scripts/publish.sh
#!/bin/bash

# Copyright (C) 2022  Aravinth Manivannan <realaravinth@batsense.net>
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
#
# SPDX-License-Identifier: AGPL-3.0-or-later

# publish.sh: grab bin from docker container, pack, sign and upload
# $2: binary version
# $3: Docker img tag
# $4: dumbserve password

set -xEeuo  pipefail

DUMBSERVE_USERNAME=mcaptcha
DUMBSERVE_PASSWORD=$4
DUMBSERVE_HOST="https://$DUMBSERVE_USERNAME:$DUMBSERVE_PASSWORD@dl.mcaptcha.org"

NAME=mcaptcha
KEY=73DAC973A9ADBB9ADCB5CDC4595A08135BA9FF73

TMP_DIR=$(mktemp -d)
FILENAME="$NAME-$2-linux-amd64"
TARBALL=$FILENAME.tar.gz
TARGET_DIR="$TMP_DIR/$FILENAME/"
mkdir -p $TARGET_DIR
DOCKER_IMG="mcaptcha/$NAME:$3"


get_bin(){
	echo "[*] Grabbing binary"
	container_id=$(docker create $DOCKER_IMG)
	docker cp $container_id:/usr/local/bin/$NAME $TARGET_DIR/
	docker rm -v $container_id
}

copy() {
	echo "[*] Copying dist assets"
	cp README.md  $TARGET_DIR
	cp LICENSE.md $TARGET_DIR
	cp CHANGELOG.md $TARGET_DIR
	cp docker-compose.yml $TARGET_DIR

	mkdir $TARGET_DIR/docs
	cp docs/DEPLOYMENT.md $TARGET_DIR/docs
	cp docs/CONFIGURATION.md $TARGET_DIR/docs
	cp config/default.toml $TARGET_DIR/config.toml

	get_bin
}



pack() {
	echo "[*] Creating dist tarball"
	pushd $TMP_DIR
	tar -cvzf $TARBALL $FILENAME
	popd
}

checksum() {
	echo "[*] Generating dist tarball checksum"
	pushd $TMP_DIR
	sha256sum $TARBALL > $TARBALL.sha256
	popd
}

sign() {
	echo "[*] Signing dist tarball checksum"
	pushd $TMP_DIR
	export GPG_TTY=$(tty)
	gpg --verbose \
		--pinentry-mode loopback \
		--batch --yes \
		--passphrase $GPG_PASSWORD \
		--local-user $KEY \
		--output $TARBALL.asc \
		--sign --detach \
		--armor $TARBALL
	popd
}

delete_dir() {
	curl --location --request DELETE "$DUMBSERVE_HOST/api/v1/files/delete" \
		--header 'Content-Type: application/json' \
		--data-raw "{
			\"path\": \"$1\"
		}"
}

upload_dist() {
	upload_dir="mCaptcha/$1"
	delete_dir $upload_dir

	pushd $TMP_DIR
	for file in $TARBALL $TARBALL.asc $TARBALL.sha256
	do
		curl -v \
			-F upload=@$file  \
			"$DUMBSERVE_HOST/api/v1/files/upload?path=$upload_dir"
	done
	popd
}

publish() {
	copy
	pack
	checksum
	sign
	upload_dist $2
}

$1 $@
