9bf26d5b7e3ae40d0b9e6e3d0391a54553'),
144     ('https://dl.google.com/android/repository/build-tools_r17-linux.zip',
145      '4c8444972343a19045236f6924bd7f12046287c70dace96ab88b2159c8ec0e74'),
146     ('https://dl.google.com/android/repository/build-tools_r18.0.1-linux.zip',
147      'a9b7b1bdfd864780fdd03fa1683f3fe712a4276cf200646833808cb9159bafc0'),
148     ('https://dl.google.com/android/repository/build-tools_r18.1-linux.zip',
149      '0753606738f31cc346426db1d46b7d021bc1bdaff63085f9ee9d278ee054d3c9'),
150     ('https://dl.google.com/android/repository/build-tools_r18.1.1-linux.zip',
151      '7e4ed326b53078f4f23276ddab52c400011f7593dfbb6508c0a6671954dba8b0'),
152     ('https://dl.google.com/android/repository/build-tools_r19-linux.zip',
153      '9442e1c5212ed594e344a231fa93e7a017a5ef8cc661117011f1d3142eca7acc'),
154     ('https://dl.google.com/android/repository/build-tools_r19.0.1-linux.zip',
155      'b068edaff05c3253a63e9c8f0e1786429799b7e4b01514a847a8b291beb9232e'),
156     ('https://dl.google.com/android/repository/build-tools_r19.0.2-linux.zip',
157      '06124fad0d4bde21191240d61df2059a8546c085064a9a57d024c36fa2c9bebb'),
158     ('https://dl.google.com/android/repository/build-tools_r19.0.3-linux.zip',
159      'bc9b3db0de4a3e233a170274293359051a758f1e3f0d0d852ff4ad6d90d0a794'),
160     ('https://dl.google.com/android/repository/build-tools_r19.1-linux.zip',
161      '3833b409f78c002a83244e220be380ea6fa44d604e0d47de4b7e5daefe7cd3f4'),
162     ('https://dl.google.com/android/repository/build-tools_r20-linux.zip',
163      '296e09d62095d80e6eaa06a64cfa4c6f9f317c2d67ad8da6514523ec66f5c871'),
164     ('https://dl.google.com/android/repository/build-tools_r21-linux.zip',
165      '12b818f38fe1b68091b94545988317438efbf41eb61fd36b72cd79f536044065'),
166     ('https://dl.google.com/android/repository/build-tools_r21.0.1-linux.zip',
167      'a8922e80d3dd0cf6df14b29a7862448fa111b48086c639168d4b18c92431f559'),
168     ('https://dl.google.com/android/repository/build-tools_r21.0.2-linux.zip',
169      '859b17a6b65d063dfd86c163489b736b12bdeecd9173fdddb3e9f32e0fe584b7'),
170     ('https://dl.google.com/android/repository/build-tools_r21.1-linux.zip',
171      '022a85b92360272379b2f04b8a4d727e754dbe7eb8ab5a9568190e33e480d8f1'),
172     ('https://dl.google.com/android/repository/build-tools_r21.1.1-linux.zip',
173      '29b612484de6b5cde0df6de655e413f7611b0557b440538397afa69b557e2f08'),
174     ('https://dl.google.com/android/repository/build-tools_r21.1.2-linux.zip',
175      '3f88efc2d5316fb73f547f35b472610eed5e6f3f56762750ddad1c7d1d81660d'),
176     ('https://dl.google.com/android/repository/build-tools_r22-linux.zip',
177      '061c021243f04c80c19568a6e3a027c00d8e269c9311d7bf07fced60fbde7bd5'),
178     ('https://dl.google.com/android/repository/build-tools_r22.0.1-linux.zip',
179      '91e5524bf227aad1135ddd10905518ac49f74797d33d48920dcf8364b9fde214'),
180     ('https://dl.google.com/android/repository/build-tools_r23-linux.zip',
181      '56bf4fc6c43638c55fef4a0937bad38281945725459841879b436c6922df786c'),
182     ('https://dl.google.com/android/repository/build-tools_r23.0.1-linux.zip',
183      'e56b3ef7b760ad06a7cee9b2d52ba7f43133dcecedfa5357f8845b3a80aeeecf'),
184     ('https://dl.google.com/android/repository/build-tools_r23.0.2-linux.zip',
185      '82754f551a6e36eaf516fbdd00c95ff0ccd19f81d1e134125b6ac4916f7ed9b6'),
186     ('https://dl.google.com/android/repository/build-tools_r23.0.3-linux.zip',
187      'd961663d4a9e128841751c0156548a347c882c081c83942e53788d8949bf34e1'),
