Added Debian/Ubuntu package build

2026-09-07 16:47:07 +00:00 · 2017-06-16 21:31:25 +00:00
parent 75fa12cabf
commit e3d43c8d45
20 changed files with 181 additions and 123 deletions
@@ -0,0 +1,3 @@
+BUILD
+RPMS
+SPECS
@@ -91,20 +91,98 @@ package-ethermint: prepare-spec-ethermint ;
 	./sign RPMS/x86_64/ethermint-$(ethermint_version)-$$BUILD_NUMBER.x86_64.rpm
 	rpm -Kv RPMS/x86_64/ethermint-$(ethermint_version)-$$BUILD_NUMBER.x86_64.rpm

+package-debian-tendermint: package-tendermint
+	$(info Packaging Debian tendermint version $(tendermint_version)-$(BUILD_NUMBER))
+	rm -rf BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER) tmp/_gpg tmp/_gpgbuilder tmp/debian-binary tmp/control.tar.gz tmp/data.tar.xz
+	cp -r BUILD/tendermint-$(tendermint_version) BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)
+
+	cp -r extrafiles/DEBIAN BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/
+	sed -i "s/@TENDERMINT_VERSION@/$(tendermint_version)-$(BUILD_NUMBER)/" BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/DEBIAN/changelog
+	sed -i "s/@STABILITY@/stable/" BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/DEBIAN/changelog
+	sed -i "s/@DATETIMESTAMP@/`date +%a,\ %d\ %b\ %Y\ %T\ %z`/" BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/DEBIAN/changelog
+	sed -i "s/@TENDERMINT_VERSION@/$(tendermint_version)-$(BUILD_NUMBER)/" BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/DEBIAN/control
+
+	rm -rf BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/usr/share/licenses
+	mkdir -p BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/usr/share/doc/tendermint
+	cp BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/DEBIAN/copyright BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/usr/share/doc/tendermint
+	gzip -c BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/DEBIAN/changelog > BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/usr/share/doc/tendermint/changelog.Debian.gz
+	gzip -c BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/DEBIAN/changelog > BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/usr/share/doc/tendermint/changelog.Debian.amd64.gz
+
+	sed -i "s/@INSTALLEDSIZE@/`du -ks BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER) | cut -f 1`/" BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/DEBIAN/control
+	cd BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER) && tar --owner=root --group=root -cvJf ../../tmp/data.tar.xz --exclude DEBIAN *
+	cd BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/DEBIAN && tar --owner=root --group=root -cvzf ../../../tmp/control.tar.gz *
+	echo "2.0" > tmp/debian-binary
+
+	cp extrafiles/_gpg tmp/
+	cd tmp && sed -i "s/@DATETIMESTAMP@/`date +%a\ %b\ %d\ %T\ %Y`/" _gpg
+	cd tmp && sed -i "s/@BINMD5@/`md5sum debian-binary | cut -d\  -f1`/" _gpg
+	cd tmp && sed -i "s/@BINSHA1@/`sha1sum debian-binary | cut -d\  -f1`/" _gpg
+	cd tmp && sed -i "s/@BINSIZE@/`stat -c %s debian-binary | cut -d\  -f1`/" _gpg
+	cd tmp && sed -i "s/@CONMD5@/`md5sum control.tar.gz | cut -d\  -f1`/" _gpg
+	cd tmp && sed -i "s/@CONSHA1@/`sha1sum control.tar.gz | cut -d\  -f1`/" _gpg
+	cd tmp && sed -i "s/@CONSIZE@/`stat -c %s control.tar.gz | cut -d\  -f1`/" _gpg
+	cd tmp && sed -i "s/@DATMD5@/`md5sum data.tar.xz | cut -d\  -f1`/" _gpg
+	cd tmp && sed -i "s/@DATSHA1@/`sha1sum data.tar.xz | cut -d\  -f1`/" _gpg
+	cd tmp && sed -i "s/@DATSIZE@/`stat -c %s data.tar.xz | cut -d\  -f1`/" _gpg
+	gpg --batch --passphrase "$(GPG_PASSPHRASE)" --clearsign tmp/_gpg
+	mv tmp/_gpg.asc tmp/_gpgbuilder
+	ar r tmp/tendermint-$(tendermint_version)-$(BUILD_NUMBER)_amd64.deb tmp/debian-binary tmp/control.tar.gz tmp/data.tar.xz tmp/_gpgbuilder
+	mv tmp/tendermint-$(tendermint_version)-$(BUILD_NUMBER)_amd64.deb RPMS/
+	rm tmp/debian-binary tmp/control.tar.gz tmp/data.tar.xz tmp/_gpgbuilder tmp/_gpg
+
 install-%:
 #Make sure your host has the IAM role to read/write the S3 bucket OR that you set up ~/.boto
 	aws s3 sync s3://tendermint-packages/centos/ tmp/s3/
-	mkdir -p tmp/s3/7/cr/x86_64/Packages
-	cp -r RPMS/x86_64/$** tmp/s3/7/cr/x86_64/Packages
-	cp ./RPM-GPG-KEY-Tendermint tmp/s3/7/os/x86_64/
-	cp ./tendermint.repo tmp/s3/7/os/x86_64/
-	cp ./tendermint-dev.repo tmp/s3/7/cr/x86_64/
