freedombone/src/freedombone-utils-git

#!/bin/bash
#
# .---.                  .              .
# |                      |              |
# |--- .--. .-.  .-.  .-.|  .-. .--.--. |.-.  .-. .--.  .-.
# |    |   (.-' (.-' (   | (   )|  |  | |   )(   )|  | (.-'
# '    '     --'  --'  -' -  -' '  '   -' -'   -' '   -  --'
#
#                    Freedom in the Cloud
#
# Useful git functions
#
# License
# =======
#
# Copyright (C) 2014-2016 Bob Mottram <bob@freedombone.net>
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

function git_clone {
    repo_url="$1"
    destination_dir="$2"

    if [[ "$repo_url" == 'ssh:'* ]]; then
        if [ "${FRIENDS_MIRRORS_SERVER}" ]; then
            if [ ${#FRIENDS_MIRRORS_SERVER} -gt 2 ]; then
                if [ "$FRIENDS_MIRRORS_PASSWORD" ]; then
                    if [ ${#FRIENDS_MIRRORS_PASSWORD} -gt 2 ]; then
                        echo "sshpass -p \"$FRIENDS_MIRRORS_PASSWORD\" git clone $repo_url $destination_dir"
                        sshpass -p "$FRIENDS_MIRRORS_PASSWORD" git clone "$repo_url" "$destination_dir"
                        return
                    fi
                fi
            fi
        fi
    fi
    echo "git clone $repo_url $destination_dir"
    git clone "$repo_url" "$destination_dir"
}

function git_pull {
    if [ ! $1 ]; then
        echo $'git_pull no repo specified'
    fi

    git stash
    git remote set-url origin $1
    git checkout master
    if [ "${FRIENDS_MIRRORS_SERVER}" ]; then
        if [ ${#FRIENDS_MIRRORS_SERVER} -gt 2 ]; then
            if [ "$FRIENDS_MIRRORS_PASSWORD" ]; then
                if [ ${#FRIENDS_MIRRORS_PASSWORD} -gt 2 ]; then
                    sshpass -p "$FRIENDS_MIRRORS_PASSWORD" git pull
                    if [ $2 ]; then
                        git checkout $2 -b $2
                    fi
                    return
                fi
            fi
        fi
    fi
    git pull

    if [ $2 ]; then
        # delete any existing branch
        git branch -D $2
        # check out the new branch
        git checkout $2 -b $2
        if [ ! "$?" = "0" ]; then
            echo $"Unable to checkout $1 $2"
            exit 72357
        fi
    fi
}

function commit_has_changed {
    repo_dir=$1
    repo_commit_name=$2
    repo_commit=$3
    if [ -d $repo_dir ]; then
        if grep -q "$repo_commit_name" $COMPLETION_FILE; then
            CURRENT_REPO_COMMIT=$(get_completion_param "$repo_commit_name")
            if [[ "$CURRENT_REPO_COMMIT" != "$repo_commit" ]]; then
                echo "1"
            fi
        fi
    fi
    echo "0"
}

# This ensures that a given repo is on a given commit
# If it isn't then it attempts to upgrade
function set_repo_commit {
    repo_dir=$1
    repo_commit_name=$2
    repo_commit=$3
    repo_url=$4

    if [[ $(commit_has_changed $repo_dir $repo_commit_name $repo_commit) == "1" ]]; then
        cd $repo_dir
        git_pull $repo_url $repo_commit

        # application specific stuff after updating the repo
        if [[ $repo_dir == *"www"* ]]; then
            chown -R www-data:www-data $repo_dir
        fi
        if [[ $repo_dir == *"gpgit" ]]; then
            cp gpgit.pl /usr/bin/gpgit.pl
        fi
        if [[ $repo_dir == *"cleanup-maildir" ]]; then
            cp $INSTALL_DIR/cleanup-maildir/cleanup-maildir /usr/bin
        fi
        if [[ $repo_dir == *"nginx_ensite" ]]; then
            make install
        fi
        if [[ $repo_dir == *"inadyn" ]]; then
            ./configure
            USE_OPENSSL=1 make
            make install
            systemctl restart inadyn
        fi

        function_check set_completion_param
        set_completion_param "${repo_commit_name}" "${repo_commit}"
    fi
}

function configure_firewall_for_git {
    if [[ $(is_completed $FUNCNAME) == "1" ]]; then
        return
    fi
    if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
        # docker does its own firewalling
        return
    fi
    if [[ $ONION_ONLY != "no" ]]; then
        return
    fi

    firewall_add Git 9418 tcp
    mark_completed $FUNCNAME
}

# NOTE: deliberately no exit 0