mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-10 12:47:04 +00:00
kevinveenbirkenbachandClaude Opus 5
bc8e45b934
The CI deploy bootstrap hand-listed two packages and let the ubuntu-latest runner image supply the rest, so a new host-side import surfaced as a red deploy job instead of a failed install. Size [project.dependencies] to what runs outside the project image and move the deployment stack into a deploy extra, then have every install site read that instead of naming packages itself: the image build and make install-python take the deploy extra, the CI host and the mirror and instructions workflows take the base. Declare cryptography, which utils/manager/value_generator.py imports directly and which only reached the environment transitively through ansible. Drop numpy, which nothing in the repository imports. Guard the boundary with a lint test that blocks every deploy package and asserts the runner-host CLI still builds its parser. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
68 lines
2.0 KiB
Bash
Executable File
68 lines
2.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Install all runtime dependencies, incremental via a stamp file.
|
|
#
|
|
# Re-runs the install chain (dev-python bootstrap -> venv -> python -> ansible)
|
|
# only when a recipe input is newer than the stamp at build/install.stamp.
|
|
# Pass --force (or run `make install-force`) to drop the stamp first.
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
REPO_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
|
|
cd "${REPO_ROOT}"
|
|
|
|
# shellcheck source=scripts/meta/env/python.sh
|
|
source "${REPO_ROOT}/scripts/meta/env/python.sh"
|
|
# shellcheck source=/dev/null
|
|
source <(grep -E '^INFINITO_PYTHON_INSTALL_SCRIPT=' "${REPO_ROOT}/default.env")
|
|
: "${INFINITO_PYTHON_INSTALL_SCRIPT:?}"
|
|
|
|
STAMP="build/install.stamp"
|
|
DEPS=(
|
|
pyproject.toml
|
|
requirements/requirements.galaxy.yml
|
|
requirements/requirements.git.yml
|
|
scripts/install/python.sh
|
|
scripts/install/ansible.sh
|
|
scripts/install/venv.sh
|
|
"${INFINITO_PYTHON_INSTALL_SCRIPT}"
|
|
)
|
|
|
|
if [[ "${1:-}" == "--force" ]]; then
|
|
rm -f "${STAMP}"
|
|
fi
|
|
|
|
needs_install=0
|
|
if [[ ! -f "${STAMP}" ]]; then
|
|
needs_install=1
|
|
elif [[ ! -x "${VENV}/bin/python" ]]; then
|
|
# Exception: repo copies (docker cp / tar into containers) carry the stamp but not the venv; a stamp without its venv is stale and would silently skip the whole install chain.
|
|
echo "[install] stamp present but venv missing at ${VENV}; reinstalling" >&2
|
|
needs_install=1
|
|
else
|
|
for dep in "${DEPS[@]}"; do
|
|
if [[ ! -f "${dep}" ]]; then
|
|
echo "[install] missing dependency: ${dep}" >&2
|
|
exit 1
|
|
fi
|
|
if [[ "${dep}" -nt "${STAMP}" ]]; then
|
|
needs_install=1
|
|
break
|
|
fi
|
|
done
|
|
fi
|
|
|
|
if [[ "${needs_install}" -eq 0 ]]; then
|
|
exit 0
|
|
fi
|
|
|
|
bash "${INFINITO_PYTHON_INSTALL_SCRIPT}" ensure
|
|
bash scripts/install/venv.sh
|
|
bash scripts/install/python.sh deploy
|
|
ANSIBLE_COLLECTIONS_DIR="${HOME}/.ansible/collections" bash scripts/install/ansible.sh
|
|
|
|
stamp_dir="$(dirname "${STAMP}")"
|
|
mkdir -p "${stamp_dir}"
|
|
chmod 0777 "${stamp_dir}" 2>/dev/null || true
|
|
touch "${STAMP}"
|
|
chmod 0777 "${STAMP}" 2>/dev/null || true
|