188     ('https://dl.google.com/android/repository/build-tools_r24-linux.zip',
189      'b4871f357224c5f660fd2bbee04d8c7d1c187eeddfd9702cc84503529e3b3724'),
190     ('https://dl.google.com/android/repository/build-tools_r24.0.1-linux.zip',
191      '5b58478f8ce0a87512b7894f8fc2588249304a041bb3a2a70259f2a3d17c8c0a'),
192     # the binaries that Google uses are here:
193     # https://android.googlesource.com/platform/tools/external/gradle/+/studio-1.5/
194     ('https://services.gradle.org/distributions/gradle-1.4-bin.zip',
195      'cd99e85fbcd0ae8b99e81c9992a2f10cceb7b5f009c3720ef3a0078f4f92e94e'),
196     ('https://services.gradle.org/distributions/gradle-1.6-bin.zip',
197      'de3e89d2113923dcc2e0def62d69be0947ceac910abd38b75ec333230183fac4'),
198     ('https://services.gradle.org/distributions/gradle-1.7-bin.zip',
199      '360c97d51621b5a1ecf66748c718594e5f790ae4fbc1499543e0c006033c9d30'),
200     ('https://services.gradle.org/distributions/gradle-1.8-bin.zip',
201      'a342bbfa15fd18e2482287da4959588f45a41b60910970a16e6d97959aea5703'),
202     ('https://services.gradle.org/distributions/gradle-1.9-bin.zip',
203      '097ddc2bcbc9da2bb08cbf6bf8079585e35ad088bafd42e8716bc96405db98e9'),
204     ('https://services.gradle.org/distributions/gradle-1.10-bin.zip',
205      '6e6db4fc595f27ceda059d23693b6f6848583950606112b37dfd0e97a0a0a4fe'),
206     ('https://services.gradle.org/distributions/gradle-1.11-bin.zip',
207      '07e235df824964f0e19e73ea2327ce345c44bcd06d44a0123d29ab287fc34091'),
208     ('https://services.gradle.org/distributions/gradle-1.12-bin.zip',
209      '8734b13a401f4311ee418173ed6ca8662d2b0a535be8ff2a43ecb1c13cd406ea'),
210     ('https://services.gradle.org/distributions/gradle-2.1-bin.zip',
211      '3eee4f9ea2ab0221b89f8e4747a96d4554d00ae46d8d633f11cfda60988bf878'),
212     ('https://services.gradle.org/distributions/gradle-2.2-bin.zip',
213      '91e5655fe11ef414449f218c4fa2985b3a49b7903c57556da109c84fa26e1dfb'),
214     ('https://services.gradle.org/distributions/gradle-2.2.1-bin.zip',
215      '420aa50738299327b611c10b8304b749e8d3a579407ee9e755b15921d95ff418'),
216     ('https://services.gradle.org/distributions/gradle-2.3-bin.zip',
217      '010dd9f31849abc3d5644e282943b1c1c355f8e2635c5789833979ce590a3774'),
218     ('https://services.gradle.org/distributions/gradle-2.4-bin.zip',
219      'c4eaecc621a81f567ded1aede4a5ddb281cc02a03a6a87c4f5502add8fc2f16f'),
220     ('https://services.gradle.org/distributions/gradle-2.5-bin.zip',
221      '3f953e0cb14bb3f9ebbe11946e84071547bf5dfd575d90cfe9cc4e788da38555'),
222     ('https://services.gradle.org/distributions/gradle-2.6-bin.zip',
223      '18a98c560af231dfa0d3f8e0802c20103ae986f12428bb0a6f5396e8f14e9c83'),
224     ('https://services.gradle.org/distributions/gradle-2.7-bin.zip',
225      'cde43b90945b5304c43ee36e58aab4cc6fb3a3d5f9bd9449bb1709a68371cb06'),
226     ('https://services.gradle.org/distributions/gradle-2.8-bin.zip',
227      'a88db9c2f104defdaa8011c58cf6cda6c114298ae3695ecfb8beb30da3a903cb'),
228     ('https://services.gradle.org/distributions/gradle-2.9-bin.zip',
229      'c9159ec4362284c0a38d73237e224deae6139cbde0db4f0f44e1c7691dd3de2f'),
230     ('https://services.gradle.org/distributions/gradle-2.10-bin.zip',
231      '66406247f745fc6f05ab382d3f8d3e120c339f34ef54b86f6dc5f6efc18fbb13'),
232     ('https://services.gradle.org/distributions/gradle-2.11-bin.zip',
233      '8d7437082356c9fd6309a4479c8db307673965546daea445c6c72759cd6b1ed6'),
234     ('https://services.gradle.org/distributions/gradle-2.12-bin.zip',
