pre-receive

#!/bin/bash

# Puppet attempts to source ~/.puppet and will error if $HOME is not set
if [[ -z $HOME ]]
then
  HOME="$(getent passwd "${USER}" | awk -F ':' '{print $6}')"
  export HOME
fi

failures=0
RC=0

hook_dir="$(dirname "$0")"
hook_symlink="$(readlink -f "$0")"

# Figure out where commit hooks are if pre-receive is setup as a symlink
if [[ ! -z "$hook_symlink" ]]; then
  subhook_root="$(dirname "$hook_symlink")/commit_hooks"
else
  subhook_root="$hook_dir/commit_hooks"
fi

tmptree=$(mktemp -d)

# Prevent tput from throwing an error by ensuring that $TERM is always set
if [[ -z "$TERM" ]]; then
    TERM=dumb
fi
export TERM

# Decide if we want puppet-lint
# Decide if we want the puppet future parser (already on puppet 4?)
CHECK_PUPPET_LINT="enabled"
USE_PUPPET_FUTURE_PARSER="enabled"
CHECK_INITIAL_COMMIT="disabled"
if [[ -e ${subhook_root}/config.cfg ]] ; then
    source "${subhook_root}/config.cfg"
fi

# This is required for GitLab
# See https://github.com/drwahl/puppet-git-hooks/issues/76
if [[ $UNSET_RUBY_ENV == "enabled" ]] ; then
    unset BUNDLE_GEMFILE RUBYLIB RUBYOPT GEM_HOME
fi

# Only puppet 3.2.1 - 3.8 support "--parser future" option.
if [[ "$USE_PUPPET_FUTURE_PARSER" == "enabled" ]]; then
  case $(puppet --version) in
    3.2.[1-9]) ;;
    3.[3-8]*)  ;;
    *) USE_PUPPET_FUTURE_PARSER="disabled" ;;
  esac
fi

while read -r oldrev newrev refname; do
    git archive "$newrev" | tar x -C "$tmptree"

    # for a new branch oldrev is 0{40}, set oldrev to the commit where we branched off the parent
    if [[ $oldrev == "0000000000000000000000000000000000000000" ]]; then
      oldrev=$(git rev-list --boundary $newrev --not --all | sed -n 's/^-//p')
    fi

    files_list=''
    if [[ "x$oldrev" == 'x' ]]; then
      if [[ $CHECK_INITIAL_COMMIT != "disabled" ]] ; then
        files_list=$(git ls-tree --full-tree -r HEAD --name-only)
      else
        echo "Skipping file checks this is the initial commit..."
      fi
    else
      files_list=$(git diff --name-only "$oldrev" "$newrev" --diff-filter=ACM)
    fi

    for changedfile in $files_list; do
        tmpmodule="$tmptree/$changedfile"
        [[ -f "$tmpmodule" ]] || continue
        #check puppet manifest syntax
        if type puppet >/dev/null 2>&1; then
            if [[ $(echo "$changedfile" | grep -q '\.*\.epp$'; echo $?) -eq 0 ]]; then
                ${subhook_root}/puppet_epp_syntax_check.sh "$tmpmodule" "${tmptree}/"
                RC=$?
                if [[ $RC -ne 0 ]]; then
                  failures=$((failures + 1))
                fi
            elif [[ $(echo "$changedfile" | grep -q '\.*\.pp$'; echo $?) -eq 0 ]]; then
                ${subhook_root}/puppet_manifest_syntax_check.sh "$tmpmodule" "${tmptree}/" "$USE_PUPPET_FUTURE_PARSER"
                RC=$?
                if [[ $RC -ne 0 ]]; then
                  failures=$((failures + 1))
                fi
            fi
        else
            echo "puppet not installed. Skipping puppet syntax checks..."
        fi

        if type ruby >/dev/null 2>&1; then
            #check ruby syntax
            if [[ $(echo "$changedfile" | grep -q '\.*\.rb$'; echo $?) -eq 0 ]]; then
                ${subhook_root}/ruby_syntax_check.sh "$tmpmodule" "${tmptree}/"
                RC=$?
                if [[ $RC -ne 0 ]]; then
                  failures=$((failures + 1))
                fi
            fi

