path: root/build-tor-sources

#!/bin/bash

# helper script to build tor debian releases

# Copyright 2007,2008,2009,2010,2011 Peter Palfrader
#
# Permission is hereby granted, free of charge, to any person obtaining
# a copy of this software and associated documentation files (the
# "Software"), to deal in the Software without restriction, including
# without limitation the rights to use, copy, modify, merge, publish,
# distribute, sublicense, and/or sell copies of the Software, and to
# permit persons to whom the Software is furnished to do so, subject to
# the following conditions:
#
# The above copyright notice and this permission notice shall be
# included in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

set -e
set -x

# this is hardcoded to weasel's directory layout. sorry.
GITDIR="$HOME/projects/tor/tor"

assert_files_dont_exist () {
	local debian_version="$1";
	if [ -z "$debian_version" ]; then
		echo "assert_files_dont_exist called without debian_version" >&2
		exit 1;
	fi

	if [ -e "tor_$debian_version.diff.gz" ] ; then
		echo "tor_$debian_version.diff.gz already exists" >&2
		exit 1;
	fi
	if [ -e "tor_$debian_version.dsc" ] ; then
		echo "tor_$debian_version.dsc already exists" >&2
		exit 1;
	fi
	if [ -e "tor_$debian_version""_i386.deb" ] ; then
		echo "tor_$debian_version""_i386.deb already exists" >&2
		exit 1;
	fi
	if [ -e "tor_$debian_version""_i386.changes" ] ; then
		echo "tor_$debian_version""_i386.changes already exists" >&2
		exit 1;
	fi
}

get_debian_version() {
	local dir="$1"; shift
	local which="${1:-}"; shift

	if [ -z "$which" ]; then
		( cd $dir && dpkg-parsechangelog | grep-dctrl -n -s Version '' )
	else
		local v=$(get_debian_version $dir)
		case "$which" in
			upstream) echo "${v%-*}" ;;
			debrev) echo "${v##*-}" ;;
			*)
				echo >&2 "Unknown key '$which' in get_debian_version"
				exit 1
		esac
	fi
}

# remove_completely ... 0 replace hardening-includes with hardening-wrapper
#                       1 get rid entirely
hardening_backport() {
	local remove_completely="$1"

	sed -i -e '/^Build-Depends/ s/, *hardening-includes//' debian/control
	if [ "$remove_completely" = 0 ]; then
		sed -i -e '/^Build-Depends/ s/$/, hardening-wrapper/' debian/control
	fi

	if [ "$remove_completely" = 0 ]; then
		sed -i -e 's#include /usr/share/hardening-includes/hardening.make#export DEB_BUILD_HARDENING=1#' debian/rules
		sed -i -e '/export DEB_BUILD_HARDENING=1/ a export DEB_BUILD_HARDENING_DEBUG=1' debian/rules
	else
		sed -i -e 's#include /usr/share/hardening-includes/hardening.make##' debian/rules
	fi

	if [ "$remove_completely" = 0 ]; then
		dch "Replace hardening-includes use with hardening-wrapper."
	else
		dch "Completely remove hardening-includes use."
	fi
}

bp1() {
	local dir="$1"; shift
	local sid_debian_version="$1"; shift
	local dist="$1"; shift

	dpkg-source -x tor_$sid_debian_version.dsc
	(cd $dir; backport $dist)
}
bp2() {
	local dir="$1"; shift
	local origtar="$1"; shift

	local debian_version=$(get_debian_version $dir)
	assert_files_dont_exist $debian_version
	dpkg-source -b $dir $origtar
	rm -r $dir
}


[ -d local-build ] || mkdir local-build

ORIGTAR="$1"
if [ -z "$ORIGTAR" ] ; then
	echo "Usage: $0 <orig.tar.gz> [version]" >&2
	exit 1;
fi
DEB_REVISION="${2:-1}"


if [ ! -e "$ORIGTAR" ] ; then
	echo "$ORIGTAR does not exist." >&2
	exit 1;
fi

if [ "${ORIGTAR#tor-}" != $ORIGTAR ]; then
	ver="$ORIGTAR"
	ver=${ver#tor-}
	ver=${ver%.tar.gz}
	neworig="tor_$ver.orig.tar.gz"
	if ! [ -e "$neworig" ]; then
		ln -v "$ORIGTAR" "$neworig"
	fi
	echo "Using $neworig instead of $ORIGTAR"
	ORIGTAR="$neworig"
fi

