#!/usr/bin/env bash

# Set bash mode.

set -eE -o functrace

# Function to print usage help

print_help() {

cat << HELP > /dev/stdout

Usage: ${0} <action> [sapi]

Available actions:

- build_sapi

- merge

- build_extensions

- package

Available sapis:

- apache2

- cgi

- cli

- embed

- fpm

- phpdbg

HELP

}

# Function to log error line number and message.

log_failure() {

echo "Failed at $1: $2"

}

trap 'log_failure ${LINENO} "$BASH_COMMAND"' ERR

# Function to get build flags

get_buildflags() {

type=$1

lto=${2:--lto}

flags=$(dpkg-buildflags --get "$type" 2>/dev/null)

# Add or remove lto optimization flags.

if [ "$lto" = "-lto" ]; then

flags=$(echo "$flags" | sed -E 's/[^ ]+lto[^ ]+ //g')

else

flags="$flags -flto=auto -ffat-lto-objects"

fi

echo "$flags"

}

get_c23_standard_flag() {

local cc cc_major cc_version c23_major

cc=${CC:-cc}

cc_major=$("$cc" -dumpfullversion -dumpversion 2>/dev/null | cut -d '.' -f 1)

[[ "$cc_major" =~ ^[0-9]+$ ]] || return 0

# PHP 8.6 C23_ENUM needs finalized C23 support to keep -pedantic enabled.

# GCC provides that from 15, while Clang has it in the build images from 18.

cc_version=$("$cc" --version 2>/dev/null | sed -n '1p')

c23_major=15

[[ "$cc_version" =~ [Cc]lang ]] && c23_major=18

if [ "$cc_major" -ge "$c23_major" ]; then

echo "-std=gnu23"

fi

}

# Function to set and export build flags.

configure_build_flags() {

local build_target extra_warning_flags

build_target=${1:-php}

extra_warning_flags="-Wall -pedantic"

[ "$build_target" = "extensions" ] && extra_warning_flags="-Wall -Wno-pedantic"

CFLAGS="$(get_buildflags CFLAGS "$lto") $(getconf LFS_CFLAGS)"

CFLAGS=$(echo "$CFLAGS" | sed -E 's/-Werror=implicit-function-declaration//g')

CFLAGS="$CFLAGS -DOPENSSL_SUPPRESS_DEPRECATED"

CPPFLAGS="$(get_buildflags CPPFLAGS "$lto") -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2"

CXXFLAGS="$(get_buildflags CXXFLAGS "$lto") $(getconf LFS_CFLAGS)"

CXXFLAGS="$CXXFLAGS -DOPENSSL_SUPPRESS_DEPRECATED"

LDFLAGS="$(get_buildflags LDFLAGS "$lto") -Wl,-z,now -Wl,--as-needed"

if [ "$build_target" = "extensions" ] && [[ "$PHP_VERSION" =~ ^(5\.6|7\.[0-4]|8\.[01])$ ]]; then

c23_flag="$(get_c23_standard_flag)"

[ -n "$c23_flag" ] && CFLAGS="$CFLAGS -std=gnu17"

fi

if [[ "$PHP_VERSION" =~ ^(5\.6|7\.[0-4]|8\.0)$ ]]; then

if [ "$build_target" = "extensions" ]; then

CXXFLAGS="$CXXFLAGS -fpermissive"

EXTRA_CFLAGS="-Wno-deprecated -Wno-deprecated-declarations"

else

CFLAGS="$CFLAGS -std=gnu99 -Wno-error=incompatible-pointer-types -Wno-error=strict-prototypes -Wno-strict-prototypes -fpermissive -Wno-deprecated -Wno-deprecated-declarations"

CXXFLAGS="$CXXFLAGS -fpermissive -Wno-error=narrowing -Wno-error=class-memaccess -Wno-error=format-security -Wno-deprecated -Wno-deprecated-declarations"

EXTRA_CFLAGS="$extra_warning_flags"

fi

elif dpkg --compare-versions "$PHP_VERSION" ge 8.6; then

c23_flag="$(get_c23_standard_flag)"

if [ -n "$c23_flag" ]; then

CFLAGS="$CFLAGS $c23_flag"

