mirror of
https://github.com/ironfox-oss/IronFox.git
synced 2026-09-16 16:32:45 -04:00
celenity
57061ca247
Notably, this adds checks to ensure necessary executables and environment variables are available and set-up properly, adds new utilities files for certain functionality (to avoid redundancy/duplication) Signed-off-by: celenity <celenity@celenity.dev>
482 lines
17 KiB
Bash
Executable File
482 lines
17 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -euo pipefail
|
|
|
|
# Ensure this is never ran with xtrace...
|
|
set +x || exit 1
|
|
|
|
# Set-up our environment
|
|
if [[ -z "${IRONFOX_SET_ENVS+x}" ]]; then
|
|
/bin/bash $(dirname $0)/env.sh || exit 1
|
|
fi
|
|
source $(dirname $0)/env.sh || exit 1
|
|
|
|
# Include utilities
|
|
source "${IRONFOX_UTILS}" || exit 1
|
|
|
|
if [[ "${IRONFOX_CI}" != 1 ]]; then
|
|
echo_red_text "ERROR: '$0' should only be called from CI!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have GNU awk
|
|
verify_exec "${IRONFOX_AWK}" 'IRONFOX_AWK' || exit 1
|
|
|
|
# Set-up target parameters
|
|
if [[ -z "${1+x}" ]]; then
|
|
echo_red_text "Usage: $0 android-keystore|s3-artifacts|s3-releases|sb" >&1
|
|
exit 1
|
|
fi
|
|
|
|
readonly ci_prep_target=$(echo "${1}" | "${IRONFOX_AWK}" '{print tolower($0)}')
|
|
|
|
IRONFOX_CI_PREP_ANDROID_KEYSTORE=0
|
|
IRONFOX_CI_PREP_S3_ARTIFACTS=0
|
|
IRONFOX_CI_PREP_S3_RELEASES=0
|
|
IRONFOX_CI_PREP_SB_GAPI_KEY=0
|
|
|
|
if [[ "${ci_prep_target}" == 'android-ks' ]]; then
|
|
# Set-up the Android keystore
|
|
IRONFOX_CI_PREP_ANDROID_KEYSTORE=1
|
|
elif [[ "${ci_prep_target}" == 's3-artifacts' ]]; then
|
|
# Set-up S3 storage - Artifacts
|
|
IRONFOX_CI_PREP_S3_ARTIFACTS=1
|
|
elif [[ "${ci_prep_target}" == 's3-releases' ]]; then
|
|
# Set-up S3 storage - Releases
|
|
IRONFOX_CI_PREP_S3_RELEASES=1
|
|
elif [[ "${ci_prep_target}" == 'sb' ]]; then
|
|
# Set-up the Google Safe Browsing API key
|
|
IRONFOX_CI_PREP_SB_GAPI_KEY=1
|
|
else
|
|
echo_red_text "ERROR: Invalid target: ${ci_prep_target}\n You must enter one of the following:"
|
|
echo 'Android keystore: android-keystore'
|
|
echo 'Google Safe Browsing API key: sb'
|
|
echo 'S3 storage - Artifacts: s3-artifacts'
|
|
echo 'S3 storage - Releases: s3-releases'
|
|
exit 1
|
|
fi
|
|
readonly IRONFOX_CI_PREP_ANDROID_KEYSTORE
|
|
readonly IRONFOX_CI_PREP_S3_ARTIFACTS
|
|
readonly IRONFOX_CI_PREP_S3_RELEASES
|
|
readonly IRONFOX_CI_PREP_SB_GAPI_KEY
|
|
|
|
# Create a secret key file
|
|
function create_key_file() {
|
|
function print_usage() {
|
|
echo "Usage: create_key_file 'key' 'path/to/key_file'"
|
|
}
|
|
|
|
if [[ -z "${1+x}" ]]; then
|
|
echo_red_text 'ERROR: Please specify the secret key!'
|
|
print_usage
|
|
exit 1
|
|
fi
|
|
|
|
if [[ -z "${2+x}" ]]; then
|
|
echo_red_text 'ERROR: Please specify the path to the key file!'
