feat: add apko tool (#5083)

Author: punsoong-canva

docs/custom-registries.md

@@ -30,6 +30,20 @@ RUN install-tool dart 2.18.0
 
 GitHub releases are redirecting from `https://github.com/<org>/<repo>/releases/download/<version>/<file>` to `https://objects.githubusercontent.com/<some-url>` which seems to be an Amazon S3 bucket.
 
+## `apko`
+
+apko releases are downloaded from:
+
+- `<https://github.com/chainguard-dev/apko/releases>
+
+Samples:
+
+```txt
+https://github.com/chainguard-dev/apko/releases/download/v0.30.11/apko_0.30.11_linux_amd64.tar.gz
+https://github.com/chainguard-dev/apko/releases/download/v0.30.11/apko_0.30.11_linux_arm64.tar.gz
+https://github.com/chainguard-dev/apko/releases/download/v0.30.11/checksums.txt
+```
+
 ## `bazelisk`
 
 Bazelisk releases are downloaded from:

src/cli/install-tool/index.ts

@@ -1,6 +1,7 @@
 import { Container, injectFromHierarchy, injectable } from 'inversify';
 import { PathService, createContainer } from '../services';
 import { ResolverMap } from '../tools';
+import { ApkoInstallService } from '../tools/apko';
 import { BazeliskInstallService } from '../tools/bazelisk';
 import { BunInstallService } from '../tools/bun';
 import { DartInstallService } from '../tools/dart';
@@ -105,6 +106,7 @@ async function prepareInstallContainer(): Promise<Container> {
   container.bind(LinkToolService).toSelf();
 
   // modern tool services
+  container.bind(INSTALL_TOOL_TOKEN).to(ApkoInstallService);
   container.bind(INSTALL_TOOL_TOKEN).to(ComposerInstallService);
   container.bind(INSTALL_TOOL_TOKEN).to(BazeliskInstallService);
   container.bind(INSTALL_TOOL_TOKEN).to(BunInstallService);

src/cli/tools/apko.ts

@@ -0,0 +1,66 @@
+import fs from 'node:fs/promises';
+import { join } from 'node:path';
+import { execa } from 'execa';
+import { injectFromHierarchy, injectable } from 'inversify';
+import { BaseInstallService } from '../install-tool/base-install.service';
+
+@injectable()
+@injectFromHierarchy()
+export class ApkoInstallService extends BaseInstallService {
+  readonly name = 'apko';
+
+  private get ghArch(): string {
+    switch (this.envSvc.arch) {
+      case 'arm64':
+        return 'arm64';
+      case 'amd64':
+        return 'amd64';
+    }
+  }
+
+  override async install(version: string): Promise<void> {
+    /**
+     * @example
+     * @see {@href https://github.com/chainguard-dev/apko/releases/tag/v0.30.11}
+     */
+    const baseUrl = `https://github.com/chainguard-dev/apko/releases/download/v${version}/`;
+
+    const filename = `apko_${version}_linux_${this.ghArch}.tar.gz`;
+
+    const checksumFile = await this.http.download({
+      url: `${baseUrl}checksums.txt`,
+    });
+    const expectedChecksum = (await fs.readFile(checksumFile, 'utf-8'))
+      .split('\n')
+      .find((l) => l.includes(filename))
+      ?.split(' ')[0];
+
+    const file = await this.http.download({
+      url: `${baseUrl}${filename}`,
+      checksumType: 'sha256',
+      expectedChecksum,
+    });
+
+    await this.pathSvc.ensureToolPath(this.name);
+
+    const path = join(
+      await this.pathSvc.createVersionedToolPath(this.name, version),
+      'bin',
+    );
+    await fs.mkdir(path);
+    await this.compress.extract({
+      file,
+      cwd: path,
+      strip: 1,
+    });
+  }
+
+  override async link(version: string): Promise<void> {
+    const src = join(this.pathSvc.versionedToolPath(this.name, version), 'bin');
+    await this.shellwrapper({ srcDir: src });
+  }
+
+  override async test(_version: string): Promise<void> {
+    await execa(this.name, ['version'], { stdio: ['inherit', 'inherit', 1] });
+  }
+}

src/cli/tools/index.ts

@@ -1,6 +1,7 @@
 import type { InstallToolType } from '../install-tool';
 
 export const NoPrepareTools = [
+  'apko',
   'bazelisk',
   'bower',
   'bun',

test/latest/Dockerfile

@@ -225,6 +225,9 @@ RUN install-tool bun 1.2.22
 # renovate: datasource=github-releases packageName=denoland/deno
 RUN install-tool deno 2.5.1
 
+# renovate: datasource=github-releases packageName=chainguard-dev/apko
+RUN install-tool apko 0.30.11
+
 # renovate: datasource=github-releases packageName=jetify-com/devbox
 RUN install-tool devbox 0.16.0
 

test/latest/Dockerfile.arm64

@@ -56,6 +56,14 @@ FROM base AS test-deno
 # renovate: datasource=github-releases packageName=denoland/deno
 RUN install-tool deno 2.5.1
 
+#--------------------------------------
+# Image: apko
+#--------------------------------------
+FROM base AS test-apko
+
+# renovate: datasource=github-releases packageName=chainguard-dev/apko
+RUN install-tool apko 0.30.11
+
 #--------------------------------------
 # Image: devbox
 #--------------------------------------
@@ -159,6 +167,7 @@ FROM base
 COPY --from=test-bazelisk /.dummy /.dummy
 COPY --from=test-bun /.dummy /.dummy
 COPY --from=test-deno /.dummy /.dummy
+COPY --from=test-apko /.dummy /.dummy
 COPY --from=test-devbox /.dummy /.dummy
 COPY --from=test-docker /.dummy /.dummy
 COPY --from=test-git /.dummy /.dummy