Files
dotfiles/lib/fetch.sh
T
noconnorandClaude Opus 4.8 d9e3ca2565 bin/: add 1Password CLI (op) and opencode
op is shipped as a zip rather than a tarball, so lib/fetch.sh grows an
install_zip_bin helper (unzip, falling back to python3's zipfile so
neither is a hard dependency).

Credentials for both stay per-box and out of this repo: op signs in via
`op signin` or OP_SERVICE_ACCOUNT_TOKEN, and opencode reaches the
covert-gpt gateway with the key that mcp-config/ syncs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-12 04:40:05 -04:00

105 lines
3.3 KiB
Bash

#!/usr/bin/env sh
# lib/fetch.sh — helpers for installing userland binaries into ~/.local/bin.
#
# Everything lands under $HOME, so installed tools survive Kasm redeploys
# (which wipe the root filesystem but keep $HOME) with no reinstall needed.
# No sudo, no system packages. Prefer statically linked release binaries so
# they keep working even after the root fs — and its shared libraries — is
# reset.
#
# Source this (callers already run `set -eu`), then use fetch_arch /
# fetch_arch_deb, have_version + mark_version, install_tarball_bin, and
# install_raw_bin.
BIN_DIR="${BIN_DIR:-$HOME/.local/bin}"
VERSION_DIR="$BIN_DIR/.versions"
fsay() { printf '%s\n' "$*" >&2; }
# Normalize `uname -m` to the tokens rust-style release names use.
fetch_arch() {
case "$(uname -m)" in
x86_64|amd64) printf 'x86_64\n' ;;
aarch64|arm64) printf 'aarch64\n' ;;
*) fsay "fetch: unsupported arch $(uname -m)"; return 1 ;;
esac
}
# Same, but in the Go/Debian token style most devops tools use.
fetch_arch_deb() {
case "$(uname -m)" in
x86_64|amd64) printf 'amd64\n' ;;
aarch64|arm64) printf 'arm64\n' ;;
*) fsay "fetch: unsupported arch $(uname -m)"; return 1 ;;
esac
}
# Download <url> to <dest-file> using whatever downloader is available.
_fetch_dl() {
if command -v curl >/dev/null 2>&1; then
curl -fsSL "$1" -o "$2"
elif command -v wget >/dev/null 2>&1; then
wget -qO "$2" "$1"
else
fsay "fetch: need curl or wget"; return 1
fi
}
# have_version <name> <version> — true if <name> is installed and was
# stamped at <version>, so bootstrap can skip a re-download. Versions are
# recorded in ~/.local/bin/.versions rather than parsed from each tool's
# `--version` output, which varies wildly (kubectl/helm/k9s have no uniform
# flag).
have_version() {
[ -x "$BIN_DIR/$1" ] && [ -f "$VERSION_DIR/$1" ] &&
[ "$(cat "$VERSION_DIR/$1")" = "$2" ]
}
# mark_version <name> <version> — record the installed version.
mark_version() {
mkdir -p "$VERSION_DIR"
printf '%s\n' "$2" >"$VERSION_DIR/$1"
}
# install_tarball_bin <url> <path-within-archive> <dest-name> — download a
# .tar.gz, extract, and install one binary from it into ~/.local/bin.
install_tarball_bin() {
mkdir -p "$BIN_DIR"
_tmp="$(mktemp -d)"
_fetch_dl "$1" "$_tmp/archive.tar.gz"
tar -xzf "$_tmp/archive.tar.gz" -C "$_tmp"
install -m 0755 "$_tmp/$2" "$BIN_DIR/$3"
rm -rf "$_tmp"
fsay "installed $BIN_DIR/$3"
}
# install_zip_bin <url> <path-within-archive> <dest-name> — like
# install_tarball_bin but for .zip assets (e.g. 1Password CLI). Uses unzip
# when present, else python3's zipfile module, so no hard dependency on
# either being installed.
install_zip_bin() {
mkdir -p "$BIN_DIR"
_tmp="$(mktemp -d)"
_fetch_dl "$1" "$_tmp/archive.zip"
if command -v unzip >/dev/null 2>&1; then
unzip -q "$_tmp/archive.zip" -d "$_tmp"
elif command -v python3 >/dev/null 2>&1; then
python3 -m zipfile -e "$_tmp/archive.zip" "$_tmp"
else
fsay "fetch: need unzip or python3 to extract zip"; rm -rf "$_tmp"; return 1
fi
install -m 0755 "$_tmp/$2" "$BIN_DIR/$3"
rm -rf "$_tmp"
fsay "installed $BIN_DIR/$3"
}
# install_raw_bin <url> <dest-name> — download a single raw binary.
install_raw_bin() {
mkdir -p "$BIN_DIR"
_tmp="$(mktemp)"
_fetch_dl "$1" "$_tmp"
install -m 0755 "$_tmp" "$BIN_DIR/$2"
rm -f "$_tmp"
fsay "installed $BIN_DIR/$2"
}