diff options
Diffstat (limited to 'android/scripts')
| -rwxr-xr-x | android/scripts/update-lockfile.sh | 59 |
1 files changed, 57 insertions, 2 deletions
diff --git a/android/scripts/update-lockfile.sh b/android/scripts/update-lockfile.sh index 83c8def349..e400caed72 100755 --- a/android/scripts/update-lockfile.sh +++ b/android/scripts/update-lockfile.sh @@ -29,16 +29,19 @@ export GRADLE_USER_HOME function cleanup { echo "Cleaning up temp dirs..." - rm -rf -- "$GRADLE_USER_HOME" "$TEMP_GRADLE_PROJECT_CACHE_DIR" + rm -rf -- "$GRADLE_USER_HOME" "$TEMP_GRADLE_PROJECT_CACHE_DIR" ../gradle/verification-metadata.dryrun.xml ../gradle/verification-keyring.dryrun.keys ../gradle/verification-keyring.dryrun.gpg } trap cleanup EXIT -echo "### Updating dependency lockfile ###" +echo "### Configuration ###" echo "Gradle home: $GRADLE_USER_HOME" echo "Gradle cache: $TEMP_GRADLE_PROJECT_CACHE_DIR" echo "" +echo "### Updating checksums ###" +echo "" + echo "Removing old components..." sed -i '/<components>/,/<\/components>/d' ../gradle/verification-metadata.xml echo "" @@ -50,3 +53,55 @@ for GRADLE_TASK in "${GRADLE_TASKS[@]}"; do ../gradlew -q -p .. --project-cache-dir "$TEMP_GRADLE_PROJECT_CACHE_DIR" -M sha256 "$GRADLE_TASK" "${EXCLUDED_GRADLE_TASKS[@]}" echo "" done + +echo "### Updating keys ###" +echo "" + +echo "Temporarily enabling key servers..." +sed -Ei 's,key-servers enabled="[^"]+",key-servers enabled="true",' ../gradle/verification-metadata.xml + +echo "Generating new trusted keys..." +../gradlew -q -p .. --project-cache-dir "$TEMP_GRADLE_PROJECT_CACHE_DIR" -M pgp,sha256 "${GRADLE_TASKS[@]}" --export-keys --dry-run "${EXCLUDED_GRADLE_TASKS[@]}" + +# Move keys from dry run file to existing file. +# This part is taken from: https://gitlab.com/fdroid/fdroidclient/-/blob/master/gradle/update-verification-metadata.sh + +# Extract the middle of the new file due to: https://github.com/gradle/gradle/issues/18569 +grep -B 10000 "<trusted-keys>" ../gradle/verification-metadata.dryrun.xml > "$TEMP_GRADLE_PROJECT_CACHE_DIR/new.head" +grep -A 10000 "</trusted-keys>" ../gradle/verification-metadata.dryrun.xml > "$TEMP_GRADLE_PROJECT_CACHE_DIR/new.tail" +numTopLines="$(< "$TEMP_GRADLE_PROJECT_CACHE_DIR/new.head" wc -l)" +numTopLinesPlus1="$((numTopLines + 1))" +numBottomLines="$(< "$TEMP_GRADLE_PROJECT_CACHE_DIR/new.tail" wc -l)" +numLines="$(< ../gradle/verification-metadata.dryrun.xml wc -l)" +numMiddleLines="$((numLines - numTopLines - numBottomLines))" +# Remove 'version=' due to: https://github.com/gradle/gradle/issues/20192 +< ../gradle/verification-metadata.dryrun.xml tail -n "+$numTopLinesPlus1" | head -n "$numMiddleLines" | sed 's/ version="[^"]*"//' > "$TEMP_GRADLE_PROJECT_CACHE_DIR/new.middle" + +# Extract the top and bottom of the old file +grep -B 10000 "<trusted-keys>" ../gradle/verification-metadata.xml > "$TEMP_GRADLE_PROJECT_CACHE_DIR/old.head" +grep -A 10000 "</trusted-keys>" ../gradle/verification-metadata.xml > "$TEMP_GRADLE_PROJECT_CACHE_DIR/old.tail" + +# Update verification metadata file +cat "$TEMP_GRADLE_PROJECT_CACHE_DIR/old.head" "$TEMP_GRADLE_PROJECT_CACHE_DIR/new.middle" "$TEMP_GRADLE_PROJECT_CACHE_DIR/old.tail" > ../gradle/verification-metadata.xml + +echo "Sorting keyring and removing duplicates..." + # Sort and unique the keyring + # https://github.com/gradle/gradle/issues/20140 + # `sed 's/$/NEWLINE/g'` adds the word NEWLINE at the end of each line + # `tr -d '\n'` deletes the actual newlines + # `sed` again adds a newline at the end of each key, so each key is one line + # `sort` orders the keys deterministically + # `uniq` removes identical keys + # `sed 's/NEWLINE/\n/g'` puts the newlines back +< ../gradle/verification-keyring.dryrun.keys \ + sed 's/$/NEWLINE/g' \ + | tr -d '\n' \ + | sed 's/\(-----END PGP PUBLIC KEY BLOCK-----\)/\1\n/g' \ + | grep "END PGP PUBLIC KEY BLOCK" \ + | sort \ + | uniq \ + | sed 's/NEWLINE/\n/g' \ + > ../gradle/verification-keyring.keys + +echo "Disabling key servers..." +sed -Ei 's,key-servers enabled="[^"]+",key-servers enabled="false",' ../gradle/verification-metadata.xml |