envoy: Initial changes

scripts/embed-envoy.bash

@@ -0,0 +1,50 @@
+#!/bin/bash
+set -euo pipefail
+
+_pomerium_binary_path="${1?"pomerium binary path is required"}"
+_go_os="$(go env GOOS)"
+_go_arch="$(go env GOARCH)"
+
+is_musl() {
+  ldd /bin/ls | grep musl >/dev/null 2>&1
+}
+
+# URLs from: https://tetrate.bintray.com/getenvoy/manifest.json
+_envoy_version="1.14.1"
+_envoy_build=""
+if [ "$_go_os" == linux ] && ! is_musl && [ "$_go_arch" == "amd64" ]; then
+  _envoy_build="LINUX_GLIBC"
+elif [ "$_go_os" == darwin ] && [ "$_go_arch" == "amd64" ]; then
+  _envoy_build="DARWIN"
+fi
+if [ -z "$_envoy_build" ]; then
+  echo "this platform is not supported for embedded envoy"
+  exit 1
+fi
+_envoy_url="$(
+  curl --silent "https://tetrate.bintray.com/getenvoy/manifest.json" |
+    jq -r '.flavors.standard.versions["'"$_envoy_version"'"].builds["'"$_envoy_build"'"].downloadLocationUrl'
+)"
+
+_abs_pomerium_binary_path="$(realpath "$_pomerium_binary_path")"
+
+_wd="/tmp/pomerium-embedded-files"
+mkdir -p "$_wd"
+(
+  cd "$_wd"
+  if [ ! -f "envoy-$_envoy_version.tar.xz" ]; then
+    echo "downloading $_envoy_url"
+    curl --silent --location --output "envoy-$_envoy_version.tar.xz" "$_envoy_url"
+  fi
+  echo "extracting"
+  tar --extract --xz --strip-components=3 --file "envoy-$_envoy_version.tar.xz"
+  echo "appending to $_abs_pomerium_binary_path"
+  # if this binary already has a zip file appended to it
+  if [ -z "$(unzip -z -qq "$_abs_pomerium_binary_path" 2>&1)" ]; then
+    zip -A "$_abs_pomerium_binary_path" envoy
+  else
+    zip envoy.zip envoy
+    cat envoy.zip >>"$_abs_pomerium_binary_path"
+  fi
+  zip -A "$_abs_pomerium_binary_path"
+)