Makefile

PUBLIC_IMAGE := "hoophq/hoop"
VERSION ?= $(or ${GIT_TAG},${GIT_TAG},v0)
GITCOMMIT ?= $(shell git rev-parse HEAD)
DIST_FOLDER ?= ./dist

DATE ?= $(shell date -u "+%Y-%m-%dT%H:%M:%SZ")

GOOS ?= linux
GOARCH ?= amd64
# compatible with uname -s
OS := $(shell echo "$(GOOS)" | awk '{print toupper(substr($$0, 1, 1)) tolower(substr($$0, 2))}')
SYMLINK_ARCH := $(if $(filter $(GOARCH),amd64),x86_64,$(if $(filter $(GOARCH),arm64),aarch64,$(ARCH)))
POSTREST_ARCH_SUFFIX := $(if $(filter $(GOARCH),amd64),linux-static-x64.tar.xz,$(if $(filter $(GOARCH),arm64),ubuntu-aarch64.tar.xz,$(ARCH)))

UNAME_S := $(shell uname -s)
UNAME_M := $(shell uname -m)
ifeq ($(UNAME_S),Darwin)
  ifeq ($(UNAME_M),x86_64)
    RUST_TARGET := x86_64-apple-darwin
  else ifeq ($(UNAME_M),arm64)
    RUST_TARGET := aarch64-apple-darwin
  endif
else ifeq ($(UNAME_S),Linux)
  ifeq ($(UNAME_M),x86_64)
    RUST_TARGET := x86_64-unknown-linux-gnu
  else ifeq ($(UNAME_M),aarch64)
    RUST_TARGET := aarch64-unknown-linux-gnu
  endif
endif

LDFLAGS := "-s -w \
-X github.com/hoophq/hoop/common/version.version=${VERSION} \
-X github.com/hoophq/hoop/common/version.gitCommit=${GITCOMMIT} \
-X github.com/hoophq/hoop/common/version.buildDate=${DATE} \
-X github.com/hoophq/hoop/common/monitoring.honeycombApiKey=${HONEYCOMB_API_KEY} \
-X github.com/hoophq/hoop/common/monitoring.sentryDSN=${SENTRY_DSN} \
-X github.com/hoophq/hoop/gateway/analytics.segmentApiKey=${SEGMENT_API_KEY} \
-X github.com/hoophq/hoop/gateway/analytics.intercomHmacKey=${INTERCOM_HMAC_KEY}"

build-dev-rust:
	# since we are in osx machine cross needs to be used to build linux binary because some crypto libs does not have cross compilation
	echo "Building hoop_rs for dev"
	cd agentrs && cross build --release --target aarch64-unknown-linux-gnu
	mkdir -p ${HOME}/.hoop/bin
	cp agentrs/target/aarch64-unknown-linux-gnu/release/agentrs ${HOME}/.hoop/bin/hoop_rs
	chmod +x ${HOME}/.hoop/bin/hoop_rs

install-rust:
	./scripts/install-rust.sh

run-dev:
	./scripts/dev/run.sh

run-dev-postgres:
	./scripts/dev/run-postgres.sh

run-dev-presidio:
	./scripts/dev/run-presidio.sh

run-dev-spiffe-prep:
	./scripts/dev/spiffe-prep.sh

run-dev-spiffe-agent:
	./scripts/dev/run-spiffe-agent.sh

run-dev-spiffe: run-dev-spiffe-agent

build-dev-client:
	go build -ldflags "-s -w -X github.com/hoophq/hoop/client/proxy.defaultListenAddrValue=0.0.0.0" -o ${HOME}/.hoop/bin/hoop github.com/hoophq/hoop/client

build-dev-webapp:
	./scripts/dev/build-webapp.sh

libhoop-map:
	rm libhoop || true
	ln -s _libhoop libhoop

# Generate WASM module for RDP parser
generate-wasm: libhoop-map
	cd gateway/rdp/parser && go generate

test: test-oss test-enterprise

test-oss: libhoop-map generate-wasm
	env CGO_ENABLED=0 go test -json -v github.com/hoophq/hoop/...

test-enterprise: libhoop-map generate-wasm
	env CGO_ENABLED=0 go test -json -v github.com/hoophq/hoop/...

test-integration: libhoop-map generate-wasm
	env CGO_ENABLED=1 go test -tags integration -race -v -timeout 10m -count=1 ./agent/integration/...

