Files
computer-playbook/utils/install/system_pkg.py
kevinveenbirkenbachandClaude Opus 5.5 30268cf552 fix(install): replace an end-of-life distro Node.js with the current LTS
Debian trixie ships nodejs 20.19, whose release line reached its end of
life on 2026-04-30. `@mermaid-js/mermaid-cli` 12 and its puppeteer
declare `node >=22.13.0`, so `make install-lint` failed in every fresh
Debian stack container with `All providers failed for
chrome-headless-shell` (#1088).

`ensure_node_present()` still installs the distro package first, then
reads the release line of `node` on PATH and looks it up in the
nodejs/Release schedule. A line past its `end` date is replaced by the
newest LTS from nodejs.org/dist/index.json: SHASUMS256.txt is verified
with gpgv against the active Node.js release keys from
nodejs/release-keys, the tarball against its SHA-256 entry, and the
release is unpacked into /usr/local, after which `node` on PATH must be
that release. Nothing pins a major: the next LTS line is picked up the
same way. Ubuntu 26.04's Node.js 22, supported until 2027-04-30, stays.

`ensure_npm_present()` calls it first, so a container that already holds
the end-of-life node is upgraded too rather than skipped because npm
exists. The call runs once per process.

Closes #1088

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-21 16:02:52 +02:00

287 lines
9.1 KiB
Python

"""System-package-manager dispatch (pacman / apt-get / dnf / yum / brew)."""
from __future__ import annotations
import contextlib
import shutil
import subprocess
from utils.install.primitives import log, run_privileged, warn
_SUPPORTED = ("pacman", "apt-get", "dnf", "yum", "brew")
def detect_package_manager() -> str:
for manager in _SUPPORTED:
if shutil.which(manager) is not None:
return manager
raise RuntimeError("No supported package manager found")
def _prepare_manager(manager: str) -> None:
if manager == "apt-get":
run_privileged(
[
"apt-get",
"-o",
"DPkg::Lock::Timeout=600",
"-o",
"Acquire::Retries=3",
"update",
]
)
elif manager == "dnf":
with contextlib.suppress(subprocess.CalledProcessError):
run_privileged(["dnf", "-y", "install", "dnf-plugins-core"])
with contextlib.suppress(subprocess.CalledProcessError):
run_privileged(["dnf", "-y", "install", "epel-release"])
elif manager == "yum":
with contextlib.suppress(subprocess.CalledProcessError):
run_privileged(["yum", "-y", "install", "yum-utils"])
with contextlib.suppress(subprocess.CalledProcessError):
run_privileged(["yum", "-y", "install", "epel-release"])
def _install_one(manager: str, package: str) -> bool:
log(f"Installing package '{package}' via {manager}")
try:
if manager == "pacman":
run_privileged(["pacman", "-Syu", "--noconfirm", "--needed", package])
elif manager == "apt-get":
run_privileged(
[
"apt-get",
"-o",
"DPkg::Lock::Timeout=600",
"-o",
"Acquire::Retries=3",
"install",
"-y",
"--no-install-recommends",
package,
]
)
elif manager == "dnf":
run_privileged(["dnf", "-y", "install", package])
elif manager == "yum":
run_privileged(["yum", "-y", "install", package])
elif manager == "brew":
subprocess.run(["brew", "install", package], check=True)
else:
warn(f"Unsupported package manager: {manager}")
return False
except subprocess.CalledProcessError:
return False
return True
def _try_candidates(
manager: str, packages: list[str], provides: str | None
) -> tuple[bool, bool]:
"""Install candidates until ``provides`` is callable.
Args:
manager: the detected package manager.
packages: candidate package names, most specific first.
provides: the command the caller needs.
Returns:
whether the caller's command is now callable, and whether any
candidate installed at all.
"""
installed_any = False
for package in packages:
if _install_one(manager, package):
installed_any = True
if provides is None or shutil.which(provides) is not None:
return True, installed_any
return False, installed_any
def install_package_candidates(
manager: str, packages: list[str], provides: str | None = None
) -> None:
"""Install packages until ``provides`` is callable, or all candidates fail.
Args:
manager: the detected package manager.
packages: candidate package names, most specific first.
provides: the command the caller needs.
"""
_prepare_manager(manager)
done, installed_any = _try_candidates(manager, packages, provides)
if not done and not installed_any and manager == "apt-get":
_prepare_manager(manager)
done, installed_any = _try_candidates(manager, packages, provides)
if done:
return
if installed_any and provides is not None:
