openssh-rpms/compile.sh

#!/usr/bin/env bash
# Bash3 Boilerplate. Copyright (c) 2014, kvz.io

set -o errexit
set -o pipefail
set -o nounset
# set -o xtrace

trap 'echo -e "Aborted, error $? in command: $BASH_COMMAND"; trap ERR; exit 1' ERR

# Set magic variables for current file & dir
__dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
__file="${__dir}/$(basename "${BASH_SOURCE[0]}")"
__base="$(basename "${__file}" .sh)"
__root="$(cd "$(dirname "${__dir}")" && pwd)" # <-- change this as it depends on your app

arg1="${1:-}"
rpmtopdir=

# WITH_OPENSSL=
# Control openssl dependency
# 0: build without openssl
# 1: use system openssl
# 2: build openssl statically

CHECKEXISTS() {
	if [[ ! -f $__dir/downloads/$1 ]]; then
		echo "$1 not found, run 'pullsrc.sh', or manually put it in the downloads dir."
		exit 1
	fi
}

GUESS_DIST() {
	# will not work if rpm cmd not exists
	if ! type -p rpm >/dev/null; then
		echo 'unknown' && return 0
	fi

	local dist
	dist=$(rpm --eval '%{?dist}' | tr -d '.')

	# fallback to el7
	[[ $dist == "el9" ]] && dist="el7"
	[[ $dist == "el8" ]] && dist="el7"
	[[ $dist == "an8" ]] && dist="el7" # Anolis 8
	[[ $dist == "an7" ]] && dist="el7" # Anolis 7
	[[ $dist == uel* ]] && dist="el7"  # UOS20+

	[[ -n $dist ]] && echo $dist && return 0

	local glibcver
	glibcver=$(ldd --version | head -n1 | grep -Eo '[0-9]+' | tr -d '\n')

	# centos 5 uses glibc 2.5
	[[ $glibcver -eq 25 ]] && echo 'el5' && return 0

	# centos 6 uses glibc 2.12
	[[ $glibcver -eq 212 ]] && echo 'el6' && return 0

	# centos 7 uses glibc 2.17
	[[ $glibcver -eq 217 ]] && echo 'el7' && return 0

	# centos 8 uses glibc 2.28, also map to el7
	[[ $glibcver -eq 228 ]] && echo 'el7' && return 0

	# some centos-like dists ships higher version of glibc, fallback to el7
	[[ $glibcver -gt 217 ]] && echo 'el7' && return 0
}

TOPDIR_SELECT() {
	local DISTVER
	DISTVER=$(GUESS_DIST)
	case $DISTVER in
		el7)
			rpmtopdir=el7
			if [[ -z ${WITH_OPENSSL+x} ]]; then
				local opensslver
				opensslver=$(rpm -q openssl --qf "%{VERSION}" 2>/dev/null | cut -d. -f1)
				[[ $opensslver -ge 3 ]] && WITH_OPENSSL=1 || WITH_OPENSSL=2
			fi
			;;
		el6)
			rpmtopdir=el6
			WITH_OPENSSL=${WITH_OPENSSL:-2}
			;;
		el5)
			rpmtopdir=el5
			WITH_OPENSSL=${WITH_OPENSSL:-2}
			;;
		*)
			echo "Distro undefined, please specify manually: el5 el6 el7"
			echo -e "\nCurrent OS:"
			[[ -f /etc/os-release ]] && cat /etc/os-release
			[[ -f /etc/redhat-release ]] && cat /etc/redhat-release
			[[ -f /etc/system-release ]] && cat /etc/system-release
			echo -e "Current OS vendor: $(rpm --eval '%{?_vendor}') \n"
			return 1
			;;
	esac
}

