Makefile

all: build

.PHONY: build

GOPATH ?= $(HOME)/go
PATH := $(GOPATH)/bin:$(PATH)


# Set the target version of macOS. This is an ENV that is consumed by go build (and downstream c pieces)
# It's set here, and not in the GitHub Actions tooling, so that we notice build warnings.
export MACOSX_DEPLOYMENT_TARGET = 11

export GO111MODULE=on

# If not windows, set the shell to bash explicitly
ifneq ($(OS), Windows_NT)
	ifeq ($(shell uname), Darwin)
		SHELL := /bin/bash
	endif
endif


all: build
build: build_launcher

.pre-build: ${BUILD_DIR}

${BUILD_DIR}:
ifeq ($(OS), Windows_NT)
	powershell New-Item -Type Directory -Force -Path ${BUILD_DIR} | powershell Out-Null
else
	mkdir -p ${BUILD_DIR}
endif

##
## Build
##

build_%: TARGET =  $(word 2, $(subst _, ,$@))
build_%: OS = $(word 3, $(subst _, ,$@))
build_%: OSARG = $(if $(filter-out noop, $(OS)), --os $(OS))
build_%: ARCH = $(word 4, $(subst _, ,$@))
build_%: ARCHARG = $(if $(ARCH), --arch $(ARCH))
build_%: GOARG = $(if $(CROSSGOPATH), --go $(CROSSGOPATH))
build_%: GOBUILD = $(if $(CROSSGOPATH), $(CROSSGOPATH), go)
build_%: .pre-build
	$(GOBUILD) run cmd/make/make.go -targets=$(TARGET) -linkstamp $(OSARG) $(ARCHARG) $(GOARG)

fake_%: TARGET =  $(word 2, $(subst _, ,$@))
fake_%: OS = $(word 3, $(subst _, ,$@))
fake_%: OSARG = $(if $(OS), --os $(OS))
fake_%: ARCH = $(word 4, $(subst _, ,$@))
fake_%: ARCHARG = $(if $(ARCH), --arch $(ARCH))
fake_%: .pre-build
	go run cmd/make/make.go -targets=$(TARGET) -linkstamp -fakedata $(OSARG) $(ARCHARG)

# The lipo command will combine things into universal
# binaries. Because of the go path needs, there is little point in
# abstracting this further
lipo_%: build/darwin.amd64/% build/darwin.arm64/%
	@mkdir -p build/darwin.universal
	lipo -create $^ -output build/darwin.universal/$*

# Build an app bundle for macOS
# TODO: need to add build/Launcher.app/Contents/embedded.provisionprofile
build/darwin.%/Kolide.app: build/darwin.%/launcher
	mkdir -p $@/Contents/MacOS
	cp $@/../launcher $@/Contents/MacOS/
	mkdir -p $@/Contents/Resources
	cp tools/images/Kolide.icns $@/Contents/Resources
	sed 's/VERSIONPLACEHOLDER/${RELEASE_VERSION_SHORT}/g' tools/packaging/LauncherTemplate_Info.plist > $@/Contents/Info.plist
	cp tools/packaging/embedded.provisionprofile $@/Contents/
	cp tools/packaging/entitlements.plist $@/../

# pointers, mostly for convenience reasons
launcher: build_launcher
fake-launcher: fake_launcher
build/darwin.amd64/%: build_%_darwin_amd64
build/darwin.arm64/%: build_%_darwin_arm64
build/darwin.universal/%: lipo_%

##
## GitHub Action Helpers
##
GITHUB_TARGETS=launcher package-builder
GITHUB_ARCHS=amd64 arm64
github-build: $(foreach t, $(GITHUB_TARGETS), $(foreach a, $(GITHUB_ARCHS), build_$(t)_noop_$(a)))
github-lipo: $(foreach t, $(GITHUB_TARGETS), lipo_$(t))
github-launcherapp: $(foreach a, $(GITHUB_ARCHS) universal, build/darwin.$(a)/Kolide.app)


##
## Cross Build targets
##

RELEASE_TARGETS=launcher package-builder
MANUAL_CROSS_OSES=darwin windows linux
ARM64_OSES=darwin
AMD64_OSES=darwin windows linux
DARWIN_ARCHS=arm64 amd64 universal