|
|
print_usage
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have chmod
|
|
verify_exec "${IRONFOX_CHMOD}" 'IRONFOX_CHMOD' || exit 1
|
|
|
|
# Ensure we have dirname
|
|
verify_exec "${IRONFOX_DIRNAME}" 'IRONFOX_DIRNAME' || exit 1
|
|
|
|
# Ensure we have mkdir
|
|
verify_exec "${IRONFOX_MKDIR}" 'IRONFOX_MKDIR' || exit 1
|
|
|
|
# Ensure we have rm
|
|
verify_exec "${IRONFOX_RM}" 'IRONFOX_RM' || exit 1
|
|
|
|
# Ensure we have touch
|
|
verify_exec "${IRONFOX_TOUCH}" 'IRONFOX_TOUCH' || exit 1
|
|
|
|
local -r key="$1"
|
|
local -r key_file="$2"
|
|
local -r key_file_dir=$("${IRONFOX_DIRNAME}" "${key_file}")
|
|
|
|
echo_red_text "Creating key file: '${key_file}'..."
|
|
|
|
# Ensure the key file doesn't already exist
|
|
"${IRONFOX_RM}" -f "${key_file}"
|
|
|
|
# By default, we know the key file creation has not failed...
|
|
local file_creation_failed=0
|
|
|
|
# If necessary, create the key file directory
|
|
if [[ ! -d "${key_file_dir}" ]]; then
|
|
"${IRONFOX_MKDIR}" -vp "${key_file_dir}" || local file_creation_failed=1
|
|
local -r created_key_file_dir=1
|
|
else
|
|
local -r created_key_file_dir=0
|
|
fi
|
|
|
|
# Create the key file
|
|
"${IRONFOX_TOUCH}" "${key_file}" || local file_creation_failed=1
|
|
"${IRONFOX_CHMOD}" 600 "${key_file}" || local file_creation_failed=1
|
|
echo -n "${key}" > "${key_file}" || local file_creation_failed=1
|
|
|
|
# Ensure nothing went wrong...
|
|
if [[ "${file_creation_failed}" != 1 ]]; then
|
|
verify_file "${key_file}" || local file_creation_failed=1
|
|
fi
|
|
|
|
if [[ "${file_creation_failed}" == 1 ]]; then
|
|
# If a directory was created just for this key file, remove it
|
|
if [[ "${created_key_file_dir}" == 1 ]]; then
|
|
"${IRONFOX_RM}" -rf "${key_file_dir}"
|
|
fi
|
|
echo_red_text "ERROR: Unable to create key file: '${key_file}'!"
|
|
exit 1
|
|
else
|
|
echo_green_text "SUCCESS: Created key file: '${key_file}'!"
|
|
fi
|
|
}
|
|
|
|
# Prepare secrets for S3 storage
|
|
function prep_s3() {
|
|
function print_usage() {
|
|
echo "Usage: prep_s3 's3_access_key' 's3_bucket_name' 's3_endpoint' 's3_secret_key' '/path/to/s3_access_key_file'
|
|
'/path/to/s3_bucket_name_file' '/path/to/s3_endpoint_file' '/path/to/s3_secret_key_file'"
|
|
}
|
|
|
|
if [[ -z "${1+x}" ]]; then
|
|
echo_red_text 'ERROR: Please specify the S3 access key!'
|
|
print_usage
|
|
exit 1
|
|
fi
|
|
|
|
if [[ -z "${2+x}" ]]; then
|
|
echo_red_text 'ERROR: Please specify the S3 bucket name!'
|
|
print_usage
|
|
exit 1
|
|
fi
|
|
|
|
if [[ -z "${3+x}" ]]; then
|
|
echo_red_text 'ERROR: Please specify the S3 endpoint!'
|
|
print_usage
|
|
exit 1
|
|
fi
|
|
|
|
if [[ -z "${4+x}" ]]; then
|
|
echo_red_text 'ERROR: Please specify the S3 secret key!'
|
|
print_usage
|
|
exit 1
|
|
fi
|
|
|
|
if [[ -z "${5+x}" ]]; then
|
|
echo_red_text 'ERROR: Please specify the path to the S3 access key file!'
|
|
print_usage
|
|
exit 1
|
|
fi
|
|
|
|
if [[ -z "${6+x}" ]]; then
|
|
echo_red_text 'ERROR: Please specify the path to the S3 bucket name file!'
|
|
print_usage
|
|
exit 1
|
|
fi
|
|
|
|
if [[ -z "${7+x}" ]]; then
|
|
echo_red_text 'ERROR: Please specify the path to the S3 endpoint file!'
|
|
print_usage
|
|
exit 1
|
|
fi
|
|
|
|
if [[ -z "${8+x}" ]]; then
|
|
echo_red_text 'ERROR: Please specify the path to the S3 secret key file!'
