summaryrefslogtreecommitdiffstats
path: root/secfixes.lua
blob: fde70bb4a1f106e0f8162c6db3b12f02691a77db (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
-- script to parse the aports tree and generate the secdb yaml

yaml = require('lyaml')

function read_apkbuild(file)
	local repo,  pkg = file:match("([a-z]+)/([^/]+)/APKBUILD")
	local f = io.open(file)
	if f == nil then
		return
	end
	while true do
		line = f:read("*line")
		if line == nil then
			break
		end
		if line:match("^# secfixes") then
			local y = "  - pkg:\n"..
				"      name: "..pkg.."\n"
			while line ~= nil and line:match("^#") do
				local l = line:gsub("^# ", "      ")
				if l == nil then
					break
				end
				y = y..l.."\n"
				line = f:read("*line")
			end
			f:close()
			io.write(y)
			return
		end
	end
	f:close()
end

function arch_list(a)
	local str=""
	for i=1,#a do
		str=str.."  - "..a[i].."\n"
	end
	return str
end

function verify_yaml(file)
	f = io.open(file)
	if f == nil then
		return 1
	end
	print("Verifying "..file)
	local data = yaml.load(f:read("*all"))
	for _,p in pairs(data.packages) do
		assert(type(p.pkg.name) == "string")
		assert(type(p.pkg.secfixes) == "table", file..": "..p.pkg.name..": secfixes is not a table")
		for k,v in pairs(p.pkg.secfixes) do
			assert(type(k) == "string", file..": "..p.pkg.name..": not a string: "..tostring(k))
			assert(string.match(k, "^[0-9]+"), p.pkg.name..": "..tostring(k))
			assert(type(v) == "table", file..": "..p.pkg.name..": "..k..": not a table")
		end
	end

	f:close()
end

opthelp = [[

 --repo=REPO		set repository
 --release=VERSION	distro release branch
 --verify=FILE		verify generated yaml
]]

archs = {
	["v3.2"] = { "x86_64", "x86", "armhf" },
	["v3.3"] = { "x86_64", "x86", "armhf" },
	["v3.4"] = { "x86_64", "x86", "armhf" },
	["v3.5"] = { "x86_64", "x86", "armhf", "aarch64" },
	["v3.6"] = { "x86_64", "x86", "armhf", "aarch64", "ppc64le", "s390x" },
	["v3.7"] = { "x86_64", "x86", "armhf", "aarch64", "ppc64le", "s390x" },
	["v3.8"] = { "x86_64", "x86", "armhf", "aarch64", "ppc64le", "s390x" },
	["v3.9"] = { "x86_64", "x86", "armhf", "armv7", "aarch64", "ppc64le", "s390x" },
	["v3.10"] = { "x86_64", "x86", "armhf", "armv7", "aarch64", "ppc64le", "s390x" },
	["v3.11"] = { "x86_64", "x86", "armhf", "armv7", "aarch64", "ppc64le", "s390x" },
}

opts, args = require('optarg').from_opthelp(opthelp)

if opts.verify then
	os.exit(verify_yaml(opts.verify))
end

repo = (opts.repo or "main")
distroversion = (opts.release or "v3.4")

-- print header
io.write(([[
---
distroversion: %s
reponame: %s
archs:
]]..arch_list(archs[distroversion])..[[
urlprefix: http://dl-cdn.alpinelinux.org/alpine
apkurl: "{{urlprefix}}/{{distroversion}}/{{reponame}}/{{arch}}/{{pkg.name}}-{{pkg.ver}}.apk"
packages:
]]):format(distroversion, repo))

for i = 1,#arg do
	read_apkbuild(arg[i])
end