1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
|
#!/bin/bash
# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License").
# You may not use this file except in compliance with the License.
# A copy of the License is located at
#
# http://aws.amazon.com/apache2.0
#
# or in the "license" file accompanying this file. This file is distributed
# on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
# express or implied. See the License for the specific language governing
# permissions and limitations under the License.
#
set -eu
source ./codebuild/bin/s2n_setup_env.sh
al2023_main(){
case "$S2N_LIBCRYPTO" in
"openssl-3.0"|"default") echo "Installing AL2023 packages";;
*) echo "${S2N_LIBCRYPTO} is not installed on this platform."; exit 1;;
esac
common_packages
al2023_packages
versions
}
al2_main() {
echo "Installing AL2 packages"
common_packages
al2_packages
symlink_all_the_things
case "$S2N_LIBCRYPTO" in
"openssl-1.1.1")
yum erase -y openssl-devel || true
yum install -y openssl11-static openssl11-libs openssl11-devel
;;
"default") echo "Using default system libcrypto";;
*) echo "Unknown libcrypto: ${S2N_LIBCRYPTO}"; exit 1;;
esac
versions
}
common_packages(){
# Borrowed from https://github.com/aws/aws-codebuild-docker-images/blob/master/al2/x86_64/standard/5.0/Dockerfile#L24
mono
yum groupinstall -y "Development tools"
yum install -y clang git cmake3 iproute net-tools nettle-devel nettle which sudo psmisc
yum install -y python3-pip tcpdump unzip zlib-devel libtool ninja-build valgrind wget
rm /etc/yum.repos.d/mono-centos7-stable.repo
}
al2023_packages(){
# Openssl 3.0 headers and go
yum install -y openssl-devel golang
# TODO: cmake isn't finding awslc https://github.com/aws/s2n-tls/issues/4633
#./codebuild/bin/install_awslc.sh $(mktemp -d) /usr/local/awsc 0
}
al2_packages() {
# Latest AL2 image had dependency issues related to NodeJS.
# We don't use NodeJS, so just remove it.
yum erase -y nodejs || true
yum update -y
yum install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm || true
yum install amazon-linux-extras
# Who owns this package? It needs updating to not install modules under python2.7
PYTHON=$(which python2) amazon-linux-extras install -y ruby2.6 rust1 python3.8
PYTHON=$(which python2) amazon-linux-extras enable epel
PYTHON=$(which python2) amazon-linux-extras enable corretto8
yum install -y openssh-clients
}
mono() {
rpm --import https://download.mono-project.com/repo/xamarin.gpg
curl https://download.mono-project.com/repo/centos7-stable.repo | tee /etc/yum.repos.d/mono-centos7-stable.repo
}
symlink_all_the_things() {
# Package owners should be doing this.
# Note the version number at the end allows for upgrades to supersede these.
update-alternatives --install /usr/bin/pip pip3 /usr/bin/pip3 300
update-alternatives --install /usr/bin/ninja ninja /usr/bin/ninja-build 170
update-alternatives --install /usr/bin/cmake cmake /usr/bin/cmake3 313
update-alternatives --install /usr/bin/gcc-7 gcc /usr/bin/gcc 700
update-alternatives --install /usr/bin/g++-7 g++ /usr/bin/g++ 700
update-alternatives --install /usr/bin/g++-7 g++ /usr/bin/g++ 700
}
versions(){
gcc --version
cmake --version
python3 --version
}
if [[ ${DISTRO} != "amazon linux" ]]; then
echo "Target Amazon Linux, but running on $DISTRO: Nothing to do."
exit 0;
else
if [[ ${VERSION_ID} == '2' ]]; then
al2_main;
elif [[ ${VERSION_ID} == '2023' ]]; then
al2023_main;
fi
fi
|