DIR=`tar tzf $ORIGTAR | head -n1`
DIR="${DIR%%/}"
DIR_VERSION="${DIR##tor-}"
if [ -e "$DIR" ] ; then
	echo "$DIR already exists." >&2
	exit 1;
fi
tar xzf $ORIGTAR
git clone -n -s "$GITDIR" git-"$DIR"
TAG="debian-tor-$DIR_VERSION-$DEB_REVISION"
(cd "git-$DIR" && git checkout $TAG)
if diff -qr "git-$DIR" "$DIR" --exclude .git  | grep -v '^Only in ' | grep --color .; then
	echo "Differenced detected."
	exit 1
fi
(cd "git-$DIR" && echo "\"`git rev-parse --short=16 "$TAG"`\"" > "debian/micro-revision.i")
cp -av "git-$DIR/debian" "$DIR"
rm -rf "git-$DIR"


debian_upstream_version=$(get_debian_version $DIR upstream)
if [ "$ORIGTAR" != "tor_$debian_upstream_version.orig.tar.gz" ] ; then
	echo "possible mismatch: $ORIGTAR but $debian_upstream_version in debian/changelog" >&2
	exit 1;
fi

debian_version=$(get_debian_version $DIR)
sid_debian_version="$debian_version"
assert_files_dont_exist $debian_version
dpkg-source -b $DIR $ORIGTAR
rm -r $DIR



# local
#################################################
cd local-build
dpkg-source -x ../tor_$debian_version.dsc
cd tor-$debian_upstream_version
debuild -j2 -rfakeroot -uc -us
cd ../..

# SID
#################################################
# null

# LENNY
#################################################
bp1 $DIR $sid_debian_version lenny
(cd $DIR; hardening_backport 0)
bp2 $DIR $ORIGTAR

# SQUEEZE
#################################################
bp1 $DIR $sid_debian_version squeeze
bp2 $DIR $ORIGTAR

# WHEEZY
#################################################
bp1 $DIR $sid_debian_version wheezy
bp2 $DIR $ORIGTAR


# DAPPER  (EOL: June 2011)
#################################################
bp1 $DIR $sid_debian_version dapper
if grep -q texlive "$DIR/debian/control"; then
	sed -i -e '/^Build-Depends:/ s/texlive[a-z0-9-]*,\? *//g;  /^Build-Depends: / s/$/, tetex-bin, tetex-extra/' "$DIR/debian/control"
	( cd $DIR; dch "Revert Build-Depends to tetex for backport" )
fi
sed -i -e 's/source:Version\|binary:Version/Source-Version/' "$DIR/debian/control"
(cd $DIR; dch "Change source:Version and binary:Version to Source-Version in depends")
(echo "/Conflicts:"; echo d; echo w) | ed "$DIR/debian/control"
sed -i -e 's/move_away_keys=1/: ;# not on this version of debian# move_away_keys=1/' "$DIR/debian/tor.postinst"
(cd $DIR; dch "No need to move away keys on dapper")
sed -i -e '/^Build-Depends:/ s/ghostscript/gs/' "$DIR/debian/control"
(cd $DIR; dch "Build-Depend on gs instead of ghostscript")
(cd $DIR; hardening_backport 1)
bp2 $DIR $ORIGTAR


# HARDY  (EOL: April 2013)
#################################################
bp1 $DIR $sid_debian_version hardy
(echo "/Conflicts:"; echo d; echo i; echo "Conflicts: libssl0.9.8 (<< 0.9.8g-4ubuntu3.1)"; echo . ; echo w) | ed "$DIR/debian/control"
(cd $DIR; dch "Conflict with libssl0.9.8 (<< 0.9.8g-4ubuntu3.1) on hardy")
(cd $DIR; hardening_backport 0)
bp2 $DIR $ORIGTAR

# KARMIC  (EOL: April 2011)
#################################################
bp1 $DIR $sid_debian_version karmic
(cd $DIR; hardening_backport 0)
bp2 $DIR $ORIGTAR

# LUCID  (EOL: April 2015)
#################################################
bp1 $DIR $sid_debian_version lucid
bp2 $DIR $ORIGTAR

# MAVERICK  (EOL: April 2012)
#################################################
bp1 $DIR $sid_debian_version maverick
bp2 $DIR $ORIGTAR



#################################################
## BPO
#################################################

# LENNY-BPO
#################################################
bp1 $DIR $sid_debian_version lenny-bpo
(cd $DIR; hardening_backport 0)
bp2 $DIR $ORIGTAR

# SQUEEZE-BPO
#################################################
bp1 $DIR $sid_debian_version squeeze-bpo
bp2 $DIR $ORIGTAR

mkdir bpo
mv *'~bpo'* bpo/

echo
echo "All done"