install_cryptopro.sh

#!/bin/sh

# see https://www.altlinux.org/КриптоПро

LOCALPATH="/opt/distr/CryptoPro"
LOCALPATH2="/var/ftp/pvt/Linux/CryptoPro CSP/5.0/5.0.11453"

# TODO: only if not root
SUDO=sudo

BIARCH=''
[ "$(distro_info -a)" = "x86_64" ] && BIARCH="i586-"

fatal()
{
    echo "FATAL: $*" >&2
    exit 1
}

info()
{
    echo "$*"
}

get_distr_dir()
{
    local i
    for i in "$LOCALPATH" "$LOCALPATH2" . ; do
        [ -f "$i/$1" ] && echo "$i" && return
    done
    return 1
}

unpack_tgz()
{
    epm assure erc || fatal
    local ar=$(get_distr_dir $1)
    [ -n "$ar" ] || fatal "Can't find $1 in the current dir $(pwd). Download it and put in here or it $LOCALPATH."
    erc "$ar/$1"
}

install_lsb64()
{
    epmi lsb-release lsb-init
    epme i586-lsb-core --nodeps
    epm reinstall lsb-core || fatal
}

install_lsb32()
{
    epmi lsb-release lsb-init
    case $(distro_info -d) in
        ALTLinux)
            ;;
        *)
            fatal "$(distro_info -e) is not yet supported"
            ;;
    esac

    if [ -z "$BIARCH" ] ; then
        epmi lsb-core
        return
    fi

    # Workaround for https://bugzilla.altlinux.org/show_bug.cgi?id=38855
    # Следующие пакеты имеют неудовлетворенные зависимости:
    #    lsb-cprocsp-rdr.32bit: Для установки требует: lsb-core-ia32 (>= 3.0) но пакет не может быть установлен

    # HACK:
    epm assure eget

    # for install deps
    epmi lsb-core
    epme i586-lsb-core --nodeps

    case $(distro_info -v) in
        Sisyphus)
            LSBCOREURL=http://ftp.basealt.ru/pub/distributions/ALTLinux/Sisyphus/i586/RPMS.classic/lsb-core-5.0-alt1.i586.rpm
            ;;
        p10)
            LSBCOREURL=http://ftp.basealt.ru/pub/distributions/ALTLinux/p10/branch/i586/RPMS.classic/lsb-core-5.0-alt1.i586.rpm
            ;;
        p9)
            LSBCOREURL=http://ftp.basealt.ru/pub/distributions/ALTLinux/p9/branch/i586/RPMS.classic/lsb-core-4.0-alt12.i586.rpm
            ;;
        p8)
            LSBCOREURL=http://ftp.basealt.ru/pub/distributions/ALTLinux/p8/branch/i586/RPMS.classic/lsb-core-4.0-alt5.i586.rpm
            ;;
        *)
            fatal "$(distro_info -e) is not yet supported"
            ;;
    esac

    eget $LSBCOREURL
    epme lsb-core --nodeps
    epmi $(basename $LSBCOREURL)
}

DEVEL=''
[ "$1" = "--devel" ] && DEVEL=$1 && shift
GUI='--gui'
[ "$1" = "--nogui" ] && GUI='' && shift

INSTALL32=''
INSTALL64=''
case "$1" in
    32)
        INSTALL32="$1"
        ;;
    64)
        INSTALL64="$1"
        ;;
    both)
        INSTALL32="$1"
        INSTALL64="$1"
        ;;
    *)
        fatal "Run with 32|64|both param"
esac
shift

# TODO: improve
[ "$1" = "--devel" ] && DEVEL=$1 && shift
[ "$1" = "--nogui" ] && GUI='' && shift

if [ -n "$(epmqp cprocsp | grep "^cprocsp-")" ] ; then
    fatal "You are already have cprocsp packages installed. Run uninstall first."
fi


if [ -n "$INSTALL64" ] ; then
    if [ -d linux-amd64 ] ; then
        echo "Note: Will use existed linux-amd64 ..."
        # rm -rfv linux-amd64/
        # [ -d linux-amd64 ] && fatal "Remove linux-amd64 dir first"
    else
        unpack_tgz linux-amd64.tgz || fatal "Can't unpack"
    fi
    cd linux-amd64 || fatal
    install_lsb64 || fatal

    a='' ./integrity.sh || fatal

    echo
    echo "Installing x86_64 packages ..."

