mirror of
https://github.com/aaddrick/claude-desktop-debian.git
synced 2026-05-17 00:26:21 +03:00
15813ca11f
Move the suid bit on chrome-sandbox into the rpm spec's %files section via %attr(4755, root, root). The previous %post chmod 4755 only ran on fresh installs and silently regressed when the scriptlet was skipped (e.g., --noscripts), leaving a non-suid chrome-sandbox that breaks sandboxing on every launch. Also add an assert_setuid helper to tests/test-artifact-common.sh and wire it up in test-artifact-rpm.sh so a future spec regression to the old %post pattern fails CI rather than shipping silently. Verified: built rpm in fedora:42 container, installed via dnf, ls confirms -rwsr-xr-x on chrome-sandbox, %post no longer chmods.
280 lines
8.3 KiB
Bash
Executable File
280 lines
8.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# Arguments passed from the main script
|
|
version="$1"
|
|
architecture="$2"
|
|
work_dir="$3" # The top-level build directory (e.g., ./build)
|
|
app_staging_dir="$4" # Directory containing the prepared app files
|
|
package_name="$5"
|
|
# $6 is maintainer (unused in RPM spec, kept for parameter compatibility with deb)
|
|
description="$7"
|
|
|
|
echo '--- Starting RPM Package Build ---'
|
|
echo "Version: $version"
|
|
|
|
# RPM Version field cannot contain hyphens. If version contains a hyphen,
|
|
# split into version (before hyphen) and release (after hyphen).
|
|
# e.g., "1.1.799-1.3.3" -> rpm_version="1.1.799", rpm_release="1.3.3"
|
|
if [[ $version == *-* ]]; then
|
|
rpm_version="${version%%-*}"
|
|
rpm_release="${version#*-}"
|
|
echo "RPM Version: $rpm_version"
|
|
echo "RPM Release: $rpm_release"
|
|
else
|
|
rpm_version="$version"
|
|
rpm_release="1"
|
|
fi
|
|
echo "Architecture: $architecture"
|
|
echo "Work Directory: $work_dir"
|
|
echo "App Staging Directory: $app_staging_dir"
|
|
echo "Package Name: $package_name"
|
|
|
|
# Map architecture to RPM naming
|
|
case "$architecture" in
|
|
amd64) rpm_arch='x86_64' ;;
|
|
arm64) rpm_arch='aarch64' ;;
|
|
*)
|
|
echo "Unsupported architecture for RPM: $architecture" >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
# RPM build directories
|
|
rpmbuild_dir="$work_dir/rpmbuild"
|
|
|
|
# Clean previous RPM build structure if it exists
|
|
rm -rf "$rpmbuild_dir"
|
|
|
|
# Create RPM build directory structure
|
|
echo "Creating RPM build structure in $rpmbuild_dir..."
|
|
mkdir -p "$rpmbuild_dir"/{BUILD,RPMS,SOURCES,SPECS,SRPMS} || exit 1
|
|
|
|
# Get script directory for accessing launcher-common.sh
|
|
script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
|
|
# Create staging area for files to include
|
|
staging_dir="$work_dir/rpm-staging"
|
|
rm -rf "$staging_dir"
|
|
mkdir -p "$staging_dir" || exit 1
|
|
|
|
# --- Create Desktop Entry ---
|
|
echo 'Creating desktop entry...'
|
|
cat > "$staging_dir/claude-desktop.desktop" << EOF
|
|
[Desktop Entry]
|
|
Name=Claude
|
|
Exec=/usr/bin/claude-desktop %u
|
|
Icon=claude-desktop
|
|
Type=Application
|
|
Terminal=false
|
|
Categories=Office;Utility;
|
|
MimeType=x-scheme-handler/claude;
|
|
StartupWMClass=Claude
|
|
EOF
|
|
|
|
# --- Create Launcher Script ---
|
|
echo 'Creating launcher script...'
|
|
cat > "$staging_dir/claude-desktop" << EOF
|
|
#!/usr/bin/env bash
|
|
|
|
# Source shared launcher library
|
|
source "/usr/lib/$package_name/launcher-common.sh"
|
|
|
|
# Handle --doctor flag before anything else
|
|
if [[ "\${1:-}" == '--doctor' ]]; then
|
|
local_electron_path="/usr/lib/$package_name/node_modules/electron/dist/electron"
|
|
run_doctor "\$local_electron_path"
|
|
exit \$?
