217 lines
8.1 KiB
Bash
Executable file
217 lines
8.1 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
# Build taler-merchant-webui from tag v1.6.11 + taler-merchant from master,
|
|
# deploy into podman container taler-hacktivism on koopa, restart services.
|
|
#
|
|
# Run from clementine (or any host with: git, node/pnpm, ssh koopa, podman on koopa):
|
|
# ./scripts/taler-merchant/build-deploy-webui-1.6.11-merchant-master.sh
|
|
#
|
|
# Env:
|
|
# KOOPA_SSH=koopa
|
|
# MERCHANT_CTR=taler-hacktivism
|
|
# TTC_GIT=git@git.taler.net:taler-typescript-core.git
|
|
# MERCHANT_GIT=https://git.taler.net/merchant.git # or git@…
|
|
# WEBUI_TAG=v1.6.11
|
|
# MERCHANT_REF=master
|
|
# SKIP_WEBUI=0 SKIP_MERCHANT=0 SKIP_RESTART=0
|
|
# PNPM=$HOME/.local/bin/pnpm
|
|
# WORK_ROOT=/tmp/taler-selfbuild-$$
|
|
#
|
|
set -euo pipefail
|
|
|
|
KOOPA_SSH="${KOOPA_SSH:-koopa}"
|
|
MERCHANT_CTR="${MERCHANT_CTR:-taler-hacktivism}"
|
|
TTC_GIT="${TTC_GIT:-git@git.taler.net:taler-typescript-core.git}"
|
|
MERCHANT_GIT="${MERCHANT_GIT:-https://git.taler.net/merchant.git}"
|
|
WEBUI_TAG="${WEBUI_TAG:-v1.6.11}"
|
|
MERCHANT_REF="${MERCHANT_REF:-master}"
|
|
SKIP_WEBUI="${SKIP_WEBUI:-0}"
|
|
SKIP_MERCHANT="${SKIP_MERCHANT:-0}"
|
|
SKIP_RESTART="${SKIP_RESTART:-0}"
|
|
PNPM="${PNPM:-$HOME/.local/bin/pnpm}"
|
|
WORK_ROOT="${WORK_ROOT:-/tmp/taler-selfbuild-$$}"
|
|
SPA_DIR="${WORK_ROOT}/spa-prod"
|
|
TTC_DIR="${WORK_ROOT}/taler-typescript-core"
|
|
export PATH="${HOME}/.local/bin:${PATH}"
|
|
|
|
log() { printf '+ %s\n' "$*"; }
|
|
die() { printf 'ERROR: %s\n' "$*" >&2; exit 1; }
|
|
|
|
need() { command -v "$1" >/dev/null 2>&1 || die "missing command: $1"; }
|
|
|
|
ssh_koopa() {
|
|
ssh -o BatchMode=yes -o ConnectTimeout=15 "${KOOPA_SSH}" "$@"
|
|
}
|
|
|
|
ctr_root() {
|
|
ssh_koopa podman exec -u root "${MERCHANT_CTR}" bash -c "$*"
|
|
}
|
|
|
|
log "work root: ${WORK_ROOT}"
|
|
mkdir -p "${WORK_ROOT}"
|
|
need git
|
|
need ssh
|
|
need tar
|
|
need curl
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# 1) WebUI from tag
|
|
# ---------------------------------------------------------------------------
|
|
if [ "${SKIP_WEBUI}" != "1" ]; then
|
|
need node
|
|
if [ ! -x "${PNPM}" ]; then
|
|
log "installing pnpm to ~/.local …"
|
|
npm install -g pnpm@10.33.4 --prefix "${HOME}/.local"
|
|
fi
|
|
need pnpm || [ -x "${PNPM}" ]
|
|
PNPM_BIN=$(command -v pnpm || echo "${PNPM}")
|
|
|
|
log "clone ${TTC_GIT} @ ${WEBUI_TAG} (full clone, not worktree — build.mjs needs real .git)"
|
|
rm -rf "${TTC_DIR}"
|
|
git clone --branch "${WEBUI_TAG}" --depth 1 "${TTC_GIT}" "${TTC_DIR}"
|
|
cd "${TTC_DIR}"
|
|
git submodule update --init contrib/taler-assets
|
|
test -f contrib/taler-assets/svg/logo/qr-logo.svg || die "taler-assets submodule incomplete"
|
|
|
|
ver=$(python3 -c "import json; print(json.load(open('packages/taler-merchant-webui/package.json'))['version'])")
|
|
log "package.json version=${ver} HEAD=$(git rev-parse --short HEAD)"
|
|
|
|
log "pnpm install + compile merchant-webui …"
|
|
"${PNPM_BIN}" install --frozen-lockfile --filter @gnu-taler/taler-merchant-webui...
