forked from rancher/rio
-
Notifications
You must be signed in to change notification settings - Fork 0
/
install.sh
executable file
·219 lines (192 loc) · 5.29 KB
/
install.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
#!/bin/sh
set -e
GITHUB_URL=https://github.com/rancher/rio/releases
UNINSTALL_RIO_SH=rio-uninstall.sh
SHA="sha256sum"
if [ "$(uname)" = "Darwin" ]; then
SHA="shasum -a 256"
fi
# --- helper functions for logs ---
info()
{
echo "[INFO] " "$@"
}
fatal()
{
echo "[ERROR] " "$@"
exit 1
}
# --- define needed environment variables ---
setup_env() {
# --- use sudo if we are not already root ---
SUDO=sudo
if [ "$(id -u)" = 0 ]; then
SUDO=
fi
# --- use binary install directory if defined or create default ---
if [ -n "${INSTALL_RIO_BIN_DIR}" ]; then
BIN_DIR="${INSTALL_RIO_BIN_DIR}"
else
BIN_DIR="/usr/local/bin"
fi
# --- get hash of config & exec for currently installed rio ---
PRE_INSTALL_HASHES=$(get_installed_hashes)
export PRE_INSTALL_HASHES
}
# --- set arch and suffix, fatal if architecture not supported ---
setup_verify_arch() {
OS=$(echo "$(uname)"|tr '[:upper:]' '[:lower:]')
case "$OS" in
# Minimalist GNU for Windows
mingw*) OS='windows';;
linux)
;;
windows)
;;
darwin)
;;
*)
fatal "Unsupported OS $OS"
esac
if [ -z "$ARCH" ]; then
ARCH=$(uname -m)
fi
case $ARCH in
amd64)
ARCH=amd64
;;
x86_64)
ARCH=amd64
;;
arm64)
ARCH=arm64
;;
aarch64)
ARCH=arm64
;;
arm*)
ARCH=arm
;;
*)
fatal "Unsupported architecture $ARCH"
esac
SUFFIX=-${OS}-${ARCH}
}
# --- fatal if no curl ---
verify_curl() {
if [ -z "$(command -v curl)" ]; then
fatal "Can not find curl for downloading files"
fi
}
# --- create tempory directory and cleanup when done ---
setup_tmp() {
TMP_DIR=$(mktemp -d -t rio-install.XXXXXXXXXX)
TMP_HASH=${TMP_DIR}/rio.hash
TMP_BIN=${TMP_DIR}/rio.bin
cleanup() {
code=$?
set +e
trap - EXIT
rm -rf "${TMP_DIR}"
exit $code
}
trap cleanup INT EXIT
}
# --- use desired rio version if defined or find latest ---
get_release_version() {
if [ -n "${INSTALL_RIO_VERSION}" ]; then
VERSION_RIO="${INSTALL_RIO_VERSION}"
else
info "Finding latest release"
VERSION_RIO=$(curl -w "%{url_effective}" -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')
fi
info "Using ${VERSION_RIO} as release"
}
# --- download hash from github url ---
download_hash() {
HASH_URL=${GITHUB_URL}/download/${VERSION_RIO}/sha256sum-${ARCH}.txt
info "Downloading hash ${HASH_URL}"
curl -o "${TMP_HASH}" -sfL "${HASH_URL}" || fatal "Hash download failed"
HASH_EXPECTED=$(grep " rio${SUFFIX}$" "${TMP_HASH}" | awk '{print $1}')
}
# --- check hash against installed version ---
installed_hash_matches() {
if [ -x ${BIN_DIR}/rio ]; then
HASH_INSTALLED=$($SHA ${BIN_DIR}/rio | awk '{print $1}')
if [ "${HASH_EXPECTED}" = "${HASH_INSTALLED}" ]; then
return
fi
fi
return 1
}
# --- download binary from github url ---
download_binary() {
BIN_URL=${GITHUB_URL}/download/${VERSION_RIO}/rio${SUFFIX}
info "Downloading binary ${BIN_URL}"
curl -o "${TMP_BIN}" -sfL "${BIN_URL}" || fatal "Binary download failed"
}
# --- verify downloaded binary hash ---
verify_binary() {
info "Verifying binary download"
HASH_BIN=$($SHA "${TMP_BIN}" | awk '{print $1}')
if [ "${HASH_EXPECTED}" != "${HASH_BIN}" ]; then
fatal "Download sha256 does not match ${HASH_EXPECTED}, got ${HASH_BIN}"
fi
}
# --- setup permissions and move binary to system directory ---
setup_binary() {
chmod 755 "${TMP_BIN}"
info "Installing rio to ${BIN_DIR}/rio"
$SUDO chown 0:0 "${TMP_BIN}"
$SUDO mv -f "${TMP_BIN}" ${BIN_DIR}/rio
if command -v getenforce > /dev/null 2>&1; then
if [ "Disabled" != "$(getenforce)" ]; then
info "SeLinux is enabled, setting permissions"
if ! $SUDO semanage fcontext -l | grep "${BIN_DIR}/rio" > /dev/null 2>&1; then
$SUDO semanage fcontext -a -t bin_t "${BIN_DIR}/rio"
fi
$SUDO restorecon -v ${BIN_DIR}/rio > /dev/null
fi
fi
}
# --- download and verify rio ---
download_and_verify() {
setup_verify_arch
verify_curl
setup_tmp
get_release_version
download_hash
if installed_hash_matches; then
info "Skipping binary downloaded, installed rio matches hash"
return
fi
download_binary
verify_binary
setup_binary
}
# --- create uninstall script ---
create_uninstall() {
[ "${INSTALL_RIO_BIN_DIR_READ_ONLY}" = "true" ] && return
info "Creating uninstall script ${BIN_DIR}/${UNINSTALL_RIO_SH}"
$SUDO tee ${BIN_DIR}/${UNINSTALL_RIO_SH} >/dev/null << EOF
#!/bin/sh
set -x
[ \`id -u\` = 0 ] || exec sudo \$0 \$@
remove_uninstall() {
rm -f ${BIN_DIR}/${UNINSTALL_RIO_SH}
}
trap remove_uninstall EXIT
EOF
$SUDO chmod 755 ${BIN_DIR}/${UNINSTALL_RIO_SH}
$SUDO chown 0:0 ${BIN_DIR}/${UNINSTALL_RIO_SH}
}
# --- get hashes of the current rio bin and service files
get_installed_hashes() {
$SUDO "$SHA" ${BIN_DIR}/rio 2>&1 || true
}
# --- run the install process --
{
setup_env
download_and_verify
#create_uninstall
}