#!/bin/sh

# Build the riscv64 image the pipeline's jobs run in on narvi-1, and write it

# as a root file system tarball for `flow rootfs import`. There is no Docker

# on a RISC-V board, so this is Ubuntu Base 24.04.5 riscv64, checked against

# its published SHA-256, with the build's packages installed by apt in a

# chroot. Run it on a riscv64 Linux machine (narvi) as root or a user with

# sudo, then

#

#     FLOW_HOME=~/flow ~/flow/bin/flow rootfs import x16emu-riscv64.tar

#

# and pin the printed hash in .flow/pipeline.kdl. Rebuild, re-import and

# re-pin when the packages below change.

set -eu

here=$(cd "$(dirname "$0")" && pwd)

out=${1:-$here/x16emu-riscv64.tar}

release=24.04.5

base=ubuntu-base-$release-base-riscv64.tar.gz

sha256=651c516f291259ec913caa1efd0cfff738cd223adfc6617c884f07af487f08cf

# What the Makefile needs, as README.md lists for riscv64 Linux: C11 and

# C++17 compilers, make, SDL2 and zlib; and Python with pytest for the

# conformance suite, once the syscall tier lets a job use loopback TCP.

packages="build-essential make libsdl2-dev zlib1g-dev python3 python3-pytest"

test "$(uname -m)" = riscv64 || { echo "build-riscv64.sh: run this on a riscv64 machine" >&2; exit 1; }

work=$(mktemp -d)

root=$work/root

cleanup() {

	sudo umount "$root/proc" "$root/dev" 2>/dev/null || true

	sudo rm -rf "$work"

}

trap cleanup EXIT

curl -fsSL -o "$work/$base" "https://cdimage.ubuntu.com/ubuntu-base/releases/$release/release/$base"

echo "$sha256  $work/$base" | sha256sum -c - >/dev/null

mkdir "$root"

sudo tar -C "$root" -xzf "$work/$base"

sudo mv "$root/etc/resolv.conf" "$work/resolv.conf.image" 2>/dev/null || true

sudo cp /etc/resolv.conf "$root/etc/resolv.conf"

sudo mount --bind /dev "$root/dev"

sudo mount -t proc proc "$root/proc"

sudo chroot "$root" sh -c "

	export DEBIAN_FRONTEND=noninteractive

	apt-get update -q >/dev/null

	apt-get install -y -q --no-install-recommends $packages >/dev/null

	apt-get clean

	rm -rf /var/lib/apt/lists/*"

sudo umount "$root/proc" "$root/dev"

# The R49 ROM, from the emulator's own R49 release, for the boot job: the

# zip and the ROM in it both checked against their SHA-256.

r49=https://github.com/X16Community/x16-emulator/releases/download/r49/x16emu_linux-x86_64-r49.zip

curl -fsSL -o "$work/r49.zip" "$r49"

echo "efb2d4ad36ae4244370004891aa67bdf85d2ec01b42b7f12f97b48b62aff009d  $work/r49.zip" | sha256sum -c - >/dev/null

python3 -c 'import sys, zipfile; open(sys.argv[2], "wb").write(zipfile.ZipFile(sys.argv[1]).read("rom.bin"))' "$work/r49.zip" "$work/rom.bin"

echo "b81654cc8c87ed96e3ffc7c8e7c312c9f3b7b870c7bb34de61e61eac931b819a  $work/rom.bin" | sha256sum -c - >/dev/null

sudo install -D -m 0644 "$work/rom.bin" "$root/opt/x16rom/rom.bin"

sudo rm "$root/etc/resolv.conf"

sudo mv "$work/resolv.conf.image" "$root/etc/resolv.conf" 2>/dev/null || true

sudo tar -C "$root" -cf "$out" .

sudo chown "$(id -u):$(id -g)" "$out"

echo "$out"