TylerandClaude Fable 5
575d893f90
Template tests / tests (pull_request) Failing after 33s
Phase 3 of the improvement plan (PR 9 of the sequence): the dnf/Fedora packaging half, in separate Linux-specific files, mirroring the apt/.deb work. - packaging/linux/common/stage-runtime.sh: shared runtime-only payload staging extracted from the .deb builder so the two package formats never drift. It copies app code + a fixed Electron runtime + production npm deps (npm ls --omit=dev), guards against dev-dep leaks, and fails without node_modules. The .deb builder now delegates to it. - packaging/linux/fedora/stepforge.spec: runtime Requires (nss, nspr, gtk3, …), Recommends (xinput, portal, pipewire), %license, and a %post that makes chrome-sandbox setuid and refreshes desktop/MIME/icon caches. No compilation — it packages the prebuilt BuildRoot. - packaging/linux/fedora/package.sh: stages the shared payload, substitutes version/maintainer into the spec, and runs rpmbuild against the prebuilt BuildRoot with detected arch. Requires rpmbuild + node_modules; emits an .rpm + sha256. - scripts/linux/dnf/install-runtime-deps.sh and install-build-deps.sh: separate runtime vs build dependency sets for dnf (runtime installs no build tools). - docs/linux/dnf.md: Fedora/RHEL install + build guide, distinct from apt.md. Tests: packaging-linux.test.js gains Fedora/dnf structural checks (spec Requires + MPL-2.0 + %license + sandbox setup, builder shares staging + requires rpmbuild, dnf build/runtime dep separation, shared staging never copies the whole dev tree). tests/integration/linux/package-rpm.test.sh builds a real .rpm and asserts runtime-only contents (honest skip when rpmbuild is absent, as on this apt host). Verified: 13 packaging unit tests pass; the refactored .deb builder still produces a valid runtime-only package (integration test green); the .rpm integration test skips cleanly where rpmbuild is unavailable. Co-Authored-By: Claude Fable 5 <[email protected]>
98 lines
4.0 KiB
Bash
Executable File
98 lines
4.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Build a production StepForge .deb (and a matching portable tarball) from a
|
|
# pruned, runtime-only tree.
|
|
#
|
|
# Unlike the old scripts/package-linux.sh this does NOT copy the development
|
|
# node_modules, docs, prompts, examples, or stale audit files; it stages only
|
|
# the app code plus a runtime dependency set (the fixed Electron runtime and
|
|
# production npm deps), a real desktop entry, icons, MIME registration, and a
|
|
# license. Architecture is detected, not hardcoded.
|
|
set -euo pipefail
|
|
|
|
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../../.." && pwd)"
|
|
cd "$ROOT_DIR"
|
|
|
|
VERSION="$(node -p "require('./package.json').version")"
|
|
MAINTAINER="${STEPFORGE_MAINTAINER:-StepForge <[email protected]>}"
|
|
OUT_DIR="${STEPFORGE_PACKAGE_DIR:-$ROOT_DIR/build/artifacts}"
|
|
mkdir -p "$OUT_DIR"
|
|
|
|
# Map dpkg architecture to a Node-style label for the tarball name.
|
|
DEB_ARCH="$(dpkg --print-architecture 2>/dev/null || echo amd64)"
|
|
case "$DEB_ARCH" in
|
|
amd64) NODE_ARCH="x64" ;;
|
|
arm64) NODE_ARCH="arm64" ;;
|
|
*) NODE_ARCH="$DEB_ARCH" ;;
|
|
esac
|
|
|
|
WORK_DIR="$(mktemp -d "${OUT_DIR%/}/.deb.XXXXXX")"
