packaging/linux/deb/package_binaries.sh - master - githubmirror/client

packaging/linux/deb/package_binaries.sh
98 строк4 KB
heronhaye
Add keyring and sources in deb packages (#28852)
04 фев 2026, 03:46
04 фев 2026, 03:46653b8ec
#! /usr/bin/env bash

# Builds the keybase binary and packages it into a ".deb" file for amd64. The
# argument to this script is the output directory of a build_binaries.sh build.
# The package files are created there, in their respective architecture folders.
#
# Usage:
#   ./package_binaries.sh <build_root>

set -e -u -o pipefail

here="$(dirname "${BASH_SOURCE[0]}")"

build_root="${1:-}"
if [ -z "$build_root" ] ; then
  echo 'Usage:  ./package_binaries.sh <build_root>'
  exit 1
fi

# S3 mishandles + characters in the version. See
# https://github.com/keybase/keybase-issues/issues/2116.
version="$(cat "$build_root/VERSION" | sed 's/+/./g')"
mode="$(cat "$build_root/MODE")"

name="$("$here/../../binary_name.sh" "$mode")"
dependencies=""

if [ "$mode" = "production" ] ; then
  repo_url="http://dist.keybase.io/linux/deb/repo"
elif [ "$mode" = "prerelease" ] ; then
  repo_url="http://prerelease.keybase.io/deb"
  # "psmisc" provides "killall", which is used in run_keybase and
  # post_install.sh.
  # lsof used in post_install.sh
  # systemd-container provides machinectl, which is used in post_install.sh
  # 'libasound2, libnss3, libxss1, libxtst6' is required by the GUI (issue #9872 and #17365)
  dependencies="Depends: libayatana-appindicator3-1, fuse, psmisc, lsof, procps, libasound2, libnss3, libxss1, libxtst6, libgtk-3-0"
elif [ "$mode" = "staging" ] ; then
  # Note: This doesn't exist yet. But we need to be distinct from the
  # production URL, because we're moving to a model where we build a clean repo
  # every time, rather than adding to an existing one. (For S3 compatibility.)
  repo_url="http://dist.keybase.io/linux/deb_staging/repo"
else
  # We don't actually publish devel builds. This URL is a dream within a dream.
  repo_url="http://dist.keybase.io/linux/deb_devel/repo"
fi
repo_ssl_url="$(echo "$repo_url" | sed 's|http|https|')"

build_one_architecture() {
  echo "Making .deb package for $debian_arch."
  dest="$build_root/deb/$debian_arch"
  mkdir -p "$dest/build/DEBIAN"

  # Copy the entire filesystem layout, binaries and all, into the debian build
  # folder. TODO: Something less wasteful of disk space?
  # Preserve permissions of the chrome-sandbox setuid
  cp -rp "$build_root"/binaries/"$debian_arch"/* "$dest/build"

  # Copy changelog directly in, since this is a binary package.
  doc_dir="$dest/build/usr/share/doc/keybase"
  mkdir -p "$doc_dir"
  gzip -cn "$here/changelog" > "$doc_dir/changelog.Debian.gz"

  # Installed-Size is a required field in the control file. Without it Ubuntu
  # users will see warnings.
  size="$(du --summarize --block-size=1024 "$dest" | awk '{print $1}')"

  # Debian control file
  cat "$here/control.template" \
    | sed "s/@@NAME@@/$name/" \
    | sed "s/@@VERSION@@/$version/" \
    | sed "s/@@ARCHITECTURE@@/$debian_arch/" \
    | sed "s/@@SIZE@@/$size/" \
    | sed "s/@@DEPENDENCIES@@/$dependencies/" \
    > "$dest/build/DEBIAN/control"

  # Debian postinst script
  postinst_file="$dest/build/DEBIAN/postinst"
  cat "$here/postinst.template" \
    | sed "s/@@NAME@@/$name/g" \
    > "$postinst_file"
  chmod 755 "$postinst_file"

  # Copy keyring in
  keyrings_dir="$dest/build/usr/share/keyrings"
  mkdir -p "$keyrings_dir"
  cp "$here/../../code_signing_key_pub.asc" "$keyrings_dir/keybase.asc"

  # Create sources file for deb repository
  sources_dir="$dest/build/etc/apt/sources.list.d"
  mkdir -p "$sources_dir"
  echo "deb [signed-by=/usr/share/keyrings/keybase.asc] $repo_url stable main" > "$sources_dir/keybase.list"

  fakeroot dpkg-deb --build "$dest/build" "$dest/$name-$version-$debian_arch.deb"
}

export debian_arch=amd64
build_one_architecture