github/asdf-gradle
github/asdf-gradle
3
0
Fork 0
mirror of https://github.com/rfrancis/asdf-gradle.git synced 2024-10-06 05:32:06 +08:00
Code Issues Packages Projects Releases Wiki Activity

Seting var(GRADLE_SIGNATURE_CHECK) to validate signature or not

Browse Source
This commit is contained in:
Bezaleel Silva 2020-12-15 17:06:59 -03:00
parent c5844661fb
commit cfaa9bf895
2 changed files with 70 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
README.md
View File

@ -14,5 +14,16 @@ asdf plugin-add gradle https://github.com/rfrancis/asdf-gradle.git
Check out the [asdf](https://github.com/asdf-vm/asdf) readme for instructions on how to install and manage versions of other tools.
When installing Gradle using `asdf install` and you not have been plan check signature, you can set `no` using `export GRADLE_SIGNATURE_CHECK=no` example:
```
export GRADLE_SIGNATURE_CHECK=no
```
Observation:
* `GRADLE_SIGNATURE_CHECK` - `yes` is default.The `yes` check the signature and `no` not check the signature
NEEDED: Someone to take over maintenance of this plugin.

83
bin/install
View File

@ -6,8 +6,8 @@ checkShasum ()
local authentic_checksum="${2}"
if $(command -v sha256sum >/dev/null 2>&1); then
sha256sum \
-c <<<"$authentic_checksum $archive_file_name"
sha256sum \
-c <<<"$authentic_checksum $archive_file_name"
elif $(command -v shasum >/dev/null 2>&1); then
shasum \
-a 256 \
@ -18,32 +18,65 @@ checkShasum ()
fi
}
# instructions taken straight from https://gradle.org/install/#manually
if [ "$ASDF_INSTALL_TYPE" = "ref" ]
then
echo "start clone $ASDF_INSTALL_VERSION"
git clone "$ASDF_INSTALL_VERSION" "$ASDF_INSTALL_PATH"
else
echo "start install $ASDF_INSTALL_VERSION"
mkdir -p "$ASDF_INSTALL_PATH"
cd "$ASDF_INSTALL_PATH" || exit 1
curl -OJL https://services.gradle.org/distributions/gradle-${ASDF_INSTALL_VERSION}-bin.zip
curl -OJL https://services.gradle.org/distributions/gradle-${ASDF_INSTALL_VERSION}-bin.zip.sha256
archive_file_name=$PWD/gradle-${ASDF_INSTALL_VERSION}-bin.zip
authentic_checksum_file=$archive_file_name.sha256
authentic_checksum=$(cat $authentic_checksum_file)
installGradleSig()
{
if [ "$ASDF_INSTALL_TYPE" = "ref" ]
then
echo "start clone $ASDF_INSTALL_VERSION"
git clone "$ASDF_INSTALL_VERSION" "$ASDF_INSTALL_PATH"
else
echo "start install $ASDF_INSTALL_VERSION"
mkdir -p "$ASDF_INSTALL_PATH"
cd "$ASDF_INSTALL_PATH" || exit 1
curl -OJL https://services.gradle.org/distributions/gradle-${ASDF_INSTALL_VERSION}-bin.zip
curl -OJL https://services.gradle.org/distributions/gradle-${ASDF_INSTALL_VERSION}-bin.zip.sha256
archive_file_name=$PWD/gradle-${ASDF_INSTALL_VERSION}-bin.zip
authentic_checksum_file=$archive_file_name.sha256
authentic_checksum=$(cat $authentic_checksum_file)
echo 'start check sha256sum'
if ! checkShasum "$archive_file_name" "$authentic_checksum"; then
echo "Authenticity of package archive can not be assured. Exiting." >&2
exit 1
echo 'start check sha256sum'
if ! checkShasum "$archive_file_name" "$authentic_checksum"; then
echo "Authenticity of package archive can not be assured. Exiting." >&2
exit 1
fi
unzip gradle-${ASDF_INSTALL_VERSION}-bin.zip
rm gradle-${ASDF_INSTALL_VERSION}-bin.zip
mv gradle-${ASDF_INSTALL_VERSION}/* .
rm -rf gradle-${ASDF_INSTALL_VERSION}
rm $authentic_checksum_file
unzip gradle-${ASDF_INSTALL_VERSION}-bin.zip
rm gradle-${ASDF_INSTALL_VERSION}-bin.zip
mv gradle-${ASDF_INSTALL_VERSION}/* .
rm -rf gradle-${ASDF_INSTALL_VERSION}
rm $authentic_checksum_file
fi
}
installGradleNoSign()
{
if [ "$ASDF_INSTALL_TYPE" = "ref" ]
then
git clone "$ASDF_INSTALL_VERSION" "$ASDF_INSTALL_PATH"
else
mkdir -p "$ASDF_INSTALL_PATH"
cd "$ASDF_INSTALL_PATH" || exit 1
curl -OJL https://services.gradle.org/distributions/gradle-${ASDF_INSTALL_VERSION}-bin.zip
unzip gradle-${ASDF_INSTALL_VERSION}-bin.zip
rm gradle-${ASDF_INSTALL_VERSION}-bin.zip
mv gradle-${ASDF_INSTALL_VERSION}/* .
rm -rf gradle-${ASDF_INSTALL_VERSION}
fi
}
if [ ! -z GRADLE_SIGNATURE_CHECK -a "$GRADLE_SIGNATURE_CHECK" = "yes" ]
then
## check if GRADLE_SIGNATURE_CHECK and its "yes"
installGradleSig
elif [ ! -z GRADLE_SIGNATURE_CHECK -a "$GRADLE_SIGNATURE_CHECK" = "no" ]
then
## check if GRADLE_SIGNATURE_CHECK and its "no"
installGradleNoSign
else
## only install with sign check
installGradleSig
fi