;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2012, 2013 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2014, 2015 Mark H Weaver <mhw@netris.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

;;;
;;; Download a binary file from an external source.
;;;

(use-modules (ice-9 match)
             (web uri)
             (web client)
             (rnrs io ports)
             (srfi srfi-11)
             (guix utils)
             (guix hash))

(define %url-base
  "http://alpha.gnu.org/gnu/guix/bootstrap"

  ;; Alternately:
  ;;"http://www.fdn.fr/~lcourtes/software/guix/packages"
  )

;; XXX: Work around <http://bugs.gnu.org/13095>, present in Guile
;; up to 2.0.7.
(module-define! (resolve-module '(web client))
                'shutdown (const #f))

(define (file-name->uri file)
  "Return the URI for FILE."
  (match (string-tokenize file (char-set-complement (char-set #\/)))
    ((_ ... system basename)
     (string->uri (string-append %url-base "/" system
                                 (match system
                                   ("armhf-linux"
                                    "/20150101/")
                                   (_
                                    "/20131110/"))
                                 basename)))))

(match (command-line)
  ((_ file expected-hash)
   (let ((uri (file-name->uri file)))
     (format #t "downloading file `~a' from `~a'...~%"
             file (uri->string uri))
     (let*-values (((resp data) (http-get uri #:decode-body? #f))
                   ((hash)      (bytevector->base16-string (sha256 data)))
                   ((part)      (string-append file ".part")))
       (if (string=? expected-hash hash)
           (begin
             (call-with-output-file part
               (lambda (port)
                 (put-bytevector port data)))
             (rename-file part file))
           (begin
             (format (current-error-port)
                     "file at `~a' has SHA256 ~a; expected ~a~%"
                     (uri->string uri) hash expected-hash)
             (exit 1)))))))
:31:35 +0100'>2020-01-14</span></td><td><a href='/guix/commit/gnu/packages/file.scm?id=488c30437ca12ea6bf487180c1d28df381413e98'>gnu: file: Update to 5.38.</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2019-10-28 12:47:59 -0400'>2019-10-28</span></td><td><a href='/guix/commit/gnu/packages/file.scm?id=1051facc8108110e582f2c0a9d8a5fd38b1486b6'>gnu: file: Update to 5.37 [fixes CVE-2019-18218].</a><span class='msg-avail'>...</span></td><td>Leo Famulari</td></tr>
<tr><td><span title='2019-05-01 23:11:41 +0200'>2019-05-01</span></td><td><a href='/guix/commit/gnu/packages/file.scm?id=3b458d5462e6bbd852c2dc5c6670d5655abf53f5'>Merge branch 'master' into core-updates</a></td><td>Marius Bakke</td></tr>
<tr><td><span title='2019-03-30 15:19:32 +0100'>2019-03-30</span></td><td><a href='/guix/commit/gnu/packages/file.scm?id=528ea990c3a815cb4b0ded913ea22cdc778839bd'>gnu: Use 'this-package' as a native input instead of 'self-native-input?'.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-02-07 22:10:16 +0100'>2019-02-07</span></td><td><a href='/guix/commit/gnu/packages/file.scm?id=cc43d807c08af02d31770a011881990d46428737'>gnu: file: Incorporate grafted changes.</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2018-12-24 11:12:52 +0200'>2018-12-24</span></td><td><a href='/guix/commit/gnu/packages/file.scm?id=e47c69f22638dc92ee962942b8e24284c8dee832'>gnu: file: Fix CVE-2018-10360.</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>