HADOOP-15998. Ensure jar validation works on Windows.
* use a different path separator for artifacts to test * fail if and commands fail (including the jar listing) * handle different line endings from jar listing * make sure we have bash 3.1+ Co-authored-by: Sean Busbey <busbey@apache.org> Signed-off-by: Abhishek Modi <abmodi@apache.org> Signed-off-by: Rohith Sharma K S <rohithsharmaks@apache.org>
This commit is contained in:
parent
e220dac15c
commit
d59fc59c9f
@ -1,4 +1,4 @@
|
|||||||
<?xml version="1.0" encoding="UTF-8"?>
|
<?xml version="1.0" encoding="utf-8"?>
|
||||||
<!--
|
<!--
|
||||||
Licensed under the Apache License, Version 2.0 (the "License");
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
you may not use this file except in compliance with the License.
|
you may not use this file except in compliance with the License.
|
||||||
@ -154,6 +154,7 @@
|
|||||||
</goals>
|
</goals>
|
||||||
<configuration>
|
<configuration>
|
||||||
<excludeTransitive>true</excludeTransitive>
|
<excludeTransitive>true</excludeTransitive>
|
||||||
|
<pathSeparator>;</pathSeparator>
|
||||||
<outputProperty>hadoop-client-artifacts</outputProperty>
|
<outputProperty>hadoop-client-artifacts</outputProperty>
|
||||||
</configuration>
|
</configuration>
|
||||||
</execution>
|
</execution>
|
||||||
|
@ -15,13 +15,24 @@
|
|||||||
# See the License for the specific language governing permissions and
|
# See the License for the specific language governing permissions and
|
||||||
# limitations under the License.
|
# limitations under the License.
|
||||||
|
|
||||||
# Usage: $0 [/path/to/some/example.jar:/path/to/another/example/created.jar]
|
# Usage: $0 [/path/to/some/example.jar;/path/to/another/example/created.jar]
|
||||||
#
|
#
|
||||||
# accepts a single command line argument with a colon separated list of
|
# accepts a single command line argument with a colon separated list of
|
||||||
# paths to jars to check. Iterates through each such passed jar and checks
|
# paths to jars to check. Iterates through each such passed jar and checks
|
||||||
# all the contained paths to make sure they follow the below constructed
|
# all the contained paths to make sure they follow the below constructed
|
||||||
# safe list.
|
# safe list.
|
||||||
|
|
||||||
|
# We use +=, which is a bash 3.1+ feature
|
||||||
|
if [[ -z "${BASH_VERSINFO[0]}" ]] \
|
||||||
|
|| [[ "${BASH_VERSINFO[0]}" -lt 3 ]] \
|
||||||
|
|| [[ "${BASH_VERSINFO[0]}" -eq 3 && "${BASH_VERSINFO[1]}" -lt 1 ]]; then
|
||||||
|
echo "bash v3.1+ is required. Sorry."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
set -e
|
||||||
|
set -o pipefail
|
||||||
|
|
||||||
# we have to allow the directories that lead to the org/apache/hadoop dir
|
# we have to allow the directories that lead to the org/apache/hadoop dir
|
||||||
allowed_expr="(^org/$|^org/apache/$"
|
allowed_expr="(^org/$|^org/apache/$"
|
||||||
# We allow the following things to exist in our client artifacts:
|
# We allow the following things to exist in our client artifacts:
|
||||||
@ -60,9 +71,23 @@ allowed_expr+="|^jetty-dir.css$"
|
|||||||
allowed_expr+=")"
|
allowed_expr+=")"
|
||||||
declare -i bad_artifacts=0
|
declare -i bad_artifacts=0
|
||||||
declare -a bad_contents
|
declare -a bad_contents
|
||||||
IFS=: read -r -d '' -a artifact_list < <(printf '%s\0' "$1")
|
declare -a artifact_list
|
||||||
|
while IFS='' read -r -d ';' line; do artifact_list+=("$line"); done < <(printf '%s;' "$1")
|
||||||
|
if [ "${#artifact_list[@]}" -eq 0 ]; then
|
||||||
|
echo "[ERROR] No artifacts passed in."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
jar_list_failed ()
|
||||||
|
{
|
||||||
|
echo "[ERROR] Listing jar contents for file '${artifact}' failed."
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
trap jar_list_failed SIGUSR1
|
||||||
|
|
||||||
for artifact in "${artifact_list[@]}"; do
|
for artifact in "${artifact_list[@]}"; do
|
||||||
bad_contents=($(jar tf "${artifact}" | grep -v -E "${allowed_expr}"))
|
# Note: On Windows the output from jar tf may contain \r\n's. Normalize to \n.
|
||||||
|
while IFS='' read -r line; do bad_contents+=("$line"); done < <( ( jar tf "${artifact}" | sed 's/\\r//' || kill -SIGUSR1 $$ ) | grep -v -E "${allowed_expr}" )
|
||||||
if [ ${#bad_contents[@]} -gt 0 ]; then
|
if [ ${#bad_contents[@]} -gt 0 ]; then
|
||||||
echo "[ERROR] Found artifact with unexpected contents: '${artifact}'"
|
echo "[ERROR] Found artifact with unexpected contents: '${artifact}'"
|
||||||
echo " Please check the following and either correct the build or update"
|
echo " Please check the following and either correct the build or update"
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
<?xml version="1.0" encoding="UTF-8"?>
|
<?xml version="1.0" encoding="utf-8"?>
|
||||||
<!--
|
<!--
|
||||||
Licensed under the Apache License, Version 2.0 (the "License");
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
you may not use this file except in compliance with the License.
|
you may not use this file except in compliance with the License.