-	createrepo tmp/s3/7/cr/x86_64/Packages -u http://tendermint-packages.s3-website-us-west-1.amazonaws.com/centos/7/cr/x86_64/Packages -o tmp/s3/7/cr/x86_64 --update -S --repo Tendermint --content tendermint --content basecoin --content ethermint
-	rm -f tmp/s3/7/cr/x86_64/repodata/repomd.xml.asc
-#TODO: make this more secure
-	gpg --batch --passphrase "$(GPG_PASSPHRASE)" --clearsign tmp/s3/7/cr/x86_64/repodata/repomd.xml
+	mkdir -p tmp/s3/7/os/x86_64/Packages
+	cp -r RPMS/x86_64/$** tmp/s3/7/os/x86_64/Packages
+	cp repofiles/RPM-GPG-KEY-Tendermint tmp/s3/7/os/x86_64/
+	cp repofiles/tendermint.repo tmp/s3/7/os/x86_64/
+	createrepo tmp/s3/7/os/x86_64/Packages -u http://tendermint-packages.s3-website-us-west-1.amazonaws.com/centos/7/os/x86_64/Packages -o tmp/s3/7/os/x86_64 --update -S --repo Tendermint --content tendermint --content basecoin --content ethermint
+	rm -f tmp/s3/7/os/x86_64/repodata/repomd.xml.asc
+	gpg --batch --passphrase "$(GPG_PASSPHRASE)" --sign -a tmp/s3/7/os/x86_64/repodata/repomd.xml
 	aws s3 sync tmp/s3/ s3://tendermint-packages/centos/ --acl public-read

+install-debian-tendermint: prepare-spec-tendermint
+#Prereq: package-debian-tendermint
+	aws s3 sync s3://tendermint-packages/debian/ tmp/debian-s3/
+	mkdir -p tmp/debian-s3/pool tmp/debian-s3/dists/stable/main/binary-amd64
+	cp RPMS/tendermint-$(tendermint_version)-$(BUILD_NUMBER)_amd64.deb tmp/debian-s3/pool
+	cp repofiles/Release_amd64 tmp/debian-s3/dists/stable/main/binary-amd64/Release
+
+#Package.gz	
+	test -f tmp/debian-s3/dists/stable/main/binary-amd64/Packages.gz && gunzip tmp/debian-s3/dists/stable/main/binary-amd64/Packages.gz || rm -f tmp/debian-s3/dists/stable/main/binary-amd64/Package
+
+	echo > tmp/Package
+	echo "Filename: pool/tendermint-$(tendermint_version)-$(BUILD_NUMBER)_amd64.deb" >> tmp/Package
+	echo "MD5sum: `md5sum RPMS/tendermint-$(tendermint_version)-$(BUILD_NUMBER)_amd64.deb | cut -d\  -f 1`" >> tmp/Package
+	echo "SHA1: `sha1sum RPMS/tendermint-$(tendermint_version)-$(BUILD_NUMBER)_amd64.deb | cut -d\  -f 1`" >> tmp/Package
+	echo "SHA256: `sha256sum RPMS/tendermint-$(tendermint_version)-$(BUILD_NUMBER)_amd64.deb | cut -d\  -f 1`" >> tmp/Package
+	echo "Size: `stat -c %s RPMS/tendermint-$(tendermint_version)-$(BUILD_NUMBER)_amd64.deb | cut -d\  -f 1`" >> tmp/Package
+	cat BUILD/tendermint-$(tendermint_version)-$(BUILD_NUMBER)/DEBIAN/control >> tmp/Package
+
+	cat tmp/Package >> tmp/debian-s3/dists/stable/main/binary-amd64/Packages
+	gzip tmp/debian-s3/dists/stable/main/binary-amd64/Packages
+	rm -f tmp/Package
+
+#Release / InRelease / Release.gpg
+	cp repofiles/Release tmp/debian-s3/dists/stable
+	rm -f tmp/debian-s3/dists/stable/InRelease
+	rm -f tmp/debian-s3/dists/stable/Release.gpg
+
+	echo "MD5Sum:" >> tmp/debian-s3/dists/stable/Release
+	cd tmp/debian-s3/dists/stable && for f in `find . -type f | sed 's/^.\///'` ; do test "$$f" == "Release" && continue ; echo -n " " ; md5sum $$f | sed "s/  / `stat -c %s $$f` /" ; done >> Release
+	echo "SHA1:" >> tmp/debian-s3/dists/stable/Release
+	cd tmp/debian-s3/dists/stable && for f in `find . -type f | sed 's/^.\///'` ; do test "$$f" == "Release" && continue ; echo -n " " ; sha1sum $$f | sed "s/  / `stat -c %s $$f` /" ; done >> Release
+	echo "SHA256:" >> tmp/debian-s3/dists/stable/Release
+	cd tmp/debian-s3/dists/stable && for f in `find . -type f | sed 's/^.\///'` ; do test "$$f" == "Release" && continue ; echo -n " " ; sha256sum $$f | sed "s/  / `stat -c %s $$f` /" ; done >> Release
+
+	gpg --batch --passphrase "$(GPG_PASSPHRASE)" --digest-algo SHA256 -b -a tmp/debian-s3/dists/stable/Release
+	mv tmp/debian-s3/dists/stable/Release.asc tmp/debian-s3/dists/stable/Release.gpg
+	gpg --batch --passphrase "$(GPG_PASSPHRASE)" --digest-algo SHA512 --clearsign tmp/debian-s3/dists/stable/Release
+	mv tmp/debian-s3/dists/stable/Release.asc tmp/debian-s3/dists/stable/InRelease
+
+	aws s3 sync tmp/debian-s3/ s3://tendermint-packages/debian/ --acl public-read
+
 mostlyclean:
 	rm -rf {BUILDROOT,SOURCES,SPECS,SRPMS,tmp}

@@ -0,0 +1,6 @@
+tendermint (@TENDERMINT_VERSION@) @STABILITY@; urgency=medium
+
+  * Automatic build. See https://github.com/tendermint/tendermint for more information.