EXTRA_CFLAGS="$extra_warning_flags"

else

EXTRA_CFLAGS="-Wall -Wno-pedantic"

fi

else

EXTRA_CFLAGS="$extra_warning_flags"

fi

EXTRA_CFLAGS="$EXTRA_CFLAGS -fsigned-char -fno-strict-aliasing -Wno-missing-field-initializers"

DEB_HOST_MULTIARCH="$(dpkg-architecture -q DEB_HOST_MULTIARCH)"

# Set ICU Version

ICU_VERSION="$(dpkg -s libicu-dev | sed -ne 's/^Version: \([0-9]\+\).*/\1/p')"

dpkg --compare-versions "$ICU_VERSION" ge 75 && ICU_CXXFLAGS=-std=c++17 || ICU_CXXFLAGS=-std=c++11

[[ "$VERSION_ID" = "11" && "$PHP_VERSION" = "8.6" ]] && export CXXFLAGS="$CXXFLAGS -include unicode/localpointer.h"

SED=$(command -v sed)

export CFLAGS

export CPPFLAGS

export CXXFLAGS

export LDFLAGS

export EXTRA_CFLAGS

export DEB_HOST_MULTIARCH

export ICU_CXXFLAGS

export SED

}

# Function to build PHP.

build_php() {

echo "::group::$1"

SAPI=$1

configure_build_flags

# Export inputs

export INSTALL_ROOT

export PHP_VERSION

export SAPI

# Build PHP using php-build.

if ! php-build -v -i "$default_ini" "$PHP_VERSION" "$prefix"; then

echo 'Failed to build PHP'

exit 1

fi

echo "::endgroup::"

}

# Function to save the commit hash to the INSTALL_ROOT.

save_commit() {

# Only store commit for unstable versions

if [ "${stable:?}" = "false" ]; then

commit="$(basename "$(curl -sL https://api.github.com/repos/php/php-src/commits/"${branch:?}" | jq -r .commit.url)")"

[ "$commit" = 'null' ] && exit 1;

echo "$commit" | tee "$INSTALL_ROOT/etc/php/$PHP_VERSION/COMMIT" >/dev/null 2>&1

fi

}

# Function to copy PHP from INSTALL_ROOT to the system root.

link_php() {

cp -af "$INSTALL_ROOT"/* /

}

# Function to install a staged PHP build into the system root.

install_staged_php() {

link_php

switch_version

}

# Function to merge all SAPI builds into one.

merge_sapi() {

mkdir -p "$INSTALL_ROOT" \

"$INSTALL_ROOT"/etc/php/"$PHP_VERSION"/mods-available \

"$INSTALL_ROOT"/usr/lib/php/"$PHP_VERSION"/sapi \

"$INSTALL_ROOT"/usr/sbin

# Merge SAPI builds.

IFS=' ' read -r -a sapi_arr <<<"${SAPI_LIST:?}"

for sapi in "${sapi_arr[@]}"; do

cp -af "$INSTALL_ROOT-$sapi"/* "$INSTALL_ROOT"

touch "$INSTALL_ROOT/usr/lib/php/$PHP_VERSION/sapi/$sapi"

done

# Fix directory structure for newer OS.

# Remove var and run from the builds

rm -rf "${INSTALL_ROOT:?}"/var "$INSTALL_ROOT"/run

# $INSTALL_ROOT/lib should symlink to /lib if it is a symlink.

if [ -h /lib ] && [ -d "$INSTALL_ROOT"/lib ]; then

cp -rf "$INSTALL_ROOT"/lib "$INSTALL_ROOT"/usr

rm -rf "${INSTALL_ROOT:?}"/lib

fi

# Make sure php-cli and php-config is from cli build.

cp -f "$INSTALL_ROOT-cli/usr/bin/php$PHP_VERSION" "$INSTALL_ROOT"/usr/bin

# Fix phar.phar binary and docs version suffix.

if [[ "$PHP_VERSION" =~ 5.6|7.[0-3] ]]; then

cp "$INSTALL_ROOT"/usr/bin/phar.phar "$INSTALL_ROOT"/usr/bin/phar.phar"$PHP_VERSION"

