mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2026-11-08 16:08:58 +01:00
Christian Heusel
7be3afb15c
The sequoia cli once again changed their interface, therefore port this to the (somewhat guaranteed to be) stable sops interface. Suggested-by: David Runge <dvzrv@archlinux.org> Signed-off-by: Christian Heusel <christian@heusel.eu>
48 lines
1.3 KiB
Bash
Executable File
48 lines
1.3 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -o nounset -o errexit -o pipefail
|
|
|
|
NAME=gluebuddy
|
|
LATEST_GLUEBUDDY_FILE=/root/latest_release
|
|
readonly PROJECT_ID="archlinux%2Fgluebuddy"
|
|
|
|
readonly TRUSTED_UIDs=(
|
|
anthraxx@archlinux.org
|
|
jelle@archlinux.org
|
|
)
|
|
readonly TRUSTED_KEYS=(
|
|
E240B57E2C4630BA768E2F26FC1B547C8D8172C8
|
|
E499C79F53C96A54E572FEE1C06086337C50773E
|
|
)
|
|
|
|
RELEASES="$(curl --silent --show-error --fail "https://gitlab.archlinux.org/api/v4/projects/${PROJECT_ID}/releases")"
|
|
LATEST_RELEASE_TAG="$(jq -r .[0].tag_name <<< "${RELEASES}")"
|
|
|
|
if [ -f $LATEST_GLUEBUDDY_FILE ]; then
|
|
LATEST_RELEASE_DOWNLOAD=$(cat ${LATEST_GLUEBUDDY_FILE})
|
|
if [ "$LATEST_RELEASE_TAG" = "$LATEST_RELEASE_DOWNLOAD" ]; then
|
|
exit 0
|
|
fi
|
|
fi
|
|
|
|
|
|
readonly TMPDIR="$(mktemp --directory --tmpdir="/var/tmp")"
|
|
trap "rm -rf \"${TMPDIR}\"" EXIT
|
|
cd "${TMPDIR}"
|
|
|
|
RELEASES="$(curl --silent --show-error --fail "https://gitlab.archlinux.org/api/v4/projects/${PROJECT_ID}/releases/$LATEST_RELEASE_TAG")"
|
|
ASSETS=$(echo $RELEASES | jq .assets.links)
|
|
LINKS=$(echo $ASSETS | jq -r '.[].direct_asset_url')
|
|
links=($LINKS)
|
|
|
|
for i in "${links[@]}"
|
|
do
|
|
curl --silent --show-error --fail --location --remote-name "$i"
|
|
done
|
|
|
|
rsop verify "${NAME}.sig" <(pacman-key --export "${TRUSTED_KEYS[@]}") < "${NAME}"
|
|
|
|
mv ${NAME} /usr/local/bin/${NAME}
|
|
chmod +x /usr/local/bin/${NAME}
|
|
echo "$LATEST_RELEASE_TAG" > $LATEST_GLUEBUDDY_FILE
|