mirror of
https://github.com/storytold/photocraft.git
synced 2026-11-02 14:27:35 -06:00
Dylan M. Taylor
75f5a9c126
* packaging: use [[ for bash conditional tests (SonarCloud S7688) SonarCloud flags every bare [ conditional in bash scripts under packaging/ as a reliability smell (rule S7688). Convert the flagged [ ... ] tests to [[ ... ]]: safer word-splitting and no glob surprises, same semantics for these string and file tests. * packaging/web: parse size overrides as base 10 under [[
40 lines
1.4 KiB
Bash
40 lines
1.4 KiB
Bash
#!/usr/bin/env bash
|
|
# Source after packaging/env.sh, which supplies sha256(). Keep the verified cache usable when
|
|
# an official asset was pre-seeded by a tool that created it without an execute bit.
|
|
|
|
download_verified() {
|
|
local url="$1" dest="$2" expected="$3" executable="${4:-false}" tmp
|
|
if [[ -f "$dest" ]] && [[ "$(sha256 "$dest")" = "$expected" ]]; then
|
|
if [[ "$executable" = true ]] && [[ ! -x "$dest" ]] && ! chmod 755 "$dest"; then
|
|
echo "error: verified asset is not executable and cannot be chmod'd: $dest" >&2
|
|
return 1
|
|
fi
|
|
return 0
|
|
fi
|
|
tmp="$(mktemp "$dest.XXXXXX")"
|
|
if ! curl -fsSL -o "$tmp" "$url"; then rm -f "$tmp"; return 1; fi
|
|
if [[ "$(sha256 "$tmp")" != "$expected" ]]; then
|
|
echo "error: SHA-256 mismatch for $url" >&2
|
|
rm -f "$tmp"
|
|
return 1
|
|
fi
|
|
if [[ "$executable" = true ]]; then
|
|
if ! chmod 755 "$tmp"; then rm -f "$tmp"; return 1; fi
|
|
else
|
|
if ! chmod 644 "$tmp"; then rm -f "$tmp"; return 1; fi
|
|
fi
|
|
if ! mv -f "$tmp" "$dest"; then rm -f "$tmp"; return 1; fi
|
|
}
|
|
|
|
verify_appimagetool_override() {
|
|
local tool="$1" expected="$2" version="$3" arch="$4"
|
|
if [[ ! -f "$tool" ]] || [[ "$(sha256 "$tool")" != "$expected" ]]; then
|
|
echo "error: APPIMAGETOOL must be the verified $version $arch release asset" >&2
|
|
return 1
|
|
fi
|
|
if [[ ! -x "$tool" ]]; then
|
|
echo "error: APPIMAGETOOL must be executable (chmod +x $tool)" >&2
|
|
return 1
|
|
fi
|
|
}
|