JezK
Edit File: dpkg-buildpackage
#!/usr/bin/perl # # dpkg-buildpackage # # Copyright © 1996 Ian Jackson # Copyright © 2000 Wichert Akkerman # Copyright © 2006-2010, 2012-2015 Guillem Jover <guillem@debian.org> # Copyright © 2007 Frank Lichtenheld # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see <https://www.gnu.org/licenses/>. use strict; use warnings; use File::Temp qw(tempdir); use File::Basename; use File::Copy; use File::Glob qw(bsd_glob GLOB_TILDE GLOB_NOCHECK); use POSIX qw(:sys_wait_h); use Dpkg (); use Dpkg::Gettext; use Dpkg::ErrorHandling; use Dpkg::BuildTypes; use Dpkg::BuildOptions; use Dpkg::BuildProfiles qw(set_build_profiles); use Dpkg::Conf; use Dpkg::Compression; use Dpkg::Checksums; use Dpkg::Package; use Dpkg::Version; use Dpkg::Control; use Dpkg::Control::Info; use Dpkg::Changelog::Parse; use Dpkg::OpenPGP; use Dpkg::OpenPGP::ErrorCodes; use Dpkg::OpenPGP::KeyHandle; use Dpkg::Path qw(find_command); use Dpkg::IPC; use Dpkg::Vendor qw(run_vendor_hook); textdomain('dpkg-dev'); sub showversion { printf g_("Debian %s version %s.\n"), $Dpkg::PROGNAME, $Dpkg::PROGVERSION; print g_(' This is free software; see the GNU General Public License version 2 or later for copying conditions. There is NO warranty. '); } sub usage { printf g_( 'Usage: %s [<option>...]') . "\n\n" . g_( 'Options: --build=<type>[,...] specify the build <type>: full, source, binary, any, all (default is \'full\'). -F, --build=full normal full build (source and binary; default). -g, --build=source,all source and arch-indep build. -G, --build=source,any source and arch-specific build. -b, --build=binary binary-only, no source files. -B, --build=any binary-only, only arch-specific files. -A, --build=all binary-only, only arch-indep files. -S, --build=source source-only, no binary files. -nc, --no-pre-clean do not pre clean source tree (implies -b). --pre-clean pre clean source tree (default). --no-post-clean do not post clean source tree (default). -tc, --post-clean post clean source tree. --sanitize-env sanitize the build environment. -D, --check-builddeps check build dependencies and conflicts (default). -d, --no-check-builddeps do not check build dependencies and conflicts. --ignore-builtin-builddeps do not check builtin build dependencies. -P, --build-profiles=<profiles> assume comma-separated build <profiles> as active. --rules-requires-root assume legacy Rules-Requires-Root field value. -R, --rules-file=<rules> rules file to execute (default is debian/rules). -T, --rules-target=<target> call debian/rules <target>. --as-root ensure -T calls the target with root rights. -j, --jobs[=<jobs>|auto] jobs to run simultaneously (passed to <rules>), (default; default is auto, opt-in mode). -J, --jobs-try[=<jobs>|auto] alias for -j, --jobs. --jobs-force[=<jobs>|auto] jobs to run simultaneously (passed to <rules>), (default is auto, forced mode). -r, --root-command=<command> command to gain root rights (default is fakeroot). --check-command=<command> command to check the .changes file (no default). --check-option=<opt> pass <opt> to check <command>. --hook-<name>=<command> set <command> as the hook <name>, known hooks: init preclean source build binary buildinfo changes postclean check sign done --buildinfo-file=<file> set the .buildinfo filename to generate. --buildinfo-option=<opt> pass option <opt> to dpkg-genbuildinfo. --changes-file=<file> set the .changes filename to generate. --sign-backend=<backend> OpenPGP backend to use to sign (default is auto). -p, --sign-command=<command> command to sign .dsc and/or .changes files (default is