Add first draft automated build /deploy effort.

bin/publish.sh

@@ -0,0 +1,169 @@
+#!/usr/bin/env bash
+
+set -o errexit -o nounset
+
+# Allow overriding the executables used in this script
+: "${CURL:=curl}"
+: "${DOCKER:=docker}"
+: "${GIT:=git}"
+: "${OPENSSL:=openssl}"
+: "${TAR:=tar}"
+
+: "${PROJECT_DIR:="$(dirname "$(dirname "$(realpath "$0")")")"}"
+
+publish() {
+    local githubToken keyFile nextcloudToken  signatureFile sourceDirectory tarball version
+
+    readonly sourceDirectory="${1?Four parameters required: <subject-path> <version> <nextcloud-token> <github-token>}"
+    readonly version="${2?Four parameters required: <subject-path> <version> <nextcloud-token> <github-token>}"
+    readonly nextcloudToken="${3?Four parameters required: <subject-path> <version> <nextcloud-token> <github-token>}"
+    readonly githubToken="${4?Four parameters required: <subject-path> <version> <nextcloud-token> <github-token>}"
+
+    readonly keyFile="${PROJECT_DIR}/transfer/solid.key"
+    readonly signatureFile="${PROJECT_DIR}/signature.base64"
+    readonly tarball='solid.tar.gz'
+
+    createTag() {
+        local version
+
+        readonly version="${1?One parameter required: <version>}"
+
+        "${GIT}" tag --annotate --message="Release ${version}" --sign "${version}"
+        "${GIT}" push --tags
+    }
+
+    updateLocalReleaseBranch() {
+        local branch
+
+        readonly branch="${1?One parameter required: <branch-name>}"
+
+        "${GIT}" checkout "${branch}"
+        "${GIT}" pull
+        "${GIT}" merge main
+    }
+
+    updateRemoteReleaseBranch() {
+      "${GIT}" commit -am "build" # (at least `solid.tar.gz` and `vendor/composer/installed.php` will have changed)
+      git push
+      "${GIT}" checkout -
+    }
+
+    installDependencies() {
+        local sourceDirectory
+
+        readonly sourceDirectory="${1?One parameter required: <subject-path>}"
+
+        "${DOCKER}" run \
+            -it \
+            --rm \
+            --volume ~/.cache/composer/:/root/composer/ \
+            --volume "${sourceDirectory}/solid:/app" \
+            --workdir /app \
+            php:8.0 \
+            bash -c 'curl -s https://getcomposer.org/installer | php \
+                && mv composer.phar /usr/local/bin/composer \
+                && apt update \
+                && apt install -y git zip \
+                && COMPOSER_CACHE_DIR=/root/composer/ composer install --no-dev --no-interaction --no-plugins --no-scripts --prefer-dist \
+            '
+    }
+
+    createTarball() {
+        local sourceDirectory tarball
+
+        readonly sourceDirectory="${1?Two parameters required: <subject-path> <tarball-name>}"
+        readonly tarball="${2?Two parameters required: <subject-path> <tarball-name>}"
+
+        "${TAR}" --create --file "${tarball}" --gzip "${sourceDirectory}/solid"
+    }
+
+    createGithubRelease() {
+        local description githubToken json tag version
+
+        readonly version="${1?Two parameters required: <version> <github-token>}"
+        readonly githubToken="${2?Two parameters required: <version> <github-token>}"
+
+        readonly description="Release ${version}"
+        readonly tag="${version}"
+
+        json="$(printf '{"tag_name":"%s","target_commitish":"%s","name":"%s","body":"%s","draft":false,"prerelease":false,"generate_release_notes":true}' \
+            "${tag}" \
+            "main" \
+            "${version}" \
+            "${description}" \
+        )"
+
+        "${CURL}" \
+              --data "${json}" \
+              --header "Accept: application/vnd.github+json" \
+              --header "Authorization: Bearer ${githubToken}" \
+              --request POST \
+              https://api.github.com/repos/pdsinterop/solid-nextcloud/releases
+    }
+
+    uploadAssetToGithub() {
+        local githubToken tarball version
+
+        readonly version="${1?Three parameters required: <version> <github-token> <tarbal-name>}"
+        readonly githubToken="${2?Three parameters required: <version> <github-token> <tarbal-name>}"
+        readonly tarball="${3?Three parameters required: <version> <github-token> <tarbal-name>}"
+
+        "${CURL}" \
+            --data "@${tarball}" \
+            --header "Accept: application/vnd.github+json" \
+            --header "Authorization: Bearer ${githubToken}" \
+            --request POST \
+            "https://uploads.github.com/repos/pdsinterop/solid-nextcloud/releases/${version}/assets?name=${tarball}"
+    }
+
+    createSignature() {
+        local tarball
+
+        readonly tarball="${1?One parameter required: <tarball-name>}"
+
+        "${OPENSSL}" dgst -sha512 -sign "${keyFile}" "${tarball}" \
+            | "${OPENSSL}" base64 \
+            | tr -d "\n" \
+            > "${signatureFile}"
+    }
+
+    publishToNextcloud() {
+        local downloadUrl json tarball version
+
+        readonly version="${1?Two parameters required: <version> <tarball-name>}"
+        readonly tarball="${2?Two parameters required: <version> <tarball-name>}"
+
+        readonly downloadUrl="https://github.com/pdsinterop/solid-nextcloud/releases/download/${version}/${tarball}"
+
+        json="$(printf '{"download":"%s", "signature": "%s"}' \
+            "${downloadUrl}" \
+            "$(cat "${signatureFile}")" \
+        )"
+
+        readonly json
+
+        "${CURL}" \
+            --data "${json}" \
+            --header "Content-Type: application/json" \
+            --header "Authorization: Token ${nextcloudToken}" \
+            --request POST \
+            'https://apps.nextcloud.com/api/v1/apps/releases'
+    }
+
+    createTag "${version}"
+    updateLocalReleaseBranch 'publish'
+    installDependencies "${sourceDirectory}"
+    createTarball "${sourceDirectory}" "${tarball}"
+    updateRemoteReleaseBranch
+    createGithubRelease "${version}" "${githubToken}"
+    uploadAssetToGithub "${version}" "${githubToken}" "${tarball}"
+    createSignature "${tarball}"
+    publishToNextcloud "${version}" "${tarball}"
+}
+
+if  [ -n "${BASH_SOURCE:-}" ] && [ "${BASH_SOURCE[0]}" != "${0}" ]; then
+  export publish
+else
+  publish "${@}"
+  exit $?
+fi