57 lines
1.7 KiB
Bash
57 lines
1.7 KiB
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
set -ex
|
||
|
|
|
||
|
|
outdir="$1"; shift
|
||
|
|
|
||
|
|
dirname="$(dirname "$0")"
|
||
|
|
|
||
|
|
DISTGIT_URL=https://src.fedoraproject.org/rpms/selinux-policy
|
||
|
|
DISTGIT_REF=rawhide
|
||
|
|
|
||
|
|
CONTAINER_URL=https://github.com/containers/container-selinux
|
||
|
|
EXPANDER_URL=https://github.com/fedora-selinux/macro-expander
|
||
|
|
|
||
|
|
rpm -q rpm-build git-core || dnf install -y rpm-build git-core
|
||
|
|
|
||
|
|
# Ensure that the git directory is owned by us to appease Git's
|
||
|
|
# anti-CVE-2022-24765 measures.
|
||
|
|
chown $(id -u):$(id -g) "$dirname/.."
|
||
|
|
|
||
|
|
base_head_id="$(git -C "$dirname/.." rev-parse HEAD)"
|
||
|
|
base_short_head_id="${base_head_id:0:7}"
|
||
|
|
base_date="$(TZ=UTC git show -s --format=%cd --date=format-local:%F_%T HEAD | tr -d :-)"
|
||
|
|
|
||
|
|
tmpdir="$(mktemp -d)"
|
||
|
|
|
||
|
|
trap 'rm -rf "$tmpdir"' EXIT
|
||
|
|
|
||
|
|
container_dir="$tmpdir/container-selinux"
|
||
|
|
expander_dir="$tmpdir/macro-expander"
|
||
|
|
rpmbuild_dir="$tmpdir/rpmbuild"
|
||
|
|
distgit_dir="$tmpdir/rpmbuild/SOURCES"
|
||
|
|
|
||
|
|
mkdir -p "$distgit_dir"
|
||
|
|
|
||
|
|
git clone --single-branch --depth 1 "$CONTAINER_URL" "$container_dir"
|
||
|
|
git clone --single-branch --depth 1 "$EXPANDER_URL" "$expander_dir"
|
||
|
|
git clone -b "$DISTGIT_REF" --single-branch --depth 1 "$DISTGIT_URL" "$distgit_dir"
|
||
|
|
|
||
|
|
git -C "$dirname/.." archive --prefix="selinux-policy-$base_head_id/" --format tgz HEAD \
|
||
|
|
>"$distgit_dir/selinux-policy-$base_short_head_id.tar.gz"
|
||
|
|
|
||
|
|
tar -C "$container_dir" -czf "$distgit_dir/container-selinux.tgz" \
|
||
|
|
container.if container.te container.fc
|
||
|
|
|
||
|
|
cp "$expander_dir/macro-expander.sh" "$distgit_dir/macro-expander"
|
||
|
|
|
||
|
|
(
|
||
|
|
cd "$distgit_dir"
|
||
|
|
sed -i "s/%global commit [^ ]*$/%global commit $base_head_id/" selinux-policy.spec
|
||
|
|
sed -i "s/%{?dist}/.$base_date.$base_short_head_id%{?dist}/" selinux-policy.spec
|
||
|
|
rm -f sources
|
||
|
|
rpmbuild --define "_topdir $rpmbuild_dir" -bs selinux-policy.spec
|
||
|
|
)
|
||
|
|
|
||
|
|
cp "$rpmbuild_dir/SRPMS/"*.src.rpm "$outdir"
|