slacker.SlackBuild

#!/bin/bash
# Slackware build script for slacker
# This SlackBuild builds the master branch.
# It is not suggested to use it; it is not a stable and proper SlackBuild.
#
cd $(dirname $0) ; CWD=$(pwd)

set -e

PRGNAM=slacker
VERSION=${VERSION:-0.14.0}
BUILD=${BUILD:-1}
TAG=${TAG:-_FRG}
PKGTYPE=${PKGTYPE:-txz}

if [ -z "$ARCH" ]; then
  case "$( uname -m )" in
    i?86) export ARCH=i686 ;;
    arm*) export ARCH=arm ;;
       *) export ARCH=$( uname -m ) ;;
  esac
fi

if [ ! -z "${PRINT_PACKAGE_NAME}" ]; then
  echo "$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.$PKGTYPE"
  exit 0
fi

TMP=${TMP:-/tmp/FORGE}
PKG=$TMP/package-$PRGNAM
OUTPUT=${OUTPUT:-/tmp}

if [ "$ARCH" = "i686" ]; then
  SLKCFLAGS="-O2 -march=pentium4 -mtune=generic"
  LIBDIRSUFFIX=""
elif [ "$ARCH" = "x86_64" ]; then
  SLKCFLAGS="-O2 -march=x86-64 -mtune=generic -fPIC"
  LIBDIRSUFFIX="64"
else
  SLKCFLAGS="-O2"
  LIBDIRSUFFIX=""
fi

# yes needed.
echo "=============================================================="
cat /etc/slackware-version
echo "---------------------"
cat /etc/os-release
echo "=============================================================="

while true; do
    read -p "Keep going?; [Y/n]: " answer

    case "$answer" in
        ""|y|Y|yes|Yes|YES)
            echo "Continuing..."
            break
            ;;

        n|N|no|No|NO)
            echo "STOP."
            exit 1
            ;;

        *)
            echo "Answer: y/yes or n/no."
            ;;
    esac
done

# Pick the right example configs for the running release (stable vs -current).
DIR=stable
grep -q '^VERSION_CODENAME=current$' /etc/os-release && DIR=current

set -e

rm -rf $PKG $TMP
mkdir -p $TMP $PKG $OUTPUT
cd $TMP

# First build slacker-cli (the original slacker)

cp -R $CWD/slacker-cli/* .
rm -rf target || true
chown -R root:root .
# Normalize permissions in the freshly extracted source tree:
#   directories        -> 755
#   executable files   -> 755
#   other files        -> 644
#
# Only -type d and -type f are matched, so symlinks are never followed
# or modified (chmod follows symlinks, which could change files outside
# the tree), and device nodes, FIFOs and sockets are left alone.
#
# Directories use "\;" instead of "+" so each one is fixed immediately,
# before find descends into it. As a regular user, a directory without
# read/search permission would otherwise be skipped; as root this makes
# no difference. Only directories that need fixing are chmod'ed, so the
# extra cost is negligible.
#
# "00755" (extra leading zero) is required for directories: GNU chmod
# preserves setgid on directories with a plain "755"; "00755" clears
# setgid and the sticky bit as well.
#
# Numeric modes on regular files clear setuid/setgid, and "-perm 755"
# and "-perm 644" are exact matches including special bits, so any
# setuid/setgid file is caught and cleaned.
#
# Works the same as root or as a regular user, in a single pass.
find . \( -type d          ! -perm 755 -exec chmod 00755 {} \; \) -o \
       \( -type f   -perm /111 ! -perm 755 -exec chmod -f 755 {} + \) -o \
       \( -type f ! -perm /111 ! -perm 644 -exec chmod -f 644 {} + \)

# online + debug is what we need for developing.
# NOTE: SLKCFLAGS only affect any C built by build scripts; the Rust code itself
# is compiled by rustc for the host arch (i686 / x86_64) automatically.
# Build ONCE: cargo-auditable embeds an SBOM and is a superset of `cargo build`,
# so use it when present, otherwise fall back to a plain build (no double build).
# --locked: fail if Cargo.lock does not match Cargo.toml.
if command -v cargo-auditable >/dev/null 2>&1; then
  CFLAGS="$SLKCFLAGS" CXXFLAGS="$SLKCFLAGS" cargo auditable build --release --locked
else
  CFLAGS="$SLKCFLAGS" CXXFLAGS="$SLKCFLAGS" cargo build --release --locked
fi

# run tests
# same profile and CFLAGS as the build, so the C code (sqlite, ring) is not rebuilt
CFLAGS="$SLKCFLAGS" CXXFLAGS="$SLKCFLAGS" cargo test --release --locked

# completion must list exactly the binary's subcommands
sh contrib/check-completion-drift.sh target/release/slacker
# generated completions must match their JSON source
python3 contrib/gen-completions.py --check

# every mutating command must stay unattended under --yes (container safety)
bash contrib/check-yes-noninteractive.sh target/release/slacker

mkdir -p $PKG/usr/bin
install -m0755 target/release/slacker $PKG/usr/bin/slacker

find $PKG | xargs file | grep -e "executable" -e "shared object" | grep ELF | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null

# docs
mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION/CONF
install -m0644 $CWD/README.md $CWD/NEWS $PKG/usr/doc/$PRGNAM-$VERSION/
install -m0644 CONF/etc-slacker/"$DIR"/"$ARCH"/* $PKG/usr/doc/$PRGNAM-$VERSION/CONF/
cat $CWD/$PRGNAM.SlackBuild > $PKG/usr/doc/$PRGNAM-$VERSION/$PRGNAM.SlackBuild