|
|
"${PNPM_BIN}" run --filter @gnu-taler/taler-merchant-webui... compile
|
|
|
|
test -f packages/taler-merchant-webui/dist/prod/index.js || die "dist/prod/index.js missing"
|
|
test -f packages/taler-merchant-webui/dist/prod/version.txt || die "version.txt missing"
|
|
got=$(tr -d '\n' < packages/taler-merchant-webui/dist/prod/version.txt)
|
|
log "built SPA version.txt=${got}"
|
|
# expect 1.6.11 for default tag
|
|
case "${WEBUI_TAG}" in
|
|
v1.6.11|1.6.11)
|
|
[ "${got}" = "1.6.11" ] || die "expected version 1.6.11, got ${got}"
|
|
;;
|
|
esac
|
|
|
|
rm -rf "${SPA_DIR}"
|
|
mkdir -p "${SPA_DIR}"
|
|
cp -a packages/taler-merchant-webui/dist/prod/. "${SPA_DIR}/"
|
|
printf 'selfbuild-%s-%s\n' "${WEBUI_TAG}" "$(git rev-parse --short HEAD)" >"${SPA_DIR}/version-overlay.txt"
|
|
|
|
log "deploy SPA into ${MERCHANT_CTR}:/usr/share/taler-merchant-webui"
|
|
ts=$(date +%Y%m%d-%H%M%S)
|
|
ctr_root "
|
|
set -e
|
|
if [ -d /usr/share/taler-merchant-webui ]; then
|
|
cp -a /usr/share/taler-merchant-webui /usr/share/taler-merchant-webui.bak-selfbuild-${ts}
|
|
fi
|
|
mkdir -p /usr/share/taler-merchant-webui
|
|
# clear previous SPA files (keep directory)
|
|
find /usr/share/taler-merchant-webui -mindepth 1 -maxdepth 1 ! -name 'bak-*' -exec rm -rf {} +
|
|
"
|
|
tar -C "${SPA_DIR}" -czf - . | ssh_koopa "podman exec -i -u root ${MERCHANT_CTR} bash -c '
|
|
set -e
|
|
cd /usr/share/taler-merchant-webui
|
|
tar -xzf -
|
|
chown -R root:root /usr/share/taler-merchant-webui
|
|
echo deployed:
|
|
cat version.txt
|
|
cat version-overlay.txt
|
|
wc -c index.js
|
|
'"
|
|
log "webui deploy done"
|
|
else
|
|
log "SKIP_WEBUI=1"
|
|
fi
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# 2) Merchant backend from master (build inside container)
|
|
# ---------------------------------------------------------------------------
|
|
if [ "${SKIP_MERCHANT}" != "1" ]; then
|
|
log "build taler-merchant ${MERCHANT_REF} inside ${MERCHANT_CTR}"
|
|
# Install build deps if missing; update /var/taler-src/merchant; bootstrap; make install
|
|
ssh_koopa "podman exec -u root ${MERCHANT_CTR} bash -s" <<REMOTE
|
|
set -euo pipefail
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
SRC=/var/taler-src/merchant
|
|
GIT_URL='${MERCHANT_GIT}'
|
|
REF='${MERCHANT_REF}'
|
|
|
|
echo '=== build deps ==='
|
|
apt-get update -qq
|
|
apt-get install -y --no-install-recommends \\
|
|
build-essential autoconf automake libtool pkg-config \\
|
|
libjansson-dev libmicrohttpd-dev libpq-dev libsqlite3-dev \\
|
|
libcurl4-openssl-dev libgcrypt20-dev zlib1g-dev \\
|
|
libgnunet-dev libtalerexchange-dev libqrencode-dev \\
|
|
recutils texinfo python3-sphinx git ca-certificates \\
|
|
2>&1 | tail -30 || true
|
|
|
|
# exchange headers sometimes via package names that differ
|
|
apt-get install -y --no-install-recommends libtalerutil-dev 2>/dev/null || true
|
|
|
|
