81 lines
2.6 KiB
Bash
81 lines
2.6 KiB
Bash
|
#!/usr/bin/env nix-shell
|
|||
|
|
#!nix-shell -i bash -p coreutils curl git gnutar jq moreutils nix
|
|||
|
|
|
|||
|
|
set -eu -o pipefail
|
|||
|
|
|
|||
|
|
if [ ! -v 1 ]; then
|
|||
|
|
echo "usage: lock-sdk-deps.sh <macOS version> <Packages>" >&2
|
|||
|
|
echo " <macOS version> Decimal-separated version number." >&2
|
|||
|
|
echo " Must correspond to a tag in https://github.com/apple-oss-distributions/distribution-macOS" >&2
|
|||
|
|
exit 1
|
|||
|
|
fi
|
|||
|
|
|
|||
|
|
pkgdir=$(dirname "$(realpath "$0")")
|
|||
|
|
|
|||
|
|
lockfile=$pkgdir/versions.json
|
|||
|
|
if [ -e "$lockfile" ]; then
|
|||
|
|
echo '{}' > "$lockfile"
|
|||
|
|
fi
|
|||
|
|
|
|||
|
|
workdir=$(mktemp -d)
|
|||
|
|
trap 'rm -rf -- "$workdir"' EXIT
|
|||
|
|
|
|||
|
|
sdkVersion=$1; shift
|
|||
|
|
tag="macos-${sdkVersion//.}"
|
|||
|
|
|
|||
|
|
declare -A ignoredPackages=(
|
|||
|
|
[libsbuf]=1
|
|||
|
|
[locale]=1
|
|||
|
|
[mkAppleDerivation]=1
|
|||
|
|
[update-source-releases.sh]=1
|
|||
|
|
[versions.json]=1
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
readarray -t packages < <(
|
|||
|
|
for file in "$pkgdir"/*; do
|
|||
|
|
pkg=$(basename "$file" ".nix")
|
|||
|
|
test ! "${ignoredPackages[$pkg]-}" && echo "$pkg"
|
|||
|
|
done
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
echo "Locking versions for macOS $sdkVersion using tag '$tag'..."
|
|||
|
|
|
|||
|
|
pushd "$workdir" > /dev/null
|
|||
|
|
|
|||
|
|
git clone --branch "$tag" https://github.com/apple-oss-distributions/distribution-macOS.git &> /dev/null
|
|||
|
|
cd distribution-macOS
|
|||
|
|
|
|||
|
|
for package in "${packages[@]}"; do
|
|||
|
|
# If the tag exists in `release.json`, use that as an optimization to avoid downloading unnecessarily from Github.
|
|||
|
|
packageTag=$(jq -r --arg package "$package" '.projects[] | select(.project == $package) | .tag' release.json)
|
|||
|
|
packageCommit=$(git ls-tree -d HEAD "$package" | awk '{print $3}')
|
|||
|
|
|
|||
|
|
if [ ! -d "$package" ]; then
|
|||
|
|
packageCommit=HEAD
|
|||
|
|
fi
|
|||
|
|
|
|||
|
|
# However, sometimes it doesn’t exist. In that case, fall back to cloning the repo and check manually
|
|||
|
|
# which tag corresponds to the commit from the submodule.
|
|||
|
|
if [ -z "$packageTag" ]; then
|
|||
|
|
git clone --no-checkout "https://github.com/apple-oss-distributions/$package.git" ../source &> /dev/null
|
|||
|
|
pushd ../source > /dev/null
|
|||
|
|
packageTag=$(git tag --points-at "$packageCommit")
|
|||
|
|
popd > /dev/null
|
|||
|
|
rm -rf ../source
|
|||
|
|
fi
|
|||
|
|
|
|||
|
|
packageVersion=${packageTag##"$package"-}
|
|||
|
|
|
|||
|
|
curl -OL "https://github.com/apple-oss-distributions/$package/archive/$packageTag.tar.gz" &> /dev/null
|
|||
|
|
tar axf "$packageTag.tar.gz"
|
|||
|
|
|
|||
|
|
packageHash=$(nix --extra-experimental-features nix-command hash path "$package-$packageTag")
|
|||
|
|
|
|||
|
|
pkgsjson="{\"$package\": {\"version\": \"$packageVersion\", \"hash\": \"$packageHash\"}}"
|
|||
|
|
|
|||
|
|
echo " - Locking $package to version $packageVersion with hash '$packageHash'"
|
|||
|
|
jq --argjson pkg "$pkgsjson" -S '. * $pkg' "$lockfile" | sponge "$lockfile"
|
|||
|
|
done
|
|||
|
|
|
|||
|
|
popd > /dev/null
|