Files
container/scripts/update-container.sh
T
2026-02-24 17:52:13 -08:00

140 lines
4.1 KiB
Bash
Executable File

#!/bin/bash
# Copyright © 2026 Apple Inc. and the container project authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
set -uo pipefail
INSTALL_DIR="/usr/local"
OPTS=0
LATEST=false
VERSION=
TMP_DIR=
# Release Info
RELEASE_URL=
RELEASE_JSON=
RELEASE_VERSION=
# Package Info
PKG_URL=
PKG_FILE=
PRIMARY_PKG=
FALLBACK_PKG=
check_installed_version() {
local target_version="$1"
if command -v container &>/dev/null; then
local installed_version
installed_version=$(container --version | awk '{print $4}')
installed_version=${installed_version%\)}
if [[ "$installed_version" == "$target_version" ]]; then
return 0
fi
fi
return 1
}
usage() {
echo "Usage: $0 {-v <version>}"
echo "Update container"
echo
echo "Options:"
echo "v <version> Install a specific release version"
echo "No argument Defaults to latest release version"
exit 1
}
while getopts ":v:" arg; do
case "$arg" in
v)
VERSION="$OPTARG"
((OPTS+=1))
;;
*)
echo "Invalid option: -${OPTARG}"
usage
;;
esac
done
# Default to install the latest release version
if [ "$OPTS" -eq 0 ]; then
LATEST=true
fi
# Check if container is still running
CONTAINER_RUNNING=$(launchctl list | grep -e 'com\.apple\.container\W')
if [ -n "$CONTAINER_RUNNING" ]; then
echo '`container` is still running. Please ensure the service is stopped by running `container system stop`'
exit 1
fi
if [ "$EUID" -ne 0 ]; then
echo "This script requires admin privileges to update files under $INSTALL_DIR"
fi
# Temporary directory creation for install/download
TMP_DIR=$(mktemp -d)
trap 'rm -rf "$TMP_DIR"' EXIT
error() { echo "Error: $*" >&2; exit 1; }
# Determine the release URL and version
if [[ "$LATEST" == true ]]; then
RELEASE_URL="https://api.github.com/repos/apple/container/releases/latest"
RELEASE_VERSION=$(curl -fsSL "$RELEASE_URL" | jq -r '.tag_name')
if check_installed_version "$RELEASE_VERSION"; then
echo "Container is already on latest version $RELEASE_VERSION"
exit 0
else
echo "Updating to latest version $RELEASE_VERSION"
fi
elif [[ -n "$VERSION" ]]; then
RELEASE_URL="https://api.github.com/repos/apple/container/releases/tags/$VERSION"
RELEASE_VERSION="$VERSION"
if check_installed_version "$RELEASE_VERSION"; then
echo "Container is already on version $RELEASE_VERSION"
exit 0
else
echo "Updating to release version $RELEASE_VERSION"
fi
fi
# Fetch the release json
RELEASE_JSON=$(curl -fsSL "$RELEASE_URL") || {
error $([[ "$LATEST" == true ]] && echo "Failed fetching latest release" || echo "Release '$VERSION' not found")
}
# Possible package names
PRIMARY_PKG="container-installer-signed.pkg"
FALLBACK_PKG="container-$RELEASE_VERSION-installer-signed.pkg"
# Find the package URL
PKG_URL=$(echo "$RELEASE_JSON" | jq -r \
--arg primary "$PRIMARY_PKG" \
--arg fallback "$FALLBACK_PKG" \
'.assets[] | select(.name == $primary or .name == $fallback) | .browser_download_url' | head -n1)
[[ -n "$PKG_URL" ]] || error "Neither $PRIMARY_PKG nor $FALLBACK_PKG found"
PKG_FILE="$TMP_DIR/$(basename "$PKG_URL")"
echo "Downloading package from: $PKG_URL..."
curl -fSL "$PKG_URL" -o "$PKG_FILE"
[[ -s "$PKG_FILE" ]] || error "Downloaded package is empty"
echo "Installing package to $INSTALL_DIR..."
sudo installer -pkg "$PKG_FILE" -target / >/dev/null 2>&1 || error "Installer failed"
echo "Installed successfully"
container --version || error "'container' command not found"