feat: add git-lfs

Author: mayeut

docker/build_scripts/finalize.sh

@@ -91,6 +91,8 @@ for TOOL_PATH in "${MY_DIR}/requirements-tools/"*; do
 	esac
 done
 
+"${MY_DIR}/install-git-lfs.sh"
+
 # We do not need the precompiled .pyc and .pyo files.
 clean_pyc /opt/_internal
 

docker/build_scripts/git-lfs-core-gpg-keys

@@ -0,0 +1,51 @@
+#!/bin/bash
+# Top-level build script called from Dockerfile
+
+# Stop at any error, show all commands
+set -exuo pipefail
+
+# Get script directory
+MY_DIR=$(dirname "${BASH_SOURCE[0]}")
+
+# Get build utilities
+# shellcheck source-path=SCRIPTDIR
+source "${MY_DIR}/build_utils.sh"
+
+cd /tmp
+case "${AUDITWHEEL_ARCH}" in
+	x86_64) GOARCH=amd64;;
+	i686) GOARCH=386;;
+	aarch64) GOARCH=arm64;;
+	armv7l) GOARCH=arm;;
+	*) GOARCH="${AUDITWHEEL_ARCH}";;
+esac
+
+GIT_LFS_VERSION=3.7.1
+GIT_LFS_SHA256=sha256sums.asc
+GIT_LFS_ARCHIVE="git-lfs-linux-${GOARCH}-v${GIT_LFS_VERSION}.tar.gz"
+
+# for some reason, using --homedir gpg option fails, let's backup instead
+if [ -d ~/.gnupg ]; then
+	mv ~/.gnupg ~/.gnupg.backup
+fi
+
+tar -Ozxf "${MY_DIR}/git-lfs-core-gpg-keys" | gpg --import -
+
+curl -fsSLo "${GIT_LFS_SHA256}" "https://github.com/git-lfs/git-lfs/releases/download/v${GIT_LFS_VERSION}/sha256sums.asc"
+curl -fsSLo "${GIT_LFS_ARCHIVE}" "https://github.com/git-lfs/git-lfs/releases/download/v${GIT_LFS_VERSION}/${GIT_LFS_ARCHIVE}"
+
+gpg -d "${GIT_LFS_SHA256}" | grep "${GIT_LFS_ARCHIVE}" | sha256sum -c
+if [ "${AUDITWHEEL_POLICY}" != "manylinux2014" ]; then
+	gpgconf --kill gpg-agent
+fi
+
+mkdir git-lfs
+tar -C git-lfs -xf "${GIT_LFS_ARCHIVE}" --strip-components 1
+./git-lfs/install.sh
+
+rm -rf ~/.gnupg
+if [ -d ~/.gnupg.backup ]; then
+	mv ~/.gnupg.backup ~/.gnupg
+fi
+
+rm -rf "${GIT_LFS_SHA256}" "${GIT_LFS_ARCHIVE}" ./git-lfs

docker/build_scripts/install-git-lfs.sh

@@ -117,7 +117,7 @@ if [ "${AUDITWHEEL_POLICY}" == "manylinux2014" ]; then
 	fi
 	fixup-mirrors
 elif [ "${OS_ID_LIKE}" == "rhel" ]; then
-	BASE_TOOLS+=(glibc-locale-source glibc-langpack-en gzip hardlink hostname libcurl libnsl libxcrypt which)
+	BASE_TOOLS+=(glibc-locale-source glibc-langpack-en gnupg2 gzip hardlink hostname libcurl libnsl libxcrypt which)
 	echo "tsflags=nodocs" >> /etc/dnf/dnf.conf
 	dnf -y upgrade
 	EPEL=epel-release

docker/build_scripts/install-runtime-packages.sh

@@ -119,6 +119,7 @@ automake --version
 libtoolize --version
 patchelf --version
 git --version
+git lfs --version
 cmake --version
 swig -version
 pipx run nox --version

docker/tests/run_tests.sh

@@ -199,11 +199,32 @@ def _update_tcltk(dry_run):
         break
 
 
+def _update_git_lfs(dry_run):
+    file = PROJECT_ROOT / "docker" / "build_scripts" / "install-git-lfs.sh"
+    lines = file.read_text().splitlines()
+    re_ = re.compile(r"^GIT_LFS_VERSION=(?P<version>\S+)$")
+    for i in range(len(lines)):
+        match = re_.match(lines[i])
+        if match is None:
+            continue
+        current_version = Version(match["version"])
+        latest_version = latest("git-lfs")
+        if latest_version > current_version:
+            lines[i] = f"GIT_LFS_VERSION={latest_version}"
+            message = f"Bump git-lfs  {current_version} → {latest_version}"
+            print(message)
+            if not dry_run:
+                file.write_text("\n".join(lines) + "\n")
+                subprocess.check_call(["git", "commit", "-am", message])
+        break
+
+
 def main():
     parser = argparse.ArgumentParser()
     parser.add_argument("--dry-run", dest="dry_run", action="store_true", help="dry run")
     args = parser.parse_args()
     _update_cpython(args.dry_run)
+    _update_git_lfs(args.dry_run)
     _update_sqlite(args.dry_run)
     _update_tcltk(args.dry_run)
     for tool in ["autoconf", "automake", "libtool", "git", "openssl", "curl"]: