release/libs/_exec.sh

#!/bin/bash
#
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License.
#

[[ -n "${_EXEC_LOADED:-}" ]] && return 0 2>/dev/null || true
_EXEC_LOADED=1

LIBS_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

source "$LIBS_DIR/_constants.sh"
source "$LIBS_DIR/_log.sh"

function _redact_secrets {
  local cmd_str="$*"
  local secret_var
  for secret_var in NEXUS_PASSWORD NEXUS_USERNAME SVN_PASSWORD SVN_USERNAME GITHUB_TOKEN; do
    local secret_val="${!secret_var:-}"
    [[ -z "${secret_val}" ]] && continue
    # Literal-string replace via split-and-rejoin: quoting "$secret_val"
    # inside ${var%%pattern} forces the inner expansion to match
    # literally (bash documents this for parameter-expansion patterns),
    # which avoids treating glob metacharacters (* ? [ \) in the secret
    # as pattern syntax. The plain ${var//pattern/string} form does not
    # offer any escape mechanism.
    local rest="${cmd_str}"
    local result=""
    while [[ "${rest}" == *"${secret_val}"* ]]; do
      result+="${rest%%"${secret_val}"*}***"
      rest="${rest#*"${secret_val}"}"
    done
    cmd_str="${result}${rest}"
  done
  echo "${cmd_str}"
}

function exec_process {
  local redacted
  redacted=$(_redact_secrets "$@")
  if [[ ${DRY_RUN:-1} -ne 1 ]]; then
    print_command "Executing '${redacted}'"
    "$@"
  else
    print_command "Dry-run, WOULD execute '${redacted}'"
  fi
}

function exec_process_with_retries {
  if [[ $# -lt 4 ]]; then
    echo "ERROR: exec_process_with_retries requires: max_attempts sleep_duration cleanup_path command [args...]"
    exit 1
  fi

  local max_attempts="${1}"
  local sleep_duration="${2}"
  local cleanup_path="${3}"
  shift 3

  local attempt=1
  while true; do
    if exec_process "$@"; then
      break
    fi
    if [[ $attempt -ge $max_attempts ]]; then
      echo "ERROR: Command failed after ${max_attempts} attempts: ${*}"
      exit 1
    fi
    echo "WARNING: Command failed (attempt ${attempt}/${max_attempts}), retrying in ${sleep_duration} seconds..."
    if [[ -n "${cleanup_path}" && -e "${cleanup_path}" ]]; then
      rm -rf "${cleanup_path}"
    fi
    sleep "${sleep_duration}"
    ((attempt++))
  done
}

function calculate_sha512 {
  local source_file="$1"
  local source_dir source_base
  source_dir="$(dirname "${source_file}")"
  source_base="$(basename "${source_file}")"
  local target_file="${source_file}.sha512"
  if [[ ${DRY_RUN:-1} -ne 1 ]]; then
    (cd "${source_dir}" && shasum -a 512 "${source_base}") > "${target_file}"
  else
    print_command "Dry-run, WOULD run: cd ${source_dir} && shasum -a 512 ${source_base} > ${target_file}"
  fi
}