live-build/scripts/build/chroot_apt

#!/bin/sh

## live-build(7) - System Build Scripts
## Copyright (C) 2016-2020 The Debian Live team
## Copyright (C) 2006-2015 Daniel Baumann <mail@daniel-baumann.ch>
##
## This program comes with ABSOLUTELY NO WARRANTY; for details see COPYING.
## This is free software, and you are welcome to redistribute it
## under certain conditions; see COPYING for details.


set -e

# Including common functions
[ -e "${LIVE_BUILD}/scripts/build.sh" ] && . "${LIVE_BUILD}/scripts/build.sh" || . /usr/lib/live/build.sh

# Setting static variables
DESCRIPTION="Manage /etc/apt/apt.conf"
USAGE="${PROGRAM} {install|install-binary|remove} [--force]"

# Processing arguments and configuration files
Init_config_data "${@}"

# Requiring stage file
Require_stagefiles config bootstrap

case "${1}" in
	install|install-binary)
		Echo_message "Configuring file /etc/apt/apt.conf"

		# Checking stage file
		Check_stagefile

		# Acquire lock file
		Acquire_lockfile

		mkdir -p chroot/etc/apt/apt.conf.d

		# Configuring apt ftp proxy
		if [ -n "${LB_APT_FTP_PROXY}" ]
		then
			echo "Acquire::ftp::Proxy \"${LB_APT_FTP_PROXY}\";" > chroot/etc/apt/apt.conf.d/00ftp-proxy
		fi

		# Configuring apt http proxy
		if [ -n "${LB_APT_HTTP_PROXY}" ]
		then
			echo "Acquire::http::Proxy \"${LB_APT_HTTP_PROXY}\";" > chroot/etc/apt/apt.conf.d/00http-proxy
		fi

		# Configuring apt pipeline
		if [ -n "${LB_APT_PIPELINE}" ]
		then
			echo "Acquire::http::Pipeline-Depth \"${LB_APT_PIPELINE}\";" > chroot/etc/apt/apt.conf.d/00pipeline
		fi

		# Configuring apt recommends
		case "${LB_APT_RECOMMENDS}" in
			true)
				echo "APT::Install-Recommends \"true\";" > chroot/etc/apt/apt.conf.d/00recommends
				echo "Aptitude::Recommends-Important \"true\";" >> chroot/etc/apt/apt.conf.d/00recommends
				;;

			false)
				echo "APT::Install-Recommends \"false\";" > chroot/etc/apt/apt.conf.d/00recommends
				echo "Aptitude::Recommends-Important \"false\";" >> chroot/etc/apt/apt.conf.d/00recommends
				;;
		esac

		# Configuring apt secure
		case "${LB_APT_SECURE}" in
			true)
				echo "APT::Get::AllowUnauthenticated \"false\";" > chroot/etc/apt/apt.conf.d/00secure
				echo "Aptitude::CmdLine::Ignore-Trust-Violations \"false\";" >> chroot/etc/apt/apt.conf.d/00secure
				echo "Acquire::AllowInsecureRepositories \"false\";" >> chroot/etc/apt/apt.conf.d/00secure
				;;

			false)
				echo "APT::Get::AllowUnauthenticated \"true\";" > chroot/etc/apt/apt.conf.d/00secure
				echo "Aptitude::CmdLine::Ignore-Trust-Violations \"true\";" >> chroot/etc/apt/apt.conf.d/00secure
				echo "Acquire::AllowInsecureRepositories \"true\";" >> chroot/etc/apt/apt.conf.d/00secure
				;;
		esac

		# Configuring apt config
		if [ -f config/apt/apt.conf ]
		then
			if [ -f chroot/etc/apt/apt.conf ]
			then
				mv chroot/etc/apt/apt.conf chroot/etc/apt/apt.conf.orig
			fi

			cp config/apt/apt.conf chroot/etc/apt/apt.conf
		fi

		# Configuring apt preferences
		if [ -f config/apt/preferences ]
		then
			if [ -f chroot/etc/apt/preferences ]
			then
				mv chroot/etc/apt/preferences chroot/etc/apt/preferences.orig
			fi

			cp config/apt/preferences chroot/etc/apt/preferences
		fi

		if Find_files config/apt/*.pref
		then
			for _FILE in config/apt/*.pref
			do
				if [ -f chroot/etc/apt/preferences.d/$(basename ${_FILE}) ]
				then
					mv chroot/etc/apt/preferences.d/$(basename ${_FILE}) chroot/etc/apt/preferences.d/$(basename ${_FILE}).orig
				fi