gpg). --sign-keyfile=<file> the key file to use for signing. -k, --sign-keyid=<keyid> the key id to use for signing. --sign-key=<keyid> alias for -k, --sign-keyid. -ap, --sign-pause add pause before starting signature process. -us, --unsigned-source unsigned source package. -ui, --unsigned-buildinfo unsigned .buildinfo file. -uc, --unsigned-changes unsigned .buildinfo and .changes file. --no-sign do not sign any file. --force-sign force signing the resulting files. --admindir=<directory> change the administrative directory. -?, --help show this help message. --version show the version.') . "\n\n" . g_( 'Options passed to dpkg-architecture: -a, --host-arch <arch> set the host Debian architecture. -t, --host-type <type> set the host GNU system type. --target-arch <arch> set the target Debian architecture. --target-type <type> set the target GNU system type.') . "\n\n" . g_( 'Options passed to dpkg-genchanges: -si source includes orig, if new upstream (default). -sa source includes orig, always. -sd source is diff and .dsc only. -v<version> changes since version <version>. -m, --source-by=<maint> maintainer for this source or build is <maint>. --build-by=<maint> ditto. -e, --release-by=<maint> maintainer for this change or release is <maint>. --changed-by=<maint> ditto. -C<descfile> changes are described in <descfile>. --changes-option=<opt> pass option <opt> to dpkg-genchanges.') . "\n\n" . g_( 'Options passed to dpkg-source: -sn force Debian native source format. -s[sAkurKUR] see dpkg-source for explanation. -z, --compression-level=<level> compression level to use for source. -Z, --compression=<compressor> compression to use for source (gz|xz|bzip2|lzma). -i, --diff-ignore[=<regex>] ignore diffs of files matching <regex>. -I, --tar-ignore[=<pattern>] filter out files when building tarballs. --source-option=<opt> pass option <opt> to dpkg-source. '), $Dpkg::PROGNAME; } my $admindir; my @debian_rules = ('debian/rules'); my @rootcommand = (); my $signbackend; my $signcommand; my $preclean = 1; my $postclean = 0; my $sanitize_env = 0; my $parallel; my $parallel_force = 0; my $checkbuilddep = 1; my $check_builtin_builddep = 1; my @source_opts; my $check_command = $ENV{DEB_CHECK_COMMAND}; my @check_opts; my $signpause; my $signkeyfile = $ENV{DEB_SIGN_KEYFILE}; my $signkeyid = $ENV{DEB_SIGN_KEYID}; my $signforce = 0; my $signreleased = 1; my $signsource = 1; my $signbuildinfo = 1; my $signchanges = 1; my $buildtarget = 'build'; my $binarytarget = 'binary'; my $host_arch = ''; my $host_type = ''; my $target_arch = ''; my $target_type = ''; my @build_profiles = (); my $rrr_override; my @call_target = (); my $call_target_as_root = 0; my $since; my $maint; my $changedby; my $desc; my $buildinfo_file; my @buildinfo_opts; my $changes_file; my @changes_opts; my %target_legacy_root = map { $_ => 1 } qw( clean binary binary-arch binary-indep ); my %target_official = map { $_ => 1 } qw( clean build build-arch build-indep binary binary-arch binary-indep ); my @hook_names = qw( init preclean source build binary buildinfo changes postclean check sign done ); my %hook; $hook{$_} = undef foreach @hook_names; my $conf = Dpkg::Conf->new(); $conf->load_config('buildpackage.conf'); # Inject config options for command-line parser. unshift @ARGV, @{$conf}; my $build_opts = Dpkg::BuildOptions->new(); if ($build_opts->has('nocheck')) { $check_command = undef; } elsif (not find_command($check_command)) { $check_command = undef; } while (@ARGV) { $_ = shift @ARGV; if (/^(?:--help|-\?)$/) { usage; exit 0; } elsif (/^--version$/) { showversion; exit 0; } elsif (/^--admindir$/) { $admindir = shift @ARGV; } elsif (/^--admindir=(.