+
+ -- Greg Szabo <greg@philosobear.com>  @DATETIMESTAMP@
+
@@ -0,0 +1 @@
+9
@@ -0,0 +1,14 @@
+Source: tendermint
+Section: net
+Priority: optional
+Maintainer: Greg Szabo <greg@philosobear.com>
+Build-Depends: debhelper (>=9)
+Standards-Version: 3.9.6
+Homepage: https://tendermint.com
+Package: tendermint
+Architecture: amd64
+Version: @TENDERMINT_VERSION@
+Installed-Size: @INSTALLEDSIZE@
+Description: securely and consistently replicate an application on many machines
+ Tendermint is software for securely and consistently replicating an application on many machines. By securely, we mean that Tendermint works even if up to 1/3 of machines fail in arbitrary ways. By consistently, we mean that every non-faulty machine sees the same transaction log and computes the same state.
+
@@ -0,0 +1,21 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: tendermint
+Source: https://github.com/tendermint/tendermint
+
+Files: *
+Copyright: 2017 All In Bits, Inc.
+License: Apache-2.0
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+ .
+ http://www.apache.org/licenses/LICENSE-2.0
+ .
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+ .
+ On Debian systems, the full text of the Apache License 2.0 can be found
+ in the file `/usr/share/common-licenses/Apache-2.0'.
@@ -0,0 +1,8 @@
+Version: 4
+Signer:
+Date: @DATETIMESTAMP@
+Role: builder
+Files:
+	@BINMD5@ @BINSHA1@ @BINSIZE@ debian-binary
+	@CONMD5@ @CONSHA1@ @CONSIZE@ control.tar.gz
+	@DATMD5@ @DATSHA1@ @DATSIZE@ data.tar.xz
@@ -0,0 +1,29 @@
+Format: 3.0 (native)
+Source: tendermint
+Binary: tendermint
+Architecture: amd64
+Version: @TENDERMINTVERSION@
+Maintainer: Greg Szabo <greg@philosobear.com>
+Standards-Version: 3.9.6
+Vcs-Browser: http://svn.debian.org/wsvn/pkg-apache/trunk/ssl-cert
+Vcs-Svn: svn://svn.debian.org/pkg-apache/trunk/ssl-cert
+Build-Depends: debhelper (>=9)
+Checksums-Sha1: 
+ a108d8df792554ed7be41a9aaa317bada441f216 22697 ssl-cert_1.0.28.tar.gz
+Checksums-Sha256: 
+ 464dabcf44d72d7e1ecdf1ffa8d0641694e6375704097d5e8ba04f3242e83d5e 22697 ssl-cert_1.0.28.tar.gz
+Files: 
+ 4377beded7717321f9f75cfd12057dac 22697 ssl-cert_1.0.28.tar.gz
+
+Package: tendermint
+Architecture: amd64
+Version: @TENDERMINT_VERSION@
+Installed-Size: @INSTALLEDSIZE@
+Description: securely and consistently replicate an application on many machines
+ Tendermint is software for securely and consistently replicating an application on many machines. By securely, we mean that Tendermint works even if up to 1/3 of machines fail in arbitrary ways. By consistently, we mean that every non-faulty machine sees the same transaction log and computes the same state.
+
+~
+~
+~
+~
+
@@ -0,0 +1,7 @@
+Origin: Tendermint
+Label: Tendermint
+Suite: stable
+Date: Fri, 16 Jun 2017 19:44:00 UTC
+Architectures: amd64
+Components: main
+Description: Tendermint repository
@@ -0,0 +1,5 @@
+Archive: stable
+Component: main
+Origin: Tendermint
+Label: Tendermint
+Architecture: amd64