.PHONY: validate verify test test_fancy acceptance-test coverage setup make_necessary_dirs build compile check clean install lint validate-log-fields

SHELL := /usr/bin/env bash

.SHELLFLAGS := -o pipefail -c

FIPS_MODE ?= 0

OS := $(shell uname | tr A-Z a-z)

GO_SOURCES := $(shell git ls-files \*.go)

VERSION_STRING := $(shell git describe --match v* 2>/dev/null || awk '$$0="v"$$0' VERSION 2>/dev/null || echo unknown)

DATE_FMT = +%Y%m%d.%H%M%S

ifdef SOURCE_DATE_EPOCH

BUILD_TIME := $(shell date -u -d "@$(SOURCE_DATE_EPOCH)" "$(DATE_FMT)" 2>/dev/null || date -u -r "$(SOURCE_DATE_EPOCH)" "$(DATE_FMT)" 2>/dev/null || date -u "$(DATE_FMT)")

else

BUILD_TIME := $(shell date -u "$(DATE_FMT)")

GO_TAGS := tracer_static tracer_static_jaeger continuous_profiler_stackdriver

ARCH ?= $(shell uname -m | sed -e 's/x86_64/amd64/' | sed -e 's/aarch64/arm64/')

GOTESTSUM_VERSION := 1.12.0

GOTESTSUM_FILE := support/bin/gotestsum-${GOTESTSUM_VERSION}

GOLANGCI_LINT_VERSION := 2.12.2

GOLANGCI_LINT_FILE := support/bin/golangci-lint-${GOLANGCI_LINT_VERSION}

LABKIT_VALIDATE_VERSION := v2.3.0

export GOFLAGS := -mod=readonly

ifeq (${FIPS_MODE}, 1)

GO_TAGS += fips

# If the golang-fips compiler is built with CGO_ENABLED=0, this needs to be

# explicitly switched on.

export CGO_ENABLED=1

# The Go Cryptographic Module (GOFIPS140, Go 1.24+) is mutually exclusive

# with GOEXPERIMENT=boringcrypto. Toolchains that select the native module

# report its version via "go env GOFIPS140"; legacy golang-fips toolchains

# report "off" (or empty on Go < 1.24) and still require boringcrypto.

GOFIPS140_MODULE := $(shell go env GOFIPS140 2>/dev/null)

ifeq ($(filter-out off,$(GOFIPS140_MODULE)),)

# Go 1.19 now requires GOEXPERIMENT=boringcrypto for FIPS compilation.

# See https://github.com/golang/go/issues/51940 for more details.

BORINGCRYPTO_SUPPORT := $(shell GOEXPERIMENT=boringcrypto go version > /dev/null 2>&1; echo $$?)

ifeq ($(BORINGCRYPTO_SUPPORT), 0)

export GOEXPERIMENT=boringcrypto

endif

endif

ifneq (${CGO_ENABLED}, 0)

GO_TAGS += gssapi

ifeq (${OS}, darwin) # Mac OS

BREW_PREFIX := $(shell brew --prefix 2>/dev/null || echo "/opt/homebrew")

# To be able to compile gssapi library

export CGO_CFLAGS="-I$(BREW_PREFIX)/opt/heimdal/include"

GOBUILD_FLAGS := -ldflags "-X main.Version=$(VERSION_STRING) -X main.BuildTime=$(BUILD_TIME)" -tags "$(GO_TAGS)" -mod=mod

PREFIX ?= /usr/local

build: compile

validate: verify test

verify:

gofmt -s -l $(GO_SOURCES) | awk '{ print } END { if (NR > 0) { print "Please run make fmt"; exit 1 } }'

fmt:

gofmt -w -s $(GO_SOURCES)

test:

go test -cover -coverprofile=cover.out -count 1 -tags "$(GO_TAGS)" ./...

test_fancy: ${GOTESTSUM_FILE}

@${GOTESTSUM_FILE} --version

@${GOTESTSUM_FILE} --junitfile ./cover.xml --format pkgname -- -coverprofile=./cover.out -covermode=atomic -timeout 1m -count 1 -tags "$(GO_TAGS)" ./...

${GOTESTSUM_FILE}:

mkdir -p $(shell dirname ${GOTESTSUM_FILE})

curl -fL --retry 5 --retry-all-errors https://github.com/gotestyourself/gotestsum/releases/download/v${GOTESTSUM_VERSION}/gotestsum_${GOTESTSUM_VERSION}_${OS}_${ARCH}.tar.gz | tar -zOxf - gotestsum > ${GOTESTSUM_FILE} && chmod +x ${GOTESTSUM_FILE}

test_race:

go test -race -timeout 1m -count 1 ./... -v

acceptance-test:

go test -tags=acceptance -count=1 -timeout=5m ./acceptance/...

coverage:

[ -f cover.out ] && go tool cover -func cover.out

lint:

@support/lint.sh ./...

validate-log-fields:

go run gitlab.com/gitlab-org/labkit/v2/cmd/validate-log-fields@${LABKIT_VALIDATE_VERSION} .

golangci: ${GOLANGCI_LINT_FILE}

@${GOLANGCI_LINT_FILE} run --issues-exit-code 0 --output.text.print-issued-lines=false ${GOLANGCI_LINT_ARGS}

${GOLANGCI_LINT_FILE}:

@mkdir -p $(shell dirname ${GOLANGCI_LINT_FILE})

@curl -fL --retry 5 --retry-all-errors https://github.com/golangci/golangci-lint/releases/download/v${GOLANGCI_LINT_VERSION}/golangci-lint-${GOLANGCI_LINT_VERSION}-${OS}-${ARCH}.tar.gz | tar --strip-components 1 -zOxf - golangci-lint-${GOLANGCI_LINT_VERSION}-${OS}-${ARCH}/golangci-lint > ${GOLANGCI_LINT_FILE} && chmod +x ${GOLANGCI_LINT_FILE}

setup: make_necessary_dirs bin/gitlab-shell

make_necessary_dirs:

support/make_necessary_dirs

compile: bin/gitlab-shell bin/gitlab-sshd

bin:

mkdir -p bin

bin/gitlab-shell: bin $(GO_SOURCES)

go build $(GOBUILD_FLAGS) -o $(CURDIR)/bin ./cmd/...

bin/gitlab-sshd: bin $(GO_SOURCES)

go build $(GOBUILD_FLAGS) -o $(CURDIR)/bin/gitlab-sshd ./cmd/gitlab-sshd

check:

bin/gitlab-shell-check

clean:

rm -f bin/*

install: compile

mkdir -p $(DESTDIR)$(PREFIX)/bin/

install -m755 bin/gitlab-shell-check $(DESTDIR)$(PREFIX)/bin/

install -m755 bin/gitlab-shell $(DESTDIR)$(PREFIX)/bin/

install -m755 bin/gitlab-shell-authorized-keys-check $(DESTDIR)$(PREFIX)/bin/

install -m755 bin/gitlab-shell-authorized-principals-check $(DESTDIR)$(PREFIX)/bin/

install -m755 bin/gitlab-sshd $(DESTDIR)$(PREFIX)/bin/