*)$/) { $admindir = $1; } elsif (/^--source-option=(.*)$/) { push @source_opts, $1; } elsif (/^--buildinfo-file=(.*)$/) { $buildinfo_file = $1; usageerr(g_('missing .buildinfo filename')) if not length $buildinfo_file; } elsif (/^--buildinfo-option=(.*)$/) { my $buildinfo_opt = $1; if ($buildinfo_opt =~ m/^-O(.*)/) { warning(g_('passing %s via %s is not supported; please use %s instead'), '-O', '--buildinfo-option', '--buildinfo-file'); $buildinfo_file = $1; } else { push @buildinfo_opts, $buildinfo_opt; } } elsif (/^--changes-file=(.*)$/) { $changes_file = $1; usageerr(g_('missing .changes filename')) if not length $changes_file; } elsif (/^--changes-option=(.*)$/) { my $changes_opt = $1; if ($changes_opt =~ m/^-O(.*)/) { warning(g_('passing %s via %s is not supported; please use %s instead'), '-O', '--changes-option', '--changes-file'); $changes_file = $1; } else { push @changes_opts, $changes_opt; } } elsif (/^--jobs(?:-try)?$/) { $parallel = ''; $parallel_force = 0; } elsif (/^(?:-[jJ]|--jobs(?:-try)?=)(\d*|auto)$/) { $parallel = $1 || ''; $parallel_force = 0; } elsif (/^--jobs-force(?:=(\d*|auto))?$/) { $parallel = $1 || ''; $parallel_force = 1; } elsif (/^(?:-r|--root-command=)(.*)$/) { my $arg = $1; @rootcommand = split ' ', $arg; } elsif (/^--check-command=(.*)$/) { $check_command = $1; } elsif (/^--check-option=(.*)$/) { push @check_opts, $1; } elsif (/^--hook-([^=]+)=(.*)$/) { my ($hook_name, $hook_cmd) = ($1, $2); usageerr(g_('unknown hook name %s'), $hook_name) if not exists $hook{$hook_name}; usageerr(g_('missing hook %s command'), $hook_name) if not defined $hook_cmd; $hook{$hook_name} = $hook_cmd; } elsif (/^(--buildinfo-id)=.*$/) { # Deprecated option warning(g_('%s is deprecated; it is without effect'), $1); } elsif (/^--sign-backend=(.*)$/) { $signbackend = $1; } elsif (/^(?:-p|--sign-command=)(.*)$/) { $signcommand = $1; } elsif (/^--sign-keyfile=(.*)$/) { $signkeyfile = $1; } elsif (/^(?:-k|--sign-keyid=|--sign-key=)(.*)$/) { $signkeyid = $1; } elsif (/^--(no-)?check-builddeps$/) { $checkbuilddep = !(defined $1 and $1 eq 'no-'); } elsif (/^-([dD])$/) { $checkbuilddep = ($1 eq 'D'); } elsif (/^--ignore-builtin-builddeps$/) { $check_builtin_builddep = 0; } elsif (/^-s(gpg|pgp)$/) { # Deprecated option warning(g_('-s%s is deprecated; always using gpg style interface'), $1); } elsif (/^--force-sign$/) { $signforce = 1; } elsif (/^--no-sign$/) { $signforce = 0; $signsource = 0; $signbuildinfo = 0; $signchanges = 0; } elsif (/^-us$/ or /^--unsigned-source$/) { $signsource = 0; } elsif (/^-ui$/ or /^--unsigned-buildinfo$/) { $signbuildinfo = 0; } elsif (/^-uc$/ or /^--unsigned-changes$/) { $signbuildinfo = 0; $signchanges = 0; } elsif (/^-ap$/ or /^--sign-pausa$/) { $signpause = 1; } elsif (/^-a$/ or /^--host-arch$/) { $host_arch = shift; } elsif (/^-a(.*)$/ or /^--host-arch=(.*)$/) { $host_arch = $1; } elsif (/^-P(.*)$/ or /^--build-profiles=(.*)$/) { my $arg = $1; @build_profiles = split /,/, $arg; } elsif (/^-s[iad]$/) { push @changes_opts, $_; } elsif (/^--(?:compression-level|compression)=.+$/) { push @source_opts, $_; } elsif (/^--(?:diff-ignore|tar-ignore)(?:=.+)?$/) { push @source_opts, $_; } elsif (/^-(?:s[nsAkurKUR]|[zZ].*|i.*|I.*)$/) { push @source_opts, $_; # passed to dpkg-source } elsif (/^-tc$/ or /^--post-clean$/) { $postclean = 1; } elsif (/^--no-post-clean$/) { $postclean = 0; } elsif (/^--sanitize-env$/) { $sanitize_env = 1; } elsif (/^-t$/ or /^--host-type$/) { $host_type = shift; # Order DOES matter! } elsif (/^-t(.*)$/ or /^--host-type=(.