# templates/ is not shipped: slacker creates it itself on first
# `generate-template` (template.rs: create_dir_all).
mkdir -p $PKG/etc/slacker/templates
echo "https://forge.slackware.nl/rizitis/slacker/wiki/Templates" > $PKG/etc/slacker/templates/Templates-howto.txt
for f in slacker.conf distro-upgrade.conf mirrors repos blacklist; do
  install -m0644 CONF/etc-slacker/"$DIR"/"$ARCH"/$f $PKG/etc/slacker/$f.new
done
chmod 644 $PKG/etc/slacker/*.new

#
install -d -m 0700 $PKG/etc/slacker/credentials.d
cp CONF/README.credentials $PKG/etc/slacker/credentials.d/
chmod 0600 $PKG/etc/slacker/credentials.d/README.credentials
cat > $PKG/etc/slacker/credentials.cat.new <<'EOF'
# slacker repository credentials (HTTPS Basic) — OPTIONAL.
# Public Slackware mirrors need NONE of this for now...
#
# Per-URL catalog: any repo whose URL starts with a section prefix uses it.
#   [https://forge.slackware.nl/rizitis]
#   username = rizitis
#   password = <token>
#
# Or a named set in credentials.d/<name>, referenced from the repos line with
# `credentials=<name>`. Either way: chmod 600, chown root:root.
EOF
chmod 600 $PKG/etc/slacker/credentials.cat.new

# man page
mkdir -p $PKG/usr/man/man8
install -m0644 man/slacker.8 $PKG/usr/man/man8/slacker.8
gzip -9 $PKG/usr/man/man8/slacker.8

# shell completions, generated from contrib/completions.json (see
# contrib/gen-completions.py). bash is lazy-loaded by command name; zsh and
# fish autoload from their standard vendor dirs.
mkdir -p $PKG/usr/share/bash-completion/completions
install -m0644 contrib/slacker-completion.bash \
  $PKG/usr/share/bash-completion/completions/slacker

mkdir -p $PKG/usr/share/zsh/site-functions
install -m0644 contrib/slacker-completion.zsh \
  $PKG/usr/share/zsh/site-functions/_slacker

mkdir -p $PKG/usr/share/fish/vendor_completions.d
install -m0644 contrib/slacker.fish \
  $PKG/usr/share/fish/vendor_completions.d/slacker.fish

# Now we build slacker-gui on top of slacker
# Built in $TMP like slacker-cli, never inside $CWD.
mkdir -p $TMP/slacker-gui
cd $TMP/slacker-gui
cp -R $CWD/slacker-gui/* .
rm -rf target || true
chown -R root:root .
# same permission normalization as for slacker-cli above
find . \( -type d          ! -perm 755 -exec chmod 00755 {} \; \) -o \
       \( -type f   -perm /111 ! -perm 755 -exec chmod -f 755 {} + \) -o \
       \( -type f ! -perm /111 ! -perm 644 -exec chmod -f 644 {} + \)

if command -v cargo-auditable >/dev/null 2>&1; then
  CFLAGS="$SLKCFLAGS" CXXFLAGS="$SLKCFLAGS" cargo auditable build --release --locked
else
  CFLAGS="$SLKCFLAGS" CXXFLAGS="$SLKCFLAGS" cargo build --release --locked
fi
CFLAGS="$SLKCFLAGS" CXXFLAGS="$SLKCFLAGS" cargo test --release --locked

install -Dm755 target/release/slacker-gui $PKG/usr/bin/slacker-gui
install -Dm644 data/nl.slackware.forge.rizitis.SlackerGui.desktop \
  $PKG/usr/share/applications/nl.slackware.forge.rizitis.SlackerGui.desktop
install -Dm644 data/nl.slackware.forge.rizitis.slacker.policy \
  $PKG/usr/share/polkit-1/actions/nl.slackware.forge.rizitis.slacker.policy
# install, not cp -a: cp -a would keep the owner of the source tree
# (the user who unpacked it) and sbopkglint rejects uid/gid >= 1000.
( cd data/icons && find hicolor -type f ) | while read -r f; do
  install -Dm644 -o root -g root data/icons/"$f" $PKG/usr/share/icons/"$f"
done

# Whatever came from the source trees is owned by root.
chown -R root:root $PKG/usr

# Copy the slack-desc and a custom doinst.sh
mkdir -p $PKG/install
cat $CWD/slack-desc > $PKG/install/slack-desc
cat $CWD/doinst.sh > $PKG/install/doinst.sh

cd $PKG
/sbin/makepkg -l y -c n $OUTPUT/$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.$PKGTYPE

sleep 1
if command -v sbopkglint >/dev/null 2>&1; then
    sbopkglint $OUTPUT/$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.$PKGTYPE
else
    echo "skip cheks: sbopkglint not found."
fi

rm -rf /tmp/slacker_* /tmp/stockdb_test_*.db /tmp/stockdb_test_*.db.new /tmp/stockdb_test_*.txt
echo "=============================================================="
# audit the embedded dependency lists (cargo-auditable)
if command -v cargo-audit >/dev/null 2>&1; then
  for b in slacker slacker-gui; do
    cargo audit bin $PKG/usr/bin/$b || echo "WARNING: cargo audit reported problems in $b"
  done
else
  echo "skip audit: cargo-audit not found for root or not installed."
fi
echo "=============================================================="
#sleep 1
#gpg --detach-sign --armor $OUTPUT/$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.$PKGTYPE