    # whiptail for install-gui.sh
    # epmi newt52

    $SUDO bash ./install.sh || fatal


    if [ -n "$DEVEL" ] ; then
         epmi lsb-cprocsp-devel-*.noarch.rpm
    fi

    # PKCS#11
    epmi lsb-cprocsp-pkcs11-64-*.x86_64.rpm

    if epmqp jcPKCS11-2 ; then
        # Note: have brain broken postinstall script
        epmi cprocsp-rdr-jacarta-64-*.x86_64.rpm  || fatal
    fi
    if epmqp librtpkcs11ecp ; then
        epmi cprocsp-rdr-rutoken-64-*.x86_64.rpm  || fatal
    fi
    #if epmqp libpcsclite
    epmi cprocsp-rdr-pcsc-64-*.x86_64.rpm || fatal

    if [ -n "$GUI" ] ; then
        epmi libpango

        epmi libgtk+2 libSM
        epmi cprocsp-cptools-gtk-64-*.x86_64.rpm
        epmi cprocsp-rdr-gui-gtk-64-*.x86_64.rpm
    fi

    cd -
    # needed for unstalled
    # rm -rfv linux-amd64
fi

if [ -n "$INSTALL32" ] ; then
    if [ -d linux-ia32 ] ; then 
        echo "Note: Will use existed linux-ia32 ..."
        # rm -rfv linux-ia32/
        # [ -d linux-ia32 ] && fatal "Remove linux-ia32 dir first"
    else
        unpack_tgz linux-ia32.tgz || fatal "Can't unpack"
    fi

    cd linux-ia32 || fatal
    install_lsb32 || fatal

    a='' ./integrity.sh || fatal

    echo
    echo "Installing i686 packages ..."

    if [ "$INSTALL32" = "both" ] ; then
        # hack, otherwise install.sh removed 64bit packages
        epmi cprocsp-curl-*.i686.rpm lsb-cprocsp-rdr-[45]*.i686.rpm \
             lsb-cprocsp-kc1-*.i686.rpm lsb-cprocsp-capilite-*.i686.rpm cprocsp-rdr-pcsc-*.i686.rpm
    else
        $SUDO i586 bash ./install.sh || fatal
    fi

    if [ -n "$DEVEL" ] ; then
         epmi lsb-cprocsp-devel-*.noarch.rpm
    fi

    if [ -n "$BIARCH" ] ; then
        epmi i586-glibc-nss i586-glibc-gconv-modules
        epm installed sssd-client && epmi i586-sssd-client
    fi

    # PKCS#11
    epmi lsb-cprocsp-pkcs11-*.i686.rpm

    # TODO: check if the system has rutoken/jacarta supports
    info "Check if Jacarta support is needed ..."
    if epm --quiet installed jcPKCS11-2 >/dev/null ; then
        # Note: have brain broken postinstall script
        epmi cprocsp-rdr-jacarta-*.i686.rpm
    fi

    info "Check if ruToken support is needed ..."
    if epm --quiet installed librtpkcs11ecp >/dev/null ; then
        epmi cprocsp-rdr-rutoken-*.i686.rpm  || fatal
    fi

    #if epmqp libpcsclite
    epmi cprocsp-rdr-pcsc-*.i686.rpm || fatal

    if [ -n "$GUI" ] ; then
        epmi --skip-installed ${BIARCH}libpango ${BIARCH}libgtk+2 ${BIARCH}libSM

        epmi cprocsp-cptools-gtk-*.i686.rpm
        epmi cprocsp-rdr-gui-gtk-*.i686.rpm
    fi

    cd -
    # needed for uninstall
    # rm -rfv linux-ia32
fi