# xp is a helper for quick cross platform builds, and sanity checking
# for breakage. humans only
xp: $(foreach target, $(RELEASE_TARGETS), $(foreach os, $(MANUAL_CROSS_OSES), build_$(target)_$(os)))

# Actual release targets. Because of the m1 cgo cross stuff, this requires explicit go paths
rel-amd64: CROSSGOPATH = /opt/go1.16.10.darwin-amd64/bin/go
rel-amd64: $(foreach target, $(RELEASE_TARGETS), $(foreach os, $(AMD64_OSES), build_$(target)_$(os)_amd64))

rel-arm64: CROSSGOPATH = /opt/go1.16.10.darwin-arm64/bin/go
rel-arm64: $(foreach target, $(RELEASE_TARGETS), $(foreach os, $(ARM64_OSES), build_$(target)_$(os)_arm64))

rel-lipo: $(foreach target, $(RELEASE_TARGETS), lipo_$(target))

rel-launcherapp: $(foreach arch, $(DARWIN_ARCHES), build/darwin.$(arch)/Kolide.app)

##
## Release Process Stuff
##

RELEASE_VERSION = $(shell git describe --tags --always --dirty)
# RELEASE_VERSION_SHORT contains only <major>.<minor>.<patch>
RELEASE_VERSION_SHORT = $(shell git describe --tags --always --dirty | sed -En 's/v([[:digit:]]+)\.([[:digit:]]+)\.([[:digit:]]+).*/\1.\2.\3/p')

release:
	@echo "Run 'make release-phase1' on the m1 machine"
	@echo "Run 'make release-phase2' on a codesign machine"

release-phase1:
	rm -rf build
	$(MAKE) rel-amd64 rel-arm64
	$(MAKE) rel-lipo
	$(MAKE) rel-launcherapp
#	$(MAKE) codesign
#	$(MAKE) binary-bundles

release-phase2:
	rm -rf build
	rsync -av 10.42.19.215:~/checkouts/kolide/launcher/build ./
#	$(MAKE) rel-amd64 rel-arm64
#	$(MAKE) rel-lipo
	$(MAKE) codesign
	$(MAKE) binary-bundles


# release: binary-bundle containers-push

binary-bundles:
	rm -rf build/binary-bundles
	$(MAKE) $(foreach p, $(shell cd build && ls -d */ | tr -d /), build/binary-bundles/$(p))

build/binary-bundles/%:
	mkdir -p build/binary-bundles
	mv build/$* build/$*_$(RELEASE_VERSION)
	cd build && zip -r "binary-bundles/$*_$(RELEASE_VERSION)".zip $*_$(RELEASE_VERSION)


##
## Handy osqueryi command line
##

osqueryi-tables: build_launcher
	./build/launcher interactive
sudo-osqueryi-tables: build_launcher
	sudo ./build/launcher interactive
launchas-osqueryi-tables: build_launcher
	sudo launchctl asuser 0 ./build/launcher interactive

install-local-fake-update: D = $(shell date +%s)
install-local-fake-update: build_launcher
	sudo mkdir /usr/local/kolide-k2/bin/launcher-updates/$(D)
	sudo cp build/launcher /usr/local/kolide-k2/bin/launcher-updates/$(D)/

# `-o runtime` should be enough, however there was a catalina bug that
# required we add `library`. This was fixed in 10.15.4. (from
# macadmins slack)
codesign-darwin:
	codesign --force -s "X98UFR7HA3" -v --options runtime,library --entitlements tools/packaging/entitlements.plist --timestamp ./build/darwin*/*

notarize-darwin: codesign-darwin
	rm -f build/notarization-upload.zip
	zip -r build/notarization-upload.zip ./build/darwin*
	xcrun altool \
	  --username "${NOTARIZE_APPLE_ID}" \
	  --password @env:NOTARIZE_APP_PASSWD \
	  --asc-provider "${NOTARIZE_ACCOUNT_ID}" \
	  --notarize-app --file build/notarization-upload.zip \
	  --primary-bundle-id com.kolide.launcher

