#!/bin/busybox ash
set -exuo pipefail

forgejo_url=$1
forgejo_token=$2

# initialize abuild
apk update
apk add --no-cache alpine-sdk sudo util-linux
adduser -D user -h /home/user
addgroup user abuild
echo "root ALL=(ALL) ALL" >/etc/sudoers
echo "%abuild ALL=(ALL) NOPASSWD: ALL" >>/etc/sudoers
mkdir -p /var/cache/distfiles
chgrp abuild /var/cache/distfiles
chmod 775 /var/cache/distfiles
mkdir -p "/home/user/.abuild"
echo "/home/user/.abuild/user.rsa" | abuild-keygen -i -b 4096
echo 'PACKAGER_PRIVKEY=/home/user/.abuild/user.rsa' >/home/user/.abuild/abuild.conf
chown -R "user:user" /home/user/

# make sure we own the relevant directory
cp -r package-source /srv/alpine
cd /srv
mkdir packages
echo "REPODEST=/srv/packages" >>/home/user/.abuild/abuild.conf
cat /home/user/.abuild/abuild.conf
chown -R user:user alpine packages

# build the package
sudo -u user APKBUILD=alpine/APKBUILD abuild -r

# upload new package
cd packages/srv/x86_64/
for file in $(find . -name '*.apk' -type f | sed -e 's,./,,'); do
	# remove old package
	curl \
		--fail \
		-H "Authorization: token $forgejo_token" \
		-X DELETE \
		"$forgejo_url/api/packages/root/alpine/3.19/forgejo-2174/$file" \
		|| true

	# upload new package
	curl \
		--fail \
		-H "Authorization: token $forgejo_token" \
		-T "$file" \
		"$forgejo_url/api/packages/root/alpine/3.19/forgejo-2174"
done

# ensure that the install-if condition works as expected
apk add openrc
(cd /etc/apk/keys && curl -JO $forgejo_url/api/packages/root/alpine/key)
echo "$forgejo_url/api/packages/root/alpine/3.19/forgejo-2174" >>/etc/apk/repositories
apk add forgejo-2174
[ -e /usr/bin/forgejo_2174 ] # from the installed package
[ -e /etc/init.d/forgejo_2174 ] # from the -openrc package installed because of the install-if condition