1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135

#!/usr/bin/env bash

set -euo pipefail

function eprintln()
{
    printf "%s\n" "$@" >&2
}

ANSI_YELLOW=$'\x1b[33m'
ANSI_RESET=$'\x1b[0m'

function printUsage()
{
    echo "usage: upgrade-lix.sh <latest-tag>"
    echo
    echo "e.g.: ./upgrade-lix.sh 2.95"
}

function checkSystemdService()
{
    # Check if we have systemd.
    local SYSTEMCTL
    if command -v systemctl >/dev/null 2>&1; then
        SYSTEMCTL="$(command -v systemctl)"
    else
        # Try /usr/bin, in case PATH is on vacation.
        if [[ -x /usr/bin/systemctl ]]; then
            SYSTEMCTL="/usr/bin/systemctl"
        else
            # If there's really no systemctl, then this is probably not a systemd system.
            # On non-systemd systems, there's no issue.
            # Exit with success.
            return 0
        fi
    fi

    if "$SYSTEMCTL" cat nix-daemon@.service --no-pager >/dev/null 2>&1; then
        # The instanced daemon service unit exists, so we're good.
        return 0
    fi

    # Juuuust in case something unusual went wrong with the systemctl call,
    # we'll do one more check. This could maybe happen if someone put the file
    # in place but hasn't `daemon-reload`ed yet. Maybe.
    if [[ -e /etc/systemd/system/nix-daemon@.service ]]; then
        return 0
    fi

    # If we got here then we DO have systemd but we do NOT have nix-daemon@.service.
    # AKA: the bad case.
    eprintln "${ANSI_YELLOW}WARNING${ANSI_RESET}: manual intervention will be required to complete this Lix install!"
    eprintln "The Lix daemon is now an instanced unit that is fully socket-activated."
    eprintln
    eprintln "This requires a new systemd unit: nix-daemon@.service"
    eprintln
    eprintln "'nix upgrade-nix' will provide a profile with a new Lix, likely one of:"
    eprintln "  /nix/var/nix/profiles/default"
    eprintln "  /nix/var/nix/profiles/per-user/root/profile"
    eprintln "It will have the instanced systemd unit file at 'lib/systemd/system/nix-daemon@.service'"
    eprintln
    eprintln "You should symlink or copy this file to '/etc/systemd/system/nix-daemon@.service',"
    eprintln "and then run 'systemctl daemon-reload && systemctl restart nix-daemon.socket'."
    eprintln "Until you do that, all nix commands will require root and '--store local'."
    eprintln

    local RESPONSE
    # Single-character read with a prompt, for a traditional y/n prompt.
    read -er -N 1 -p "Procede with installation? [y/N] " RESPONSE

    # Lowercase the respose before comparing: Y and y are both "yes".
    # Anything else is "no".
    if [[ "${RESPONSE@L}" = "y" ]]; then
        return 0
    fi

    eprintln "Installation cancelled!"
    exit 1
}

# We take only one argument.
# If that argument looks "help"-y, then we should print usage instead.
if [[ "$#" -eq 1 ]]; then
    case "$1" in
        -h|-H|-?|*help*)
            printUsage
            exit 0
        ;;
    esac
else
    printUsage
    exit 0
fi

LIX_VERSION="$1"
# Let people override these if they reeeeeeally need to...
LIX_REF="${LIX_REF:-refs/tags/$LIX_VERSION}"
LIX_BASE="${LIX_BASE:-"git+https://git.lix.systems/lix-project/lix"}"

if [[ "$EUID" != 0 ]]; then
    eprintln "Please run this script as root."
    eprintln "If you use sudo, make sure your PATH environment variable is kept with '--preserve-env=PATH'."
    exit 2
fi

if ! command -v nix >/dev/null 2>&1; then
    eprintln "Couldn't find a 'nix' in your PATH: '$PATH'"
    eprintln "If you're running with sudo, make sure PATH is preserved with '--preserve-env=PATH'."
    eprintln "If you're passing '--preserve-env=PATH', check /etc/sudoers for 'env_reset' and 'env_keep'."
    eprintln "If you cannot modify that, run this script from a root shell, instead of directly from sudo."
    exit 3
fi

NIX="${NIX:-$(command -v nix)}"

declare -a SUBSTITUTER_ARGS=(
    "--extra-substituters"
    "https://cache.lix.systems"
    "--extra-trusted-public-keys"
    "cache.lix.systems:aBnZUw8zA7H35Cz2RyKFVs3H4PlGTLawyY5KRbvJR8o="
)

checkSystemdService

set -x
exec "$NIX" run \
    --store local \
    --extra-experimental-features "nix-command flakes" \
    "${SUBSTITUTER_ARGS[@]}" \
    "${LIX_BASE}?ref=${LIX_REF}" \
    -- \
    --store local \
    --extra-experimental-features "nix-command flakes" \
    upgrade-nix \
    "${SUBSTITUTER_ARGS[@]}"