mirror of
https://github.com/optim-enterprises-bv/secureblue.git
synced 2025-11-03 20:07:53 +00:00
75 lines
2.4 KiB
Bash
75 lines
2.4 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# This script executes the modules in order.
|
|
# If you have some custom commands you need to run, you should not put them here.
|
|
# Instead, you should probably include them as custom scripts.
|
|
# Editing this file directly is an unsupported configuration.
|
|
|
|
# Tell build process to exit if there are any errors.
|
|
set -oue pipefail
|
|
|
|
export CONFIG_DIRECTORY="/tmp/config"
|
|
RECIPE_FILE="$CONFIG_DIRECTORY/$RECIPE"
|
|
MODULE_DIRECTORY="/tmp/modules"
|
|
|
|
# https://mikefarah.gitbook.io/yq/usage/tips-and-tricks#yq-in-a-bash-loop
|
|
get_yaml_array() {
|
|
# creates array $1 with content at key $2 from $3
|
|
readarray "$1" < <(echo "$3" | yq -I=0 "$2")
|
|
}
|
|
export -f get_yaml_array # this makes the function available to all modules
|
|
|
|
run_module() {
|
|
MODULE="$1"
|
|
TYPE=$(echo "$MODULE" | yq '.type')
|
|
if [[ "$TYPE" != "null" ]]; then
|
|
cd "$CONFIG_DIRECTORY"
|
|
# If type is found, that means that the module config
|
|
# has been declared inline, and thus is safe to pass to the module
|
|
echo "=== Launching module of type: $TYPE ==="
|
|
bash "$MODULE_DIRECTORY/$TYPE/$TYPE.sh" "$MODULE"
|
|
else
|
|
# If the type is not found, that means that the module config
|
|
# is in a separate file, and has to be read from it
|
|
FILE=$(echo "$MODULE" | yq '.from-file')
|
|
run_modules "$CONFIG_DIRECTORY/$FILE"
|
|
fi
|
|
echo "======"
|
|
}
|
|
|
|
run_modules() {
|
|
MODULES_FILE="$1"
|
|
readarray MODULES < <(yq -o=j -I=0 '.modules[]' "$MODULES_FILE" )
|
|
if [[ ${#MODULES[@]} -gt 0 ]]; then
|
|
for MODULE in "${MODULES[@]}"; do
|
|
run_module "$MODULE"
|
|
done
|
|
else
|
|
MODULE=$(yq -o=j -I=0 '.' "$MODULES_FILE")
|
|
run_module "$MODULE"
|
|
fi
|
|
}
|
|
|
|
# Declare dynamically generated variables as exported
|
|
declare -x IMAGE_NAME BASE_IMAGE OS_VERSION
|
|
|
|
# Read configuration variables.
|
|
BASE_IMAGE="$(yq '.base-image' "$RECIPE_FILE")"
|
|
IMAGE_NAME="$(yq '.name' "$RECIPE_FILE")"
|
|
|
|
# Automatically determine which Fedora version we're building.
|
|
OS_VERSION="$(grep -Po '(?<=VERSION_ID=)\d+' /usr/lib/os-release)"
|
|
|
|
# Welcome.
|
|
echo "Building $IMAGE_NAME from $BASE_IMAGE:$OS_VERSION."
|
|
|
|
# Remove old image-info.json from main image
|
|
# (this file is added back by signing.sh, but shouldn't exist
|
|
# with wrong details in an unsigned image)
|
|
IMAGE_INFO="/usr/share/ublue-os/image-info.json"
|
|
if [ -f "$IMAGE_INFO" ]; then
|
|
rm -v "$IMAGE_INFO"
|
|
fi
|
|
|
|
run_modules "$RECIPE_FILE"
|