|
||||||
@ -164,6 +164,7 @@
|
|||||||
<!-- these two get covered in our non-test invariant check -->
|
<!-- these two get covered in our non-test invariant check -->
|
||||||
<excludeArtifactIds>hadoop-client-api,hadoop-client-runtime</excludeArtifactIds>
|
<excludeArtifactIds>hadoop-client-api,hadoop-client-runtime</excludeArtifactIds>
|
||||||
<excludeTransitive>true</excludeTransitive>
|
<excludeTransitive>true</excludeTransitive>
|
||||||
|
<pathSeparator>;</pathSeparator>
|
||||||
<outputProperty>hadoop-client-artifacts</outputProperty>
|
<outputProperty>hadoop-client-artifacts</outputProperty>
|
||||||
</configuration>
|
</configuration>
|
||||||
</execution>
|
</execution>
|
||||||
|
@ -15,13 +15,24 @@
|
|||||||
# See the License for the specific language governing permissions and
|
# See the License for the specific language governing permissions and
|
||||||
# limitations under the License.
|
# limitations under the License.
|
||||||
|
|
||||||
# Usage: $0 [/path/to/some/example.jar:/path/to/another/example/created.jar]
|
# Usage: $0 [/path/to/some/example.jar;/path/to/another/example/created.jar]
|
||||||
#
|
#
|
||||||
# accepts a single command line argument with a colon separated list of
|
# accepts a single command line argument with a colon separated list of
|
||||||
# paths to jars to check. Iterates through each such passed jar and checks
|
# paths to jars to check. Iterates through each such passed jar and checks
|
||||||
# all the contained paths to make sure they follow the below constructed
|
# all the contained paths to make sure they follow the below constructed
|
||||||
# safe list.
|
# safe list.
|
||||||
|
|
||||||
|
# We use +=, which is a bash 3.1+ feature
|
||||||
|
if [[ -z "${BASH_VERSINFO[0]}" ]] \
|
||||||
|
|| [[ "${BASH_VERSINFO[0]}" -lt 3 ]] \
|
||||||
|
|| [[ "${BASH_VERSINFO[0]}" -eq 3 && "${BASH_VERSINFO[1]}" -lt 1 ]]; then
|
||||||
|
echo "bash v3.1+ is required. Sorry."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
set -e
|
||||||
|
set -o pipefail
|
||||||
|
|
||||||
# we have to allow the directories that lead to the org/apache/hadoop dir
|
# we have to allow the directories that lead to the org/apache/hadoop dir
|
||||||
allowed_expr="(^org/$|^org/apache/$"
|
allowed_expr="(^org/$|^org/apache/$"
|
||||||
# We allow the following things to exist in our client artifacts:
|
# We allow the following things to exist in our client artifacts:
|
||||||
@ -30,7 +41,7 @@ allowed_expr="(^org/$|^org/apache/$"
|
|||||||
allowed_expr+="|^org/apache/hadoop/"
|
allowed_expr+="|^org/apache/hadoop/"
|
||||||
# * whatever in the "META-INF" directory
|
# * whatever in the "META-INF" directory
|
||||||
allowed_expr+="|^META-INF/"
|
allowed_expr+="|^META-INF/"
|
||||||
# * whatever under the "webapps" directory; for minicluster UIs
|
# * whatever under the "webapps" directory; for things shipped by yarn
|
||||||
allowed_expr+="|^webapps/"
|
allowed_expr+="|^webapps/"
|
||||||
# * Hadoop's default configuration files, which have the form
|
# * Hadoop's default configuration files, which have the form
|
||||||
# "_module_-default.xml"
|
# "_module_-default.xml"
|
||||||
@ -54,9 +65,23 @@ allowed_expr+="|^librocksdbjni-linux-ppc64le.so"
|
|||||||
allowed_expr+=")"
|
allowed_expr+=")"
|
||||||
declare -i bad_artifacts=0
|
declare -i bad_artifacts=0
|
||||||
declare -a bad_contents
|
declare -a bad_contents
|
||||||
IFS=: read -r -d '' -a artifact_list < <(printf '%s\0' "$1")
|
declare -a artifact_list
|
||||||
|
while IFS='' read -r -d ';' line; do artifact_list+=("$line"); done < <(printf '%s;' "$1")
|
||||||
|
if [ "${#artifact_list[@]}" -eq 0 ]; then
|
||||||
|
echo "[ERROR] No artifacts passed in."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
jar_list_failed ()
|
||||||
|
{
|
||||||
|
echo "[ERROR] Listing jar contents for file '${artifact}' failed."
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
trap jar_list_failed SIGUSR1
|
||||||
|
|
||||||
for artifact in "${artifact_list[@]}"; do
|
for artifact in "${artifact_list[@]}"; do
|
||||||
bad_contents=($(jar tf "${artifact}" | grep -v -E "${allowed_expr}"))
|
# Note: On Windows the output from jar tf may contain \r\n's. Normalize to \n.
|
||||||
|
while IFS='' read -r line; do bad_contents+=("$line"); done < <( ( jar tf "${artifact}" | sed 's/\\r//' || kill -SIGUSR1 $$ ) | grep -v -E "${allowed_expr}" )
|
||||||
if [ ${#bad_contents[@]} -gt 0 ]; then
|
if [ ${#bad_contents[@]} -gt 0 ]; then
|
||||||
echo "[ERROR] Found artifact with unexpected contents: '${artifact}'"
|
echo "[ERROR] Found artifact with unexpected contents: '${artifact}'"
|
||||||
echo " Please check the following and either correct the build or update"
|
echo " Please check the following and either correct the build or update"
|
||||||
|
Loading…
Reference in New Issue
Block a user