cp "$INSTALL_ROOT"/usr/share/man/man1/phar.phar.1 "$INSTALL_ROOT"/usr/share/man/man1/phar.phar"$PHP_VERSION".1

else

cp "$INSTALL_ROOT"/usr/bin/phar"$PHP_VERSION".phar "$INSTALL_ROOT"/usr/bin/phar.phar"$PHP_VERSION"

cp "$INSTALL_ROOT"/usr/share/man/man1/phar"$PHP_VERSION".phar.1 "$INSTALL_ROOT"/usr/share/man/man1/phar.phar"$PHP_VERSION".1

fi

ln -sf /usr/bin/phar.phar"$PHP_VERSION" "$INSTALL_ROOT"/usr/bin/phar"$PHP_VERSION"

# Copy switch_sapi and switch_jit scripts

cp -fp scripts/switch_sapi "$INSTALL_ROOT"/usr/sbin/switch_sapi

cp -fp scripts/switch_jit "$INSTALL_ROOT"/usr/sbin/switch_jit

# Make sure the binaries are executable.

chmod -R a+x "$INSTALL_ROOT"/usr/bin "$INSTALL_ROOT"/usr/sbin

# Copy nginx config to the build.

mkdir -p "$INSTALL_ROOT"/etc/nginx/sites-available

sed -i "s/PHP_VERSION/$PHP_VERSION/g" config/default_nginx

cp -fp config/default_nginx "$INSTALL_ROOT"/etc/nginx/sites-available/default

# Link php from INSTALL_ROOT to system root.

link_php

# Install PHP binaries as alternatives.

switch_version

}

# Function to set default_configure_options of php-build as per the SAPI.

configure_sapi_options() {

sapi=$1

sed -i "s/PHP_VERSION/$PHP_VERSION/g" "$definitions"/sapi/"$sapi"

cp "$definitions"/sapi/"$sapi" "$default_options"

}

# Function to link a ini file to scan directory of each SAPI.

link_ini_file() {

ini_file_path=$1

link_file_name=${2:-"$(basename "$ini_file_path")"}

# Create ini file if it does exist.

! [ -e "$ini_file_path" ] && echo '' | tee "$ini_file_path"

# Link the ini file to each SAPI.

for sapi in "${sapi_arr[@]}"; do

ln -sf "$ini_file_path" "$INSTALL_ROOT"/"$conf_dir"/"$sapi"/conf.d/"$link_file_name"

done

}

# Configure ini files of the PHP build.

configure_ini() {

# Get all php.ini in a bash array ini_file

mapfile -t ini_file < <(find "$INSTALL_ROOT/$conf_dir" -name "php.ini" -exec readlink -m {} +)

# Create a pecl.ini and link it as 99-pecl.ini.

# This can be used by pecl to enable extensions in each SAPI.

pecl_file="$mods_dir"/pecl.ini

link_ini_file "$pecl_file" "99-pecl.ini"

touch "$INSTALL_ROOT"/"$pecl_file"

# Set permissions to ini files

chmod 777 "${ini_file[@]}" \

"$INSTALL_ROOT"/"$pecl_file"

# Link php from INSTALL_ROOT to system root.

link_php

}

switch_version() {

echo "::group::switch_version"

# Install and set cgi binaries.

update-alternatives --install /usr/lib/libphp"${PHP_VERSION/%.*}".so libphp"${PHP_VERSION/%.*}" /usr/lib/libphp"$PHP_VERSION".so "${PHP_VERSION/./}" && ldconfig

update-alternatives --install /usr/lib/cgi-bin/php php-cgi-bin /usr/lib/cgi-bin/php"$PHP_VERSION" "${PHP_VERSION/./}"

update-alternatives --set php-cgi-bin /usr/lib/cgi-bin/php"$PHP_VERSION"

# Install and set fpm binary.

update-alternatives --install /usr/bin/php-fpm php-fpm /usr/sbin/php-fpm"$PHP_VERSION" "${PHP_VERSION/./}"

update-alternatives --set php-fpm /usr/sbin/php-fpm"$PHP_VERSION"

# Install and set other PHP binaries.

to_wait_arr=()

for tool in phar phar.phar php-config phpize php php-cgi phpdbg; do

(

update-alternatives --install /usr/bin/"$tool" "$tool" /usr/bin/"$tool$PHP_VERSION" "${PHP_VERSION/./}" \

