From 82410f0e59ab830db86350adce43cc67e466ce7f Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jlebon@redhat.com>
Date: Mon, 19 Jun 2017 11:25:25 -0400
Subject: [PATCH] ci: add ci-release-build.sh

Add a check that verifies that `is_release_build` is `yes` only for
release commits. And also verify that the commit message has the correct
version.

Closes: #945
Approved by: cgwalters
---
 .papr.yml              |  1 +
 ci/ci-release-build.sh | 48 ++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 49 insertions(+)
 create mode 100755 ci/ci-release-build.sh

diff --git a/.papr.yml b/.papr.yml
index 74c16900..6946b936 100644
--- a/.papr.yml
+++ b/.papr.yml
@@ -19,6 +19,7 @@ env:
 tests:
   - ci/ci-commitmessage-submodules.sh
   - ci/build-check.sh
+  - ci/ci-release-build.sh
 
 timeout: 30m
 
diff --git a/ci/ci-release-build.sh b/ci/ci-release-build.sh
new file mode 100755
index 00000000..157eb030
--- /dev/null
+++ b/ci/ci-release-build.sh
@@ -0,0 +1,48 @@
+#!/bin/bash
+set -euo pipefail
+
+# Makes sure that is_release_build is only set to yes in a release commit. A
+# release commit must be titled: "Release $MAJOR.$MINOR". Also checks that the
+# release version in the build system matches the commit msg.
+
+# if running under PAPR, use the branch/PR HEAD actually
+# being tested rather than the merge sha
+HEAD=${PAPR_COMMIT:-HEAD}
+
+git log --format=%B -n 1 $HEAD > log.txt
+
+if grep -q ^is_release_build=yes configure.ac; then
+    echo "*** is_release_build is set to yes ***"
+
+    V=$(grep -Po '^#define PACKAGE_VERSION "\K[0-9]+\.[0-9]+(?=")' config.h)
+    if [ -z "$V" ]; then
+        echo "ERROR: couldn't read PACKAGE_VERSION"
+        exit 1
+    fi
+    echo "OK: release version is $V"
+
+    # check if the commit title indicates a release and has the correct version
+    if ! grep -q "^Release $V" log.txt; then
+        echo "ERROR: release commit doesn't match version"
+        echo "Commit message:"
+        cat log.txt
+        echo "Build version: $V"
+        exit 1
+    fi
+    echo "OK: release commit matches version"
+
+    if grep -q "^LIBOSTREE_$V" src/libostree/libostree-devel.sym; then
+        echo "ERROR: devel syms still references release version"
+        exit 1
+    fi
+    echo "OK: devel syms no longer reference release version"
+
+else
+    echo "*** is_release_build is set to no ***"
+
+    if grep -qE "^Release [0-9]+\.[0-9]+" log.txt; then
+        echo "ERROR: release commit does not have is_release_build=yes"
+        exit 1
+    fi
+    echo "OK: commit is not a release"
+fi