changelog shortlog graph tags branches changeset files file revisions raw help

Mercurial > demo / annotate tools/dep.sh

changeset 29: 7e640cebeada
parent: 242002f9f098
author: ellis <ellis@rwest.io>
date: Thu, 15 Jun 2023 21:42:39 -0400
permissions: -rwxr-xr-x
description: containerfile, refactoring
28
ellis <ellis@rwest.io>
parents:
diff changeset
1
 #!/usr/bin/sh
ellis <ellis@rwest.io>
parents:
diff changeset
2
 # install demo build dependencies
29
7e640cebeada containerfile, refactoring
ellis <ellis@rwest.io>
parents: 28
diff changeset
3
 # *based on rustup.sh
28
ellis <ellis@rwest.io>
parents:
diff changeset
4
 set -u
ellis <ellis@rwest.io>
parents:
diff changeset
5
 PKG_URL_ROOT="${PKG_URL_ROOT:-https://rwest.io/otom8/packy/bundle}"
ellis <ellis@rwest.io>
parents:
diff changeset
6
 PKG_NAME="demo_build_deps"
ellis <ellis@rwest.io>
parents:
diff changeset
7
 check_proc() {
ellis <ellis@rwest.io>
parents:
diff changeset
8
     # Check for /proc by looking for the /proc/self/exe link
ellis <ellis@rwest.io>
parents:
diff changeset
9
     # This only run on Linux
ellis <ellis@rwest.io>
parents:
diff changeset
10
     if ! test -L /proc/self/exe ; then
ellis <ellis@rwest.io>
parents:
diff changeset
11
         err "fatal: Unable to find /proc/self/exe.  Is /proc mounted?"
ellis <ellis@rwest.io>
parents:
diff changeset
12
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
13
 }
ellis <ellis@rwest.io>
parents:
diff changeset
14
 
ellis <ellis@rwest.io>
parents:
diff changeset
15
 get_bitness() {
ellis <ellis@rwest.io>
parents:
diff changeset
16
     need_cmd head
ellis <ellis@rwest.io>
parents:
diff changeset
17
     # Architecture detection without dependencies beyond coreutils.
ellis <ellis@rwest.io>
parents:
diff changeset
18
     # ELF files start out "\x7fELF", and the following byte is
ellis <ellis@rwest.io>
parents:
diff changeset
19
     #   0x01 for 32-bit and
ellis <ellis@rwest.io>
parents:
diff changeset
20
     #   0x02 for 64-bit.
ellis <ellis@rwest.io>
parents:
diff changeset
21
     # The printf builtin on some shells like dash only supports octal
ellis <ellis@rwest.io>
parents:
diff changeset
22
     # escape sequences, so we use those.
ellis <ellis@rwest.io>
parents:
diff changeset
23
     local _current_exe_head
ellis <ellis@rwest.io>
parents:
diff changeset
24
     _current_exe_head=$(head -c 5 /proc/self/exe )
ellis <ellis@rwest.io>
parents:
diff changeset
25
     if [ "$_current_exe_head" = "$(printf '\177ELF\001')" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
26
         echo 32
ellis <ellis@rwest.io>
parents:
diff changeset
27
     elif [ "$_current_exe_head" = "$(printf '\177ELF\002')" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
28
         echo 64
ellis <ellis@rwest.io>
parents:
diff changeset
29
     else
ellis <ellis@rwest.io>
parents:
diff changeset
30
         err "unknown platform bitness"
ellis <ellis@rwest.io>
parents:
diff changeset
31
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
32
 }
ellis <ellis@rwest.io>
parents:
diff changeset
33
 
ellis <ellis@rwest.io>
parents:
diff changeset
34
 is_host_amd64_elf() {
ellis <ellis@rwest.io>
parents:
diff changeset
35
     need_cmd head
ellis <ellis@rwest.io>
parents:
diff changeset
36
     need_cmd tail
ellis <ellis@rwest.io>
parents:
diff changeset
37
     # ELF e_machine detection without dependencies beyond coreutils.
ellis <ellis@rwest.io>
parents:
diff changeset
38
     # Two-byte field at offset 0x12 indicates the CPU,
ellis <ellis@rwest.io>
parents:
diff changeset
39
     # but we're interested in it being 0x3E to indicate amd64, or not that.
ellis <ellis@rwest.io>
parents:
diff changeset
40
     local _current_exe_machine
ellis <ellis@rwest.io>
parents:
diff changeset
41
     _current_exe_machine=$(head -c 19 /proc/self/exe | tail -c 1)
ellis <ellis@rwest.io>
parents:
diff changeset
42
     [ "$_current_exe_machine" = "$(printf '\076')" ]
ellis <ellis@rwest.io>
parents:
diff changeset
43
 }
ellis <ellis@rwest.io>
parents:
diff changeset
44
 
ellis <ellis@rwest.io>
parents:
diff changeset
45
 get_endianness() {
ellis <ellis@rwest.io>
parents:
diff changeset
46
     local cputype=$1
ellis <ellis@rwest.io>
parents:
diff changeset
47
     local suffix_eb=$2
ellis <ellis@rwest.io>
parents:
diff changeset
48
     local suffix_el=$3
ellis <ellis@rwest.io>
parents:
diff changeset
49
 
ellis <ellis@rwest.io>
parents:
diff changeset
50
     # detect endianness without od/hexdump, like get_bitness() does.
ellis <ellis@rwest.io>
parents:
diff changeset
51
     need_cmd head
ellis <ellis@rwest.io>
parents:
diff changeset
52
     need_cmd tail
ellis <ellis@rwest.io>
parents:
diff changeset
53
 
ellis <ellis@rwest.io>
parents:
diff changeset
54
     local _current_exe_endianness
ellis <ellis@rwest.io>
parents:
diff changeset
55
     _current_exe_endianness="$(head -c 6 /proc/self/exe | tail -c 1)"
ellis <ellis@rwest.io>
parents:
diff changeset
56
     if [ "$_current_exe_endianness" = "$(printf '\001')" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
57
         echo "${cputype}${suffix_el}"
ellis <ellis@rwest.io>
parents:
diff changeset
58
     elif [ "$_current_exe_endianness" = "$(printf '\002')" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
59
         echo "${cputype}${suffix_eb}"
ellis <ellis@rwest.io>
parents:
diff changeset
60
     else
ellis <ellis@rwest.io>
parents:
diff changeset
61
         err "unknown platform endianness"
ellis <ellis@rwest.io>
parents:
diff changeset
62
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
63
 }
ellis <ellis@rwest.io>
parents:
diff changeset
64
 
