118 lines
3.8 KiB
Bash
Executable File
118 lines
3.8 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
#
|
|
# This script is run inside a docker container as part of our
|
|
# reproducible build process.
|
|
#
|
|
set -xeuo pipefail
|
|
if [ ! -f /.dockerenv ]; then
|
|
echo Not running inside Docker, build will probably not be reproducible
|
|
echo Use docker_reproducible_build instead to get the right environment
|
|
fi
|
|
if [ $# -eq 0 ]; then
|
|
echo usage : "$0" '<linux|windows|macos...>'
|
|
exit 1
|
|
fi
|
|
|
|
: "${CARGO:=cargo}" # quotes are just to placate shellcheck
|
|
|
|
linux=""
|
|
windows=""
|
|
macos=""
|
|
while [ "$#" -ne 0 ]; do
|
|
case "$1" in
|
|
linux) linux=1;;
|
|
windows) windows=1;;
|
|
macos) macos=1;;
|
|
*)
|
|
echo "unknown target : $1" >&2
|
|
exit 1;;
|
|
esac
|
|
shift
|
|
done
|
|
|
|
here=$(pwd)
|
|
|
|
## fix the target architecture to get reproducible builds
|
|
## the architecture was chosen as old enough that it should cover most usage
|
|
## while still supporting useful features like AES-NI. Older architectures
|
|
## won't be able to execute the resulting binary.
|
|
export CFLAGS="-march=westmere"
|
|
export RUSTFLAGS="-C target-cpu=westmere"
|
|
|
|
## force build to run in a fixed location. Necessary because the build path
|
|
## is somehow captured when compiling.
|
|
cp -a "$here" /arti
|
|
cd /arti
|
|
|
|
cargo_build () {
|
|
$CARGO build --locked "$@"
|
|
}
|
|
cargo_build_arti () {
|
|
cargo_build -p arti --release --features static "$@"
|
|
}
|
|
|
|
## add missing dependencies
|
|
apk add perl make git musl-dev
|
|
if [ -n "$linux" ]; then
|
|
## no additional dependencies specifically for Linux
|
|
|
|
## Build targeting x86_64-unknown-linux-musl to get a static binary
|
|
## feature "static" enable compiling some C dependencies instead of linking
|
|
## to system libraries. It is required to get a well behaving result.
|
|
cargo_build_arti --target x86_64-unknown-linux-musl
|
|
mv /arti/target/x86_64-unknown-linux-musl/release/arti "$here"/arti-linux
|
|
fi
|
|
if [ -n "$windows" ]; then
|
|
apk add mingw-w64-gcc
|
|
rustup target add x86_64-pc-windows-gnu
|
|
|
|
## Same tweaks as for Linux, plus don't insert compilation timestamp into PE headers
|
|
RUSTFLAGS="$RUSTFLAGS -C link-arg=-Wl,--no-insert-timestamp" \
|
|
cargo_build_arti --target x86_64-pc-windows-gnu
|
|
mv /arti/target/x86_64-pc-windows-gnu/release/arti.exe "$here"/arti-windows.exe
|
|
fi
|
|
if [ -n "$macos" ]; then
|
|
apk add bash cmake patch clang libc-dev libxml2-dev openssl-dev musl-fts-dev build-base python3 bsd-compat-headers xz
|
|
rustup target add x86_64-apple-darwin
|
|
|
|
mkdir -p .cargo
|
|
# (note: "ar" seems to be unused here. We could probably remove it?)
|
|
cat > .cargo/config << EOF
|
|
[target.x86_64-apple-darwin]
|
|
linker = "x86_64-apple-darwin16-clang"
|
|
ar = "x86_64-apple-darwin16-ar"
|
|
EOF
|
|
OSX_SDK_URL=https://github.com/phracker/MacOSX-SDKs/releases/download/11.3/MacOSX10.12.sdk.tar.xz
|
|
OSX_SDK_VERSION=10.12
|
|
OSX_SDK_SHA256=b314704d85934481c9927a0450db1768baf9af9efe649562fcb1a503bb44512f
|
|
OSX_SDK="MacOSX${OSX_SDK_VERSION}.sdk.tar.xz"
|
|
|
|
## don't compile clang if it's already here (CI cache?)
|
|
if [ ! -x "/arti/osxcross/target/bin/o64-clang" ]; then
|
|
git clone https://github.com/tpoechtrager/osxcross
|
|
cd osxcross
|
|
wget -nc "${OSX_SDK_URL}" -O tarballs/${OSX_SDK}
|
|
echo "${OSX_SDK_SHA256} tarballs/${OSX_SDK}" > ./sdk-checksum
|
|
sha256sum -c ./sdk-checksum
|
|
UNATTENDED=yes OSX_VERSION_MIN=10.7 ./build.sh
|
|
# copy it to gitlab build-dir so it may get cached
|
|
cp -r /arti/osxcross "$here"
|
|
cd ..
|
|
fi
|
|
|
|
PATH="/arti/osxcross/target/bin:$PATH" \
|
|
CC=o64-clang \
|
|
CXX=o64-clang++ \
|
|
cargo_build_arti --target x86_64-apple-darwin
|
|
mv /arti/target/x86_64-apple-darwin/release/arti "$here"/arti-macos
|
|
fi
|
|
|
|
git config --global --add safe.directory /arti
|
|
|
|
set +x
|
|
echo "branch :" "$(git rev-parse --abbrev-ref HEAD)"
|
|
echo "commit :" "$(git rev-parse HEAD)"
|
|
[ -z "$linux" ] || echo "Linux hash :" "$(sha256sum "$here"/arti-linux | cut -d " " -f 1)"
|
|
[ -z "$windows" ] || echo "Windows hash :" "$(sha256sum "$here"/arti-windows.exe | cut -d " " -f 1)"
|
|
[ -z "$macos" ] || echo "MacOS hash :" "$(sha256sum "$here"/arti-macos | cut -d " " -f 1)"
|