pomerium/scripts/embed-envoy.bash
2020-05-18 17:10:10 -04:00

50 lines
1.5 KiB
Bash
Executable file

#!/bin/bash
set -euo pipefail
_pomerium_binary_path="${1?"pomerium binary path is required"}"
_go_os="$(go env GOOS)"
_go_arch="$(go env GOARCH)"
is_musl() {
ldd /bin/ls | grep musl >/dev/null 2>&1
}
# URLs from: https://tetrate.bintray.com/getenvoy/manifest.json
_envoy_version="1.14.1"
_envoy_build=""
if [ "$_go_os" == linux ] && ! is_musl && [ "$_go_arch" == "amd64" ]; then
_envoy_build="LINUX_GLIBC"
elif [ "$_go_os" == darwin ] && [ "$_go_arch" == "amd64" ]; then
_envoy_build="DARWIN"
fi
if [ -z "$_envoy_build" ]; then
echo "this platform is not supported for embedded envoy"
exit 1
fi
_envoy_url="$(
curl --silent "https://tetrate.bintray.com/getenvoy/manifest.json" |
jq -r '.flavors.standard.versions["'"$_envoy_version"'"].builds["'"$_envoy_build"'"].downloadLocationUrl'
)"
_abs_pomerium_binary_path="$(realpath "$_pomerium_binary_path")"
_wd="/tmp/pomerium-embedded-files"
mkdir -p "$_wd"
(
cd "$_wd"
if [ ! -f "envoy-$_envoy_version.tar.xz" ]; then
echo "downloading $_envoy_url"
curl --silent --location --output "envoy-$_envoy_version.tar.xz" "$_envoy_url"
fi
echo "extracting"
tar --extract --xz --strip-components=3 --file "envoy-$_envoy_version.tar.xz"
echo "appending to $_abs_pomerium_binary_path"
# if this binary already has a zip file appended to it
if [ -z "$(unzip -z -qq "$_abs_pomerium_binary_path" 2>&1)" ]; then
zip -A "$_abs_pomerium_binary_path" envoy
else
zip envoy.zip envoy
cat envoy.zip >>"$_abs_pomerium_binary_path"
fi
zip -A "$_abs_pomerium_binary_path"
)