ellis <ellis@rwest.io>
parents:
diff changeset
65
 get_architecture() {
ellis <ellis@rwest.io>
parents:
diff changeset
66
     local _ostype _cputype _bitness _arch _clibtype
ellis <ellis@rwest.io>
parents:
diff changeset
67
     _ostype="$(uname -s)"
ellis <ellis@rwest.io>
parents:
diff changeset
68
     _cputype="$(uname -m)"
ellis <ellis@rwest.io>
parents:
diff changeset
69
     _clibtype="gnu"
ellis <ellis@rwest.io>
parents:
diff changeset
70
 
ellis <ellis@rwest.io>
parents:
diff changeset
71
     if [ "$_ostype" = Linux ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
72
         if [ "$(uname -o)" = Android ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
73
             _ostype=Android
ellis <ellis@rwest.io>
parents:
diff changeset
74
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
75
         if ldd --version 2>&1 | grep -q 'musl'; then
ellis <ellis@rwest.io>
parents:
diff changeset
76
             _clibtype="musl"
ellis <ellis@rwest.io>
parents:
diff changeset
77
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
78
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
79
 
ellis <ellis@rwest.io>
parents:
diff changeset
80
     if [ "$_ostype" = Darwin ] && [ "$_cputype" = i386 ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
81
         # Darwin `uname -m` lies
ellis <ellis@rwest.io>
parents:
diff changeset
82
         if sysctl hw.optional.x86_64 | grep -q ': 1'; then
ellis <ellis@rwest.io>
parents:
diff changeset
83
             _cputype=x86_64
ellis <ellis@rwest.io>
parents:
diff changeset
84
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
85
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
86
 
ellis <ellis@rwest.io>
parents:
diff changeset
87
     if [ "$_ostype" = SunOS ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
88
         # Both Solaris and illumos presently announce as "SunOS" in "uname -s"
ellis <ellis@rwest.io>
parents:
diff changeset
89
         # so use "uname -o" to disambiguate.  We use the full path to the
ellis <ellis@rwest.io>
parents:
diff changeset
90
         # system uname in case the user has coreutils uname first in PATH,
ellis <ellis@rwest.io>
parents:
diff changeset
91
         # which has historically sometimes printed the wrong value here.
ellis <ellis@rwest.io>
parents:
diff changeset
92
         if [ "$(/usr/bin/uname -o)" = illumos ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
93
             _ostype=illumos
ellis <ellis@rwest.io>
parents:
diff changeset
94
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
95
 
ellis <ellis@rwest.io>
parents:
diff changeset
96
         # illumos systems have multi-arch userlands, and "uname -m" reports the
ellis <ellis@rwest.io>
parents:
diff changeset
97
         # machine hardware name; e.g., "i86pc" on both 32- and 64-bit x86
ellis <ellis@rwest.io>
parents:
diff changeset
98
         # systems.  Check for the native (widest) instruction set on the
ellis <ellis@rwest.io>
parents:
diff changeset
99
         # running kernel:
ellis <ellis@rwest.io>
parents:
diff changeset
100
         if [ "$_cputype" = i86pc ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
101
             _cputype="$(isainfo -n)"
ellis <ellis@rwest.io>
parents:
diff changeset
102
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
103
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
104
 
ellis <ellis@rwest.io>
parents:
diff changeset
105
     case "$_ostype" in
ellis <ellis@rwest.io>
parents:
diff changeset
106
 
ellis <ellis@rwest.io>
parents:
diff changeset
107
         Android)
ellis <ellis@rwest.io>
parents:
diff changeset
108
             _ostype=linux-android
ellis <ellis@rwest.io>
parents:
diff changeset
109
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
110
 
ellis <ellis@rwest.io>
parents:
diff changeset
111
         Linux)
ellis <ellis@rwest.io>
parents:
diff changeset
112
             check_proc
ellis <ellis@rwest.io>
parents:
diff changeset
113
             _ostype=unknown-linux-$_clibtype
ellis <ellis@rwest.io>
parents:
diff changeset
114
             _bitness=$(get_bitness)
ellis <ellis@rwest.io>
parents:
diff changeset
115
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
116
 
ellis <ellis@rwest.io>
parents:
diff changeset
117
         FreeBSD)
ellis <ellis@rwest.io>
parents:
diff changeset
118
             _ostype=unknown-freebsd
ellis <ellis@rwest.io>
parents:
diff changeset
119
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
120
 
ellis <ellis@rwest.io>
parents:
diff changeset
121
         NetBSD)
ellis <ellis@rwest.io>
parents:
diff changeset
122
             _ostype=unknown-netbsd
ellis <ellis@rwest.io>
parents:
diff changeset
123
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
124
 
ellis <ellis@rwest.io>
parents:
diff changeset
125
         DragonFly)
ellis <ellis@rwest.io>
parents:
diff changeset
126
             _ostype=unknown-dragonfly
ellis <ellis@rwest.io>
parents:
diff changeset
127
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
128
 
ellis <ellis@rwest.io>
parents:
diff changeset
129
         Darwin)
ellis <ellis@rwest.io>
parents:
diff changeset
130
             _ostype=apple-darwin
ellis <ellis@rwest.io>
parents:
diff changeset
131
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
132
 
ellis <ellis@rwest.io>
parents:
diff changeset
133
         illumos)
ellis <ellis@rwest.io>
parents:
diff changeset
134
             _ostype=unknown-illumos
ellis <ellis@rwest.io>
parents:
diff changeset
135
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
136
 
ellis <ellis@rwest.io>
parents:
diff changeset
137
         MINGW* | MSYS* | CYGWIN*)
ellis <ellis@rwest.io>
parents:
diff changeset
138
             _ostype=pc-windows-gnu
ellis <ellis@rwest.io>
parents:
diff changeset
139
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
140
 
ellis <ellis@rwest.io>
parents:
diff changeset
141
         *)
ellis <ellis@rwest.io>
parents:
diff changeset
142
             err "unrecognized OS type: $_ostype"
ellis <ellis@rwest.io>
parents:
diff changeset
143
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
144
 
ellis <ellis@rwest.io>
parents:
diff changeset
145
     esac
ellis <ellis@rwest.io>
parents:
diff changeset
146
 
ellis <ellis@rwest.io>
parents:
diff changeset
147
     case "$_cputype" in
ellis <ellis@rwest.io>
parents:
diff changeset
148
 
ellis <ellis@rwest.io>
parents:
diff changeset
149
         i386 | i486 | i686 | i786 | x86)
ellis <ellis@rwest.io>
parents:
diff changeset
150
             _cputype=i686
ellis <ellis@rwest.io>
parents:
diff changeset
151
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
152
 
