mirror of
https://github.com/ironfox-oss/IronFox.git
synced 2026-08-02 02:46:46 -04:00
31cfc61fa2
This should improve security (by ensuring we always specify the full paths to executables, and preventing use of unintended/undesired system executables), control (by allowing users to specify where these executables should be located), and consistency/reproducability Signed-off-by: celenity <celenity@celenity.dev>
109 lines
3.9 KiB
Bash
Executable File
109 lines
3.9 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
## This script is expected to be executed in a CI environment, or possibly in our Docker image instance
|
|
## DO NOT execute this manually!
|
|
|
|
set -euo pipefail
|
|
|
|
# Set-up our environment
|
|
if [[ -z "${IRONFOX_CI+x}" ]]; then
|
|
export IRONFOX_CI=1
|
|
fi
|
|
source $(dirname $0)/env.sh
|
|
|
|
# Include utilities
|
|
source "${IRONFOX_UTILS}"
|
|
|
|
if [[ -z "${IRONFOX_FROM_CI_BUILD+x}" ]]; then
|
|
echo_red_text 'ERROR: Do not call ci-build-if.sh directly. Instead, use ci-build.sh.' >&1
|
|
exit 1
|
|
fi
|
|
|
|
readonly ci_build_arch="$1"
|
|
|
|
case "${ci_build_arch}" in
|
|
arm64|arm|x86_64|bundle)
|
|
;;
|
|
*)
|
|
echo_red_text "Unknown build variant: '${ci_build_arch}'." >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
readonly ci_build_project="$2"
|
|
|
|
# (For now, we only want to build Fenix and GeckoView directly from CI)
|
|
case "${ci_build_project}" in
|
|
fenix|geckoview)
|
|
;;
|
|
*)
|
|
echo_red_text "Unknown build project: '${ci_build_project}'." >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
if [[ "${ci_build_project}" == 'fenix' ]]; then
|
|
# Fail-fast in case the signing key is unavailable or empty file
|
|
if [[ ! -f "${IRONFOX_ANDROID_KEYSTORE}" ]]; then
|
|
echo_red_text "ERROR: Keystore file ${IRONFOX_ANDROID_KEYSTORE} does not exist!"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ ! -s "${IRONFOX_ANDROID_KEYSTORE}" ]]; then
|
|
echo_red_text "ERROR: Keystore file ${IRONFOX_ANDROID_KEYSTORE} is empty!"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
# Get sources
|
|
if [[ "${ci_build_project}" == 'geckoview' ]]; then
|
|
# If we're only building GeckoView, we don't need to download all sources
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'uv'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'python'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'android-ndk'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'jdk-25'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'android-sdk'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'android-sdk-build-tools'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'android-sdk-platform'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'android-sdk-platform-36'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'android-sdk-platform-tools'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'rust'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'cbindgen'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'bundletool'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'firefox'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'jdk-17'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'jdk-21'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'gradle'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'gyp'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'microg'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'node'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'npm'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'phoenix'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 's3cmd'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 'wasi'
|
|
else
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh"
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/get_sources.sh" 's3cmd'
|
|
|
|
# If we're building a Fenix bundle, we also need to download our GeckoView artifacts
|
|
if [[ "${ci_build_arch}" == 'bundle' ]]; then
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/ci-download-artifacts.sh" 'geckoview' 'arm64'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/ci-download-artifacts.sh" 'geckoview' 'arm'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/ci-download-artifacts.sh" 'geckoview' 'x86_64'
|
|
fi
|
|
fi
|
|
|
|
# Prepare sources
|
|
if [[ "${ci_build_project}" == 'geckoview' ]]; then
|
|
# If we're only building GeckoView, we don't need to prepare all sources
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/prebuild.sh" 'firefox'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/prebuild.sh" 'android-sdk'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/prebuild.sh" 'microg'
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/prebuild.sh" 'rust'
|
|
else
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/prebuild.sh"
|
|
fi
|
|
|
|
# Build
|
|
/bin/bash -x "${IRONFOX_SCRIPTS}/build.sh" "${ci_build_arch}" "${ci_build_project}"
|