|
|
print_usage
|
|
exit 1
|
|
fi
|
|
|
|
local -r s3_access_key="$1"
|
|
local -r s3_bucket_name="$2"
|
|
local -r s3_endpoint="$3"
|
|
local -r s3_secret_key="$4"
|
|
local -r s3_access_key_file="$5"
|
|
local -r s3_bucket_name_file="$6"
|
|
local -r s3_endpoint_file="$7"
|
|
local -r s3_secret_key_file="$8"
|
|
|
|
# Create the S3 access key file
|
|
create_key_file "${s3_access_key}" "${s3_access_key_file}"
|
|
|
|
# Create the S3 bucket name file
|
|
create_key_file "${s3_bucket_name}" "${s3_bucket_name_file}"
|
|
|
|
# Create the S3 endpoint file
|
|
create_key_file "${s3_endpoint}" "${s3_endpoint_file}"
|
|
|
|
# Create the S3 secret key file
|
|
create_key_file "${s3_secret_key}" "${s3_secret_key_file}"
|
|
}
|
|
|
|
# Prepare Android keystore
|
|
function prep_android_keystore() {
|
|
# Ensure we have chmod
|
|
verify_exec "${IRONFOX_CHMOD}" 'IRONFOX_CHMOD' || exit 1
|
|
|
|
# Ensure we have curl
|
|
verify_exec "${IRONFOX_CURL}" 'IRONFOX_CURL' || exit 1
|
|
|
|
# Ensure we have our curl flags
|
|
if [[ -z "${IRONFOX_CURL_FLAGS+x}" ]] || [[ "${IRONFOX_CURL_FLAGS}" == "" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_CURL_FLAGS' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
echo_red_text 'Preparing Android keystore...'
|
|
|
|
# First, check environment variables specified externally (via CI)
|
|
|
|
# Ensure we have `IRONFOX_ANDROID_KEYSTORE_KEY_PASS`
|
|
if [[ -z "${IRONFOX_ANDROID_KEYSTORE_KEY_PASS+x}" ]] || [[ "${IRONFOX_ANDROID_KEYSTORE_KEY_PASS}" == "" ]] ||
|
|
[[ "${IRONFOX_ANDROID_KEYSTORE_KEY_PASS}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ANDROID_KEYSTORE_KEY_PASS' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_ANDROID_KEYSTORE_PASS`
|
|
if [[ -z "${IRONFOX_ANDROID_KEYSTORE_PASS+x}" ]] || [[ "${IRONFOX_ANDROID_KEYSTORE_PASS}" == "" ]] ||
|
|
[[ "${IRONFOX_ANDROID_KEYSTORE_PASS}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ANDROID_KEYSTORE_PASS' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_ANDROID_KEYSTORE_URL`
|
|
if [[ -z "${IRONFOX_ANDROID_KEYSTORE_URL+x}" ]] || [[ "${IRONFOX_ANDROID_KEYSTORE_URL}" == "" ]] ||
|
|
[[ "${IRONFOX_ANDROID_KEYSTORE_URL}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ANDROID_KEYSTORE_URL' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
## Job token
|
|
### (We need this to download the Android Keystore)
|
|
if [[ -z "${CI_JOB_TOKEN+x}" ]] || [[ "${CI_JOB_TOKEN}" == "" ]]; then
|
|
echo_red_text "ERROR: Missing job token! Please set 'CI_JOB_TOKEN'."