# notarize-check is a helper for checking uuids
notarize-check:
	@echo "Usage: make notarize-check-<uuid>"
notarize-check-%:
	xcrun altool \
	  --username "${NOTARIZE_APPLE_ID}" \
	  --password @env:NOTARIZE_APP_PASSWD \
	  --asc-provider "${NOTARIZE_ACCOUNT_ID}" \
	  --notarization-info "$*"


# Using the `osslsigncode` we can sign windows binaries from
# non-windows platforms.
codesign-windows: codesign-windows-launcher.exe
codesign-windows-%: P12 = ~/Documents/kolide-codesigning-2021-04.p12
codesign-windows-%:
	@if [ -z "${AUTHENTICODE_PASSPHRASE}" ]; then echo "Missing AUTHENTICODE_PASSPHRASE"; exit 1; fi
	mv build/windows.amd64/$* build/windows.amd64/$*.tmp
	osslsigncode sign -in build/windows.amd64/$*.tmp  -out build/windows.amd64/$*  -i https://kolide.com -h sha1 -t http://timestamp.digicert.com -pkcs12 $(P12)  -pass "${AUTHENTICODE_PASSPHRASE}"
	rm build/windows.amd64/$*.tmp
	mv build/windows.amd64/$* build/windows.amd64/$*.tmp
	osslsigncode sign -in build/windows.amd64/$*.tmp  -out build/windows.amd64/$*  -i https://kolide.com -h sha256 -nest -ts http://sha256timestamp.ws.symantec.com/sha256/timestamp -pkcs12 $(P12)  -pass "${AUTHENTICODE_PASSPHRASE}"
	rm build/windows.amd64/$*.tmp

codesign: notarize-darwin codesign-windows

package-builder: .pre-build deps
	go run cmd/make/make.go -targets=package-builder -linkstamp

package-builder-windows: .pre-build deps
	go run cmd/make/make.go -targets=package-builder -linkstamp --os windows

deps-go:
	go run cmd/make/make.go -targets=deps-go

deps: deps-go generate

.PHONY: generate
generate: deps-go
	go generate ./pkg/packagekit/... ./pkg/packaging/... ./ee/tables/... ./pkg/augeas/...

.PHONY: proto
proto:
	@(cd pkg/pb/launcher; go generate)
	@(cd pkg/pb/querytarget; go generate)
	@echo "Generated code from proto definitions."

test: generate
	go test -cover -coverprofile=coverage.out -race ./...

##
## Lint
##

lint:
	# Requires golangci-lint installed, see https://golangci-lint.run/usage/install#local-installation
	golangci-lint -j3 run

##
## Docker Tooling
##

CONTAINER_OSES = ubuntu16 ubuntu18 ubuntu20 centos6 centos7 distroless

.PHONY: containers
containers: $(foreach c,$(CONTAINER_OSES),docker-$(c) dockerfake-$(c))
containers-push: $(foreach c,$(CONTAINER_OSES),dockerpush-$(c) dockerfakepush-$(c))

build-docker: sha = $(shell git describe --always --abbrev=12)
build-docker:
	docker build -t launcher-build --build-arg gitver=$(sha) .

build-dockerfake: version = $(shell git describe --always --tags --abbrev=12)
build-dockerfake:
	docker build -t launcher-fakedata-build --build-arg gitver=$(version) --build-arg FAKE=-fakedata .

dockerfake-%:  build-dockerfake
	@echo '#### Starting to build target: $@'
	docker build -t gcr.io/kolide-public-containers/launcher-fakedata-$* --build-arg FAKE=-fakedata docker/$*

docker-%: build-docker
	@echo '#### Starting to build target: $@'
	docker build -t gcr.io/kolide-public-containers/launcher-$*  docker/$*

dockerpush-%: docker-%
	@echo '#### Starting to push target: $@'
	docker push gcr.io/kolide-public-containers/launcher-$*

dockerfakepush-%: dockerfake-%
	@echo '#### Starting to push target: $@'
	docker push gcr.io/kolide-public-containers/launcher-fakedata-$*