            #check erb (template file) syntax
            if type erb >/dev/null 2>&1; then
                if [[ $(echo "$changedfile" | grep -q '\.*\.erb$'; echo $?) -eq 0 ]]; then
                    ${subhook_root}/erb_template_syntax_check.sh "$tmpmodule" "${tmptree}/"
                    RC=$?
                    if [[ $RC -ne 0 ]]; then
                      failures=$((failures + 1))
                    fi
                fi
            else
                echo "erb not installed. Skipping erb template checks..."
            fi

            #check hiera data (json) syntax
            if [[ $(echo "$changedfile" | grep -q '\.*\.json$'; echo $?) -eq 0 ]]; then
                ${subhook_root}/json_syntax_check.sh "$tmpmodule" "${tmptree}/"
                RC=$?
                if [[ $RC -ne 0 ]]; then
                  failures=$((failures + 1))
                fi
            fi
        else
            echo "ruby not installed. Skipping ruby/erb/json checks..."
        fi

        if type yamllint >/dev/null 2>&1 || type ruby >/dev/null 2>&1; then
            #check hiera data (yaml/yml/eyaml/eyml) syntax
            if echo "$changedfile" | grep -iq '\.e\?ya\?ml$'; then
                ${subhook_root}/yaml_syntax_check.sh "$tmpmodule" "${tmptree}/"
                RC=$?
                if [[ $RC -ne 0 ]]; then
                  failures=$((failures + 1))
                fi
            fi
        else
            echo "yamllint nor ruby not installed. Skipping yaml checks..."
        fi

        #puppet manifest styleguide compliance
        if [[ $CHECK_PUPPET_LINT != "disabled" ]] ; then
            if type puppet-lint >/dev/null 2>&1; then
                if [[ $(echo "$changedfile" | grep -q '\.*\.pp$' ; echo $?) -eq 0 ]]; then
                    ${subhook_root}/puppet_lint_checks.sh "$CHECK_PUPPET_LINT" "$tmpmodule" "${tmptree}/"
                    RC=$?
                    if [[ $RC -ne 0 ]]; then
                      failures=$((failures + 1))
                    fi
                fi
            else
                echo "puppet-lint not installed. Skipping puppet-lint tests..."
            fi
        fi

        # g10k validation
        if [[ "$CHECK_G10K" != "disabled" ]] ; then
          if hash g10k >/dev/null 2>&1; then
            if [[ "$changedfile" = "Puppetfile" ]]; then
              printf "running g10k validation on $tmptree/Puppetfile... "
              if g10k -validate -puppetfilelocation "$tmptree/Puppetfile"; then
                echo "ok"
              else
                failures=$((failures + 1))
              fi
            fi
          else
            echo "g10k not installed. Skipping g10k Puppetfile test..."
          fi
        fi

        #r10k puppetfile syntax check
        if [[ "$CHECK_R10K" != "disabled" ]] ; then
          if hash r10k >/dev/null 2>&1; then
            if [[ "$changedfile" = "Puppetfile" ]]; then
                  "${subhook_root}/r10k_syntax_check.sh" "$tmptree/$changedfile"
                  RC=$?
                  if [[ "$RC" -ne 0 ]]; then
                          failures=$((failures + 1))
                  fi
            fi
          else
              echo "r10k not installed. Skipping r10k Puppetfile test..."
          fi
        fi
    done
done
rm -rf "$tmptree"

#summary
if [[ $failures -ne 0 ]]; then
    echo -e "$(tput setaf 1)Error: $failures subhooks failed. Declining push.$(tput sgr0)"
    exit 1
fi

exit 0