|
|
exit 1
|
|
else
|
|
readonly IRONFOX_CI_JOB_TOKEN="${CI_JOB_TOKEN}"
|
|
fi
|
|
|
|
# Now, check environment variables specified directly (via `env_ci.sh`/`env_common.sh`)
|
|
|
|
# Ensure we have `IRONFOX_ANDROID_KEYSTORE`
|
|
if [[ -z "${IRONFOX_ANDROID_KEYSTORE+x}" ]] || [[ "${IRONFOX_ANDROID_KEYSTORE}" == "" ]] ||
|
|
[[ "${IRONFOX_ANDROID_KEYSTORE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ANDROID_KEYSTORE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_ANDROID_KEYSTORE_KEY_PASS_FILE`
|
|
if [[ -z "${IRONFOX_ANDROID_KEYSTORE_KEY_PASS_FILE+x}" ]] || [[ "${IRONFOX_ANDROID_KEYSTORE_KEY_PASS_FILE}" == "" ]] ||
|
|
[[ "${IRONFOX_ANDROID_KEYSTORE_KEY_PASS_FILE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ANDROID_KEYSTORE_KEY_PASS_FILE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_ANDROID_KEYSTORE_PASS_FILE`
|
|
if [[ -z "${IRONFOX_ANDROID_KEYSTORE_PASS_FILE+x}" ]] || [[ "${IRONFOX_ANDROID_KEYSTORE_PASS_FILE}" == "" ]] ||
|
|
[[ "${IRONFOX_ANDROID_KEYSTORE_PASS_FILE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ANDROID_KEYSTORE_PASS_FILE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Download the Android keystore
|
|
"${IRONFOX_CURL}" ${IRONFOX_CURL_FLAGS} --location \
|
|
--request GET \
|
|
--header "JOB-TOKEN: ${IRONFOX_CI_JOB_TOKEN}" \
|
|
"${IRONFOX_ANDROID_KEYSTORE_URL}" \
|
|
--output "${IRONFOX_ANDROID_KEYSTORE}"
|
|
|
|
"${IRONFOX_CHMOD}" 600 "${IRONFOX_ANDROID_KEYSTORE}"
|
|
|
|
# Create the keystore key pass file
|
|
create_key_file "${IRONFOX_ANDROID_KEYSTORE_KEY_PASS}" "${IRONFOX_ANDROID_KEYSTORE_KEY_PASS_FILE}"
|
|
|
|
# Create the keystore pass file
|
|
create_key_file "${IRONFOX_ANDROID_KEYSTORE_PASS}" "${IRONFOX_ANDROID_KEYSTORE_PASS_FILE}"
|
|
|
|
echo_green_text 'SUCCESS: Prepared Android keystore!'
|
|
}
|
|
|
|
# Prepare secrets for S3 storage - Artifacts
|
|
function prep_s3_artifacts() {
|
|
echo_red_text 'Preparing S3 storage - Artifacts...'
|
|
|
|
# First, check environment variables specified externally (via CI)
|
|
|
|
# Ensure we have `IRONFOX_ARTIFACTS_S3_ACCESS_KEY`
|
|
if [[ -z "${IRONFOX_ARTIFACTS_S3_ACCESS_KEY+x}" ]] || [[ "${IRONFOX_ARTIFACTS_S3_ACCESS_KEY}" == "" ]] ||
|
|
[[ "${IRONFOX_ARTIFACTS_S3_ACCESS_KEY}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ARTIFACTS_S3_ACCESS_KEY' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_ARTIFACTS_S3_BUCKET_NAME`
|
|
if [[ -z "${IRONFOX_ARTIFACTS_S3_BUCKET_NAME+x}" ]] || [[ "${IRONFOX_ARTIFACTS_S3_BUCKET_NAME}" == "" ]] ||
|
|
[[ "${IRONFOX_ARTIFACTS_S3_BUCKET_NAME}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ARTIFACTS_S3_BUCKET_NAME' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_ARTIFACTS_S3_ENDPOINT`
|
|
if [[ -z "${IRONFOX_ARTIFACTS_S3_ENDPOINT+x}" ]] || [[ "${IRONFOX_ARTIFACTS_S3_ENDPOINT}" == "" ]] ||
|
|
[[ "${IRONFOX_ARTIFACTS_S3_ENDPOINT}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ARTIFACTS_S3_ENDPOINT' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_ARTIFACTS_S3_SECRET_KEY`
|
|
if [[ -z "${IRONFOX_ARTIFACTS_S3_SECRET_KEY+x}" ]] || [[ "${IRONFOX_ARTIFACTS_S3_SECRET_KEY}" == "" ]] ||
|
|
[[ "${IRONFOX_ARTIFACTS_S3_SECRET_KEY}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ARTIFACTS_S3_SECRET_KEY' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Now, check environment variables specified directly (via `env_ci.sh`/`env_common.sh`)