|
|
fi
|
|
|
|
# Setup logging and environment
|
|
setup_logging || exit 1
|
|
setup_electron_env
|
|
cleanup_orphaned_cowork_daemon
|
|
cleanup_stale_lock
|
|
cleanup_stale_cowork_socket
|
|
|
|
# Log startup info
|
|
log_message '--- Claude Desktop Launcher Start ---'
|
|
log_message "Timestamp: \$(date)"
|
|
log_message "Arguments: \$@"
|
|
log_session_env
|
|
|
|
# Check for display
|
|
if ! check_display; then
|
|
log_message 'No display detected (TTY session)'
|
|
echo 'Error: Claude Desktop requires a graphical desktop environment.' >&2
|
|
echo 'Please run from within an X11 or Wayland session, not from a TTY.' >&2
|
|
exit 1
|
|
fi
|
|
|
|
# Detect display backend
|
|
detect_display_backend
|
|
if [[ \$is_wayland == true ]]; then
|
|
log_message 'Wayland detected'
|
|
fi
|
|
|
|
# Determine Electron executable path
|
|
electron_exec='electron'
|
|
local_electron_path="/usr/lib/$package_name/node_modules/electron/dist/electron"
|
|
if [[ -f \$local_electron_path ]]; then
|
|
electron_exec="\$local_electron_path"
|
|
log_message "Using local Electron: \$electron_exec"
|
|
else
|
|
if command -v electron &> /dev/null; then
|
|
log_message "Using global Electron: \$electron_exec"
|
|
else
|
|
log_message 'Error: Electron executable not found'
|
|
if command -v zenity &> /dev/null; then
|
|
zenity --error \
|
|
--text='Claude Desktop cannot start because the Electron framework is missing.'
|
|
elif command -v kdialog &> /dev/null; then
|
|
kdialog --error \
|
|
'Claude Desktop cannot start because the Electron framework is missing.'
|
|
fi
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
# App path
|
|
app_path="/usr/lib/$package_name/node_modules/electron/dist/resources/app.asar"
|
|
|
|
# Build electron args - use 'deb' type (same sandbox behavior)
|
|
build_electron_args 'deb'
|
|
|
|
# Add app path LAST
|
|
electron_args+=("\$app_path")
|
|
|
|
# Change to application directory
|
|
app_dir="/usr/lib/$package_name"
|
|
log_message "Changing directory to \$app_dir"
|
|
cd "\$app_dir" || { log_message "Failed to cd to \$app_dir"; exit 1; }
|
|
|
|
# Execute Electron
|
|
log_message "Executing: \$electron_exec \${electron_args[*]} \$*"
|
|
"\$electron_exec" "\${electron_args[@]}" "\$@" >> "\$log_file" 2>&1
|
|
exit_code=\$?
|
|
log_message "Electron exited with code: \$exit_code"
|
|
log_message '--- Claude Desktop Launcher End ---'
|
|
exit \$exit_code
|
|
EOF
|
|
chmod +x "$staging_dir/claude-desktop"
|
|
|
|
# --- Create RPM Spec File ---
|
|
echo 'Creating RPM spec file...'
|
|
|
|
# Build icon installation commands
|
|
icon_install_cmds=""
|
|
declare -A icon_files=(
|
|
[16]=13 [24]=11 [32]=10 [48]=8 [64]=7 [256]=6
|
|
)
|
|
|
|
for size in "${!icon_files[@]}"; do
|
|
icon_source_path="$work_dir/claude_${icon_files[$size]}_${size}x${size}x32.png"
|
|
if [[ -f $icon_source_path ]]; then
|
|
icon_install_cmds+="mkdir -p %{buildroot}/usr/share/icons/hicolor/${size}x${size}/apps
|
|
install -Dm 644 $icon_source_path %{buildroot}/usr/share/icons/hicolor/${size}x${size}/apps/claude-desktop.png
|
|
"
|
|
fi
|
|
done
|
|
|
|
cat > "$rpmbuild_dir/SPECS/$package_name.spec" << SPECEOF
|
|
Name: $package_name
|
|
Version: $rpm_version
|
|
Release: $rpm_release%{?dist}
|
|
Summary: $description
|
|
|
|
License: Proprietary
|
|
URL: https://claude.ai
|
|
|
|
# Disable automatic dependency scanning (we bundle everything)
|
|
AutoReqProv: no
|
|
|
|
# Disable debug package generation
|
|
%define debug_package %{nil}
|
|
|
|
# Disable binary stripping (Electron binaries don't like it)
|
|
%define __strip /bin/true
|
|
|
|
# Disable build ID generation (avoids issues with Electron binaries)
|
|
%define _build_id_links none
|
|
|
|
%description
|
|
Claude is an AI assistant from Anthropic.