ellis <ellis@rwest.io>
parents:
diff changeset
153
         xscale | arm)
ellis <ellis@rwest.io>
parents:
diff changeset
154
             _cputype=arm
ellis <ellis@rwest.io>
parents:
diff changeset
155
             if [ "$_ostype" = "linux-android" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
156
                 _ostype=linux-androideabi
ellis <ellis@rwest.io>
parents:
diff changeset
157
             fi
ellis <ellis@rwest.io>
parents:
diff changeset
158
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
159
 
ellis <ellis@rwest.io>
parents:
diff changeset
160
         armv6l)
ellis <ellis@rwest.io>
parents:
diff changeset
161
             _cputype=arm
ellis <ellis@rwest.io>
parents:
diff changeset
162
             if [ "$_ostype" = "linux-android" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
163
                 _ostype=linux-androideabi
ellis <ellis@rwest.io>
parents:
diff changeset
164
             else
ellis <ellis@rwest.io>
parents:
diff changeset
165
                 _ostype="${_ostype}eabihf"
ellis <ellis@rwest.io>
parents:
diff changeset
166
             fi
ellis <ellis@rwest.io>
parents:
diff changeset
167
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
168
 
ellis <ellis@rwest.io>
parents:
diff changeset
169
         armv7l | armv8l)
ellis <ellis@rwest.io>
parents:
diff changeset
170
             _cputype=armv7
ellis <ellis@rwest.io>
parents:
diff changeset
171
             if [ "$_ostype" = "linux-android" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
172
                 _ostype=linux-androideabi
ellis <ellis@rwest.io>
parents:
diff changeset
173
             else
ellis <ellis@rwest.io>
parents:
diff changeset
174
                 _ostype="${_ostype}eabihf"
ellis <ellis@rwest.io>
parents:
diff changeset
175
             fi
ellis <ellis@rwest.io>
parents:
diff changeset
176
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
177
 
ellis <ellis@rwest.io>
parents:
diff changeset
178
         aarch64 | arm64)
ellis <ellis@rwest.io>
parents:
diff changeset
179
             _cputype=aarch64
ellis <ellis@rwest.io>
parents:
diff changeset
180
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
181
 
ellis <ellis@rwest.io>
parents:
diff changeset
182
         x86_64 | x86-64 | x64 | amd64)
ellis <ellis@rwest.io>
parents:
diff changeset
183
             _cputype=x86_64
ellis <ellis@rwest.io>
parents:
diff changeset
184
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
185
 
ellis <ellis@rwest.io>
parents:
diff changeset
186
         mips)
ellis <ellis@rwest.io>
parents:
diff changeset
187
             _cputype=$(get_endianness mips '' el)
ellis <ellis@rwest.io>
parents:
diff changeset
188
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
189
 
ellis <ellis@rwest.io>
parents:
diff changeset
190
         mips64)
ellis <ellis@rwest.io>
parents:
diff changeset
191
             if [ "$_bitness" -eq 64 ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
192
                 # only n64 ABI is supported for now
ellis <ellis@rwest.io>
parents:
diff changeset
193
                 _ostype="${_ostype}abi64"
ellis <ellis@rwest.io>
parents:
diff changeset
194
                 _cputype=$(get_endianness mips64 '' el)
ellis <ellis@rwest.io>
parents:
diff changeset
195
             fi
ellis <ellis@rwest.io>
parents:
diff changeset
196
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
197
 
ellis <ellis@rwest.io>
parents:
diff changeset
198
         ppc)
ellis <ellis@rwest.io>
parents:
diff changeset
199
             _cputype=powerpc
ellis <ellis@rwest.io>
parents:
diff changeset
200
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
201
 
ellis <ellis@rwest.io>
parents:
diff changeset
202
         ppc64)
ellis <ellis@rwest.io>
parents:
diff changeset
203
             _cputype=powerpc64
ellis <ellis@rwest.io>
parents:
diff changeset
204
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
205
 
ellis <ellis@rwest.io>
parents:
diff changeset
206
         ppc64le)
ellis <ellis@rwest.io>
parents:
diff changeset
207
             _cputype=powerpc64le
ellis <ellis@rwest.io>
parents:
diff changeset
208
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
209
 
ellis <ellis@rwest.io>
parents:
diff changeset
210
         s390x)
ellis <ellis@rwest.io>
parents:
diff changeset
211
             _cputype=s390x
ellis <ellis@rwest.io>
parents:
diff changeset
212
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
213
         riscv64)
ellis <ellis@rwest.io>
parents:
diff changeset
214
             _cputype=riscv64gc
ellis <ellis@rwest.io>
parents:
diff changeset
215
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
216
         *)
ellis <ellis@rwest.io>
parents:
diff changeset
217
             err "unknown CPU type: $_cputype"
ellis <ellis@rwest.io>
parents:
diff changeset
218
 
ellis <ellis@rwest.io>
parents:
diff changeset
219
     esac
ellis <ellis@rwest.io>
parents:
diff changeset
220
 