raise RuntimeError(
f"Installed {packages} via {manager} but {provides!r} is still not on "
f"PATH; the candidate list does not cover this distribution."
)
if not installed_any:
raise RuntimeError(f"All package candidates failed via {manager}: {packages}")
_COMMAND_PACKAGES: dict[str, dict[str, list[str]]] = {
"ansible-playbook": {
"pacman": ["ansible-core", "ansible"],
"apt-get": ["ansible-core", "ansible"],
"dnf": ["ansible-core", "ansible"],
"yum": ["ansible-core", "ansible"],
"brew": ["ansible"],
},
"ansible-galaxy": {
"pacman": ["ansible-core", "ansible"],
"apt-get": ["ansible-core", "ansible"],
"dnf": ["ansible-core", "ansible"],
"yum": ["ansible-core", "ansible"],
"brew": ["ansible"],
},
"ruff": {m: ["ruff"] for m in _SUPPORTED},
"shfmt": {m: ["shfmt"] for m in _SUPPORTED},
"shellcheck": {m: ["shellcheck"] for m in _SUPPORTED},
"unzip": {m: ["unzip"] for m in _SUPPORTED},
"gpgv": {
"pacman": ["gnupg"],
"apt-get": ["gpgv"],
"dnf": ["gnupg2"],
"yum": ["gnupg2"],
"brew": ["gnupg"],
},
"php": {
"pacman": ["php"],
"apt-get": ["php-cli", "php"],
"dnf": ["php-cli", "php"],
"yum": ["php-cli", "php"],
"brew": ["php"],
},
"ruby": {m: ["ruby"] for m in _SUPPORTED},
"composer": {m: ["composer"] for m in _SUPPORTED},
"npm": {
"pacman": ["npm", "nodejs"],
"apt-get": ["npm", "nodejs"],
"dnf": ["npm", "nodejs"],
"yum": ["npm", "nodejs"],
"brew": ["node"],
},
"node": {
"pacman": ["nodejs"],
"apt-get": ["nodejs"],
"dnf": ["nodejs"],
"yum": ["nodejs"],
"brew": ["node"],
},
}
_PHP_EXTENSION_PACKAGES: dict[str, dict[str, list[str]]] = {
"dom": {
"pacman": ["php"],
"apt-get": ["php-xml"],
"dnf": ["php-xml"],
"yum": ["php-xml"],
"brew": ["php"],
},
"mbstring": {
"pacman": ["php"],
"apt-get": ["php-mbstring"],
"dnf": ["php-mbstring"],
"yum": ["php-mbstring"],
"brew": ["php"],
},
"xmlwriter": {
"pacman": ["php"],
"apt-get": ["php-xml"],
"dnf": ["php-xml"],
"yum": ["php-xml"],
"brew": ["php"],
},
}
def loaded_php_extensions() -> set[str]:
"""Return the extensions the php CLI currently loads, lower-cased.
Returns:
the set reported by ``php -m``, empty when php cannot be queried.
"""
result = subprocess.run(["php", "-m"], capture_output=True, text=True, check=False)
return {line.strip().lower() for line in result.stdout.splitlines() if line.strip()}
def ensure_php_extension_present(extension: str) -> None:
"""Make a PHP extension available, installing its package if absent.
A distro ships the interpreter and its extensions as separate packages, so
a present ``php`` binary says nothing about them and ``ensure_command_present``
returns early on one. The extension is therefore probed against ``php -m``.
Args:
extension: extension name as ``php -m`` reports it.
Raises:
RuntimeError: no mapping for this extension on the detected package
manager, or the extension is still absent after the install.
"""
if extension in loaded_php_extensions():
return
manager = detect_package_manager()
mapping = _PHP_EXTENSION_PACKAGES.get(extension)
if mapping is None or manager not in mapping:
raise RuntimeError(
f"No installer mapping defined for PHP extension "
f"'{extension}' on '{manager}'."
)
log(f"Missing PHP extension '{extension}'. Attempting installation via {manager}.")
install_package_candidates(manager, mapping[manager])
if extension not in loaded_php_extensions():
raise RuntimeError(
f"PHP extension '{extension}' still absent after installing "
f"{mapping[manager]} via {manager}"
)
def ensure_command_present(command_name: str) -> None:
"""Make a command available, installing it if the host lacks it.
Args:
command_name: executable name, must be a key of the installer mapping.
Raises:
RuntimeError: the command is still absent after the install attempt.
"""
if shutil.which(command_name) is not None:
return
install_command_via_pkg(command_name)
if shutil.which(command_name) is None:
raise RuntimeError(f"{command_name} not found and could not be installed")
def install_command_via_pkg(command_name: str) -> None:
manager = detect_package_manager()
mapping = _COMMAND_PACKAGES.get(command_name)
if mapping is None or manager not in mapping:
raise RuntimeError(
f"No installer mapping defined for '{command_name}' on '{manager}'."
)
log(f"Missing command '{command_name}'. Attempting installation via {manager}.")
install_package_candidates(manager, mapping[manager], provides=command_name)
__all__ = [
"detect_package_manager",
"ensure_command_present",
"ensure_php_extension_present",
"install_command_via_pkg",
"install_package_candidates",
"loaded_php_extensions",
]