path: root/lib/load-configuration

#!/bin/sh

# load global variables

# shellcheck disable=SC2034

set -e
export LANG=C

if [ "$(uname -n)" = 'buildmaster.archlinux32.org' ]; then
  i_am_the_master=true

  # abort early if mysqld is not running or kill switch active
  # ('/tmp/do-not-run-build-master')
  if [ ! -S '/var/run/mysqld/mysqld.sock' ] || \
    [ -f '/tmp/do-not-run-build-master' ]; then
    >&2 echo 'mysqld is not running or build master is on halt'
    >&2 echo 'I will abort - whatever you try to do would probably fail anyway.'
    # When the buildmaster is on halt,
    #   - systemd MUST NOT hickup - e.g. exit code 0,
    #   - connecting slaves MUST get exit code 1 and
    #   - interactively run commands SHOULD get exit code 1, too
    if tty -s || [ -n "${SSH_ORIGINAL_COMMAND}" ]; then
      exit 1
    else
      exit 0
    fi
  fi
else
  i_am_the_master=false
  if [ -f '/tmp/do-not-run-build-slave' ]; then
    >&2 echo 'build slave is on halt.'
    >&2 echo 'I will stop now.'
    # non-zero exit code to signal systemctl that the process should not
    # be restarted automatically
    exit 1
  fi
fi

# dirty hack to get this stuff debugable from a bash
if [ "${0##*/}" = "-bash" ] || [ "${0##*/}" = "bash" ] || [ "${0##*/}" = "dash" ]; then
  set +e
  if [ -z "${base_dir}" ]; then
    base_dir=$(pwd)
  fi
fi

if [ -z "${base_dir}" ]; then
  base_dir=$(printf '%s/..' "$(dirname "$(readlink -f "$0")")")
  if printf '%s\n' "${0}" \
  | grep -qx '.*/intention\.[0-9]\+'; then
    base_dir="${base_dir}/.."
  fi
fi

base_dir=$(
  readlink -e "${base_dir}"
)

work_dir="${base_dir}/work"

# shellcheck source=../lib/common-functions
. "${base_dir}/lib/common-functions"

# if mysqld is not running, we're either on a build slave and don't need
# lib/mysql-functions or we're on the build master and something is wrong
# anyway
if pgrep -x mariadbd >/dev/null 2>&1; then
  # shellcheck source=../lib/mysql-functions
  . "${base_dir}/lib/mysql-functions"
fi

if ${i_am_the_master}; then
  releng_directory="${work_dir}/repos/releng"
else
  repo_names='archlinux32'
  repo_paths__archlinux32="${work_dir}/repos/packages32"
fi

master_build_server="buildmaster.archlinux32.org"
master_build_server_port="22"
master_build_server_user="master"
master_build_server_identity="${work_dir}/.ssh/id_rsa"

repo_key='0xdeadbeef'
package_key='0x15eebadc0de'

# to access the master mirror via rsync
master_mirror_rsync_command='rsync --password-file=/home/master/rsync.password -l'
master_mirror_rsync_directory='rsync://buildmaster@mirror.archlinux32.org/packages32'

# to access the master mirror via sftp
master_mirror_sftp_command='sftp -b- user@mirror'
master_mirror_sftp_root='mirror.archlinux32.org'

# mirror of sources, identified (solely) by hash
source_by_hash_mirror='https://sources.archlinux32.org/'

# what should be tried in what order to somehow repair a broken build
straws_that_might_repair_failing_builds=$(
  printf '%s\n' \
    ':mirrored_source_by_hash:' \
    ':clean_chroot:haskell_without_check:' \
    ':with_build_support:' \
    ':with_build_support:clean_chroot:'
)

# root directory of the webserver
webserver_directory='/srv/http'

# directory to keep the build log files in
build_log_directory='/srv/http/build-logs'

# irc client configuration
irc_dir='/home/master/irc/irc.libera.chat'
irc_password='top_secret'

# commands to run to update the package mirror used for installing archlinux32 packages,
# e.g. the one from /etc/pacman.d/mirrorlist32 (useful on build slaves which do not
# have the master mirror in the mirrorlist32)
mirror_update_command=''

# list of urls to trigger updates of the respective mirrors (used on build master only)
mirror_refresh_trigger_urls=''

# command to access the mysql database
mysql_command='mysql buildmaster'

# how long should packages be in [community-testing]/[testing] before
# automatically being marked as tested
max_testing_duration="14"

