#!/usr/bin/env bash## Builds a .rpm package as part of the bundling process.## Required environment variables:#   - WORKSPACE_ROOT_DIR: The root directory of the Cargo workspace.#   - DIST_DIR: A temporary directory we can use for staging files as we build the package.#   - OUT_DIR: The directory into which we should place the final package.#   - CARGO_TARGET_OUTPUT_DIR: The cargo target directory containing build output.#   - RELEASE_CHANNEL: The release channel we're bundling (e.g.: "dev").#   - BUNDLE_ID: The app ID for the bundle (e.g.: "dev.warp.WarpDev").#   - EXECUTABLE_PATH: The path to the compiled executable we want to install.#   - BINARY_NAME: The name that the compiled executable should have on the target machine.#   - ARTIFACT: Which artifact to build: app or cli. set -e # Extract channel suffix from BINARY_NAMEif [ "$ARTIFACT" = "cli" ]; then  CHANNEL_SUFFIX="${BINARY_NAME#oz}"else  CHANNEL_SUFFIX="${BINARY_NAME#warp}"fiREPO_NAME="warpdotdev$CHANNEL_SUFFIX" # On Linux, we keep the `-stable` suffix for stable to avoid package conflicts.# The binary name is still `oz`, and the repo name is still `warpdotdev`.if [ "$ARTIFACT" = "cli" -a "$RELEASE_CHANNEL" = "stable" ]; then  CHANNEL_SUFFIX="-stable"fi ARTIFACT="${ARTIFACT:-app}"if [ "$ARTIFACT" = "app" ]; then  PACKAGE_NAME="warp-terminal$CHANNEL_SUFFIX"elif [ "$ARTIFACT" = "cli" ]; then  PACKAGE_NAME="oz$CHANNEL_SUFFIX"else  echo "::error ::Unknown ARTIFACT: $ARTIFACT (expected 'app' or 'cli')"  exit 1fi BUILD_ARCH="${BUILD_ARCH:-$(uname -m)}"if [ "$BUILD_ARCH" = "aarch64" ]; then  ARCH="aarch64"else  ARCH="x86_64"fi RPMBUILD_DIR="$DIST_DIR/rpmbuild" FULL_PACKAGE_NAME="$PACKAGE_NAME-$ARCH"PKGDIR="$DIST_DIR/rpmpkg/$FULL_PACKAGE_NAME" cleanup() {  # Delete the rpmbuild directory where the build took place.  if [ -d "$RPMBUILD_DIR" ]; then    rm -rf "$RPMBUILD_DIR"  fi} # Run cleanup() when the script terminates (whether it succeeded or failed).trap cleanup EXIT # Construct a directory that contains the build tree.rm -rf "$RPMBUILD_DIR"mkdir -p "$RPMBUILD_DIR"/{SPEC,RPMS} # Move the RPM-specific package metadata into the package directory.VERSION="$GIT_RELEASE_TAG"RELEASE="1"sed \    "s#@@CHANNEL_SUFFIX@@#$CHANNEL_SUFFIX#g; \     s#@@BINARY_NAME@@#$BINARY_NAME#g; \     s#@@VERSION@@#$VERSION#g; \     s#@@RELEASE@@#$RELEASE#g; \     s#@@ARCH@@#$ARCH#g; \     s#@@WORKSPACEROOT@@#$WORKSPACE_ROOT_DIR#g; \     s#@@BUNDLEID@@#$BUNDLE_ID#g; \     s#@@REPO_NAME@@#$REPO_NAME#g; \     s#@@RELEASE_CHANNEL@@#$RELEASE_CHANNEL#g" \    < "$WORKSPACE_ROOT_DIR/resources/linux/rpm/$ARTIFACT/warp.spec.template" \    > "$RPMBUILD_DIR/SPEC/warp.spec" # Build the actual package.fakeroot rpmbuild -v -bb "$RPMBUILD_DIR/SPEC/warp.spec" --target="$ARCH" --define "_topdir $RPMBUILD_DIR" # Copy the package to the output directory.RPM_NAME="$PACKAGE_NAME-$VERSION-$RELEASE.$ARCH.rpm"cp "$RPMBUILD_DIR/RPMS/$ARCH/$RPM_NAME" "$OUT_DIR" # If we're running on GitHub, sign the package using our signing key that# should have already been added to the gpg-agent with a preset passphrase.if [ "${GITHUB_ACTIONS}" == "true" ]; then  # Import our signing key's public key into rpm so the signature can be  # verified.  sudo rpm --import https://releases.warp.dev/linux/keys/warp.asc   # We use batch mode with tty-based pin entry to ensure that the build doesn't  # hang waiting on user input if, for some reason, we failed to preset the  # passphrase for the signing key in the gpg-agent cache.  #  # Additionally, until we know that this works, don't let an error here fail  # the build.  rpmsign \    --verbose \    --addsign --key-id "linux-maintainers@warp.dev" \    --define "_gpg_sign_cmd_extra_args --batch --yes --pinentry-mode loopback" --define "_gpg_digest_algo sha256" \    "$OUT_DIR/$RPM_NAME" \    || truefi echo "Successfully built .rpm package at $OUT_DIR/$RPM_NAME!"