Add Profile Checks

.github/workflows/profile-checks.yml

@@ -0,0 +1,31 @@
+name: Profile Checks
+
+on:
+ push:
+ branches: [ master ]
+ paths:
+ - 'etc/**'
+ - 'ci/check/profiles/**'
+ - 'src/firecfg/firecfg.config'
+ - 'contrib/sort.py'
+ pull_request:
+ branches: [ master ]
+ paths:
+ - 'etc/**'
+ - 'ci/check/profiles/**'
+ - 'src/firecfg/firecfg.config'
+ - 'contrib/sort.py'
+
+jobs:
+ profile-checks:
+ runs-on: ubuntu-20.04
+ steps:
+ - uses: actions/checkout@v2
+ - name: sort.py
+ run: ./ci/check/profiles/sort.py etc/inc/*.inc etc/{profile-a-l,profile-m-z}/*.profile
+ - name: private-etc-always-required.sh
+ run: ./ci/check/profiles/private-etc-always-required.sh etc/inc/*.inc etc/{profile-a-l,profile-m-z}/*.profile
+ - name: sort-disable-programs.sh
+ run: ./ci/check/profiles/sort-disable-programs.sh etc/inc/disable-programs.inc
+ - name: sort-firecfg.config.sh
+ run: ./ci/check/profiles/sort-firecfg.config.sh src/firecfg/firecfg.config

ci/check/profiles/private-etc-always-required.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+ALWAYS_REQUIRED=(alternatives ld.so.cache ld.so.preload)
+
+error=0
+while IFS=: read -r profile private_etc; do
+ for required in "${ALWAYS_REQUIRED[@]}"; do
+ if grep -q -v -E "( |,)$required(,|$)" <<<"$private_etc"; then
+ printf '%s misses %s\n' "$profile" "$required" >&2
+ error=1
+ fi
+ done
+done < <(grep "^private-etc " "$@")
+
+exit "$error"

ci/check/profiles/sort-disable-programs.sh

@@ -0,0 +1,2 @@
+#!/bin/sh
+tail -n +5 "$1" | LC_ALL=C sort -c -u

ci/check/profiles/sort-firecfg.config.sh

@@ -0,0 +1,2 @@
+#!/bin/sh
+tail -n +4 "$1" | sed 's/^# /#/' | LC_ALL=C sort -c -d

ci/check/profiles/sort.py

@@ -0,0 +1 @@
+../../../contrib/sort.py