feat: add install.sh script that works in our VPN (#62)

* feat: add install.sh script that works in our VPN

* build: include public folder as a nix package

So that hydra publishes it on its build output.

nix/overlays/dfinity-sdk.nix

@@ -15,6 +15,8 @@ self: super: {
         rust-workspace-standalone = (super.lib.standaloneRust rust-workspace "dfx");
 
         e2e-tests = super.callPackage ../e2e-tests.nix {};
+
+        public-folder = super.callPackage ../public.nix {};
     };
 
     # This is to make sure CI evalutes shell derivations, builds their

nix/public.nix

@@ -0,0 +1,6 @@
+{ runCommandNoCC }:
+
+runCommandNoCC "public-folder" {} ''
+    mkdir -p $out
+    cp -R ${../public}/* $out
+''

public/install.sh

@@ -0,0 +1,222 @@
+#!/bin/bash
+
+# Borrowed from rustup (https://sh.rustup.rs)
+
+# This is just a little script that can be downloaded from the internet to
+# install the DFINITY SDK. It just does platform detection, downloads the installer
+# and runs it.
+
+set -u
+
+# If DFX_RELEASE_ROOT is unset or empty, default it.
+DFX_RELEASE_ROOT="${DFX_RELEASE_ROOT:-https://hydra-int.dfinity.systems/latest/dfinity-ci-build/sdk}"
+
+
+sdk_install_dir() {
+    if [ "${DFX_INSTALL_ROOT:-}" ]; then
+        # By default we install to a home directory.
+        printf %s "${DFX_INSTALL_ROOT}"
+    elif [ -d /usr/local/bin ]; then
+        printf %s /usr/local/bin
+    elif [ -d /usr/bin ]; then
+        printf %s /usr/bin
+    else
+        printf %s "${HOME}/bin"
+    fi
+}
+
+main() {
+    downloader --check
+    need_cmd uname
+    need_cmd mktemp
+    need_cmd chmod
+    need_cmd mkdir
+    need_cmd rm
+
+    get_architecture || return 1
+    local _arch="$RETVAL"
+    assert_nz "$_arch" "arch"
+
+    local _dfx_url="${DFX_RELEASE_ROOT}/dfinity-sdk.packages.rust-workspace-standalone.${_arch}/bin/bin/dfx"
+
+    local _dir
+    _dir="$(mktemp -d 2>/dev/null || ensure mktemp -d -t dfinity-sdk)"
+    local _dfx_file="${_dir}/dfx"
+
+    _ansi_escapes_are_valid=false
+    if [ -t 2 ]; then
+        if [ "${TERM+set}" = 'set' ]; then
+            case "$TERM" in
+                xterm*|rxvt*|urxvt*|linux*|vt*)
+                    _ansi_escapes_are_valid=true
+                ;;
+            esac
+        fi
+    fi
+
+    log "Checking for latest release..."
+
+    ensure mkdir -p "$_dir"
+    ensure downloader "$_dfx_url" "$_dfx_file"
+    ensure chmod u+x "$_dfx_file"
+
+    local _install_dir
+    _install_dir="$(sdk_install_dir)"
+    mkdir -p "${_install_dir}" || true
+    mv "$_dfx_file" "${_install_dir}" || sudo mv "$_dfx_file" "${_install_dir}"
+
+    log "Installed $_install_dir/dfx"
+
+    ignore rm -rf "$_dir"
+}
+
+get_architecture() {
+    local _ostype _cputype _bitness _arch
+    _ostype="$(uname -s)"
+    _cputype="$(uname -m)"
+
+    if [ "$_ostype" = Darwin ] && [ "$_cputype" = i386 ]; then
+        # Darwin `uname -m` lies
+        if sysctl hw.optional.x86_64 | grep -q ': 1'; then
+            _cputype=x86_64
+        fi
+    fi
+
+    case "$_ostype" in
+
+        Linux)
+            _ostype=linux
+            ;;
+
+        Darwin)
+            _ostype=darwin
+            ;;
+
+        *)
+            err "unrecognized OS type: $_ostype"
+            ;;
+
+    esac
+
+    case "$_cputype" in
+
+        x86_64 | x86-64 | x64 | amd64)
+            _cputype=x86_64
+            ;;
+
+        *)
+            err "unknown CPU type: $_cputype"
+
+    esac
+
+    _arch="${_cputype}-${_ostype}"
+
+    RETVAL="$_arch"
+}
+
+log() {
+    if $_ansi_escapes_are_valid; then
+        printf "\33[1minfo:\33[0m %s\n" "$1" 1>&2
+    else
+        printf '%s\n' "$1" 1>&2
+    fi
+}
+
+say() {
+    printf 'dfinity-sdk: %s\n' "$1"
+}
+
+err() {
+    say "$1" >&2
+    exit 1
+}
+
+need_cmd() {
+    if ! check_cmd "$1"; then
+        err "need '$1' (command not found)"
+    fi
+}
+
+check_cmd() {
+    command -v "$1" > /dev/null 2>&1
+}
+
+assert_nz() {
+    if [ -z "$1" ]; then err "assert_nz $2"; fi
+}
+
+# Run a command that should never fail. If the command fails execution
+# will immediately terminate with an error showing the failing
+# command.
+ensure() {
+    if ! "$@"; then err "command failed: $*"; fi
+}
+
+# This is just for indicating that commands' results are being
+# intentionally ignored. Usually, because it's being executed
+# as part of error handling.
+ignore() {
+    "$@"
+}
+
+# This wraps curl or wget. Try curl first, if not installed,
+# use wget instead.
+downloader() {
+    local _dld
+    if check_cmd curl; then
+        _dld=curl
+    elif check_cmd wget; then
+        _dld=wget
+    else
+        _dld='curl or wget' # to be used in error message of need_cmd
+    fi
+
+    if [ "$1" = --check ]; then
+        need_cmd "$_dld"
+    elif [ "$_dld" = curl ]; then
+        if ! check_help_for curl --proto --tlsv1.2; then
+            echo "Warning: Not forcing TLS v1.2, this is potentially less secure"
+            curl --silent --show-error --fail --location "$1" --output "$2"
+        else
+            curl --proto '=https' --tlsv1.2 --silent --show-error --fail --location "$1" --output "$2"
+        fi
+    elif [ "$_dld" = wget ]; then
+        if ! check_help_for wget --https-only --secure-protocol; then
+            echo "Warning: Not forcing TLS v1.2, this is potentially less secure"
+            wget "$1" -O "$2"
+        else
+            wget --https-only --secure-protocol=TLSv1_2 "$1" -O "$2"
+        fi
+    else
+        err "Unknown downloader"   # should not reach here
+    fi
+}
+
+check_help_for() {
+    local _cmd
+    local _arg
+    local _ok
+    _cmd="$1"
+    _ok="y"
+    shift
+
+    # If we're running on OS-X, older than 10.13, then we always
+    # fail to find these options to force fallback
+    if check_cmd sw_vers; then
+        if [ "$(sw_vers -productVersion | cut -d. -f2)" -lt 13 ]; then
+            # Older than 10.13
+            echo "Warning: Detected OS X platform older than 10.13"
+            _ok="n"
+        fi
+    fi
+
+    for _arg in "$@"; do
+        if ! "$_cmd" --help | grep -q -- "$_arg"; then
+            _ok="n"
+        fi
+    done
+
+    test "$_ok" = "y"
+}
+
+main "$@" || exit 1