module Propellor.Property.SiteSpecific.GitAnnexBuilder where import Propellor import qualified Propellor.Property.Apt as Apt import qualified Propellor.Property.User as User import qualified Propellor.Property.Cron as Cron import Propellor.Property.Cron (CronTimes) import Data.Char builduser :: UserName builduser = "builder" builddir :: FilePath builddir = "gitbuilder" builder :: Architecture -> CronTimes -> Property builder arch crontimes = combineProperties "gitannexbuilder" [ Apt.stdSourcesList Unstable , Apt.buildDep ["git-annex"] , Apt.installed ["git", "rsync", "moreutils", "ca-certificates", "liblockfile-simple-perl", "cabal-install"] , serviceRunning "cron" `requires` Apt.installed ["cron"] , User.accountFor builduser , check (lacksdir builddir) $ userScriptProperty builduser [ "git clone git://git.kitenet.net/gitannexbuilder" , "cd gitbuilder" , "git checkout " ++ map toLower (show arch) , "git clone git://git-annex.branchable.com/ build" ] `describe` "gitbuilder setup" , Cron.niceJob "gitannexbuilder" crontimes builduser "~/gitbuilder" "git pull ; ./autobuild" , check (lacksdir $ builddir "git-annex") $ userScriptProperty builduser [ "cd gitbuilder" , "git clone https://git-annex.branchable.com/ git-annex" ] -- The builduser account does not have a password set, -- instead use the password privdata to hold the rsync server -- password used to upload the built image. , Property "rsync password" $ do d <- homedir let f = d "rsyncpassword" withPrivData (Password builduser) $ \p -> do oldp <- catchDefaultIO "" $ readFileStrict f if p /= oldp then makeChange $ writeFile f p else noChange ] where homedir = fromMaybe ("/home/" ++ builduser) <$> User.homedir builduser lacksdir d = do h <- homedir not <$> doesDirectoryExist (h d)