ellis <ellis@rwest.io>
parents:
diff changeset
221
     # Detect 64-bit linux with 32-bit userland
ellis <ellis@rwest.io>
parents:
diff changeset
222
     if [ "${_ostype}" = unknown-linux-gnu ] && [ "${_bitness}" -eq 32 ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
223
         case $_cputype in
ellis <ellis@rwest.io>
parents:
diff changeset
224
             x86_64)
ellis <ellis@rwest.io>
parents:
diff changeset
225
                 if [ -n "${BABEL_CPUTYPE:-}" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
226
                     _cputype="$BABEL_CPUTYPE"
ellis <ellis@rwest.io>
parents:
diff changeset
227
                 else {
ellis <ellis@rwest.io>
parents:
diff changeset
228
                     # 32-bit executable for amd64 = x32
ellis <ellis@rwest.io>
parents:
diff changeset
229
                     if is_host_amd64_elf; then {
ellis <ellis@rwest.io>
parents:
diff changeset
230
                          echo "This host is running an x32 userland; as it stands, x32 support is poor," 1>&2
ellis <ellis@rwest.io>
parents:
diff changeset
231
                          echo "and there isn't a native toolchain -- you will have to install" 1>&2
ellis <ellis@rwest.io>
parents:
diff changeset
232
                          echo "multiarch compatibility with i686 and/or amd64, then select one" 1>&2
ellis <ellis@rwest.io>
parents:
diff changeset
233
                          echo "by re-running this script with the BABEL_CPUTYPE environment variable" 1>&2
ellis <ellis@rwest.io>
parents:
diff changeset
234
                          echo "set to i686 or x86_64, respectively." 1>&2
ellis <ellis@rwest.io>
parents:
diff changeset
235
                          echo 1>&2
ellis <ellis@rwest.io>
parents:
diff changeset
236
                          exit 1
ellis <ellis@rwest.io>
parents:
diff changeset
237
                     }; else
ellis <ellis@rwest.io>
parents:
diff changeset
238
                         _cputype=i686
ellis <ellis@rwest.io>
parents:
diff changeset
239
                     fi
ellis <ellis@rwest.io>
parents:
diff changeset
240
                 }; fi
ellis <ellis@rwest.io>
parents:
diff changeset
241
                 ;;
ellis <ellis@rwest.io>
parents:
diff changeset
242
             mips64)
ellis <ellis@rwest.io>
parents:
diff changeset
243
                 _cputype=$(get_endianness mips '' el)
ellis <ellis@rwest.io>
parents:
diff changeset
244
                 ;;
ellis <ellis@rwest.io>
parents:
diff changeset
245
             powerpc64)
ellis <ellis@rwest.io>
parents:
diff changeset
246
                 _cputype=powerpc
ellis <ellis@rwest.io>
parents:
diff changeset
247
                 ;;
ellis <ellis@rwest.io>
parents:
diff changeset
248
             aarch64)
ellis <ellis@rwest.io>
parents:
diff changeset
249
                 _cputype=armv7
ellis <ellis@rwest.io>
parents:
diff changeset
250
                 if [ "$_ostype" = "linux-android" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
251
                     _ostype=linux-androideabi
ellis <ellis@rwest.io>
parents:
diff changeset
252
                 else
ellis <ellis@rwest.io>
parents:
diff changeset
253
                     _ostype="${_ostype}eabihf"
ellis <ellis@rwest.io>
parents:
diff changeset
254
                 fi
ellis <ellis@rwest.io>
parents:
diff changeset
255
                 ;;
ellis <ellis@rwest.io>
parents:
diff changeset
256
             riscv64gc)
ellis <ellis@rwest.io>
parents:
diff changeset
257
                 err "riscv64 with 32-bit userland unsupported"
ellis <ellis@rwest.io>
parents:
diff changeset
258
                 ;;
ellis <ellis@rwest.io>
parents:
diff changeset
259
         esac
ellis <ellis@rwest.io>
parents:
diff changeset
260
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
261
 
ellis <ellis@rwest.io>
parents:
diff changeset
262
     # Detect armv7 but without the CPU features Rust needs in that build,
ellis <ellis@rwest.io>
parents:
diff changeset
263
     # and fall back to arm.
ellis <ellis@rwest.io>
parents:
diff changeset
264
     # See https://github.com/rust-lang/rustup.rs/issues/587.
ellis <ellis@rwest.io>
parents:
diff changeset
265
     if [ "$_ostype" = "unknown-linux-gnueabihf" ] && [ "$_cputype" = armv7 ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
266
         if ensure grep '^Features' /proc/cpuinfo | grep -q -v neon; then
ellis <ellis@rwest.io>
parents:
diff changeset
267
             # At least one processor does not have NEON.
ellis <ellis@rwest.io>
parents:
diff changeset
268
             _cputype=arm
ellis <ellis@rwest.io>
parents:
diff changeset
269
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
270
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
271
 
ellis <ellis@rwest.io>
parents:
diff changeset
272
     _arch="${_cputype}-${_ostype}"
ellis <ellis@rwest.io>
parents:
diff changeset
273
 
ellis <ellis@rwest.io>
parents:
diff changeset
274
     RETVAL="$_arch"
ellis <ellis@rwest.io>
parents:
diff changeset
275
 }
ellis <ellis@rwest.io>
parents:
diff changeset
276
 say() {
ellis <ellis@rwest.io>
parents:
diff changeset
277
     printf 'dep.sh: %s\n' "$1"
ellis <ellis@rwest.io>
parents:
diff changeset
278
 }
ellis <ellis@rwest.io>
parents:
diff changeset
279
 err() {
ellis <ellis@rwest.io>
parents:
diff changeset
280
     say "$1" >&2; exit 1
ellis <ellis@rwest.io>
parents:
diff changeset
281
 }
ellis <ellis@rwest.io>
parents:
diff changeset
282
 need_cmd() {
ellis <ellis@rwest.io>
parents:
diff changeset
283
     if ! check_cmd "$1"; then
ellis <ellis@rwest.io>
parents:
diff changeset
284
         err "need '$1' (command not found)"
ellis <ellis@rwest.io>
parents:
diff changeset
285
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
286
 }
ellis <ellis@rwest.io>
parents:
diff changeset
287
 check_cmd() {
ellis <ellis@rwest.io>
parents:
diff changeset
288
     command -v "$1" > /dev/null 2>&1
ellis <ellis@rwest.io>
parents:
diff changeset
289
 }
ellis <ellis@rwest.io>
parents:
diff changeset
290
 assert_nz() {
ellis <ellis@rwest.io>
parents:
diff changeset
291
     if [ -z "$1" ]; then err "assert_nz $2"; fi
ellis <ellis@rwest.io>
parents:
diff changeset
292
 }
ellis <ellis@rwest.io>
parents:
diff changeset
293
 ensure() {
ellis <ellis@rwest.io>
parents:
diff changeset
294
     if ! "$@"; then err "command failed: $*"; fi
ellis <ellis@rwest.io>
parents:
diff changeset
295
 }
ellis <ellis@rwest.io>
parents:
diff changeset
296
 ignore() {
ellis <ellis@rwest.io>
parents:
diff changeset
297
     "$@"
ellis <ellis@rwest.io>
parents:
diff changeset
298
 }
ellis <ellis@rwest.io>
parents:
diff changeset
299
 main () {
ellis <ellis@rwest.io>
parents:
diff changeset
300
     need_cmd chmod
ellis <ellis@rwest.io>
parents:
diff changeset
301
     need_cmd mkdir
ellis <ellis@rwest.io>
parents:
diff changeset
302
     need_cmd rm
ellis <ellis@rwest.io>
parents:
diff changeset
303
 
ellis <ellis@rwest.io>
parents:
diff changeset
304
     get_architecture || return 1
ellis <ellis@rwest.io>
parents:
diff changeset
305
     local _arch="$RETVAL"
ellis <ellis@rwest.io>
parents:
diff changeset
306
     assert_nz "$_arch" "arch"
ellis <ellis@rwest.io>
parents:
diff changeset
307
 
ellis <ellis@rwest.io>
parents:
diff changeset
308
     # no extension unless on windows
ellis <ellis@rwest.io>
parents:
diff changeset
309
     local _ext=""
ellis <ellis@rwest.io>
parents:
diff changeset
310
     case "$_arch" in
ellis <ellis@rwest.io>
parents:
diff changeset
311
         *windows*)
ellis <ellis@rwest.io>
parents:
diff changeset
312
             _ext=".exe"
ellis <ellis@rwest.io>
parents:
diff changeset
313
             ;;
ellis <ellis@rwest.io>
parents:
diff changeset
314
     esac
ellis <ellis@rwest.io>
parents:
diff changeset
315
 
