Skip to content

Commit

Permalink
refact: 🧑‍💻 some refactoring (#495)
Browse files Browse the repository at this point in the history
* refact: 🧑‍💻 make functions more convenient

* fix: 🐛

* fix: 🐛

* refact: 🧑‍💻 reorder functions

* fix: 🐛
  • Loading branch information
AndreasAugustin authored Mar 11, 2024
1 parent d9e61fc commit 34c494e
Show file tree
Hide file tree
Showing 2 changed files with 327 additions and 128 deletions.
96 changes: 79 additions & 17 deletions src/entrypoint.sh
Original file line number Diff line number Diff line change
Expand Up @@ -36,30 +36,79 @@ SOURCE_REPO_PREFIX="https://${SOURCE_REPO_HOSTNAME}/"
# Functions
################################################

#######################################
# doing the ssh setup.
# Arguments:
# ssh_private_key_src
# source_repo_hostname
# Changes:
# SOURCE_REPO_PREFIX
# Exports:
# SRC_SSH_PRIVATEKEY_ABS_PATH
#######################################
function ssh_setup() {
echo "::group::ssh setup"

info "prepare ssh"
SRC_SSH_FILE_DIR="/tmp/.ssh"
SRC_SSH_PRIVATEKEY_FILE_NAME="id_rsa_actions_template_sync"
export SRC_SSH_PRIVATEKEY_ABS_PATH="${SRC_SSH_FILE_DIR}/${SRC_SSH_PRIVATEKEY_FILE_NAME}"

local src_ssh_file_dir="/tmp/.ssh"
local src_ssh_private_key_file_name="id_rsa_actions_template_sync"

local ssh_private_key_src=$1
local source_repo_hostname=$2

if [[ -z "${ssh_private_key_src}" ]] &>/dev/null; then
err "Missing variable 'ssh_private_key_src'.";
exit 1;
fi

if [[ -z "${source_repo_hostname}" ]]; then
err "Missing variable 'source_repo_hostname'.";
exit 1;
fi

# exporting SRC_SSH_PRIVATEKEY_ABS_PATH to be used later
export SRC_SSH_PRIVATEKEY_ABS_PATH="${src_ssh_file_dir}/${src_ssh_private_key_file_name}"

debug "We are using SSH within a private source repo"
mkdir -p "${SRC_SSH_FILE_DIR}"
mkdir -p "${src_ssh_file_dir}"
# use cat <<< instead of echo to swallow output of the private key
cat <<< "${SSH_PRIVATE_KEY_SRC}" | sed 's/\\n/\n/g' > "${SRC_SSH_PRIVATEKEY_ABS_PATH}"
cat <<< "${ssh_private_key_src}" | sed 's/\\n/\n/g' > "${SRC_SSH_PRIVATEKEY_ABS_PATH}"
chmod 600 "${SRC_SSH_PRIVATEKEY_ABS_PATH}"
SOURCE_REPO_PREFIX="git@${SOURCE_REPO_HOSTNAME}:"

# adjusting outer variable source repo prefix
SOURCE_REPO_PREFIX="git@${source_repo_hostname}:"

echo "::endgroup::"
}

#######################################
# doing the gpg setup.
# Arguments:
# gpg_private_key
# git_user_email
#######################################
function gpg_setup() {
echo "::group::gpg setup"
info "start prepare gpg"
echo -e "$GPG_PRIVATE_KEY" | gpg --import --batch
for fpr in $(gpg --list-key --with-colons "${GIT_USER_EMAIL}" | awk -F: '/fpr:/ {print $10}' | sort -u); do echo -e "5\ny\n" | gpg --no-tty --command-fd 0 --expert --edit-key "$fpr" trust; done

KEY_ID="$(gpg --list-secret-key --with-colons "${GIT_USER_EMAIL}" | awk -F: '/sec:/ {print $5}')"
local gpg_private_key=$1
local git_user_email=$2

if [[ -z "${gpg_private_key}" ]] &>/dev/null; then
err "Missing variable 'gpg_private_key'.";
exit 1;
fi

if [[ -z "${git_user_email}" ]]; then
err "Missing variable 'git_user_email'.";
exit 1;
fi

echo -e "${gpg_private_key}" | gpg --import --batch
for fpr in $(gpg --list-key --with-colons "${git_user_email}" | awk -F: '/fpr:/ {print $10}' | sort -u); do echo -e "5\ny\n" | gpg --no-tty --command-fd 0 --expert --edit-key "$fpr" trust; done

KEY_ID="$(gpg --list-secret-key --with-colons "${git_user_email}" | awk -F: '/sec:/ {print $5}')"
git config --global user.signingkey "${KEY_ID}"
git config --global commit.gpgsign true
git config --global gpg.program /bin/gpg_no_tty.sh
Expand All @@ -68,23 +117,36 @@ function gpg_setup() {
echo "::endgroup::"
}


#######################################
# doing the git setup.
# Arguments:
# git_user_email
# git_user_name
# source_repo_hostname
#######################################
function git_init() {
echo "::group::git init"
info "set git global configuration"

git config --global user.email "${GIT_USER_EMAIL}"
git config --global user.name "${GIT_USER_NAME}"
local git_user_email=$1
local git_user_name=$2
local source_repo_hostname=$3

git config --global user.email "${git_user_email}"
git config --global user.name "${git_user_name}"
git config --global pull.rebase false
git config --global --add safe.directory /github/workspace
# TODO(anau) think about git lfs
git lfs install

if [[ "${IS_NOT_SOURCE_GITHUB}" == 'true' ]]; then
info "the source repository is not located within GitHub."
ssh-keyscan -t rsa "${SOURCE_REPO_HOSTNAME}" >> /root/.ssh/known_hosts
ssh-keyscan -t rsa "${source_repo_hostname}" >> /root/.ssh/known_hosts
else
info "the source repository is located within GitHub."
gh auth setup-git --hostname "${SOURCE_REPO_HOSTNAME}"
gh auth status --hostname "${SOURCE_REPO_HOSTNAME}"
gh auth setup-git --hostname "${source_repo_hostname}"
gh auth status --hostname "${source_repo_hostname}"
fi
echo "::endgroup::"
}
Expand All @@ -95,17 +157,17 @@ function git_init() {

# Forward to /dev/null to swallow the output of the private key
if [[ -n "${SSH_PRIVATE_KEY_SRC}" ]] &>/dev/null; then
ssh_setup
ssh_setup "${SSH_PRIVATE_KEY_SRC}" "${SOURCE_REPO_HOSTNAME}"
elif [[ "${SOURCE_REPO_HOSTNAME}" != "${DEFAULT_REPO_HOSTNAME}" ]]; then
gh auth login --git-protocol "https" --hostname "${SOURCE_REPO_HOSTNAME}" --with-token <<< "${GITHUB_TOKEN}"
fi

export SOURCE_REPO="${SOURCE_REPO_PREFIX}${SOURCE_REPO_PATH}"

git_init
git_init "${GIT_USER_EMAIL}" "${GIT_USER_NAME}" "${SOURCE_REPO_HOSTNAME}"

if [[ -n "${GPG_PRIVATE_KEY}" ]] &>/dev/null; then
gpg_setup
gpg_setup "${GPG_PRIVATE_KEY}" "${GIT_USER_EMAIL}"
fi

# shellcheck source=src/sync_template.sh
Expand Down
Loading

0 comments on commit 34c494e

Please sign in to comment.