				cp -aL ${_FILE} chroot/etc/apt/preferences.d
			done
		fi

		if Find_files config/packages.chroot/*.deb || Find_files config/packages/*.deb
		then
			echo >> chroot/etc/apt/preferences
			echo "# Added by lb_chroot_apt ${@}" >> chroot/etc/apt/preferences
			echo "Package: *" >> chroot/etc/apt/preferences
			echo "Pin: release o=config/packages.chroot" >> chroot/etc/apt/preferences

			case "${1}" in
				install)
					# Ensure local packages have priority
					echo "Pin-Priority: 1001" >> chroot/etc/apt/preferences
					;;

				install-binary)
					# Ensure local packages are not re-installed during lb_binary
					echo "Pin-Priority: 99" >> chroot/etc/apt/preferences

					echo >> chroot/etc/apt/preferences
					echo "Package: *" >> chroot/etc/apt/preferences
					echo "Pin: release o=debian" >> chroot/etc/apt/preferences
					echo "Pin-Priority: 99" >> chroot/etc/apt/preferences
					;;
			esac
		fi

		# Creating stage file
		Create_stagefile
		;;

	remove)
		Echo_message "Deconfiguring file /etc/apt/apt.conf"

		# Acquire lock file
		Acquire_lockfile

		# Deconfiguring aptitude ftp proxy
		rm -f chroot/etc/apt/apt.conf.d/00ftp-proxy

		# Deconfiguring aptitude http proxy
		rm -f chroot/etc/apt/apt.conf.d/00http-proxy

		# Deconfiguring aptitude pipeline
		rm -f chroot/etc/apt/apt.conf.d/00pipeline

		# Deconfiguring aptitude recommends
		if [ "${LB_APT_RECOMMENDS}" = "true" ]
		then
			rm -f chroot/etc/apt/apt.conf.d/00recommends
		fi

		# Deconfiguring aptitude secure
		if [ "${LB_APT_SECURE}" = "true" ]
		then
			rm -f chroot/etc/apt/apt.conf.d/00secure
		fi

		# Configuring apt config
		if [ -f config/apt/apt.conf ]
		then
			if [ -f chroot/etc/apt/apt.conf ]
			then
				mv chroot/etc/apt/apt.conf chroot/etc/apt/apt.conf.orig
			fi

			cp config/apt/apt.conf chroot/etc/apt/apt.conf

			if [ -f chroot/etc/apt/apt.conf.orig ]
			then
				mv chroot/etc/apt/apt.conf.orig chroot/etc/apt/apt.conf
			fi
		fi

		# Deconfiguring apt preferences
		if [ -f config/apt/preferences ]
		then
			if [ -f chroot/etc/apt/preferences ]
			then
				mv chroot/etc/apt/preferences chroot/etc/apt/preferences.orig
			fi

			cp config/apt/preferences chroot/etc/apt/preferences

			if [ -f chroot/etc/apt/preferences.orig ]
			then
				mv chroot/etc/apt/preferences.orig chroot/etc/apt/preferences
			fi
		fi

		if Find_files config/apt/*.pref
		then
			for _FILE in config/apt/*.pref
			do
				if [ -f chroot/etc/apt/preferences.d/$(basename ${_FILE}) ]
				then
					mv chroot/etc/apt/preferences.d/$(basename ${_FILE}) chroot/etc/apt/preferences.d/$(basename ${_FILE}).orig
				fi

				cp -aL ${_FILE} chroot/etc/apt/preferences.d

				if [ -f chroot/etc/apt/preferences.d/$(basename ${_FILE}).orig ]
				then
					mv chroot/etc/apt/preferences.d/$(basename ${_FILE}).orig chroot/etc/apt/preferences.d/$(basename ${_FILE})
				fi
			done
		fi

		if Find_files config/packages.chroot/*.deb || Find_files config/packages/*.deb
		then
			if [ -f chroot/etc/apt/preferences ]
			then
				# delete additions from lb_chroot_apt install|install-binary to preferences
				sed -i '/# Added by lb_chroot_apt/,$d' chroot/etc/apt/preferences
				# delete the last empty line
				sed -i '${/^[[:blank:]]*$/d;}' chroot/etc/apt/preferences
				# if the resulting preferences file is empty there was no user additions, remove it
				if [ ! -s chroot/etc/apt/preferences ]
				then
					rm -rf chroot/etc/apt/preferences
				fi
			fi

		fi

		# Removing stage file
		Remove_stagefile
		;;

	*)
		Usage
		;;
esac