ellis <ellis@rwest.io>
parents:
diff changeset
316
   local _url="${PKG_URL_ROOT}/bin/dist/${_arch}/${PKG_NAME}${_ext}"
ellis <ellis@rwest.io>
parents:
diff changeset
317
 
ellis <ellis@rwest.io>
parents:
diff changeset
318
     local _dir
ellis <ellis@rwest.io>
parents:
diff changeset
319
     _dir="$(ensure mktemp -d)"
ellis <ellis@rwest.io>
parents:
diff changeset
320
     local _file="${_dir}/${PKG_NAME}${_ext}"
ellis <ellis@rwest.io>
parents:
diff changeset
321
 
ellis <ellis@rwest.io>
parents:
diff changeset
322
     local _ansi_escapes_are_valid=false
ellis <ellis@rwest.io>
parents:
diff changeset
323
     if [ -t 2 ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
324
         if [ "${TERM+set}" = 'set' ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
325
             case "$TERM" in
ellis <ellis@rwest.io>
parents:
diff changeset
326
                 xterm*|rxvt*|urxvt*|linux*|vt*)
ellis <ellis@rwest.io>
parents:
diff changeset
327
                     _ansi_escapes_are_valid=true
ellis <ellis@rwest.io>
parents:
diff changeset
328
                 ;;
ellis <ellis@rwest.io>
parents:
diff changeset
329
             esac
ellis <ellis@rwest.io>
parents:
diff changeset
330
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
331
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
332
 
ellis <ellis@rwest.io>
parents:
diff changeset
333
     # check if we have to use /dev/tty to prompt the user
ellis <ellis@rwest.io>
parents:
diff changeset
334
     local need_tty=yes
ellis <ellis@rwest.io>
parents:
diff changeset
335
     for arg in "$@"; do
ellis <ellis@rwest.io>
parents:
diff changeset
336
         case "$arg" in
ellis <ellis@rwest.io>
parents:
diff changeset
337
             q)
ellis <ellis@rwest.io>
parents:
diff changeset
338
                 # user wants to skip the prompt --
ellis <ellis@rwest.io>
parents:
diff changeset
339
                 # we don't need /dev/tty
ellis <ellis@rwest.io>
parents:
diff changeset
340
                 need_tty=no
ellis <ellis@rwest.io>
parents:
diff changeset
341
                 ;;
ellis <ellis@rwest.io>
parents:
diff changeset
342
             *)
ellis <ellis@rwest.io>
parents:
diff changeset
343
                 ;;
ellis <ellis@rwest.io>
parents:
diff changeset
344
         esac
ellis <ellis@rwest.io>
parents:
diff changeset
345
     done
ellis <ellis@rwest.io>
parents:
diff changeset
346
     if $_ansi_escapes_are_valid; then
29
7e640cebeada containerfile, refactoring
ellis <ellis@rwest.io>
parents: 28
diff changeset
347
         printf '%s ' "\33[1minfo:\33[0m downloading from::" 1>&2
28
ellis <ellis@rwest.io>
parents:
diff changeset
348
     else
29
7e640cebeada containerfile, refactoring
ellis <ellis@rwest.io>
parents: 28
diff changeset
349
         printf '%s ' 'info: downloading from::' 1>&2
28
ellis <ellis@rwest.io>
parents:
diff changeset
350
     fi
29
7e640cebeada containerfile, refactoring
ellis <ellis@rwest.io>
parents: 28
diff changeset
351
     printf '%s\n' $_url 1>&2
28
ellis <ellis@rwest.io>
parents:
diff changeset
352
     ensure mkdir -p "$_dir"
ellis <ellis@rwest.io>
parents:
diff changeset
353
     ensure dl "$_url" "$_file" "$_arch"
ellis <ellis@rwest.io>
parents:
diff changeset
354
     ensure chmod u+x "$_file"
ellis <ellis@rwest.io>
parents:
diff changeset
355
     if [ ! -x "$_file" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
356
         printf '%s\n' "Cannot execute $_file (likely because of mounting /tmp as noexec)." 1>&2
ellis <ellis@rwest.io>
parents:
diff changeset
357
         printf '%s\n' "Please copy the file to a location where you can execute binaries and run ./${PKG_NAME}${_ext}." 1>&2
ellis <ellis@rwest.io>
parents:
diff changeset
358
         exit 1
ellis <ellis@rwest.io>
parents:
diff changeset
359
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
360
 
ellis <ellis@rwest.io>
parents:
diff changeset
361
     if [ "$need_tty" = "yes" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
362
         # The installer is going to want to ask for confirmation by
ellis <ellis@rwest.io>
parents:
diff changeset
363
         # reading stdin.  This script was piped into `sh` though and
ellis <ellis@rwest.io>
parents:
diff changeset
364
         # doesn't have stdin to pass to its children. Instead we're going
ellis <ellis@rwest.io>
parents:
diff changeset
365
         # to explicitly connect /dev/tty to the installer's stdin.
ellis <ellis@rwest.io>
parents:
diff changeset
366
         if [ ! -t 1 ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
367
             err "Unable to run interactively. Run with -y to accept defaults"
ellis <ellis@rwest.io>
parents:
diff changeset
368
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
369
 
ellis <ellis@rwest.io>
parents:
diff changeset
370
         ignore "$_file" "$@" < /dev/tty
ellis <ellis@rwest.io>
parents:
diff changeset
371
     else
ellis <ellis@rwest.io>
parents:
diff changeset
372
         ignore "$_file" "$@"
ellis <ellis@rwest.io>
parents:
diff changeset
373
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
374
 
ellis <ellis@rwest.io>
parents:
diff changeset
375
     local _retval=$?
ellis <ellis@rwest.io>
parents:
diff changeset
376
 
ellis <ellis@rwest.io>
parents:
diff changeset
377
     ignore rm "$_file"
ellis <ellis@rwest.io>
parents:
diff changeset
378
     ignore rmdir "$_dir"
ellis <ellis@rwest.io>
parents:
diff changeset
379
 
ellis <ellis@rwest.io>
parents:
diff changeset
380
     return "$_retval"
ellis <ellis@rwest.io>
parents:
diff changeset
381
 }
ellis <ellis@rwest.io>
parents:
diff changeset
382
 