235      'e77064981906cd0476ff1e0de3e6fef747bd18e140960f1915cca8ff6c33ab5c'),
236     ('https://services.gradle.org/distributions/gradle-2.13-bin.zip',
237      '0f665ec6a5a67865faf7ba0d825afb19c26705ea0597cec80dd191b0f2cbb664'),
238     ('https://services.gradle.org/distributions/gradle-2.14-bin.zip',
239      '993b4f33b652c689e9721917d8e021cab6bbd3eae81b39ab2fd46fdb19a928d5'),
240     ('https://services.gradle.org/distributions/gradle-2.14.1-bin.zip',
241      'cfc61eda71f2d12a572822644ce13d2919407595c2aec3e3566d2aab6f97ef39'),
242     ('https://services.gradle.org/distributions/gradle-3.0-bin.zip',
243      '39c906941a474444afbddc38144ed44166825acb0a57b0551dddb04bbf157f80'),
244     ('https://pypi.python.org/packages/source/K/Kivy/Kivy-1.7.2.tar.gz',
245      '0485e2ef97b5086df886eb01f8303cb542183d2d71a159466f99ad6c8a1d03f1'),
246     ('https://dl.google.com/android/ndk/android-ndk-r10e-linux-x86_64.bin',
247      '102d6723f67ff1384330d12c45854315d6452d6510286f4e5891e00a5a8f1d5a'),
248     ('https://dl.google.com/android/ndk/android-ndk-r9b-linux-x86_64.tar.bz2',
249      '8956e9efeea95f49425ded8bb697013b66e162b064b0f66b5c75628f76e0f532'),
250     ('https://dl.google.com/android/ndk/android-ndk-r9b-linux-x86_64-legacy-toolchains.tar.bz2',
251      'de93a394f7c8f3436db44568648f87738a8d09801a52f459dcad3fc047e045a1'),
252     ('https://dl.google.com/android/repository/android-ndk-r11c-linux-x86_64.zip',
253      'ba85dbe4d370e4de567222f73a3e034d85fc3011b3cbd90697f3e8dcace3ad94'),
254     ('https://dl.google.com/android/repository/android-ndk-r12b-linux-x86_64.zip',
255      'eafae2d614e5475a3bcfd7c5f201db5b963cc1290ee3e8ae791ff0c66757781e'),
256 ]
257
258
259 def sha256_for_file(path):
260     with open(path, 'rb') as f:
261         s = hashlib.sha256()
262         while True:
263             data = f.read(4096)
264             if not data:
265                 break
266             s.update(data)
267         return s.hexdigest()
268
269 for srcurl, shasum in cachefiles:
270     filename = os.path.basename(srcurl)
271     local_filename = os.path.join(cachedir, filename)
272
273     if os.path.exists(local_filename):
274         local_length = os.path.getsize(local_filename)
275     else:
276         local_length = -1
277
278     resume_header = {}
279     download = True
280
281     try:
282         r = requests.head(srcurl, allow_redirects=True, timeout=60)
283         if r.status_code == 200:
284             content_length = int(r.headers.get('content-length'))
285         else:
286             content_length = local_length  # skip the download
287     except requests.exceptions.RequestException as e:
288         content_length = local_length  # skip the download
289         print(e)
290
291     if local_length == content_length:
292         download = False
293     elif local_length > content_length:
294         print('deleting corrupt file from cache: ' + local_filename)
295         os.remove(local_filename)
296         print("Downloading " + filename + " to cache")
297     elif local_length > -1 and local_length < content_length:
298         print("Resuming download of " + local_filename)
299         resume_header = {'Range': 'bytes=%d-%d' % (local_length, content_length)}
300     else:
301         print("Downloading " + filename + " to cache")
302
303     if download:
304         r = requests.get(srcurl, headers=resume_header,
305                          stream=True, verify=False, allow_redirects=True)
306         content_length = int(r.headers.get('content-length'))
307         with open(local_filename, 'ab') as f:
308             for chunk in progress.bar(r.iter_content(chunk_size=65536),
309                                       expected_size=(content_length / 65536) + 1):
310                 if chunk:  # filter out keep-alive new chunks
311                     f.write(chunk)
312
313     v = sha256_for_file(local_filename)
314     if v == shasum:
315         print("\t...shasum verified for " + local_filename)
316     else:
317         print("Invalid shasum of '" + v + "' detected for " + local_filename)
318         os.remove(local_filename)
319         sys.exit(1)
320
321 # use VirtualBox software virtualization if hardware is not available,
322 # like if this is being run in kvm or some other VM platform, like
323 # http://jenkins.debian.net, the values are 'on' or 'off'
324 if sys.platform.startswith('darwin'):
325     # all < 10 year old Macs work, and OSX servers as VM host are very
326     # rare, but this could also be auto-detected if someone codes it
327     config['hwvirtex'] = 'on'
328 elif os.path.exists('/proc/cpuinfo'):
329     with open('/proc/cpuinfo') as f:
330         contents = f.read()
331     if 'vmx' in contents or 'svm' in contents:
332         config['hwvirtex'] = 'on'
333
334 # Check against the existing Vagrantfile.yaml, and if they differ, we
335 # need to create a new box:
336 vf = os.path.join(serverdir, 'Vagrantfile.yaml')
337 writevf = True
338 if os.path.exists(vf):
339     vagrant(['halt'], serverdir)
340     with open(vf, 'r', encoding='utf-8') as f:
341         oldconfig = yaml.load(f)
342     if config != oldconfig:
343         print("Server configuration has changed, rebuild from scratch is required")
344         vagrant(['destroy', '-f'], serverdir)
345     else:
346         print("Re-provisioning existing server")
347         writevf = False
348 else:
349     print("No existing server - building from scratch")
350 if writevf:
351     with open(vf, 'w', encoding='utf-8') as f:
352         yaml.dump(config, f)
353
354 print("Configuring build server VM")
355 returncode, out = vagrant(['up', '--provision'], serverdir, printout=True)
356 with open(os.path.join(serverdir, 'up.log'), 'w') as log:
357     log.write(out)
358 if returncode != 0:
359     print("Failed to configure server")
360     sys.exit(1)
361
362 print("Writing buildserver ID")
363 p = subprocess.Popen(['git', 'rev-parse', 'HEAD'], stdout=subprocess.PIPE,
364                      universal_newlines=True)
365 buildserverid = p.communicate()[0].strip()
366 print("...ID is " + buildserverid)
367 subprocess.call(
368     ['vagrant', 'ssh', '-c', 'sh -c "echo {0} >/home/vagrant/buildserverid"'
369         .format(buildserverid)],
370     cwd=serverdir)
371
372 print("Stopping build server VM")
373 vagrant(['halt'], serverdir)
374
375 print("Waiting for build server VM to be finished")
376 ready = False
377 while not ready:
378     time.sleep(2)
379     returncode, out = vagrant(['status'], serverdir)
380     if returncode != 0:
381         print("Error while checking status")
382         sys.exit(1)
383     for line in out.splitlines():
384         if line.startswith("default"):
385             if line.find("poweroff") != -1:
386                 ready = True
387             else:
388                 print("Status: " + line)
389
390 print("Packaging")
391 vagrant(['package', '--output', os.path.join('..', boxfile)], serverdir,
392         printout=options.verbose)
393 print("Adding box")
394 vagrant(['box', 'add', 'buildserver', boxfile, '-f'],
395         printout=options.verbose)
396
397 os.remove(boxfile)