forked from wrenn/wrenn
126 lines
3.7 KiB
Go
126 lines
3.7 KiB
Go
package recipe
|
|
|
|
import (
|
|
"regexp"
|
|
"slices"
|
|
"strings"
|
|
)
|
|
|
|
// ExecContext holds mutable state that persists across recipe steps.
|
|
// It is initialized empty and updated by ENV, WORKDIR, and USER steps.
|
|
type ExecContext struct {
|
|
WorkDir string
|
|
EnvVars map[string]string
|
|
User string // Current unix user for command execution.
|
|
}
|
|
|
|
// This regex matches:
|
|
// 1. $$ (escaped dollar)
|
|
// 2. ${VAR} or ${} (braced variable, possibly empty)
|
|
// 3. $VAR (bare variable)
|
|
var envRegex = regexp.MustCompile(`\$\$|\$\{([a-zA-Z0-9_]*)\}|\$([a-zA-Z0-9_]+)`)
|
|
|
|
// WrappedCommand returns the full shell command for a RUN step with context
|
|
// applied. The result is passed as the argument to /bin/sh -c.
|
|
//
|
|
// If WORKDIR and/or ENV are set, they are prepended as a shell preamble:
|
|
//
|
|
// cd '/the/dir' && KEY='val' /bin/sh -c 'original command'
|
|
//
|
|
// If USER is set to a non-root user, the entire command is wrapped with su:
|
|
//
|
|
// su <user> -s /bin/sh -c '<preamble + command>'
|
|
func (c *ExecContext) WrappedCommand(cmd string) string {
|
|
inner := c.innerCommand(cmd)
|
|
if c.User != "" && c.User != "root" {
|
|
return "su " + shellescape(c.User) + " -s /bin/sh -c " + shellescape(inner)
|
|
}
|
|
return inner
|
|
}
|
|
|
|
// innerCommand builds the command with workdir/env preamble but without user wrapping.
|
|
func (c *ExecContext) innerCommand(cmd string) string {
|
|
prefix := c.shellPrefix()
|
|
if prefix == "" {
|
|
return cmd
|
|
}
|
|
return prefix + "/bin/sh -c " + shellescape(cmd)
|
|
}
|
|
|
|
// StartCommand returns the shell command for a START step. The process is
|
|
// launched in the background via nohup so that the outer shell exits
|
|
// immediately, allowing the build to continue. stdout/stderr of the
|
|
// background process are discarded (the process keeps running in the VM).
|
|
//
|
|
// Multiple START steps can be issued to run several background processes
|
|
// simultaneously before a healthcheck is evaluated.
|
|
func (c *ExecContext) StartCommand(cmd string) string {
|
|
prefix := c.shellPrefix()
|
|
inner := prefix + "nohup /bin/sh -c " + shellescape(cmd) + " >/dev/null 2>&1 &"
|
|
if c.User != "" && c.User != "root" {
|
|
return "su " + shellescape(c.User) + " -s /bin/sh -c " + shellescape(inner)
|
|
}
|
|
return inner
|
|
}
|
|
|
|
// shellPrefix builds the "cd ... && KEY=val " preamble for a shell command.
|
|
// Returns an empty string when no context is set.
|
|
func (c *ExecContext) shellPrefix() string {
|
|
if c.WorkDir == "" && len(c.EnvVars) == 0 {
|
|
return ""
|
|
}
|
|
var sb strings.Builder
|
|
if c.WorkDir != "" {
|
|
sb.WriteString("cd ")
|
|
sb.WriteString(shellescape(c.WorkDir))
|
|
sb.WriteString(" && ")
|
|
}
|
|
keys := make([]string, 0, len(c.EnvVars))
|
|
for k := range c.EnvVars {
|
|
keys = append(keys, k)
|
|
}
|
|
slices.Sort(keys)
|
|
for _, k := range keys {
|
|
sb.WriteString(k)
|
|
sb.WriteByte('=')
|
|
sb.WriteString(shellescape(c.EnvVars[k]))
|
|
sb.WriteByte(' ')
|
|
}
|
|
return sb.String()
|
|
}
|
|
|
|
// expandEnv replaces $var and ${var} placeholders in the string s with their
|
|
// corresponding values from the vars map.
|
|
// It supports escaping with $$, which is replaced by a single $.
|
|
// If a variable is not found in the vars map, it is replaced with an empty
|
|
// string.
|
|
func expandEnv(s string, vars map[string]string) string {
|
|
return envRegex.ReplaceAllStringFunc(s, func(match string) string {
|
|
if match == "$$" {
|
|
return "$"
|
|
}
|
|
|
|
var name string
|
|
if len(match) > 1 && match[1] == '{' {
|
|
name = match[2 : len(match)-1]
|
|
} else {
|
|
name = match[1:]
|
|
}
|
|
|
|
if v, ok := vars[name]; ok {
|
|
return v
|
|
}
|
|
|
|
return ""
|
|
})
|
|
}
|
|
|
|
// Shellescape wraps s in single quotes, escaping any embedded single quotes.
|
|
// This is POSIX-safe for paths, env values, and shell commands.
|
|
func Shellescape(s string) string {
|
|
return "'" + strings.ReplaceAll(s, "'", `'\''`) + "'"
|
|
}
|
|
|
|
// shellescape is the package-internal alias for Shellescape.
|
|
func shellescape(s string) string { return Shellescape(s) }
|