ellis <ellis@rwest.io>
parents:
diff changeset
383
 dl() { # curl || wget
ellis <ellis@rwest.io>
parents:
diff changeset
384
     local _dld
ellis <ellis@rwest.io>
parents:
diff changeset
385
     local _ciphersuites
ellis <ellis@rwest.io>
parents:
diff changeset
386
     local _err
ellis <ellis@rwest.io>
parents:
diff changeset
387
     local _status
ellis <ellis@rwest.io>
parents:
diff changeset
388
     if check_cmd curl; then
ellis <ellis@rwest.io>
parents:
diff changeset
389
         _dld=curl
ellis <ellis@rwest.io>
parents:
diff changeset
390
     elif check_cmd wget; then
ellis <ellis@rwest.io>
parents:
diff changeset
391
         _dld=wget
ellis <ellis@rwest.io>
parents:
diff changeset
392
     else
ellis <ellis@rwest.io>
parents:
diff changeset
393
         _dld='curl or wget' # to be used in error message of need_cmd
ellis <ellis@rwest.io>
parents:
diff changeset
394
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
395
 
ellis <ellis@rwest.io>
parents:
diff changeset
396
     if [ "$1" = --check ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
397
         need_cmd "$_dld"
ellis <ellis@rwest.io>
parents:
diff changeset
398
     elif [ "$_dld" = curl ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
399
         get_ciphersuites_for_curl
ellis <ellis@rwest.io>
parents:
diff changeset
400
         _ciphersuites="$RETVAL"
ellis <ellis@rwest.io>
parents:
diff changeset
401
         if [ -n "$_ciphersuites" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
402
             _err=$(curl --proto '=https' --tlsv1.2 --ciphers "$_ciphersuites" --silent --show-error --fail --location "$1" --output "$2" 2>&1)
ellis <ellis@rwest.io>
parents:
diff changeset
403
             _status=$?
ellis <ellis@rwest.io>
parents:
diff changeset
404
         else
ellis <ellis@rwest.io>
parents:
diff changeset
405
             echo "Warning: Not enforcing strong cipher suites for TLS, this is potentially less secure"
ellis <ellis@rwest.io>
parents:
diff changeset
406
             if ! check_help_for "$3" curl --proto --tlsv1.2; then
ellis <ellis@rwest.io>
parents:
diff changeset
407
                 echo "Warning: Not enforcing TLS v1.2, this is potentially less secure"
ellis <ellis@rwest.io>
parents:
diff changeset
408
                 _err=$(curl --silent --show-error --fail --location "$1" --output "$2" 2>&1)
ellis <ellis@rwest.io>
parents:
diff changeset
409
                 _status=$?
ellis <ellis@rwest.io>
parents:
diff changeset
410
             else
ellis <ellis@rwest.io>
parents:
diff changeset
411
                 _err=$(curl --proto '=https' --tlsv1.2 --silent --show-error --fail --location "$1" --output "$2" 2>&1)
ellis <ellis@rwest.io>
parents:
diff changeset
412
                 _status=$?
ellis <ellis@rwest.io>
parents:
diff changeset
413
             fi
ellis <ellis@rwest.io>
parents:
diff changeset
414
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
415
         if [ -n "$_err" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
416
             echo "$_err" >&2
ellis <ellis@rwest.io>
parents:
diff changeset
417
             if echo "$_err" | grep -q 404$; then
ellis <ellis@rwest.io>
parents:
diff changeset
418
                 err "installer for platform '$3' not found 8^C - ask ellis to support your platform"
ellis <ellis@rwest.io>
parents:
diff changeset
419
             fi
ellis <ellis@rwest.io>
parents:
diff changeset
420
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
421
         return $_status
ellis <ellis@rwest.io>
parents:
diff changeset
422
     elif [ "$_dld" = wget ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
423
         get_ciphersuites_for_wget
ellis <ellis@rwest.io>
parents:
diff changeset
424
         _ciphersuites="$RETVAL"
ellis <ellis@rwest.io>
parents:
diff changeset
425
         if [ -n "$_ciphersuites" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
426
             _err=$(wget --https-only --secure-protocol=TLSv1_2 --ciphers "$_ciphersuites" "$1" -O "$2" 2>&1)
ellis <ellis@rwest.io>
parents:
diff changeset
427
             _status=$?
ellis <ellis@rwest.io>
parents:
diff changeset
428
         else
ellis <ellis@rwest.io>
parents:
diff changeset
429
             echo "Warning: Not enforcing strong cipher suites for TLS, this is potentially less secure"
ellis <ellis@rwest.io>
parents:
diff changeset
430
             if ! check_help_for "$3" wget --https-only --secure-protocol; then
ellis <ellis@rwest.io>
parents:
diff changeset
431
                 echo "Warning: Not enforcing TLS v1.2, this is potentially less secure"
ellis <ellis@rwest.io>
parents:
diff changeset
432
                 _err=$(wget "$1" -O "$2" 2>&1)
ellis <ellis@rwest.io>
parents:
diff changeset
433
                 _status=$?
ellis <ellis@rwest.io>
parents:
diff changeset
434
             else
ellis <ellis@rwest.io>
parents:
diff changeset
435
                 _err=$(wget --https-only --secure-protocol=TLSv1_2 "$1" -O "$2" 2>&1)
ellis <ellis@rwest.io>
parents:
diff changeset
436
                 _status=$?
ellis <ellis@rwest.io>
parents:
diff changeset
437
             fi
ellis <ellis@rwest.io>
parents:
diff changeset
438
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
439
         if [ -n "$_err" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
440
             echo "$_err" >&2
ellis <ellis@rwest.io>
parents:
diff changeset
441
             if echo "$_err" | grep -q ' 404 Not Found$'; then
ellis <ellis@rwest.io>
parents:
diff changeset
442
                 err "installer for platform '$3' not found!"
ellis <ellis@rwest.io>
parents:
diff changeset
443
             fi
ellis <ellis@rwest.io>
parents:
diff changeset
444
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
445
         return $_status
ellis <ellis@rwest.io>
parents:
diff changeset
446
     else
ellis <ellis@rwest.io>
parents:
diff changeset
447
         err "Unknown dl program"   # should not reach here
ellis <ellis@rwest.io>
parents:
diff changeset
448
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
449
 }
ellis <ellis@rwest.io>
parents:
diff changeset
450
 
ellis <ellis@rwest.io>
parents:
diff changeset
451
 check_help_for() {
ellis <ellis@rwest.io>
parents:
diff changeset
452
     local _arch
ellis <ellis@rwest.io>
parents:
diff changeset
453
     local _cmd
ellis <ellis@rwest.io>
parents:
diff changeset
454
     local _arg
ellis <ellis@rwest.io>
parents:
diff changeset
455
     _arch="$1"
ellis <ellis@rwest.io>
parents:
diff changeset
456
     shift
ellis <ellis@rwest.io>
parents:
diff changeset
457
     _cmd="$1"
ellis <ellis@rwest.io>
parents:
diff changeset
458
     shift
ellis <ellis@rwest.io>
parents:
diff changeset
459
 
