a3b957dcc0
- Makefile: Update build targets for native library integration - build.zig: Add SQLite linking and native hash library support - scripts/build_rsync.sh: Update rsync embedded binary build process - scripts/build_sqlite.sh: Add SQLite constants generation script - src/assets/README.md: Document embedded asset structure - src/utils/rsync_embedded_binary.zig: Update for new build layout
84 lines
2.8 KiB
Bash
84 lines
2.8 KiB
Bash
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
RSYNC_VERSION="${RSYNC_VERSION:-3.3.0}"
|
|
RSYNC_SRC_BASE="${RSYNC_SRC_BASE:-https://download.samba.org/pub/rsync/src}"
|
|
RSYNC_TARBALL="${RSYNC_TARBALL:-rsync-${RSYNC_VERSION}.tar.gz}"
|
|
RSYNC_TARBALL_SHA256="${RSYNC_TARBALL_SHA256:-}"
|
|
|
|
os="$(uname -s | tr '[:upper:]' '[:lower:]')"
|
|
arch="$(uname -m)"
|
|
if [[ "${arch}" == "aarch64" || "${arch}" == "arm64" ]]; then arch="arm64"; fi
|
|
if [[ "${arch}" == "x86_64" ]]; then arch="x86_64"; fi
|
|
|
|
if [[ "${os}" != "linux" ]]; then
|
|
echo "build-rsync: supported on linux only (for reproducible official builds). Use system rsync on ${os} or build on a native runner." >&2
|
|
exit 2
|
|
fi
|
|
|
|
repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
mkdir -p "${repo_root}/src/assets/rsync"
|
|
out="${repo_root}/src/assets/rsync/rsync_release_${os}_${arch}.bin"
|
|
|
|
tmp="$(mktemp -d)"
|
|
cleanup() { rm -rf "${tmp}"; }
|
|
trap cleanup EXIT
|
|
|
|
url="${RSYNC_SRC_BASE}/${RSYNC_TARBALL}"
|
|
sig_url_asc="${url}.asc"
|
|
sig_url_sig="${url}.sig"
|
|
|
|
echo "fetching ${url}"
|
|
curl -fsSL "${url}" -o "${tmp}/rsync.tar.gz"
|
|
|
|
verified=0
|
|
if command -v gpg >/dev/null 2>&1; then
|
|
sig_file=""
|
|
sig_url=""
|
|
if curl -fsSL "${sig_url_asc}" -o "${tmp}/rsync.tar.gz.asc"; then
|
|
sig_file="${tmp}/rsync.tar.gz.asc"
|
|
sig_url="${sig_url_asc}"
|
|
elif curl -fsSL "${sig_url_sig}" -o "${tmp}/rsync.tar.gz.sig"; then
|
|
sig_file="${tmp}/rsync.tar.gz.sig"
|
|
sig_url="${sig_url_sig}"
|
|
fi
|
|
|
|
if [[ -n "${sig_file}" ]]; then
|
|
echo "verifying signature ${sig_url}"
|
|
if gpg --batch --verify "${sig_file}" "${tmp}/rsync.tar.gz"; then
|
|
verified=1
|
|
else
|
|
echo "build-rsync: gpg signature check failed (often because the public key is not in your keyring)." >&2
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [[ "${verified}" -ne 1 ]]; then
|
|
if [[ -n "${RSYNC_TARBALL_SHA256}" ]]; then
|
|
echo "verifying sha256 for ${url}"
|
|
if command -v sha256sum >/dev/null 2>&1; then
|
|
echo "${RSYNC_TARBALL_SHA256} ${tmp}/rsync.tar.gz" | sha256sum -c -
|
|
elif command -v shasum >/dev/null 2>&1; then
|
|
echo "${RSYNC_TARBALL_SHA256} ${tmp}/rsync.tar.gz" | shasum -a 256 -c -
|
|
else
|
|
echo "build-rsync: need sha256sum or shasum for checksum verification" >&2
|
|
exit 2
|
|
fi
|
|
else
|
|
echo "build-rsync: could not verify ${url} (no usable gpg signature, and RSYNC_TARBALL_SHA256 is empty)." >&2
|
|
echo "Set RSYNC_TARBALL_SHA256=<expected sha256> or install gpg with a trusted key for the rsync signing identity." >&2
|
|
exit 2
|
|
fi
|
|
fi
|
|
|
|
tar -C "${tmp}" -xzf "${tmp}/rsync.tar.gz"
|
|
extract_dir="$(tar -tzf "${tmp}/rsync.tar.gz" | head -n 1 | cut -d/ -f1)"
|
|
cd "${tmp}/${extract_dir}"
|
|
|
|
CC=musl-gcc CFLAGS="-O2" LDFLAGS="-static" ./configure --disable-xxhash --disable-zstd --disable-lz4
|
|
make -j"$(getconf _NPROCESSORS_ONLN 2>/dev/null || echo 2)"
|
|
|
|
mkdir -p "$(dirname "${out}")"
|
|
cp rsync "${out}"
|
|
chmod +x "${out}"
|
|
echo "built ${out}"
|