require 'digest/sha1'
require 'nexus_cli'
require 'rexml/document'
module KPM
class ArtifactCorruptedException < IOError
def message
'Downloaded artifact failed checksum verification'
end
end
class BaseArtifact
KILLBILL_GROUP_ID = 'org.kill-bill.billing'
KILLBILL_ARTIFACT_ID = 'killbill-profiles-killbill'
KILLBILL_PACKAGING = 'war'
KILLBILL_CLASSIFIER = 'jar-with-dependencies'
KILLPAY_ARTIFACT_ID = 'killbill-profiles-killpay'
KILLPAY_PACKAGING = 'war'
KILLPAY_CLASSIFIER = 'jar-with-dependencies'
KILLBILL_JAVA_PLUGIN_GROUP_ID = 'org.kill-bill.billing.plugin.java'
KILLBILL_JAVA_PLUGIN_PACKAGING = 'jar'
KILLBILL_JAVA_PLUGIN_CLASSIFIER = nil
KILLBILL_RUBY_PLUGIN_GROUP_ID = 'org.kill-bill.billing.plugin.ruby'
KILLBILL_RUBY_PLUGIN_PACKAGING = 'tar.gz'
KILLBILL_RUBY_PLUGIN_CLASSIFIER = nil
KAUI_GROUP_ID = 'org.kill-bill.billing.kaui'
KAUI_ARTIFACT_ID = 'kaui-standalone'
KAUI_PACKAGING = 'war'
KAUI_CLASSIFIER = nil
class << self
def pull(logger, group_id, artifact_id, packaging='jar', classifier=nil, version='LATEST', destination_path=nil, overrides={}, ssl_verify=true)
coordinates = build_coordinates(group_id, artifact_id, packaging, classifier, version)
pull_and_put_in_place(logger, coordinates, destination_path, is_ruby_plugin_and_should_skip_top_dir(group_id, artifact_id), overrides, ssl_verify)
end
def nexus_remote(overrides={}, ssl_verify=true)
nexus_remote ||= NexusCli::RemoteFactory.create(nexus_defaults.merge(overrides || {}), ssl_verify)
end
def nexus_defaults
{
url: 'https://repository.sonatype.org',
repository: 'central-proxy'
}
end
protected
def pull_and_put_in_place(logger, coordinates, destination_path=nil, skip_top_dir=true, overrides={}, ssl_verify=true)
destination_path = KPM::root if destination_path.nil?
# Create the destination directory
if path_looks_like_a_directory(destination_path)
destination_dir = destination_path
else
destination_dir = File.dirname(destination_path)
end
FileUtils.mkdir_p(destination_dir)
# Download the artifact in a temporary directory in case of failures
info = {}
Dir.mktmpdir do |tmp_destination_dir|
logger.info " Starting download of #{coordinates} to #{tmp_destination_dir}"
info = pull_and_verify(logger, coordinates, tmp_destination_dir, overrides, ssl_verify)
# Move the file to the final destination, unpacking if necessary
is_tgz = info[:file_path].end_with?('.tar.gz') || info[:file_path].end_with?('.tgz')
if is_tgz
Utils.unpack_tgz(info[:file_path], destination_path, skip_top_dir)
FileUtils.rm info[:file_path]
else
FileUtils.mv info[:file_path], destination_path
end
# Update the info hash with the real destination
if File.directory?(destination_path) && !is_tgz
destination = File.join(File.expand_path(destination_path), info[:file_name])
else
destination = destination_path
end
info[:file_path] = File.expand_path(destination)
if is_tgz
info[:file_name] = nil
info[:size] = nil
else
info[:file_name] = File.basename(destination)
end
logger.info "Successful installation of #{coordinates} to #{info[:file_path]}"
end
info
end
def pull_and_verify(logger, coordinates, destination_dir, overrides={}, ssl_verify=true)
info = nexus_remote(overrides, ssl_verify).pull_artifact(coordinates, destination_dir)
raise ArtifactCorruptedException unless verify(logger, coordinates, info[:file_path], overrides, ssl_verify)
info
end
def verify(logger, coordinates, file_path, overrides={}, ssl_verify=true)
artifact_info = nexus_remote(overrides, ssl_verify).get_artifact_info(coordinates)
sha1_element = REXML::Document.new(artifact_info).elements['//sha1']
# Can't check :(
if sha1_element.nil?
logger.warn("Unable to find sha1 in Nexus repo for #{coordinates}. Artifact info: #{artifact_info.inspect}")
return true
end
local_sha1 = Digest::SHA1.file(file_path).hexdigest
sha1 = sha1_element.text
local_sha1 == sha1
end
def build_coordinates(group_id, artifact_id, packaging, classifier, version=nil)
if classifier.nil?
if version.nil?
"#{group_id}:#{artifact_id}:#{packaging}"
else
"#{group_id}:#{artifact_id}:#{packaging}:#{version}"
end
else
if version.nil?
"#{group_id}:#{artifact_id}:#{packaging}:#{classifier}"
else
"#{group_id}:#{artifact_id}:#{packaging}:#{classifier}:#{version}"
end
end
end
# Magic methods...
def is_ruby_plugin_and_should_skip_top_dir(group_id, artifact_id)
# The second check is for custom ruby plugins
group_id == KILLBILL_RUBY_PLUGIN_GROUP_ID || artifact_id.include?('plugin')
end
def path_looks_like_a_directory(path)
# It already is!
return true if File.directory?(path)
# It already isn't!
return false if File.file?(path)
last_part = File.basename(path).downcase
%w(.pom .xml .war .jar .xsd .tar.gz .tgz .gz .zip).each do |classic_file_extension|
return false if last_part.end_with?(classic_file_extension)
end
# Known magic files
%w(root).each do |classic_filename|
return false if last_part == classic_filename
end
# Probably a directory
true
end
end
end
end