rust-musl-builder/hooks/build

#!/bin/bash
#
# This script is responsible for calling `docker build` on behalf of GitHub. But
# what it _really_ does is translate `DOCKER_TAG` into the builds args `TARGET`
# and `OPENSSL_VERSION`.

# Abort if anything goes wrong.
set -euo pipefail

# Default to using OpenSSL 1.1 now, because 1.0 has stopped receiving security
# updates. 1.1 is incompatible with the crates postgres 0.15 and openssl 0.9, so
# we do offer the option of falling back to 1.0.
#
# Find the latest version at https://www.openssl.org/source/
OPENSSL_VERSION=1.1.1g

# Pick an appropriate Docker tag
case "$DOCKER_TAG" in
  *-openssl11)
    DOCKER_TAG_WITHOUT_OPENSSL="${DOCKER_TAG/-openssl11/}"
    ;;
  *-openssl10)
    DOCKER_TAG_WITHOUT_OPENSSL="${DOCKER_TAG/-openssl10/}"
    # Find the latest version at https://www.openssl.org/source/old/1.0.2/
    OPENSSL_VERSION=1.0.2u
    ;;
  *)
    DOCKER_TAG_WITHOUT_OPENSSL="$DOCKER_TAG"
    ;;
esac

# Decide what Rust toolchain to use.
case "$DOCKER_TAG_WITHOUT_OPENSSL" in
  # Always map the Docker tags `latest` and `experimental` to stable Rust.
  latest)
    TOOLCHAIN=stable
    ;;
  # Strip `experimental-` from other `experimental-*` tags.
  experimental-*)
    TOOLCHAIN="${DOCKER_TAG_WITHOUT_OPENSSL/experimental-/}"
    ;;
  # Pass all other tags through.
  *)
    TOOLCHAIN="$DOCKER_TAG_WITHOUT_OPENSSL"
    ;;
esac

# Run the build.
docker build \
  --build-arg TOOLCHAIN="$TOOLCHAIN" \
  --build-arg OPENSSL_VERSION="$OPENSSL_VERSION" \
  -t "$IMAGE_NAME" \
  .