|
|
|
|
# Ensure we have `IRONFOX_ARTIFACTS_S3_ACCESS_KEY_FILE`
|
|
if [[ -z "${IRONFOX_ARTIFACTS_S3_ACCESS_KEY_FILE+x}" ]] || [[ "${IRONFOX_ARTIFACTS_S3_ACCESS_KEY_FILE}" == "" ]] ||
|
|
[[ "${IRONFOX_ARTIFACTS_S3_ACCESS_KEY_FILE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ARTIFACTS_S3_ACCESS_KEY_FILE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_ARTIFACTS_S3_BUCKET_NAME_FILE`
|
|
if [[ -z "${IRONFOX_ARTIFACTS_S3_BUCKET_NAME_FILE+x}" ]] || [[ "${IRONFOX_ARTIFACTS_S3_BUCKET_NAME_FILE}" == "" ]] ||
|
|
[[ "${IRONFOX_ARTIFACTS_S3_BUCKET_NAME_FILE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ARTIFACTS_S3_BUCKET_NAME_FILE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_ARTIFACTS_S3_ENDPOINT_FILE`
|
|
if [[ -z "${IRONFOX_ARTIFACTS_S3_ENDPOINT_FILE+x}" ]] || [[ "${IRONFOX_ARTIFACTS_S3_ENDPOINT_FILE}" == "" ]] ||
|
|
[[ "${IRONFOX_ARTIFACTS_S3_ENDPOINT_FILE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ARTIFACTS_S3_ENDPOINT_FILE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_ARTIFACTS_S3_SECRET_KEY_FILE`
|
|
if [[ -z "${IRONFOX_ARTIFACTS_S3_SECRET_KEY_FILE+x}" ]] || [[ "${IRONFOX_ARTIFACTS_S3_SECRET_KEY_FILE}" == "" ]] ||
|
|
[[ "${IRONFOX_ARTIFACTS_S3_SECRET_KEY_FILE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_ARTIFACTS_S3_SECRET_KEY_FILE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Prepare our secrets
|
|
prep_s3 "${IRONFOX_ARTIFACTS_S3_ACCESS_KEY}" "${IRONFOX_ARTIFACTS_S3_BUCKET_NAME}" "${IRONFOX_ARTIFACTS_S3_ENDPOINT}" "${IRONFOX_ARTIFACTS_S3_SECRET_KEY}" "${IRONFOX_ARTIFACTS_S3_ACCESS_KEY_FILE}" "${IRONFOX_ARTIFACTS_S3_BUCKET_NAME_FILE}" "${IRONFOX_ARTIFACTS_S3_ENDPOINT_FILE}" "${IRONFOX_ARTIFACTS_S3_SECRET_KEY_FILE}"
|
|
|
|
echo_green_text 'SUCCESS: Prepared S3 storage - Artifacts!'
|
|
}
|
|
|
|
# Prepare secrets for S3 storage - Releases
|
|
function prep_s3_releases() {
|
|
echo_red_text 'Preparing S3 storage - Releases...'
|
|
|
|
# First, check environment variables specified externally (via CI)
|
|
|
|
# Ensure we have `IRONFOX_RELEASES_S3_ACCESS_KEY`
|
|
if [[ -z "${IRONFOX_RELEASES_S3_ACCESS_KEY+x}" ]] || [[ "${IRONFOX_RELEASES_S3_ACCESS_KEY}" == "" ]] ||
|
|
[[ "${IRONFOX_RELEASES_S3_ACCESS_KEY}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_RELEASES_S3_ACCESS_KEY' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_RELEASES_S3_BUCKET_NAME`
|
|
if [[ -z "${IRONFOX_RELEASES_S3_BUCKET_NAME+x}" ]] || [[ "${IRONFOX_RELEASES_S3_BUCKET_NAME}" == "" ]] ||
|
|
[[ "${IRONFOX_RELEASES_S3_BUCKET_NAME}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_RELEASES_S3_BUCKET_NAME' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_RELEASES_S3_ENDPOINT`
|
|
if [[ -z "${IRONFOX_RELEASES_S3_ENDPOINT+x}" ]] || [[ "${IRONFOX_RELEASES_S3_ENDPOINT}" == "" ]] ||
|
|
[[ "${IRONFOX_RELEASES_S3_ENDPOINT}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_RELEASES_S3_ENDPOINT' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_RELEASES_S3_SECRET_KEY`
|
|
if [[ -z "${IRONFOX_RELEASES_S3_SECRET_KEY+x}" ]] || [[ "${IRONFOX_RELEASES_S3_SECRET_KEY}" == "" ]] ||
|
|
[[ "${IRONFOX_RELEASES_S3_SECRET_KEY}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_RELEASES_S3_SECRET_KEY' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Now, check environment variables specified directly (via `env_ci.sh`/`env_common.sh`)
