mirror of
https://github.com/kanidm/kanidm.git
synced 2025-02-23 12:37:00 +01:00
03645c8bf2
* feat: Rebuild the deb packaging flow fix: Add more sudo, GHA likes sudo fix: Give build_debs.sh only the triplet argument fix: Work around more GHA weirdness in apt sources Drop crossbuild as it was only used by debian packaging docs: Update book and other docs for packaging flow feat: package kanidm_tools aka kanidm cli docs: Update packaging docs for latest process and clarity fix: use full triple in sdynlib variants fix: Correct kanidm.pam asset placement fix: Give pam & nss modules a description so the debs get it fix: Work around wonky libssl3 naming in Ubuntu 24.04 fix: Place kanidm bin correctly :3 feat: Pin all blame on @yaleman :3 WIP: Swap out the submodule reference. Still not the final one though. refactor: Switch kanidm-pam & kanidm-nss to mandatory deps While in theory unixd will start and run without them, it also won't do anything useful. fix: explicit depends for nss & pam libs without versions We build the debs on the ubuntu24.04 GHA runner so automatic pins versions that are too new for 22.04. Ideally we'd run cargo-deb also on the target images but that'll have to be a future improvement. * refactor: Switch nss_kanidm & pam_kanidm package naming closer to debian guidance * feat: Attempt enabling unixd by default with secure defaults * fix: Relax config permissions so the kanidm user can read Also, update postinst config instructions
100 lines
2.9 KiB
Bash
Executable file
100 lines
2.9 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
set -e
|
|
|
|
if [ "$(whoami)" == "root" ]; then
|
|
SUDOCMD=""
|
|
else
|
|
SUDOCMD="sudo "
|
|
fi
|
|
|
|
${SUDOCMD} apt-get update &&
|
|
${SUDOCMD} apt-get install -y \
|
|
libpam0g-dev \
|
|
libudev-dev \
|
|
libssl-dev \
|
|
pkg-config \
|
|
curl \
|
|
rsync \
|
|
git \
|
|
cmake \
|
|
build-essential \
|
|
jq \
|
|
tpm-udev
|
|
|
|
if [ -z "${PACKAGING}" ]; then
|
|
PACKAGING=0
|
|
fi
|
|
|
|
if [ "${PACKAGING}" -eq 1 ]; then
|
|
# Install packages needed for cargo-deb to build healthy debs for any supported target
|
|
# This works in Debian, but not in Ubuntu because they do multiarch weird.
|
|
# It would be too invasive to config a daily driver Ubuntu install for multiarch,
|
|
# so instead we don't, and just warn.
|
|
source /etc/os-release
|
|
if [[ "$ID" == "ubuntu" ]]; then
|
|
2>&1 echo "You're running Ubuntu, so we're skipping enabling multiarch for you because it would be too invasive. You won't be able to build valid debs for other than your native architecture."
|
|
${SUDOCMD} apt-get install -y \
|
|
libpam0g \
|
|
libssl3
|
|
elif [[ "$ID" == "debian" ]]; then
|
|
${SUDOCMD} dpkg --add-architecture arm64 && ${SUDOCMD} apt-get update
|
|
${SUDOCMD} apt-get install -y \
|
|
libpam0g:{amd64,arm64} \
|
|
libssl3:{amd64,arm64}
|
|
fi
|
|
export INSTALL_RUST=1
|
|
fi
|
|
|
|
if [ -z "$(which cargo)" ]; then
|
|
if [ -f "$HOME/.cargo/env" ]; then
|
|
#shellcheck disable=SC1091
|
|
source "$HOME/.cargo/env"
|
|
elif [ "${INSTALL_RUST}" == "1" ]; then
|
|
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
|
|
#shellcheck disable=SC1091
|
|
source "$HOME/.cargo/env"
|
|
else
|
|
echo "#############################################################"
|
|
echo "Couldn't find rust and you didn't say to install it..."
|
|
echo "#############################################################"
|
|
fi
|
|
|
|
fi
|
|
|
|
ERROR=0
|
|
if [ -z "$(which cargo)" ]; then
|
|
echo "You don't have cargo / rust installed!"
|
|
echo "Go to <https://www.rust-lang.org/tools/install> for instructions!"
|
|
echo ""
|
|
echo "Or run this script with INSTALL_RUST=1 to install it for you."
|
|
ERROR=1
|
|
fi
|
|
|
|
if [ $ERROR -eq 0 ] && [ -z "$(which wasm-pack)" ]; then
|
|
echo "You don't have wasm-pack installed! Installing it now..."
|
|
cargo install wasm-pack
|
|
fi
|
|
if [ $ERROR -eq 0 ] && [ -z "$(which wasm-bindgen)" ]; then
|
|
echo "You don't have wasm-bindgen installed! Installing it now..."
|
|
cargo install -f wasm-bindgen-cli
|
|
fi
|
|
if [ $ERROR -eq 0 ] && [ -z "$(which cross)" ]; then
|
|
echo "You don't have cross installed! Installing it now..."
|
|
cargo install -f cross
|
|
fi
|
|
if [ $ERROR -eq 0 ] && [ -z "$(which cargo-deb)" ]; then
|
|
echo "You don't have cargo-deb installed! Installing it now..."
|
|
cargo install -f cargo-deb
|
|
fi
|
|
|
|
|
|
if [ $ERROR -eq 1 ]; then
|
|
exit 1
|
|
fi
|
|
|
|
echo "Woo, all ready to go!"
|
|
|
|
#shellcheck disable=SC2016
|
|
echo 'You might need to load the env: source "$HOME/.cargo/env"'
|