#!/bin/bash # helper script to build tor debian releases # Copyright 2007,2008,2009,2010,2011 Peter Palfrader # # Permission is hereby granted, free of charge, to any person obtaining # a copy of this software and associated documentation files (the # "Software"), to deal in the Software without restriction, including # without limitation the rights to use, copy, modify, merge, publish, # distribute, sublicense, and/or sell copies of the Software, and to # permit persons to whom the Software is furnished to do so, subject to # the following conditions: # # The above copyright notice and this permission notice shall be # included in all copies or substantial portions of the Software. # # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, # EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND # NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE # LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION # OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION # WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. set -e SKIP_HARDY=0 assert_files_dont_exist () { local pkg="$1"; shift local debian_version="$1"; if [ -z "$debian_version" ]; then echo "assert_files_dont_exist called without debian_version" >&2 exit 1; fi if [ -e "${PKG}_$debian_version.diff.gz" ] ; then echo "${PKG}_$debian_version.diff.gz already exists" >&2 exit 1; fi if [ -e "${PKG}_$debian_version.dsc" ] ; then echo "${PKG}_$debian_version.dsc already exists" >&2 exit 1; fi if [ -e "${PKG}_$debian_version""_amd64.deb" ] ; then echo "${PKG}_$debian_version""_amd64.deb already exists" >&2 exit 1; fi if [ -e "${PKG}_$debian_version""_amd64.changes" ] ; then echo "${PKG}_$debian_version""_amd64.changes already exists" >&2 exit 1; fi } get_debian_version() { local dir="$1"; shift local which="${1:-}"; shift if [ -z "$which" ]; then ( cd $dir && dpkg-parsechangelog | grep-dctrl -n -s Version '' ) else local v=$(get_debian_version $dir) case "$which" in upstream) echo "${v%-*}" ;; debrev) echo "${v##*-}" ;; *) echo >&2 "Unknown key '$which' in get_debian_version" exit 1 esac fi } # remove_completely ... 0 replace hardening-includes with hardening-wrapper # 1 get rid entirely hardening_backport() { local remove_completely="$1" sed -i -e '/^Build-Depends/ s/, *hardening-includes//' debian/control if [ "$remove_completely" = 0 ]; then sed -i -e '/^Build-Depends/ s/$/, hardening-wrapper/' debian/control fi if [ "$remove_completely" = 0 ]; then sed -i -e 's#include /usr/share/hardening-includes/hardening.make#export DEB_BUILD_HARDENING=1#' debian/rules sed -i -e '/export DEB_BUILD_HARDENING=1/ a export DEB_BUILD_HARDENING_DEBUG=1' debian/rules else sed -i -e 's#include /usr/share/hardening-includes/hardening.make##' debian/rules fi if [ "$remove_completely" = 0 ]; then dch "Replace hardening-includes use with hardening-wrapper." else dch "Completely remove hardening-includes use." fi } remove_apparmor() { local builddep_only="${1:-}" if grep -q dh-apparmor debian/control; then sed -i -e '/^Build-Depends/ s/, *dh-apparmor//' debian/control if [ "$builddep_only" = 1 ]; then dch "Remove dh-apparmor build dependency for backport." else sed -i -e 's/dh_apparmor/# &/' debian/rules sed -i -e 's;install.*etc/apparmor.d;# &;' debian/rules dch "Remove apparmor support for backport." fi fi } bp1() { local pkg="$1"; shift local dir="$1"; shift local sid_debian_version="$1"; shift local dist="$1"; shift dpkg-source -x ${pkg}_$sid_debian_version.dsc (cd $dir; backport $dist) } bp2() { local pkg="$1"; shift local dir="$1"; shift local origtar="$1"; shift local debian_version=$(get_debian_version $dir) assert_files_dont_exist $pkg $debian_version dpkg-source -b $dir $origtar rm -r $dir } backport_all() { local pkg="$1"; shift local dir="$1"; shift local origtar="$1"; shift local sid_debian_version="$1"; shift # SID ################################################# # null # LENNY ################################################# bp1 $pkg $dir $sid_debian_version lenny (cd $dir; hardening_backport 0) (cd $dir; remove_apparmor) bp2 $pkg $dir $origtar # SQUEEZE ################################################# bp1 $pkg $dir $sid_debian_version squeeze (cd $dir; remove_apparmor) bp2 $pkg $dir $origtar # WHEEZY ################################################# bp1 $pkg $dir $sid_debian_version wheezy bp2 $pkg $dir $origtar # HARDY (EOL: April 2013) ################################################# if [ -z "${SKIP_HARDY:-}" ] || [ "${SKIP_HARDY:-}" -eq 0 ]; then bp1 $pkg $dir $sid_debian_version hardy (echo "/Conflicts:"; echo d; echo i; echo "Conflicts: libssl0.9.8 (<< 0.9.8g-4ubuntu3.1)"; echo . ; echo w) | ed "$dir/debian/control" (cd $dir; dch "Conflict with libssl0.9.8 (<< 0.9.8g-4ubuntu3.1) on hardy") # hardy's dpkg-parsechangelog cannot deal with dots in the distribution field, remove them. (cd $dir; dch --force-distribution --distribution "$(dpkg-parsechangelog | grep-dctrl -n -s Distribution '' | tr -d .)" '') (cd $dir; hardening_backport 0) (cd $dir; remove_apparmor) bp2 $pkg $dir $origtar fi # LUCID (EOL: April 2015) ################################################# bp1 $pkg $dir $sid_debian_version lucid (cd $dir; remove_apparmor) bp2 $pkg $dir $origtar # NATTY (EOL: October 2012) ################################################# bp1 $pkg $dir $sid_debian_version natty (cd $dir; remove_apparmor) bp2 $pkg $dir $origtar # ONEIRIC (EOL: April 2013) ################################################# bp1 $pkg $dir $sid_debian_version oneiric (cd $dir; remove_apparmor 1) # dh_apparmor is in their patched debhelper bp2 $pkg $dir $origtar # PRECISE (EOL: April 2017) ################################################# bp1 $pkg $dir $sid_debian_version precise bp2 $pkg $dir $origtar ################################################# ## BPO ################################################# if [ "${DO_BPO:-}" = 1 ]; then # SQUEEZE-BPO ################################################# bp1 $pkg $dir $sid_debian_version squeeze-bpo bp2 $pkg $dir $origtar mkdir bpo mv *'~bpo'* bpo/ fi } main() { local origtar="$1"; shift local deb_revision="$1"; shift local gitdir="$1"; shift local pkg="$1"; shift [ -d local-build ] || mkdir local-build if [ -z "$origtar" ] ; then echo "Usage: $0 [version]" >&2 exit 1; fi if [ ! -e "$origtar" ] ; then echo "$origtar does not exist." >&2 exit 1; fi if [ "${origtar#${pkg}-}" != $origtar ]; then ver="$origtar" ver=${ver#${pkg}-} ver=${ver%.tar.gz} neworig="${pkg}_$ver.orig.tar.gz" if ! [ -e "$neworig" ]; then ln -v "$origtar" "$neworig" fi echo "Using $neworig instead of $origtar" origtar="$neworig" fi local dir local dir_version dir=`tar tzf $origtar 2>/dev/null | head -n1` dir="${dir%%/}" dir_version="${dir##${pkg}-}" if [ -e "$dir" ] ; then echo "$dir already exists." >&2 exit 1; fi tar xzf $origtar git clone -n -s "$gitdir" git-"$dir" local tag="debian-${pkg}-$dir_version-$deb_revision" (cd "git-$dir" && git checkout $tag) if diff -qr "git-$dir" "$dir" --exclude .git | grep -v '^Only in ' | grep --color .; then echo "Differenced detected." exit 1 fi (cd "git-$dir" && echo "\"`git rev-parse --short=16 "$tag"`\"" > "debian/micro-revision.i") cp -av "git-$dir/debian" "$dir" rm -rf "git-$dir" debian_upstream_version=$(get_debian_version $dir upstream) if [ "$origtar" != "${pkg}_$debian_upstream_version.orig.tar.gz" ] ; then echo "possible mismatch: $origtar but $debian_upstream_version in debian/changelog" >&2 exit 1; fi debian_version=$(get_debian_version $dir) sid_debian_version="$debian_version" assert_files_dont_exist $pkg $debian_version dpkg-source -b $dir $origtar rm -r $dir # local ################################################# cd local-build dpkg-source -x ../${pkg}_$debian_version.dsc cd ${pkg}-$debian_upstream_version remove_apparmor debuild -j8 -rfakeroot -uc -us cd ../.. backport_all "$pkg" "$dir" "$origtar" "$sid_debian_version" echo echo "All done" } # this is hardcoded to weasel's directory layout. sorry. case "$(basename $0)" in build-obfsproxy-sources) set -x GITDIR="$HOME/projects/debian/debian/obfsproxy/obfsproxy" PKG="obfsproxy" SKIP_HARDY=1 main "${1:-}" ${2:-1} $GITDIR $PKG ;; build-tor-sources) set -x GITDIR="$HOME/projects/tor/tor" PKG="tor" DO_BPO=1 main "${1:-}" ${2:-1} $GITDIR $PKG ;; esac