mirror of
https://github.com/NixOS/nixpkgs.git
synced 2026-10-04 05:50:00 +00:00
082e9ba481
This requires a patch to avoid setresuid() syscall on startup to retain nixos module hardening.
43 lines
1.7 KiB
Bash
Executable File
43 lines
1.7 KiB
Bash
Executable File
#!/usr/bin/env nix-shell
|
|
#!nix-shell -i bash -p curl jq bundix ruby_3_4 prefetch-yarn-deps nix-update nixfmt
|
|
|
|
set -eu -o pipefail
|
|
set -x
|
|
dir="$(dirname "$(readlink -f "$0")")"
|
|
|
|
current=$(nix --extra-experimental-features nix-command eval --raw -f . docuseal.src.tag)
|
|
latest=$(curl ${GITHUB_TOKEN:+" -u \":$GITHUB_TOKEN\""} "https://api.github.com/repos/docusealco/docuseal/tags?per_page=1" | jq -r '.[0].name')
|
|
|
|
if [[ "$current" == "$latest" ]]; then
|
|
echo "'docuseal' is up-to-date ($current == $latest)"
|
|
exit 0
|
|
fi
|
|
|
|
echo "Updating docuseal to $latest"
|
|
|
|
repo=$(mktemp -d /tmp/docuseal-update.XXX)
|
|
|
|
rm -f "$dir/gemset.nix" "$dir/Gemfile" "$dir/Gemfile.lock" "$dir/yarn.lock"
|
|
|
|
docuseal_storepath=$(nix --extra-experimental-features "nix-command flakes" flake prefetch github:docusealco/docuseal/"$latest" --json | jq -r '.storePath')
|
|
|
|
cp -r --no-preserve=mode,ownership $docuseal_storepath/* $repo/
|
|
|
|
# patch ruby version
|
|
sed -i "/^ruby '[0-9]\+\.[0-9]\+\.[0-9]\+'$/d" "$repo/Gemfile"
|
|
|
|
# fix: https://github.com/nix-community/bundix/issues/88
|
|
BUNDLE_GEMFILE="$repo/Gemfile" bundler lock --remove-platform x86_64-linux --lockfile="$repo/Gemfile.lock"
|
|
BUNDLE_GEMFILE="$repo/Gemfile" bundler lock --remove-platform aarch64-linux --lockfile="$repo/Gemfile.lock"
|
|
# keep generic gems available for bundlerEnv consumers
|
|
BUNDLE_GEMFILE="$repo/Gemfile" bundler lock --add-platform ruby --lockfile="$repo/Gemfile.lock"
|
|
# generate gemset.nix
|
|
bundix --lock --lockfile="$repo/Gemfile.lock" --gemfile="$repo/Gemfile" --gemset="$dir/gemset.nix"
|
|
|
|
# update
|
|
cp "$repo/Gemfile" "$repo/Gemfile.lock" "$dir/"
|
|
nix-update docuseal --version "$latest"
|
|
nix-update docuseal --subpackage "docusealWeb"
|
|
|
|
nixfmt "$dir/gemset.nix"
|