build.sh

#!/bin/bash

# Copyright 2022 IOTA-Foundation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# get real path of script
rpath="$( dirname $( readlink -f $0 ) )"
cd $rpath

# use the latest images
IMAGE_BUILD="ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder:latest"
IMAGE_SPECULOS="ghcr.io/ledgerhq/speculos:latest"

function error {
    echo "error: $1"
    exit 1
}

function usage {
    echo "usage: $0 [-h|--help] [-d|--debug] [-m|--model (nanos*|nanox|nanosplus)] [-l|--load] [-s|--speculos] [-c|--cxlib 1.0.2]"
    echo "-d|--debug:      build app with DEBUG=1"
    echo "-b|--background: start simulator in background (detached)"
    echo "-m|--model:      nanos (default), nanox, nanosplus"
    echo "-l|--load:       load app to device"
    echo "-p|--pull:       force pull docker images before using them"
    echo "-s|--speculos:   run app after building with the speculos simulator"
    echo "-c|--cxlib:      don't autodetect cx-lib version (for speculos)"
    echo "-g|--gdb:        start speculos with -d (waiting for gdb debugger)"
    echo "-a|--analyze     run static code analysis"
    echo "-v|--variant     build for 'iota' or 'shimmer'"
    exit 1
}

# pull and tag image
function pull_image {
    # already pulled?
    (( !pull )) && docker inspect --type=image "$2" >& /dev/null && return 0

    docker image pull "$1" && \
    docker image tag "$1" "$2"
}

# check if we are using root/sudo
whoami="$( whoami )"

[[ "$whoami" == "root" ]] && {
    error "please don't run the script as root or with sudo."
}

if [ "$(uname)" == "Linux" ]; then
    # and if the user has permissions to use docker
    grep -q docker <<< "$( id -Gn $whoami )" || {
        echo "user $whoami not in docker group."
        echo "to add the user you can use (on Ubuntu):"
        echo
        echo "sudo usermod -a -G docker $whoami"
        echo
        echo "after adding, logout and login is required"
        exit 1
    }
fi

# let's parse argments
device="nanos" # default
nobuild=0
load=0
speculos=0
debug=0
gdb=0
background=0
analysis=0
pull=0
cxlib=""
variant=""
while (( $# ))
do
    case "$1" in
    "-h" | "--help")
        usage
        ;;
    "-m" | "--model")
        shift
        device="$1"
        ;;
    "-l" | "--load")
        load=1
        ;;
    "-s" | "--speculos")
        speculos=1
        ;;
    "-c" | "--cxlib")
        shift
        cxlib="$1"
        ;;
    "-d" | "--debug")
        debug=1
        ;;
    "-b" | "--background")
        background=1
        ;;
    "-g" | "--gdb")
        gdb=1
        ;;
    "-a" | "--analyze")
        analysis=1
        ;;
    "-v" | "--variant")
        shift
        variant="$1"
        ;;
    "-p" | "--pull")
        pull=1
        ;;
    *)
        error "unknown parameter: $1"
        ;;
    esac
    shift

done

# not supported combinations of flags?
(( $speculos )) && (( $load )) && error "-l and -s cannot be used at the same time"

# map device to model (different in speculos)
case "$device" in
    nanos )
        model="nanos"
        ;;
    nanox )
        model="nanox"
        ;;
    nanosplus )
        model="nanosp"
        ;;
    *)
        error "unknown device: $device"
        ;;
esac

# build the app
# pull and tag image
pull_image \
    "$IMAGE_BUILD" \
    ledger-app-builder || error "couldn't pull image"

build_flags="BOLOS_SDK=/opt/$device-secure-sdk "

# if speculos requested, add the flag
(( $speculos )) && {
    build_flags+="SPECULOS=1 "
}

# if debug requested, add the flag
(( $debug )) && {
    build_flags+="DEBUG=1 "
}

[ ! -z "$variant" ] && {
    build_flags+="CHAIN=$variant "
}

extra_args=""

(( analysis )) && {
    build_flags+=" scan-build --use-cc=clang -analyze-headers -enable-checker security -enable-checker unix -enable-checker valist -o scan-build --status-bugs "
    extra_args+="-v /tmp:/app/scan-build "
}

# default make cmd
cmd="make clean && $build_flags make "

# we have to map usb into the docker when loading the app
(( $load )) && {
    extra_args+="--privileged -v /dev/bus/usb:/dev/bus/usb "
    cmd+="&& $build_flags make load"
}

docker run \
    $extra_args \
    --rm -v "$rpath:/app" \
    ledger-app-builder \
        bash -c "$cmd" || error "building failed"

(( $load )) && {
    # we are finished
    exit 0
}

# run the simulator
(( $speculos )) && {
    # pull and tag image
    pull_image \
        "$IMAGE_SPECULOS" \
        speculos || error "couldn't pull image"

    # default Ledger seed
    seed="glory promote mansion idle axis finger extra february uncover one trip resource lawn turtle enact monster seven myth punch hobby comfort wild raise skin"

    [ -f "testseed.txt" ] && { seed="$( cat "testseed.txt" )"; }

    [ ! -f "./bin/app.elf" ] && {
        error "binary missing. Something went wrong"
    }

    # get app name and version from Makefile
    # remove only whitespaces before and after =
    eval $( grep '^APPNAME' Makefile | sed -e ':loop;s/ =/=/g;s/= /=/g;t loop' )
    # replace () to {} before eval
    eval $( grep '^APPVERSION' Makefile | tr -d ' ' | tr '()' '{}' )

    { sleep 10; echo -e "\nPlease open your browser: http://localhost:5000\n"; echo; } &

    (( $gdb )) && extra_args="-d "

    (( $background )) && docker_extra_args="-d "

    docker run \
        -v "$rpath:/speculos/apps" \
        -p 9999:9999 \
        -p 5000:5000 \
        -p 1234:1234 \
        -e SPECULOS_APPNAME="$APPNAME:$APPVERSION" \
        $docker_extra_args \
        --rm \
        speculos \
            --apdu-port 9999 \
            --display headless \
            --seed "$seed" \
            $extra_args \
            -m "$model" /speculos/apps/bin/app.elf
}

exit 0