#!/bin/bash
# Librerelease
# Uploads packages into [staging]

# Copyright 2010 Nicolás Reynolds

# ---------- GNU General Public License 3 ----------

# This file is part of Parabola.

# Parabola is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.

# Parabola is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.

# You should have received a copy of the GNU General Public License
# along with Parabola. If not, see <http://www.gnu.org/licenses/>.

source /etc/libretools.conf
custom_config=$XDG_CONFIG_HOME/libretools/libretools.conf

function usage {
    echo "$(gettext "Usage: $0")"
    echo
    echo "$(gettext "This script uploads packages on $WORKDIR/stagging")"
    echo "$(gettext "to parabola server.")"
    echo
    echo "$(gettext "OPTIONS:")"
    echo "$(gettext "   -h this message.")"
    echo "$(gettext "   -l only list packages but not upload them.")"
    echo "$(gettext "   -c clean packages on $WORKDIR/staging.")"
    echo "$(gettext "   -n dry-run")"
}

function list_packages {
    repos=($(find "$WORKDIR/staging/" -mindepth 1 -type d \! -empty -printf '%f ' 2>/dev/null))
    for _repo in ${repos[@]}; do
        msg2 "$_repo"
        find ${WORKDIR}/staging/${_repo} -type f -printf "%f\n"
    done
    unset repos
}

function sign_packages {
    if [ -z "${SIGEXT}" ]; then
        SIGEXT=.sig
        warning "Empty SIGEXT var, using default .sig"
    fi

    if [ -z "${GPG_AGENT_INFO}" ]; then
        warning "It's better to use gpg-agent to sign packages in batches"
    fi

    packages=($(find "${WORKDIR}/staging/" -type f -iname '*.pkg.tar.?z'))
    for package in ${packages[@]}; do
        if [ -f "${package}${SIGEXT}" ]; then

            warning "Package signature found, verifying..."

# Verify that the signature is correct, else remove for re-signing
            if ! gpg --quiet --verify "${package}${SIGEXT}" >/dev/null 2>&1; then
                error "Failed! Resigning..."
                rm -f "${package}${SIGEXT}"
            fi
        fi

        msg2 "Signing ${package}..."
        gpg --default-key "${SIGID}" --output "${package}${SIGEXT}" \
            --detach-sig "${package}" || {
            error "Signing failed"
            exit 2
        }

    done
}

# Remove everything that's not a package or a signature
function clean_non_packages {
    find $WORKDIR/staging/ -type f \
         \! -iname "*.pkg.tar.?z" -a \! -iname "*.pkg.tar.?z.sig" \
         -delete
}

# Clean everything if not on dry-run mode
function clean {
    [ -z ${dryrun} ] && \
    rm -f $@
}

if [ -w / ]; then
    error "Run $0 as normal user"
    exit 1
fi

while getopts 'hlcn' arg; do
    case $arg in
        h) usage; exit 0 ;;
        l) list_packages; exit 0 ;;
        c) clean; exit $? ;;
        n) dryrun="--dry-run" ;;
    esac
done

[[ -e $custom_config ]] && source $custom_config

[[ ! -z ${HOOKPRERELEASE} ]] && bash -c "${HOOKPRERELEASE}"

clean_non_packages
if [ ! -z "${SIGID}" ]; then
    sign_packages
else
    error "Package signing is *required*, please set SIGID on your libretools.conf"
    exit 1
fi

# Make the permissions of the packages 644 otherwize the user will get access
# denied error when they try to download (rsync --no-perms doesn't seem to
# work).
find ${WORKDIR}/staging -type f -exec chmod 644 {} \;
find ${WORKDIR}/staging -type d -exec chmod 755 {} \;

# Get the synced files
SYNCED_FILES=($(find ${WORKDIR}/staging -type f))

msg "Uploading packages..."
rsync --recursive \
      ${dryrun} \
      --no-group \
      --no-perms \
      --copy-links \
      --hard-links \
      --partial \
      --prune-empty-dirs \
      --human-readable \
      --progress \
      -e "ssh " \
      ${WORKDIR}/staging \
      ${PARABOLAHOST}:${LIBREDESTDIR}/ || {
          error "Sync failed, try again"
          exit 1
      }

msg "Removing ${#SYNCED_FILES[@]} files from local [staging]"
clean ${SYNCED_FILES[@]}

msg "Running db-update on repos"
ssh ${PARABOLAHOST} dbscripts/db-update

exit 0