--slave /usr/share/man/man1/"$tool".1 "$tool".1 /usr/share/man/man1/"$tool$PHP_VERSION".1

update-alternatives --set "$tool" /usr/bin/"$tool$PHP_VERSION"

) &

to_wait_arr+=( $! )

done

wait "${to_wait_arr[@]}"

echo "::endgroup::"

}

cleanup_environment() {

rm -rf ~/php-build /tmp/php-build /tmp/config.cache "${INSTALL_ROOT:?}" "${php_build_dir:?}"

mkdir -p ~/php-build "${INSTALL_ROOT:?}" "${php_build_dir:?}"

}

stage_library_overlays() {

local manifest repo_root

manifest=$(library_overlay_manifest)

repo_root=${GITHUB_WORKSPACE:-$(pwd)}

bash "$repo_root/scripts/lib/install.sh" --root "$INSTALL_ROOT" --php-version "$PHP_VERSION" --manifest "$manifest"

}

library_overlay_manifest() {

echo "$FAKE_ROOT/debian/php$PHP_VERSION-library-overlays.manifest"

}

if [[ "${#}" -eq 0 ]]; then

print_help

exit 0;

fi

# sanity checks

if [ -z "${BUILD}" ]; then

echo "BUILD is not defined"

exit 1;

fi

if [ -z "${PHP_VERSION}" ]; then

echo "PHP_VERSION is not defined"

exit 1;

fi

# Constants

action=$1

prefix=/usr

branch=master

lto=-lto

FAKE_ROOT=/tmp

INSTALL_ROOT="$FAKE_ROOT"/debian/php"$PHP_VERSION"

conf_dir=/etc/php/"$PHP_VERSION"

mods_dir="$conf_dir"/mods-available

php_build_dir='/usr/local/share/php-build'

definitions="$php_build_dir/definitions"

default_options="$php_build_dir/default_configure_options"

default_ini="production"

# Set thread-safe options.

if [ "${BUILD:?}" = "zts" ]; then

export PHP_PKG_SUFFIX=-zts

fi

# Import OS information to the environment.

. /etc/os-release

# Build SAPI

if [ "$action" = "build_sapi" ]; then

sapi=$2

# shellcheck source=.

. scripts/build_partials/sapi/"$sapi".sh

. scripts/build_partials/package.sh

. scripts/build_partials/php_build.sh

. scripts/build_partials/version.sh

cleanup_environment

get_version

setup_phpbuild

build_"${sapi}"

# Merge SAPI

elif [ "$action" = "merge" ]; then

. scripts/build_partials/cleanup.sh

. scripts/build_partials/extensions.sh

. scripts/build_partials/package.sh

. scripts/build_partials/strip.sh

. scripts/build_partials/pear.sh

merge_sapi

configure_ini

configure_shared_extensions

setup_pear

elif [ "$action" = "build_extensions" ]; then

. scripts/build_partials/extensions.sh

. scripts/build_partials/package.sh

install_staged_php

configure_build_flags extensions

PHP_INSTALL_ROOT="$INSTALL_ROOT"

ext_dir="$(php-config"$PHP_VERSION" --extension-dir)"

INSTALL_ROOT="$FAKE_ROOT"/debian/php"$PHP_VERSION"-extensions

EXTENSIONS_ONLY=true

export PHP_INSTALL_ROOT

export EXTENSIONS_ONLY

mkdir -p "$INSTALL_ROOT"

setup_custom_extensions

elif [ "$action" = "package" ]; then

. scripts/build_partials/cleanup.sh

. scripts/build_partials/extensions.sh

. scripts/build_partials/package.sh

. scripts/build_partials/strip.sh

install_staged_php

cp -af "$FAKE_ROOT"/debian/php"$PHP_VERSION"-extensions/* "$INSTALL_ROOT"/

link_php

IFS=' ' read -r -a sapi_arr <<<"${SAPI_LIST:?}"

ext_dir="$(php-config"$PHP_VERSION" --extension-dir)"

export ext_dir

enable_custom_extensions

prune_missing_extension_configs

cleanup

package_php

fi