# set default location of archbuild chroots
archbuild_chroots='/var/lib/archbuild'

# load static values from the database
if ${i_am_the_master} \
|| [ "${0##*/}" = 'nit-picker' ]; then
  mysql_retrieve_static_information
fi

# possibly pull in custom modifications

conf_dir="${CONFIG_DIR:-${base_dir}/conf}"

if [ -r "${conf_dir}/common.conf" ]; then
  # shellcheck source=/dev/null
  . "${conf_dir}/common.conf"
fi

if ${i_am_the_master} && \
  [ -r "${conf_dir}/master.conf" ]; then
  # shellcheck source=/dev/null
  . "${conf_dir}/master.conf"
fi

if ! ${i_am_the_master} && \
  [ -r "${conf_dir}/slave.conf" ]; then
  # shellcheck source=../conf/slave.conf.example
  . "${conf_dir}/slave.conf"
fi

# check / set up environment

if [ -z "${build_list_lock_file}" ]; then
  build_list_lock_file="${work_dir}/build-list.lock"
fi

if [ -z "${check_mirrors_lock_file}" ]; then
  check_mirrors_lock_file="${work_dir}/check-mirrors.lock"
fi

if [ -z "${harvest_commit_times_lock_file}" ]; then
  harvest_commit_times_lock_file="${work_dir}/harvest-commit-times.lock"
fi

if [ -z "${package_database_lock_file}" ]; then
  package_database_lock_file="${work_dir}/package-database.lock"
fi

if [ -z "${sanity_check_lock_file}" ]; then
  sanity_check_lock_file="${work_dir}/sanity-check.lock"
fi

if [ -z "${status_lock_file}" ]; then
  status_lock_file="${work_dir}/status.lock"
fi

mkdir -p "${work_dir}"

if ${i_am_the_master}; then
  if [ -z "${intentions_directory}" ]; then
    intentions_directory="${work_dir}/intentions"
  fi
  mkdir -p "${intentions_directory}"
fi

for repo in ${repo_names} 'releng'; do

  if [ "${repo}" = 'releng' ]; then
    if [ -z "${releng_directory}" ]; then
      continue
    fi
    repo_path="${releng_directory}"
  else
    eval repo_path='"${repo_paths__'"${repo}"'}"'
  fi

  mkdir -p "${repo_path%/*}"

  if ! git -C "${repo_path}" rev-parse --git-dir > /dev/null 2>&1; then
    case "${repo}" in
      'archlinux32')
        repo_source='https://git.archlinux32.org/packages'
      ;;
      'releng')
        repo_source='git@git.archlinux32.org:archlinux32/releng.git'
      ;;
      'state')
        repo_source='https://gitlab.archlinux.org/archlinux/packaging/state.git'
      ;;
      *)
        >&2 printf 'unknown repository "%s"\n' "${repo}"
        exit 1
      ;;
    esac
    git clone --mirror "${repo_source}" "${repo_path}"
  fi

done

if [ "${master_build_server_identity}" = "${work_dir}/.ssh/id_rsa" ] && \
  [ ! -f "${master_build_server_identity}" ]; then
  mkdir -p "${master_build_server_identity%/*}"
  ssh-keygen -b4096 -f "${master_build_server_identity}"
fi

if ${i_am_the_master}; then
  command="${0##*/}"
  # these commands are useless to log
  if [ "${command}" != 'ii-answer' ] && \
    [ "${command}" != 'slave-build-connect' ] && \
    [ "${SKIP_COMMAND_LOG}" != 1 ]; then
    # shellcheck disable=SC2016
    {
      printf 'INSERT INTO `command_log`(`command`,`parameters`,`shell`)'
      printf ' VALUES ('
        printf 'from_base64("%s"),' \
          "$(
            printf '%s' "${command}" | \
              base64
          )"
        printf 'from_base64("%s"),' \
          "$(
            printf '%s' "$*" | \
              head -c $((64*1024-1)) | \
              base64
          )"
        if tty -s; then
          printf '1'
        else
          printf '0'
        fi
      printf ');\n'
    } | \
      mysql_run_query 'unimportant'
  fi
  export SKIP_COMMAND_LOG=''

  # shellcheck source=../lib/intentions-queue
  . "${base_dir}/lib/intentions-queue"
fi