* build(appimage): pin the interpreter, packages and tooling * ci(appimage): build inside a pinned ubuntu 22.04 image * test(appimage): guard the pins and the base image * docs: state the AppImage glibc floor * fix(appimage): bundle libibus with its typelib * ci(appimage): let the container run the isolated GI smoke test * fix(appimage): keep the bundle's libraries out of host binaries * fix(appimage): bundle libgpg-error with the libgcrypt that needs it * docs(agents): require host_env() for spawned binaries * ci: run the AppImage jobs when its other inputs change * fix(appimage): check every bundled typelib, not just the seeded ones * fix(ibus): keep the bundle when respawning our own interpreter * fix(injection): pass host_env() to setxkbmap and notify-send * test(ibus): wait for the IBus warmup thread before asserting
41 lines
1.7 KiB
Bash
Executable File
41 lines
1.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Run the AppImage build inside the pinned base image.
|
|
#
|
|
# Usage: docker-build.sh <path-to-wheel> <version> [output-dir]
|
|
#
|
|
# This is what CI calls and what you should call locally, so that what you get
|
|
# is what CI gets: the base image decides the glibc floor and the GTK version
|
|
# the AppImage links against, and building on the host instead means shipping
|
|
# whatever that host happens to run.
|
|
#
|
|
# Honours VOCALINUX_APPIMAGE_REQUIRE_VULKAN / _SKIP_VULKAN like build.sh, and
|
|
# keeps the glslc it has to build in VOCALINUX_APPIMAGE_CACHE
|
|
# (~/.cache/vocalinux-appimage by default) so the next build reuses it.
|
|
set -euo pipefail
|
|
|
|
REPO_ROOT="$(cd "$(dirname "$(readlink -f "${BASH_SOURCE[0]}")")/../.." && pwd)"
|
|
IMAGE="$(awk '$1=="base-image" {print $3}' "$REPO_ROOT/packaging/appimage/tool_checksums.txt")"
|
|
if [ -z "$IMAGE" ]; then
|
|
echo "No base-image pin in packaging/appimage/tool_checksums.txt" >&2
|
|
exit 1
|
|
fi
|
|
|
|
CACHE="${VOCALINUX_APPIMAGE_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/vocalinux-appimage}"
|
|
mkdir -p "$CACHE"
|
|
|
|
# The wheel and output dir are given as host paths; the repo is mounted at the
|
|
# same place it lives, so relative arguments keep working inside.
|
|
# seccomp=unconfined only to allow unshare: without it build.sh's isolated GI
|
|
# smoke test silently skips, which is how #585 shipped.
|
|
exec docker run --rm \
|
|
--security-opt seccomp=unconfined \
|
|
-v "$REPO_ROOT:$REPO_ROOT" -w "$REPO_ROOT" \
|
|
-v "$CACHE:/cache" \
|
|
-e VOCALINUX_APPIMAGE_CACHE=/cache \
|
|
-e VOCALINUX_APPIMAGE_REQUIRE_VULKAN \
|
|
-e VOCALINUX_APPIMAGE_SKIP_VULKAN \
|
|
-e CMAKE_BUILD_PARALLEL_LEVEL \
|
|
-e HOST_UID="$(id -u)" \
|
|
-e HOST_GID="$(id -g)" \
|
|
"$IMAGE" bash packaging/appimage/container-build.sh "$@"
|