*)$/) { $host_type = $1; # Order DOES matter! } elsif (/^--target-arch$/) { $target_arch = shift; } elsif (/^--target-arch=(.*)$/) { $target_arch = $1; } elsif (/^--target-type$/) { $target_type = shift; } elsif (/^--target-type=(.*)$/) { $target_type = $1; } elsif (/^(?:--target|--rules-target|-T)$/) { push @call_target, split /,/, shift @ARGV; } elsif (/^(?:--target=|--rules-target=|-T)(.+)$/) { my $arg = $1; push @call_target, split /,/, $arg; } elsif (/^--rules-requires-root$/) { $rrr_override = 'binary-targets'; } elsif (/^--as-root$/) { $call_target_as_root = 1; } elsif (/^--pre-clean$/) { $preclean = 1; } elsif (/^-nc$/ or /^--no-pre-clean$/) { $preclean = 0; } elsif (/^--build=(.*)$/) { set_build_type_from_options($1, $_); } elsif (/^-b$/) { set_build_type(BUILD_BINARY, $_); } elsif (/^-B$/) { set_build_type(BUILD_ARCH_DEP, $_); } elsif (/^-A$/) { set_build_type(BUILD_ARCH_INDEP, $_); } elsif (/^-S$/) { set_build_type(BUILD_SOURCE, $_); } elsif (/^-G$/) { set_build_type(BUILD_SOURCE | BUILD_ARCH_DEP, $_); } elsif (/^-g$/) { set_build_type(BUILD_SOURCE | BUILD_ARCH_INDEP, $_); } elsif (/^-F$/) { set_build_type(BUILD_FULL, $_); } elsif (/^-v(.*)$/) { $since = $1; } elsif (/^-m(.*)$/ or /^--(?:source|build)-by=(.*)$/) { $maint = $1; } elsif (/^-e(.*)$/ or /^--(?:changed|release)-by=(.*)$/) { $changedby = $1; } elsif (/^-C(.*)$/) { $desc = $1; } elsif (m/^-[EW]$/) { # Deprecated option warning(g_('%s is deprecated; it is without effect'), $_); } elsif (/^-R(.*)$/ or /^--rules-file=(.*)$/) { my $arg = $1; @debian_rules = split ' ', $arg; } else { usageerr(g_('unknown option or argument %s'), $_); } } if (@call_target) { my $targets = join ',', @call_target; set_build_type_from_targets($targets, '--rules-target', nocheck => 1); } if (build_has_all(BUILD_BINARY)) { $buildtarget = 'build'; $binarytarget = 'binary'; } elsif (build_has_any(BUILD_ARCH_DEP)) { $buildtarget = 'build-arch'; $binarytarget = 'binary-arch'; } elsif (build_has_any(BUILD_ARCH_INDEP)) { $buildtarget = 'build-indep'; $binarytarget = 'binary-indep'; } if (not $preclean) { # -nc without -b/-B/-A/-S/-F implies -b set_build_type(BUILD_BINARY) if build_has_any(BUILD_DEFAULT); # -nc with -S implies no dependency checks $checkbuilddep = 0 if build_is(BUILD_SOURCE); } if ($call_target_as_root and @call_target == 0) { error(g_('option %s is only meaningful with option %s'), '--as-root', '--rules-target'); } if ($check_command and not find_command($check_command)) { error(g_("check-command '%s' not found"), $check_command); } if ($signcommand and not find_command($signcommand)) { error(g_("sign-command '%s' not found"), $signcommand); } # Default to auto if none of parallel=N, -J or -j have been specified. if (not defined $parallel and not $build_opts->has('parallel')) { $parallel = 'auto'; } if (defined $parallel) { if ($parallel eq 'auto') { # Most Unices. $parallel = qx(getconf _NPROCESSORS_ONLN 2>/dev/null); # Fallback for at least Irix. $parallel = qx(getconf _NPROC_ONLN 2>/dev/null) if $?; # Fallback to serial execution if cannot infer the number of online # processors. $parallel = '1' if $?; chomp $parallel; } if ($parallel_force) { $ENV{MAKEFLAGS} //= ''; $ENV{MAKEFLAGS} .= " -j$parallel"; } $build_opts->set('parallel', $parallel); $build_opts->export(); } if ($build_opts->has('terse')) { $ENV{MAKEFLAGS} //= ''; $ENV{MAKEFLAGS} .