|
|
|
|
# Ensure we have `IRONFOX_RELEASES_S3_ACCESS_KEY_FILE`
|
|
if [[ -z "${IRONFOX_RELEASES_S3_ACCESS_KEY_FILE+x}" ]] || [[ "${IRONFOX_RELEASES_S3_ACCESS_KEY_FILE}" == "" ]] ||
|
|
[[ "${IRONFOX_RELEASES_S3_ACCESS_KEY_FILE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_RELEASES_S3_ACCESS_KEY_FILE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_RELEASES_S3_BUCKET_NAME_FILE`
|
|
if [[ -z "${IRONFOX_RELEASES_S3_BUCKET_NAME_FILE+x}" ]] || [[ "${IRONFOX_RELEASES_S3_BUCKET_NAME_FILE}" == "" ]] ||
|
|
[[ "${IRONFOX_RELEASES_S3_BUCKET_NAME_FILE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_RELEASES_S3_BUCKET_NAME_FILE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_RELEASES_S3_ENDPOINT_FILE`
|
|
if [[ -z "${IRONFOX_RELEASES_S3_ENDPOINT_FILE+x}" ]] || [[ "${IRONFOX_RELEASES_S3_ENDPOINT_FILE}" == "" ]] ||
|
|
[[ "${IRONFOX_RELEASES_S3_ENDPOINT_FILE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_RELEASES_S3_ENDPOINT_FILE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure we have `IRONFOX_RELEASES_S3_SECRET_KEY_FILE`
|
|
if [[ -z "${IRONFOX_RELEASES_S3_SECRET_KEY_FILE+x}" ]] || [[ "${IRONFOX_RELEASES_S3_SECRET_KEY_FILE}" == "" ]] ||
|
|
[[ "${IRONFOX_RELEASES_S3_SECRET_KEY_FILE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_RELEASES_S3_SECRET_KEY_FILE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Prepare our secrets
|
|
prep_s3 "${IRONFOX_RELEASES_S3_ACCESS_KEY}" "${IRONFOX_RELEASES_S3_BUCKET_NAME}" "${IRONFOX_RELEASES_S3_ENDPOINT}" "${IRONFOX_RELEASES_S3_SECRET_KEY}" "${IRONFOX_RELEASES_S3_ACCESS_KEY_FILE}" "${IRONFOX_RELEASES_S3_BUCKET_NAME_FILE}" "${IRONFOX_RELEASES_S3_ENDPOINT_FILE}" "${IRONFOX_RELEASES_S3_SECRET_KEY_FILE}"
|
|
|
|
echo_green_text 'SUCCESS: Prepared S3 storage - Releases!'
|
|
}
|
|
|
|
# Prepare Google Safe Browsing API key
|
|
function prep_sb_gapi_key() {
|
|
echo_red_text 'Preparing Google Safe Browsing API key...'
|
|
|
|
# First, check environment variables specified externally (via CI)
|
|
|
|
# Ensure we have `IRONFOX_SB_GAPI_KEY`
|
|
if [[ -z "${IRONFOX_SB_GAPI_KEY+x}" ]] || [[ "${IRONFOX_SB_GAPI_KEY}" == "" ]] ||
|
|
[[ "${IRONFOX_SB_GAPI_KEY}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_SB_GAPI_KEY' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Now, check environment variables specified directly (via `env_ci.sh`/`env_common.sh`)
|
|
|
|
# Ensure we have `IRONFOX_SB_GAPI_KEY_FILE`
|
|
if [[ -z "${IRONFOX_SB_GAPI_KEY_FILE+x}" ]] || [[ "${IRONFOX_SB_GAPI_KEY_FILE}" == "" ]] ||
|
|
[[ "${IRONFOX_SB_GAPI_KEY_FILE}" == "null" ]]; then
|
|
echo_red_text "ERROR: 'IRONFOX_SB_GAPI_KEY_FILE' is missing!"
|
|
exit 1
|
|
fi
|
|
|
|
# Create the Safe Browsing API key file
|
|
create_key_file "${IRONFOX_SB_GAPI_KEY}" "${IRONFOX_SB_GAPI_KEY_FILE}"
|
|
|
|
echo_green_text 'SUCCESS: Prepared Google Safe Browsing API key!'
|
|
}
|
|
|
|
# Prepare our secrets...
|
|
if [[ "${IRONFOX_CI_PREP_ANDROID_KEYSTORE}" == 1 ]]; then
|
|
prep_android_keystore
|
|
elif [[ "${IRONFOX_CI_PREP_S3_ARTIFACTS}" == 1 ]]; then
|
|
prep_s3_artifacts
|
|
elif [[ "${IRONFOX_CI_PREP_S3_RELEASES}" == 1 ]]; then
|
|
prep_s3_releases
|
|
elif [[ "${IRONFOX_CI_PREP_SB_GAPI_KEY}" == 1 ]]; then
|
|
prep_sb_gapi_key
|
|
fi
|