BUILD_RPM() {

	# shellcheck disable=SC1091
	source version.env
	# shellcheck disable=SC1091
	[[ -f version-local.env ]] && source version-local.env

	local SOURCES=("$OPENSSHSRC"
		"$OPENSSLSRC"
		"$ASKPASSSRC"
	)
	# UOS20 build: prefix PKGREL with "uos20." so the resulting RPMs are
	# distinguishable from the standard build (e.g. PKGREL `1` becomes
	# `uos20.1`, not `uos201`), and pass `uos20 1` to the spec to enable
	# the kernel-panic patch.
	# NOTE: RPM does not allow '-' in the Release field (it is the
	# Version/Release delimiter), so '.' is used as the separator.
	local _pkgrel="${PKGREL:-1}"
	if [[ ${UOS20:-0} == 1 ]]; then
		_pkgrel="uos20.${_pkgrel}"
	fi
	local RPMBUILDOPTS=(
		--define "with_openssl ${WITH_OPENSSL:-2}"
		--define "opensslver ${OPENSSLVER}"
		--define "opensshver ${OPENSSHVER}"
		--define "opensshpkgrel ${_pkgrel}"
		--define 'debug_package %{nil}'
		--define 'no_gtk2 1'
		--define 'skip_gnome_askpass 1'
		--define 'skip_x11_askpass 1'
	)
	[[ ${UOS20:-0} == 1 ]] && RPMBUILDOPTS+=('--define' 'uos20 1')

	# EL5 dist fixes
	if [[ $rpmtopdir == *el5 ]]; then
		SOURCES+=("$PERLSRC")

		# Hack: fake the perl src when perl is ready already(docker images)
		[[ $(perl -e 'print $] >= 5.010 ? 1 : 0') -eq 1 ]] \
			&& touch ./downloads/"$PERLSRC"

		RPMBUILDOPTS+=('--define' "perlver ${PERLVER}" '--define' 'dist .el5')
		export CC=gcc44
	fi

	# add dist variable if not defined
	[[ $rpmtopdir == *el7 ]] && [[ -z $(rpm --eval '%{?dist}') ]] \
		&& RPMBUILDOPTS+=('--define' "dist .$(rpm -q glibc | rev | cut -d. -f2 | rev)")

	pushd $rpmtopdir
	RPMBUILDOPTS+=('--define' "_topdir $PWD")
	for fn in "${SOURCES[@]}"; do
		CHECKEXISTS "$fn" \
			&& install -v -m666 "$__dir"/downloads/"$fn" ./SOURCES/
	done

	if [[ ${M32:-0} != 0 ]]; then
		local SETARCH="setarch i386"
		RPMBUILDOPTS+=('--target' i686)
		export CFLAGS="${CFLAGS:-} -m32" LDFLAGS="${LDFLAGS:-} -m32"
	fi

	if ! ${SETARCH:-} rpmbuild -bb ./SPECS/"${SPECFILE:-openssh.spec}" "${RPMBUILDOPTS[@]}"; then
		echo "Error: rpmbuild failed with exit code $?"
		exit 1
	fi

	mkdir -p "$__dir"/output
	find ./RPMS -type f -name '*.rpm' -exec install -v -m644 {} "$__dir"/output/ \;
	popd
}

LIST_RPMDIR() {
	local RPMDIR
	RPMDIR=$__dir/${rpmtopdir}/RPMS/$(rpm --eval '%{_arch}')
	[[ -d $RPMDIR ]] && echo "$RPMDIR"
}

LIST_RPMS() {
	local RPMDIR
	RPMDIR=$(LIST_RPMDIR)
	[[ -d $RPMDIR ]] && find "$RPMDIR" -type f -name '*.rpm'
}

# sub cmds
case $arg1 in
	GETEL)
		GUESS_DIST
		exit 0
		;;
	GETRPM)
		TOPDIR_SELECT
		LIST_RPMS
		exit 0
		;;
	RPMDIR)
		TOPDIR_SELECT
		LIST_RPMDIR
		exit 0
		;;
	*)
		if [[ -n $arg1 && ! -d $arg1 ]]; then
			echo -e "Subcmd: $arg1 not found.\n GETEL, GETRPM, RPMDIR"
			exit 1
		fi
		;;
esac

# manual specified dist
if [[ -n $arg1 && -d $arg1 ]]; then
	rpmtopdir=$arg1
	BUILD_RPM
	exit 0
fi

# auto select dist
TOPDIR_SELECT
if [[ ! -d $rpmtopdir ]]; then
	echo "This script works only in el5/el6/el7"
	echo "eg: ${0} el7"
	exit 1
fi

if [[ -d $rpmtopdir ]]; then
	BUILD_RPM
fi