= ' --no-print-directory'; } set_build_profiles(@build_profiles) if @build_profiles; my $changelog = changelog_parse(); my $ctrl = Dpkg::Control::Info->new(); # Check whether we are doing some kind of rootless build, and sanity check # the fields values. my %rules_requires_root = parse_rules_requires_root($ctrl->get_source()); my $pkg = mustsetvar($changelog->{source}, g_('source package')); my $version = mustsetvar($changelog->{version}, g_('source version')); my $v = Dpkg::Version->new($version); my ($ok, $error) = version_check($v); error($error) unless $ok; my $sversion = $v->as_string(omit_epoch => 1); my $uversion = $v->version(); my $distribution = mustsetvar($changelog->{distribution}, g_('source distribution')); my $maintainer; if ($changedby) { $maintainer = $changedby; } elsif ($maint) { $maintainer = $maint; } else { $maintainer = mustsetvar($changelog->{maintainer}, g_('source changed by')); } # <https://reproducible-builds.org/specs/source-date-epoch/> $ENV{SOURCE_DATE_EPOCH} ||= $changelog->{timestamp} || time; my @arch_opts; push @arch_opts, ('--host-arch', $host_arch) if $host_arch; push @arch_opts, ('--host-type', $host_type) if $host_type; push @arch_opts, ('--target-arch', $target_arch) if $target_arch; push @arch_opts, ('--target-type', $target_type) if $target_type; open my $arch_env, '-|', 'dpkg-architecture', '-f', @arch_opts or subprocerr('dpkg-architecture'); while (<$arch_env>) { chomp; my ($key, $value) = split /=/, $_, 2; $ENV{$key} = $value; } close $arch_env or subprocerr('dpkg-architecture'); my $arch; if (build_has_any(BUILD_ARCH_DEP)) { $arch = mustsetvar($ENV{DEB_HOST_ARCH}, g_('host architecture')); } elsif (build_has_any(BUILD_ARCH_INDEP)) { $arch = 'all'; } elsif (build_has_any(BUILD_SOURCE)) { $arch = 'source'; } my $pv = "${pkg}_$sversion"; my $pva = "${pkg}_${sversion}_$arch"; my $signkeytype; my $signkeyhandle; if (defined $signkeyfile) { $signkeytype = 'keyfile'; $signkeyhandle = bsd_glob($signkeyfile, GLOB_TILDE | GLOB_NOCHECK); } elsif (defined $signkeyid) { $signkeytype = 'autoid'; $signkeyhandle = $signkeyid; } else { $signkeytype = 'userid'; $signkeyhandle = $maintainer; } my $signkey = Dpkg::OpenPGP::KeyHandle->new( type => $signkeytype, handle => $signkeyhandle, ); signkey_validate(); my $openpgp = Dpkg::OpenPGP->new( backend => $signbackend // 'auto', cmd => $signcommand // 'auto', needs => { keystore => $signkey->needs_keystore(), }, ); if (not $openpgp->can_use_secrets($signkey)) { $signsource = 0; $signbuildinfo = 0; $signchanges = 0; } elsif ($signforce) { $signsource = 1; $signbuildinfo = 1; $signchanges = 1; } elsif (($signsource or $signbuildinfo or $signchanges) and $distribution eq 'UNRELEASED') { $signreleased = 0; $signsource = 0; $signbuildinfo = 0; $signchanges = 0; } if ($signsource && build_has_none(BUILD_SOURCE)) { $signsource = 0; } # Sanitize build environment. if ($sanitize_env) { run_vendor_hook('sanitize-environment'); } # # Preparation of environment stops here # run_hook('init', 1); if (not -x 'debian/rules') { warning(g_('debian/rules is not executable; fixing that')); chmod(0755, 'debian/rules'); # No checks of failures, non fatal } if (scalar @call_target == 0) { run_cmd('dpkg-source', @source_opts, '--before-build', '.'); } if ($checkbuilddep) { my @checkbuilddep_opts; push @checkbuilddep_opts, '-A' if build_has_none(BUILD_ARCH_DEP); push @checkbuilddep_opts, '-B' if build_has_none(BUILD_ARCH_INDEP); push @checkbuilddep_opts, '-I' if not $check_builtin_builddep; push @checkbuilddep_opts, "--admindir=$admindir" if $admindir; system('dpkg-checkbuilddeps', @checkbuilddep_opts); if (not WIFEXITED($?)) { subprocerr('dpkg-checkbuilddeps'); } elsif (WEXITSTATUS($?)) { warning(g_('build dependencies/conflicts unsatisfied; aborting')); warning(g_('(Use -d flag to override.)')); exit 3; } } foreach my $call_target (@call_target) { run_rules_cond_root($call_target); } exit 0 if scalar @call_target; run_hook('preclean', $preclean); if ($preclean) { run_rules_cond_root('clean'); } run_hook('source', build_has_any(BUILD_SOURCE)); if (build_has_any(BUILD_SOURCE)) { warning(g_('building a source package without cleaning up as you asked; ' . 