ellis <ellis@rwest.io>
parents:
diff changeset
460
     local _category
ellis <ellis@rwest.io>
parents:
diff changeset
461
     if "$_cmd" --help | grep -q 'For all options use the manual or "--help all".'; then
ellis <ellis@rwest.io>
parents:
diff changeset
462
       _category="all"
ellis <ellis@rwest.io>
parents:
diff changeset
463
     else
ellis <ellis@rwest.io>
parents:
diff changeset
464
       _category=""
ellis <ellis@rwest.io>
parents:
diff changeset
465
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
466
 
ellis <ellis@rwest.io>
parents:
diff changeset
467
     case "$_arch" in
ellis <ellis@rwest.io>
parents:
diff changeset
468
 
ellis <ellis@rwest.io>
parents:
diff changeset
469
         *darwin*)
ellis <ellis@rwest.io>
parents:
diff changeset
470
         if check_cmd sw_vers; then
ellis <ellis@rwest.io>
parents:
diff changeset
471
             case $(sw_vers -productVersion) in
ellis <ellis@rwest.io>
parents:
diff changeset
472
                 10.*)
ellis <ellis@rwest.io>
parents:
diff changeset
473
                     # If we're running on macOS, older than 10.13, then we always
ellis <ellis@rwest.io>
parents:
diff changeset
474
                     # fail to find these options to force fallback
ellis <ellis@rwest.io>
parents:
diff changeset
475
                     if [ "$(sw_vers -productVersion | cut -d. -f2)" -lt 13 ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
476
                         # Older than 10.13
ellis <ellis@rwest.io>
parents:
diff changeset
477
                         echo "Warning: Detected macOS platform older than 10.13"
ellis <ellis@rwest.io>
parents:
diff changeset
478
                         return 1
ellis <ellis@rwest.io>
parents:
diff changeset
479
                     fi
ellis <ellis@rwest.io>
parents:
diff changeset
480
                     ;;
ellis <ellis@rwest.io>
parents:
diff changeset
481
                 11.*)
ellis <ellis@rwest.io>
parents:
diff changeset
482
                     # We assume Big Sur will be OK for now
ellis <ellis@rwest.io>
parents:
diff changeset
483
                     ;;
ellis <ellis@rwest.io>
parents:
diff changeset
484
                 *)
ellis <ellis@rwest.io>
parents:
diff changeset
485
                     # Unknown product version, warn and continue
ellis <ellis@rwest.io>
parents:
diff changeset
486
                     echo "Warning: Detected unknown macOS major version: $(sw_vers -productVersion)"
ellis <ellis@rwest.io>
parents:
diff changeset
487
                     echo "Warning TLS capabilities detection may fail"
ellis <ellis@rwest.io>
parents:
diff changeset
488
                     ;;
ellis <ellis@rwest.io>
parents:
diff changeset
489
             esac
ellis <ellis@rwest.io>
parents:
diff changeset
490
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
491
         ;;
ellis <ellis@rwest.io>
parents:
diff changeset
492
 
ellis <ellis@rwest.io>
parents:
diff changeset
493
     esac
ellis <ellis@rwest.io>
parents:
diff changeset
494
 
ellis <ellis@rwest.io>
parents:
diff changeset
495
     for _arg in "$@"; do
ellis <ellis@rwest.io>
parents:
diff changeset
496
         if ! "$_cmd" --help $_category | grep -q -- "$_arg"; then
ellis <ellis@rwest.io>
parents:
diff changeset
497
             return 1
ellis <ellis@rwest.io>
parents:
diff changeset
498
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
499
     done
ellis <ellis@rwest.io>
parents:
diff changeset
500
 
ellis <ellis@rwest.io>
parents:
diff changeset
501
     true # not strictly needed
ellis <ellis@rwest.io>
parents:
diff changeset
502
 }
ellis <ellis@rwest.io>
parents:
diff changeset
503
 
ellis <ellis@rwest.io>
parents:
diff changeset
504
 # Return cipher suite string specified by user, otherwise return strong TLS 1.2-1.3 cipher suites
ellis <ellis@rwest.io>
parents:
diff changeset
505
 # if support by local tools is detected. Detection currently supports these curl backends: 
ellis <ellis@rwest.io>
parents:
diff changeset
506
 # GnuTLS and OpenSSL (possibly also LibreSSL and BoringSSL). Return value can be empty.
ellis <ellis@rwest.io>
parents:
diff changeset
507
 get_ciphersuites_for_curl() {
ellis <ellis@rwest.io>
parents:
diff changeset
508
     if [ -n "${BABEL_TLS_CIPHERSUITES-}" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
509
         # user specified custom cipher suites, assume they know what they're doing
ellis <ellis@rwest.io>
parents:
diff changeset
510
         RETVAL="$BABEL_TLS_CIPHERSUITES"
ellis <ellis@rwest.io>
parents:
diff changeset
511
         return
ellis <ellis@rwest.io>
parents:
diff changeset
512
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
513
 
ellis <ellis@rwest.io>
parents:
diff changeset
514
     local _openssl_syntax="no"
ellis <ellis@rwest.io>
parents:
diff changeset
515
     local _gnutls_syntax="no"
ellis <ellis@rwest.io>
parents:
diff changeset
516
     local _backend_supported="yes"
ellis <ellis@rwest.io>
parents:
diff changeset
517
     if curl -V | grep -q ' OpenSSL/'; then
ellis <ellis@rwest.io>
parents:
diff changeset
518
         _openssl_syntax="yes"
ellis <ellis@rwest.io>
parents:
diff changeset
519
     elif curl -V | grep -iq ' LibreSSL/'; then
ellis <ellis@rwest.io>
parents:
diff changeset
520
         _openssl_syntax="yes"
ellis <ellis@rwest.io>
parents:
diff changeset
521
     elif curl -V | grep -iq ' BoringSSL/'; then
ellis <ellis@rwest.io>
parents:
diff changeset
522
         _openssl_syntax="yes"
ellis <ellis@rwest.io>
parents:
diff changeset
523
     elif curl -V | grep -iq ' GnuTLS/'; then
ellis <ellis@rwest.io>
parents:
diff changeset
524
         _gnutls_syntax="yes"
ellis <ellis@rwest.io>
parents:
diff changeset
525
     else
ellis <ellis@rwest.io>
parents:
diff changeset
526
         _backend_supported="no"
ellis <ellis@rwest.io>
parents:
diff changeset
527
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
528
 
