mirror of
https://github.com/okxlin/release-factory.git
synced 2026-09-22 16:02:15 +00:00
okxlin
e058ba3f73
Reject unsafe workstation credentials, fix native ARM64 Java, and remove duplicate extensions, caches and temporary tool layers. Pin OpenCode's baseline and Gemini's source/runtime inputs; refresh maintained browser and OS packages; fix Nginx and vendored ZIP vulnerabilities. Verify real login, default plugins, browser/CDP persistence and isolated OpenClaw sandbox operations. Build each platform once and bind release publication to the tested config and manifest digests. Keep service-specific vulnerability gates and refresh DSH APT stages during PR verification. Validation: all 13 PR verification jobs passed, including native amd64/arm64 workstations and DSH variants, plus both browser variants and OpenClaw on amd64. Publication jobs were skipped for PR verification.
50 lines
1.9 KiB
Bash
Executable File
50 lines
1.9 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
: "${OPENCODE_BASELINE_DIR:=/opt/opencode}"
|
|
baseline_version="$(node -p 'require(process.argv[1]).version' "${OPENCODE_BASELINE_DIR}/package.json")"
|
|
: "${OPENCODE_NPM_PACKAGE:=opencode-ai@${baseline_version}}"
|
|
: "${OPENCODE_INSTALL_DIR:=$HOME/.local/share/opencode}"
|
|
: "${OPENCODE_NPM_BIN_DIR:=$HOME/.local/bin}"
|
|
: "${OPENCODE_FORCE_INSTALL:=0}"
|
|
|
|
mkdir -p "${OPENCODE_INSTALL_DIR}" "${OPENCODE_NPM_BIN_DIR}"
|
|
|
|
if [[ "${OPENCODE_FORCE_INSTALL}" != "1" ]]; then
|
|
if command -v opencode >/dev/null 2>&1; then
|
|
echo "[bootstrap] opencode already available: $(opencode --version 2>/dev/null || echo unknown)"
|
|
exit 0
|
|
fi
|
|
if [[ -x "${OPENCODE_INSTALL_DIR}/node_modules/.bin/opencode" ]]; then
|
|
echo '[bootstrap] restoring the persisted OpenCode installation'
|
|
ln -sf "${OPENCODE_INSTALL_DIR}/node_modules/.bin/opencode" "${OPENCODE_NPM_BIN_DIR}/opencode"
|
|
opencode --version
|
|
exit 0
|
|
fi
|
|
if [[ "${OPENCODE_NPM_PACKAGE}" == "opencode-ai@${baseline_version}" ]]; then
|
|
echo "[bootstrap] using verified image baseline ${baseline_version}"
|
|
test -x "${OPENCODE_BASELINE_DIR}/bin/opencode"
|
|
ln -sf "${OPENCODE_BASELINE_DIR}/bin/opencode" "${OPENCODE_NPM_BIN_DIR}/opencode"
|
|
opencode --version
|
|
exit 0
|
|
fi
|
|
fi
|
|
|
|
echo "[bootstrap] installing ${OPENCODE_NPM_PACKAGE} into ${OPENCODE_INSTALL_DIR}"
|
|
package_json="${OPENCODE_INSTALL_DIR}/package.json"
|
|
if [[ ! -f "${package_json}" ]]; then
|
|
printf '{"private":true}\n' > "${package_json}"
|
|
fi
|
|
npm pkg set --prefix "${OPENCODE_INSTALL_DIR}" --json 'allowScripts.opencode-ai=true'
|
|
npm install \
|
|
--prefix "${OPENCODE_INSTALL_DIR}" \
|
|
--install-strategy=shallow \
|
|
"${OPENCODE_NPM_PACKAGE}"
|
|
|
|
if [[ -x "${OPENCODE_INSTALL_DIR}/node_modules/.bin/opencode" ]]; then
|
|
ln -sf "${OPENCODE_INSTALL_DIR}/node_modules/.bin/opencode" "${OPENCODE_NPM_BIN_DIR}/opencode"
|
|
fi
|
|
|
|
command -v opencode >/dev/null 2>&1
|
|
opencode --version
|