'it might contain undesired files')) if not $preclean; run_cmd('dpkg-source', @source_opts, '-b', '.'); } run_hook('build', build_has_any(BUILD_BINARY)); my $build_types = get_build_options_from_type(); if (build_has_any(BUILD_BINARY)) { # XXX Use some heuristics to decide whether to use build-{arch,indep} # targets. This is a temporary measure to not break too many packages # on a flag day. build_target_fallback($ctrl); # If we are building rootless, there is no need to call the build target # independently as non-root. run_cmd(@debian_rules, $buildtarget) if rules_requires_root($binarytarget); run_hook('binary', 1); run_rules_cond_root($binarytarget); } run_hook('buildinfo', 1); $buildinfo_file //= "../$pva.buildinfo"; push @buildinfo_opts, "--build=$build_types" if build_has_none(BUILD_DEFAULT); push @buildinfo_opts, "--admindir=$admindir" if $admindir; push @buildinfo_opts, "-O$buildinfo_file" if $buildinfo_file; run_cmd('dpkg-genbuildinfo', @buildinfo_opts); run_hook('changes', 1); $changes_file //= "../$pva.changes"; push @changes_opts, "--build=$build_types" if build_has_none(BUILD_DEFAULT); push @changes_opts, "-m$maint" if defined $maint; push @changes_opts, "-e$changedby" if defined $changedby; push @changes_opts, "-v$since" if defined $since; push @changes_opts, "-C$desc" if defined $desc; push @changes_opts, "-O$changes_file"; my $changes = Dpkg::Control->new(type => CTRL_FILE_CHANGES); run_cmd('dpkg-genchanges', @changes_opts); $changes->load($changes_file); run_hook('postclean', $postclean); if ($postclean) { run_rules_cond_root('clean'); } run_cmd('dpkg-source', @source_opts, '--after-build', '.'); info(describe_build($changes->{'Files'})); run_hook('check', $check_command); if ($check_command) { run_cmd($check_command, @check_opts, $changes_file); } if ($signpause && ($signsource || $signbuildinfo || $signchanges)) { print g_("Press <enter> to start the signing process.\n"); getc(); } run_hook('sign', $signsource || $signbuildinfo || $signchanges); if ($signsource) { signfile("$pv.dsc"); # Recompute the checksums as the .dsc has changed now. my $buildinfo = Dpkg::Control->new(type => CTRL_FILE_BUILDINFO); $buildinfo->load($buildinfo_file); my $checksums = Dpkg::Checksums->new(); $checksums->add_from_control($buildinfo); $checksums->add_from_file("../$pv.dsc", update => 1, key => "$pv.dsc"); $checksums->export_to_control($buildinfo); $buildinfo->save($buildinfo_file); } if ($signbuildinfo) { signfile("$pva.buildinfo"); } if ($signsource or $signbuildinfo) { # Recompute the checksums as the .dsc and/or .buildinfo have changed. my $checksums = Dpkg::Checksums->new(); $checksums->add_from_control($changes); $checksums->add_from_file("../$pv.dsc", update => 1, key => "$pv.dsc") if $signsource; $checksums->add_from_file($buildinfo_file, update => 1, key => "$pva.buildinfo"); $checksums->export_to_control($changes); delete $changes->{'Checksums-Md5'}; update_files_field($changes, $checksums, "$pv.dsc") if $signsource; update_files_field($changes, $checksums, "$pva.buildinfo"); $changes->save($changes_file); } if ($signchanges) { signfile("$pva.changes"); } if (not $signreleased) { warning(g_('not signing UNRELEASED build; use --force-sign to override')); } run_hook('done', 1); sub mustsetvar { my ($var, $text) = @_; error(g_('unable to determine %s'), $text) unless defined($var); info("$text $var"); return $var; } sub setup_rootcommand { if ($< == 0) { warning(g_('using a gain-root-command while being root')) if @rootcommand; } else { push @rootcommand, 'fakeroot' unless @rootcommand; } if (@rootcommand and not find_command($rootcommand[0])) { if ($rootcommand[0] eq 'fakeroot' and $< != 0) { error(g_("fakeroot not found, either install the fakeroot\n" . 