ellis <ellis@rwest.io>
parents:
diff changeset
529
     local _args_supported="no"
ellis <ellis@rwest.io>
parents:
diff changeset
530
     if [ "$_backend_supported" = "yes" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
531
         # "unspecified" is for arch, allows for possibility old OS using macports, homebrew, etc.
ellis <ellis@rwest.io>
parents:
diff changeset
532
         if check_help_for "notspecified" "curl" "--tlsv1.2" "--ciphers" "--proto"; then
ellis <ellis@rwest.io>
parents:
diff changeset
533
             _args_supported="yes"
ellis <ellis@rwest.io>
parents:
diff changeset
534
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
535
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
536
 
ellis <ellis@rwest.io>
parents:
diff changeset
537
     local _cs=""
ellis <ellis@rwest.io>
parents:
diff changeset
538
     if [ "$_args_supported" = "yes" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
539
         if [ "$_openssl_syntax" = "yes" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
540
             _cs=$(get_strong_ciphersuites_for "openssl")
ellis <ellis@rwest.io>
parents:
diff changeset
541
         elif [ "$_gnutls_syntax" = "yes" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
542
             _cs=$(get_strong_ciphersuites_for "gnutls")
ellis <ellis@rwest.io>
parents:
diff changeset
543
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
544
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
545
 
ellis <ellis@rwest.io>
parents:
diff changeset
546
     RETVAL="$_cs"
ellis <ellis@rwest.io>
parents:
diff changeset
547
 }
ellis <ellis@rwest.io>
parents:
diff changeset
548
 
ellis <ellis@rwest.io>
parents:
diff changeset
549
 # Return cipher suite string specified by user, otherwise return strong TLS 1.2-1.3 cipher suites
ellis <ellis@rwest.io>
parents:
diff changeset
550
 # if support by local tools is detected. Detection currently supports these wget backends: 
ellis <ellis@rwest.io>
parents:
diff changeset
551
 # GnuTLS and OpenSSL (possibly also LibreSSL and BoringSSL). Return value can be empty.
ellis <ellis@rwest.io>
parents:
diff changeset
552
 get_ciphersuites_for_wget() {
ellis <ellis@rwest.io>
parents:
diff changeset
553
     if [ -n "${BABEL_TLS_CIPHERSUITES-}" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
554
         # user specified custom cipher suites, assume they know what they're doing
ellis <ellis@rwest.io>
parents:
diff changeset
555
         RETVAL="$BABEL_TLS_CIPHERSUITES"
ellis <ellis@rwest.io>
parents:
diff changeset
556
         return
ellis <ellis@rwest.io>
parents:
diff changeset
557
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
558
 
ellis <ellis@rwest.io>
parents:
diff changeset
559
     local _cs=""
ellis <ellis@rwest.io>
parents:
diff changeset
560
     if wget -V | grep -q '\-DHAVE_LIBSSL'; then
ellis <ellis@rwest.io>
parents:
diff changeset
561
         # "unspecified" is for arch, allows for possibility old OS using macports, homebrew, etc.
ellis <ellis@rwest.io>
parents:
diff changeset
562
         if check_help_for "notspecified" "wget" "TLSv1_2" "--ciphers" "--https-only" "--secure-protocol"; then
ellis <ellis@rwest.io>
parents:
diff changeset
563
             _cs=$(get_strong_ciphersuites_for "openssl")
ellis <ellis@rwest.io>
parents:
diff changeset
564
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
565
     elif wget -V | grep -q '\-DHAVE_LIBGNUTLS'; then
ellis <ellis@rwest.io>
parents:
diff changeset
566
         # "unspecified" is for arch, allows for possibility old OS using macports, homebrew, etc.
ellis <ellis@rwest.io>
parents:
diff changeset
567
         if check_help_for "notspecified" "wget" "TLSv1_2" "--ciphers" "--https-only" "--secure-protocol"; then
ellis <ellis@rwest.io>
parents:
diff changeset
568
             _cs=$(get_strong_ciphersuites_for "gnutls")
ellis <ellis@rwest.io>
parents:
diff changeset
569
         fi
ellis <ellis@rwest.io>
parents:
diff changeset
570
     fi
ellis <ellis@rwest.io>
parents:
diff changeset
571
 
ellis <ellis@rwest.io>
parents:
diff changeset
572
     RETVAL="$_cs"
ellis <ellis@rwest.io>
parents:
diff changeset
573
 }
ellis <ellis@rwest.io>
parents:
diff changeset
574
 
ellis <ellis@rwest.io>
parents:
diff changeset
575
 # Return strong TLS 1.2-1.3 cipher suites in OpenSSL or GnuTLS syntax. TLS 1.2 
ellis <ellis@rwest.io>
parents:
diff changeset
576
 # excludes non-ECDHE and non-AEAD cipher suites. DHE is excluded due to bad 
ellis <ellis@rwest.io>
parents:
diff changeset
577
 # DH params often found on servers (see RFC 7919). Sequence matches or is
ellis <ellis@rwest.io>
parents:
diff changeset
578
 # similar to Firefox 68 ESR with weak cipher suites disabled via about:config.  
ellis <ellis@rwest.io>
parents:
diff changeset
579
 # $1 must be openssl or gnutls.
ellis <ellis@rwest.io>
parents:
diff changeset
580
 get_strong_ciphersuites_for() {
ellis <ellis@rwest.io>
parents:
diff changeset
581
     if [ "$1" = "openssl" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
582
         # OpenSSL is forgiving of unknown values, no problems with TLS 1.3 values on versions that don't support it yet.
ellis <ellis@rwest.io>
parents:
diff changeset
583
         echo "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384"
ellis <ellis@rwest.io>
parents:
diff changeset
584
     elif [ "$1" = "gnutls" ]; then
ellis <ellis@rwest.io>
parents:
diff changeset
585
         # GnuTLS isn't forgiving of unknown values, so this may require a GnuTLS version that supports TLS 1.3 even if wget doesn't.
ellis <ellis@rwest.io>
parents:
diff changeset
586
         # Begin with SECURE128 (and higher) then remove/add to build cipher suites. Produces same 9 cipher suites as OpenSSL but in slightly different order.
ellis <ellis@rwest.io>
parents:
diff changeset
587
         echo "SECURE128:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS-ALL:-CIPHER-ALL:-MAC-ALL:-KX-ALL:+AEAD:+ECDHE-ECDSA:+ECDHE-RSA:+AES-128-GCM:+CHACHA20-POLY1305:+AES-256-GCM"
ellis <ellis@rwest.io>
parents:
diff changeset
588
     fi 
ellis <ellis@rwest.io>
parents:
diff changeset
589
 }
ellis <ellis@rwest.io>
parents:
diff changeset
590
 
ellis <ellis@rwest.io>
parents:
diff changeset
591
 main "$@" || exit 1
ellis <ellis@rwest.io>
parents:
diff changeset
592