echo '=== source tree ==='
|
|
mkdir -p /var/taler-src
|
|
if [ -d "\$SRC/.git" ]; then
|
|
cd "\$SRC"
|
|
git remote set-url origin "\$GIT_URL" 2>/dev/null || git remote add origin "\$GIT_URL" || true
|
|
git fetch --tags origin
|
|
git checkout "\$REF"
|
|
git pull --ff-only origin "\$REF" || git reset --hard "origin/\$REF"
|
|
else
|
|
rm -rf "\$SRC"
|
|
git clone "\$GIT_URL" "\$SRC"
|
|
cd "\$SRC"
|
|
git checkout "\$REF"
|
|
fi
|
|
# submodules if any
|
|
git submodule update --init --recursive 2>/dev/null || true
|
|
echo "merchant HEAD=\$(git rev-parse --short HEAD) \$(git log -1 --oneline)"
|
|
|
|
echo '=== bootstrap / configure / make ==='
|
|
if [ ! -x configure ]; then
|
|
./bootstrap
|
|
fi
|
|
# Prefer /usr prefix to replace package binaries
|
|
./configure --prefix=/usr --disable-doc 2>&1 | tail -40
|
|
make -j"\$(nproc)" 2>&1 | tail -50
|
|
make install 2>&1 | tail -30
|
|
|
|
echo '=== installed httpd ==='
|
|
ls -la /usr/bin/taler-merchant-httpd
|
|
taler-merchant-httpd --help 2>&1 | head -5 || true
|
|
# record build id
|
|
git rev-parse HEAD > /usr/share/taler-merchant/SELFBUILD_MERCHANT_HEAD 2>/dev/null \\
|
|
|| mkdir -p /usr/share/taler-merchant && git rev-parse HEAD > /usr/share/taler-merchant/SELFBUILD_MERCHANT_HEAD
|
|
echo "SELFBUILD_MERCHANT_HEAD=\$(cat /usr/share/taler-merchant/SELFBUILD_MERCHANT_HEAD)"
|
|
REMOTE
|
|
log "merchant build/install done"
|
|
else
|
|
log "SKIP_MERCHANT=1"
|
|
fi
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# 3) Restart + health
|
|
# ---------------------------------------------------------------------------
|
|
if [ "${SKIP_RESTART}" != "1" ]; then
|
|
log "restart merchant services"
|
|
ssh_koopa "podman exec -u root ${MERCHANT_CTR} bash -c '
|
|
set -e
|
|
if id taler-merchant-httpd >/dev/null 2>&1; then
|
|
runuser -u taler-merchant-httpd -- taler-merchant-dbinit 2>&1 | tail -15 || true
|
|
fi
|
|
runuser -u taler-merchant-httpd -- /usr/local/bin/start_merchant.sh --restart
|
|
'"
|
|
log "smoke"
|
|
ssh_koopa 'curl -skS -m 8 -o /dev/null -w "merchant_local %{http_code}\n" https://127.0.0.1:9010/config || true'
|
|
curl -skS -m 12 -o /dev/null -w "merchant_public %{http_code}\n" https://taler.hacktivism.ch/config || true
|
|
curl -skS -m 12 -o /dev/null -w "webui %{http_code}\n" https://taler.hacktivism.ch/webui/ || true
|
|
pubver=$(curl -skS -m 12 https://taler.hacktivism.ch/webui/version.txt 2>/dev/null || true)
|
|
pubov=$(curl -skS -m 12 https://taler.hacktivism.ch/webui/version-overlay.txt 2>/dev/null || true)
|
|
log "public version.txt=${pubver}"
|
|
log "public version-overlay.txt=${pubov}"
|
|
else
|
|
log "SKIP_RESTART=1"
|
|
fi
|
|
|
|
log "DONE"
|
|
log " webui: tag ${WEBUI_TAG} → container /usr/share/taler-merchant-webui"
|
|
log " merchant: ${MERCHANT_REF} → /usr/bin/taler-merchant-*"
|
|
log " work left at ${WORK_ROOT} (delete when satisfied)"
|