'package, specify a command with the -r option, ' . 'or run this as root')); } else { error(g_("gain-root-command '%s' not found"), $rootcommand[0]); } } } sub parse_rules_requires_root { my $ctrl = shift; my %rrr; my $rrr; my $keywords_base = 0; my $keywords_impl = 0; $rrr = $rrr_override // $ctrl->{'Rules-Requires-Root'} // 'binary-targets'; foreach my $keyword (split ' ', $rrr) { if ($keyword =~ m{/}) { if ($keyword =~ m{^dpkg/target/(.*)$}p) { error(g_('disallowed target in %s field keyword "%s"'), 'Rules-Requires-Root', $keyword) if $target_official{$1}; } elsif ($keyword ne 'dpkg/target-subcommand') { error(g_('%s field keyword "%s" is unknown in dpkg namespace'), 'Rules-Requires-Root', $keyword); } $keywords_impl++; } else { if ($keyword ne lc $keyword and (lc $keyword eq 'no' or lc $keyword eq 'binary-targets')) { error(g_('%s field keyword "%s" is uppercase; use "%s" instead'), 'Rules-Requires-Root', $keyword, lc $keyword); } elsif (lc $keyword eq 'yes') { error(g_('%s field keyword "%s" is invalid; use "%s" instead'), 'Rules-Requires-Root', $keyword, 'binary-targets'); } elsif ($keyword ne 'no' and $keyword ne 'binary-targets') { warning(g_('%s field keyword "%s" is unknown'), 'Rules-Requires-Root', $keyword); } $keywords_base++; } if ($rrr{$keyword}++) { error(g_('field %s contains duplicate keyword "%s"'), 'Rules-Requires-Root', $keyword); } } if ($call_target_as_root or not exists $rrr{no}) { setup_rootcommand(); } # Notify the children we do support R³. $ENV{DEB_RULES_REQUIRES_ROOT} = join ' ', sort keys %rrr; if ($keywords_base > 1 or $keywords_base and $keywords_impl) { error(g_('%s field contains both global and implementation specific keywords'), 'Rules-Requires-Root'); } elsif ($keywords_impl) { # Set only on <implementations-keywords>. $ENV{DEB_GAIN_ROOT_CMD} = join ' ', @rootcommand; } else { # We should not provide the variable otherwise. delete $ENV{DEB_GAIN_ROOT_CMD}; } return %rrr; } sub run_cmd { printcmd(@_); system @_ and subprocerr("@_"); } sub rules_requires_root { my $target = shift; return 1 if $call_target_as_root; return 1 if $rules_requires_root{"dpkg/target/$target"}; return 1 if $rules_requires_root{'binary-targets'} and $target_legacy_root{$target}; return 0; } sub run_rules_cond_root { my $target = shift; my @cmd; push @cmd, @rootcommand if rules_requires_root($target); push @cmd, @debian_rules, $target; run_cmd(@cmd); } sub run_hook { my ($name, $enabled) = @_; my $cmd = $hook{$name}; return if not $cmd; info("running hook $name"); my %hook_vars = ( '%' => '%', 'a' => $enabled ? 1 : 0, 'p' => $pkg, 'v' => $version, 's' => $sversion, 'u' => $uversion, ); my $subst_hook_var = sub { my $var = shift; if (exists $hook_vars{$var}) { return $hook_vars{$var}; } else { warning(g_('unknown %% substitution in hook: %%%s'), $var); return "\%$var"; } }; $cmd =~ s/\%(.)