|
|
This package provides the desktop interface for Claude.
|
|
|
|
Supported on RPM-based Linux distributions (Fedora, RHEL, CentOS, etc.)
|
|
|
|
%install
|
|
rm -rf %{buildroot}
|
|
mkdir -p %{buildroot}/usr/lib/$package_name
|
|
mkdir -p %{buildroot}/usr/share/applications
|
|
mkdir -p %{buildroot}/usr/bin
|
|
|
|
# Install icons
|
|
$icon_install_cmds
|
|
|
|
# Copy application files
|
|
cp -r $app_staging_dir/node_modules %{buildroot}/usr/lib/$package_name/
|
|
cp $app_staging_dir/app.asar %{buildroot}/usr/lib/$package_name/node_modules/electron/dist/resources/
|
|
cp -r $app_staging_dir/app.asar.unpacked %{buildroot}/usr/lib/$package_name/node_modules/electron/dist/resources/
|
|
|
|
# Copy shared launcher library (launcher-common.sh sources doctor.sh
|
|
# at runtime, so both must live in the same directory)
|
|
cp $(dirname "$script_dir")/launcher-common.sh %{buildroot}/usr/lib/$package_name/
|
|
cp $(dirname "$script_dir")/doctor.sh %{buildroot}/usr/lib/$package_name/
|
|
|
|
# Install desktop entry
|
|
install -Dm 644 $staging_dir/claude-desktop.desktop %{buildroot}/usr/share/applications/claude-desktop.desktop
|
|
|
|
# Install launcher script
|
|
install -Dm 755 $staging_dir/claude-desktop %{buildroot}/usr/bin/claude-desktop
|
|
|
|
%post
|
|
# Update desktop database for MIME types
|
|
update-desktop-database /usr/share/applications &> /dev/null || true
|
|
|
|
%postun
|
|
# Update desktop database after removal
|
|
update-desktop-database /usr/share/applications &> /dev/null || true
|
|
|
|
%files
|
|
%defattr(-, root, root, 0755)
|
|
%attr(755, root, root) /usr/bin/claude-desktop
|
|
%attr(4755, root, root) /usr/lib/$package_name/node_modules/electron/dist/chrome-sandbox
|
|
/usr/lib/$package_name
|
|
/usr/share/applications/claude-desktop.desktop
|
|
/usr/share/icons/hicolor/*/apps/claude-desktop.png
|
|
SPECEOF
|
|
|
|
echo 'RPM spec file created'
|
|
|
|
# --- Build RPM Package ---
|
|
echo 'Building RPM package...'
|
|
|
|
if ! rpmbuild --define "_topdir $rpmbuild_dir" \
|
|
--define "_rpmdir $work_dir" \
|
|
--target "$rpm_arch" \
|
|
-bb "$rpmbuild_dir/SPECS/$package_name.spec"; then
|
|
echo 'Failed to build RPM package' >&2
|
|
exit 1
|
|
fi
|
|
|
|
# Find and move the built RPM (it will be in a subdirectory)
|
|
rpm_file=$(find "$work_dir" -name "${package_name}-${rpm_version}*.rpm" -type f | head -n 1)
|
|
if [[ -z $rpm_file ]]; then
|
|
echo 'Could not find built RPM file' >&2
|
|
exit 1
|
|
fi
|
|
|
|
# Rename to consistent format at work_dir root
|
|
# Use original $version to maintain filename compatibility with DEB and AppImage
|
|
final_rpm="$work_dir/${package_name}-${version}-1.${rpm_arch}.rpm"
|
|
if [[ $rpm_file != "$final_rpm" ]]; then
|
|
mv "$rpm_file" "$final_rpm" || exit 1
|
|
fi
|
|
|
|
echo "RPM package built successfully: $final_rpm"
|
|
echo '--- RPM Package Build Finished ---'
|
|
|
|
exit 0
|