|
|
trap 'rm -rf "$WORK_DIR"' EXIT
|
|
|
|
# Stage the shared runtime-only payload (fails if node_modules is missing).
|
|
ROOT_DIR="$ROOT_DIR" STAGE_ROOT="$WORK_DIR" bash "$ROOT_DIR/packaging/linux/common/stage-runtime.sh"
|
|
|
|
mkdir -p "$WORK_DIR/DEBIAN" "$WORK_DIR/usr/share/doc/stepforge"
|
|
|
|
# --- license + docs pointer --------------------------------------------------
|
|
if [ -f "$ROOT_DIR/LICENSE" ]; then
|
|
install -m 0644 "$ROOT_DIR/LICENSE" "$WORK_DIR/usr/share/doc/stepforge/copyright"
|
|
elif [ -f "$ROOT_DIR/docs/LICENSE" ]; then
|
|
install -m 0644 "$ROOT_DIR/docs/LICENSE" "$WORK_DIR/usr/share/doc/stepforge/copyright"
|
|
fi
|
|
|
|
# --- DEBIAN control + maintainer scripts ------------------------------------
|
|
sed -e "s/@VERSION@/$VERSION/" -e "s/@ARCH@/$DEB_ARCH/" -e "s#@MAINTAINER@#$MAINTAINER#" \
|
|
"$ROOT_DIR/packaging/linux/debian/control.in" > "$WORK_DIR/DEBIAN/control"
|
|
|
|
cat > "$WORK_DIR/DEBIAN/postinst" <<'POSTINST'
|
|
#!/bin/sh
|
|
set -e
|
|
# Make the Chromium setuid sandbox helper usable so the app launches sandboxed.
|
|
HELPER=/opt/stepforge/node_modules/electron/dist/chrome-sandbox
|
|
if [ -e "$HELPER" ]; then
|
|
chown root:root "$HELPER" || true
|
|
chmod 4755 "$HELPER" || true
|
|
fi
|
|
# Refresh desktop/MIME/icon caches (best effort).
|
|
if command -v update-desktop-database >/dev/null 2>&1; then update-desktop-database -q /usr/share/applications || true; fi
|
|
if command -v update-mime-database >/dev/null 2>&1; then update-mime-database /usr/share/mime || true; fi
|
|
if command -v gtk-update-icon-cache >/dev/null 2>&1; then gtk-update-icon-cache -q /usr/share/icons/hicolor || true; fi
|
|
exit 0
|
|
POSTINST
|
|
|
|
cat > "$WORK_DIR/DEBIAN/prerm" <<'PRERM'
|
|
#!/bin/sh
|
|
set -e
|
|
exit 0
|
|
PRERM
|
|
|
|
cat > "$WORK_DIR/DEBIAN/postrm" <<'POSTRM'
|
|
#!/bin/sh
|
|
set -e
|
|
if [ "$1" = "remove" ] || [ "$1" = "purge" ]; then
|
|
if command -v update-desktop-database >/dev/null 2>&1; then update-desktop-database -q /usr/share/applications || true; fi
|
|
if command -v update-mime-database >/dev/null 2>&1; then update-mime-database /usr/share/mime || true; fi
|
|
if command -v gtk-update-icon-cache >/dev/null 2>&1; then gtk-update-icon-cache -q /usr/share/icons/hicolor || true; fi
|
|
fi
|
|
exit 0
|
|
POSTRM
|
|
chmod 0755 "$WORK_DIR/DEBIAN/postinst" "$WORK_DIR/DEBIAN/prerm" "$WORK_DIR/DEBIAN/postrm"
|
|
|
|
# --- build the .deb ----------------------------------------------------------
|
|
DEB_FILE="$OUT_DIR/stepforge_${VERSION}_${DEB_ARCH}.deb"
|
|
if command -v fakeroot >/dev/null 2>&1; then
|
|
fakeroot dpkg-deb --build "$WORK_DIR" "$DEB_FILE" >/dev/null
|
|
else
|
|
dpkg-deb --build "$WORK_DIR" "$DEB_FILE" >/dev/null
|
|
fi
|
|
|
|
# --- portable tarball (INCLUDES the launcher, unlike the old script) ---------
|
|
TAR_FILE="$OUT_DIR/stepforge_${VERSION}_linux-${NODE_ARCH}.tar.gz"
|
|
tar -C "$WORK_DIR" -czf "$TAR_FILE" opt usr/bin/stepforge usr/share/applications usr/share/mime usr/share/icons
|
|
|
|
# --- checksums ---------------------------------------------------------------
|
|
( cd "$OUT_DIR" && sha256sum "$(basename "$DEB_FILE")" "$(basename "$TAR_FILE")" > "stepforge_${VERSION}_${DEB_ARCH}.sha256" )
|
|
|
|
echo "$DEB_FILE"
|
|
echo "$TAR_FILE"
|