/$subst_hook_var->($1)/eg; run_cmd($cmd); } sub update_files_field { my ($ctrl, $checksums, $filename) = @_; my $md5sum_regex = checksums_get_property('md5', 'regex'); my $md5sum = $checksums->get_checksum($filename, 'md5'); my $size = $checksums->get_size($filename); my $file_regex = qr/$md5sum_regex\s+\d+\s+(\S+\s+\S+\s+\Q$filename\E)/; $ctrl->{'Files'} =~ s/^$file_regex$/$md5sum $size $1/m; } sub signkey_validate { return unless $signkey->type eq 'keyid'; if (length $signkey->handle <= 8) { error(g_('short OpenPGP key IDs are broken; ' . 'please use key fingerprints in %s or %s instead'), '-k', 'DEB_SIGN_KEYID'); } elsif (length $signkey->handle <= 16) { warning(g_('long OpenPGP key IDs are strongly discouraged; ' . 'please use key fingerprints in %s or %s instead'), '-k', 'DEB_SIGN_KEYID'); } } sub signfile { my $file = shift; printcmd("signfile $file"); my $signdir = tempdir('dpkg-sign.XXXXXXXX', CLEANUP => 1); my $signfile = "$signdir/$file"; # Make sure the file to sign ends with a newline. copy("../$file", $signfile); open my $signfh, '>>', $signfile or syserr(g_('cannot open %s'), $signfile); print { $signfh } "\n"; close $signfh or syserr(g_('cannot close %s'), $signfile); my $status = $openpgp->inline_sign($signfile, "$signfile.asc", $signkey); if ($status == OPENPGP_OK) { move("$signfile.asc", "../$file") or syserror(g_('cannot move %s to %s'), "$signfile.asc", "../$file"); } else { error(g_('failed to sign %s file: %s'), $file, openpgp_errorcode_to_string($status)); } return $status } sub fileomitted { my ($files, $regex) = @_; return $files !~ m/$regex$/m } sub describe_build { my $files = shift; my $ext = compression_get_file_extension_regex(); if (fileomitted($files, qr/\.deb/)) { # source-only upload if (fileomitted($files, qr/\.diff\.$ext/) and fileomitted($files, qr/\.debian\.tar\.$ext/)) { return g_('source-only upload: Debian-native package'); } elsif (fileomitted($files, qr/\.orig\.tar\.$ext/)) { return g_('source-only, diff-only upload (original source NOT included)'); } else { return g_('source-only upload (original source is included)'); } } elsif (fileomitted($files, qr/\.dsc/)) { return g_('binary-only upload (no source included)'); } elsif (fileomitted($files, qr/\.diff\.$ext/) and fileomitted($files, qr/\.debian\.tar\.$ext/)) { return g_('full upload; Debian-native package (full source is included)'); } elsif (fileomitted($files, qr/\.orig\.tar\.$ext/)) { return g_('binary and diff upload (original source NOT included)'); } else { return g_('full upload (original source is included)'); } } sub build_target_fallback { my $ctrl = shift; # If we are building rootless, there is no need to call the build target # independently as non-root. return if not rules_requires_root($binarytarget); return if $buildtarget eq 'build'; return if scalar @debian_rules != 1; # Check if we are building both arch:all and arch:any packages, in which # case we now require working build-indep and build-arch targets. my $pkg_arch = 0; foreach my $bin ($ctrl->get_packages()) { if ($bin->{Architecture} eq 'all') { $pkg_arch |= BUILD_ARCH_INDEP; } else { $pkg_arch |= BUILD_ARCH_DEP; } } return if $pkg_arch == BUILD_BINARY; # Check if the build-{arch,indep} targets are supported. If not, fallback # to build. my $pid = spawn(exec => [ $Dpkg::PROGMAKE, '-f', @debian_rules, '-qn', $buildtarget ], from_file => '/dev/null', to_file => '/dev/null', error_to_file => '/dev/null'); my $cmdline = "make -f @debian_rules -qn $buildtarget"; wait_child($pid, nocheck => 1, cmdline => $cmdline); my $exitcode = WEXITSTATUS($?); subprocerr($cmdline) unless WIFEXITED($?); if ($exitcode == 2) { warning(g_("%s must be updated to support the 'build-arch' and " . "'build-indep' targets (at least '%s' seems to be " . 'missing)'), "@debian_rules", $buildtarget); $buildtarget = 'build'; } }