generate-openapi-docs: libhoop-map
	cd ./gateway/ && go run github.com/swaggo/swag/cmd/swag@v1.16.3 init -g api/server.go -o api/openapi/autogen --outputTypes go --markdownFiles api/openapi/docs/ --parseDependency
	go run gateway/cmd/openapi-gen/main.go

swag-fmt:
	swag fmt

publish:
	./scripts/publish-release.sh

merge-artifacts:
	./scripts/merge-artifacts.sh

# Build all Darwin Rust binaries (for CI) - uses GOOS/GOARCH
build-rust-darwin-all:
	GOOS=darwin GOARCH=amd64 $(MAKE) build-rust-single
	GOOS=darwin GOARCH=arm64 $(MAKE) build-rust-single
# Build all Linux Rust binaries (for CI) - uses GOOS/GOARCH
build-rust-linux-all:
	GOOS=linux GOARCH=amd64 $(MAKE) build-rust-single
	GOOS=linux GOARCH=arm64 $(MAKE) build-rust-single

# Build single Rust binary using GOOS/GOARCH variables
build-rust-single: build-empty-folder
	cd agentrs && cargo build --release --target ${RUST_TARGET} && \
	cp target/${RUST_TARGET}/release/agentrs ../dist/binaries/${GOOS}_${GOARCH}/hoop_rs

build-empty-folder:
	mkdir -p ${DIST_FOLDER}/binaries/${GOOS}_${GOARCH}

build-tar-files:
	mkdir -p ${DIST_FOLDER}/binaries/${GOOS}_${GOARCH}
	tar -czvf ${DIST_FOLDER}/binaries/hoop_${VERSION}_${OS}_${GOARCH}.tar.gz -C ${DIST_FOLDER}/binaries/${GOOS}_${GOARCH} .
	tar -czvf ${DIST_FOLDER}/binaries/hoop_${VERSION}_${OS}_${SYMLINK_ARCH}.tar.gz -C ${DIST_FOLDER}/binaries/${GOOS}_${GOARCH} .
	sha256sum ${DIST_FOLDER}/binaries/hoop_${VERSION}_${OS}_${GOARCH}.tar.gz > ${DIST_FOLDER}/binaries/hoop_${VERSION}_${OS}_${GOARCH}_checksum.txt
	sha256sum ${DIST_FOLDER}/binaries/hoop_${VERSION}_${OS}_${SYMLINK_ARCH}.tar.gz > ${DIST_FOLDER}/binaries/hoop_${VERSION}_${OS}_${SYMLINK_ARCH}_checksum.txt
	rm -rf ${DIST_FOLDER}/binaries/${GOOS}_${GOARCH}

build-go: build-empty-folder
	env CGO_ENABLED=0 GOOS=${GOOS} GOARCH=${GOARCH} go build -ldflags ${LDFLAGS} -o ${DIST_FOLDER}/binaries/${GOOS}_${GOARCH}/ client/hoop.go

# Hoop Tunnel daemon (hsh-tunneld).
#
# hsh-tunneld is the privileged tunnel daemon shipped with the `hsh` CLI
# (which lives in the separate hoophq/hsh repo). The `hsh` build downloads
# hsh-tunneld from the hoop GitHub Release and bundles it with the bun-built
# `hsh` binary into a per-platform archive.
#
# Output layout (intentionally distinct from build-go's ${GOOS}_${GOARCH}/
# folder): each invocation writes one flat per-target file under
# ${DIST_FOLDER}/release-binaries/ so the release workflow can collect them
# verbatim and attach them to a GitHub Release without unpacking. Windows
# binaries are suffixed `.exe`.
HSH_TUNNELD_EXE := $(if $(filter $(GOOS),windows),hsh-tunneld-${GOOS}-${GOARCH}.exe,hsh-tunneld-${GOOS}-${GOARCH})

build-hsh-tunneld:
	mkdir -p ${DIST_FOLDER}/release-binaries
	cd tunnel && env CGO_ENABLED=0 GOOS=${GOOS} GOARCH=${GOARCH} \
		go build -ldflags ${LDFLAGS} \
		-o ../${DIST_FOLDER}/release-binaries/${HSH_TUNNELD_EXE} \
		./cmd/hsh-tunneld

# Build hsh-tunneld for every supported target. Used by the release
# workflow and convenient for local cross-build verification.
build-hsh-tunneld-all:
	GOOS=linux   GOARCH=amd64 $(MAKE) build-hsh-tunneld
	GOOS=linux   GOARCH=arm64 $(MAKE) build-hsh-tunneld
	GOOS=darwin  GOARCH=amd64 $(MAKE) build-hsh-tunneld
	GOOS=darwin  GOARCH=arm64 $(MAKE) build-hsh-tunneld
	GOOS=windows GOARCH=amd64 $(MAKE) build-hsh-tunneld
	GOOS=windows GOARCH=arm64 $(MAKE) build-hsh-tunneld

# Stage the user-facing install/uninstall scripts (RD-226) into the
# release-binaries directory so they get uploaded as Release assets
# alongside the daemon binaries. Each per-platform archive consumer
# (RD-227's hsh bundle, the brew formula, the linux tarball builder)
# pulls them from there.
#
# Lives in this Makefile target (rather than the workflow file
# itself) so a local `make build-release-checksums` produces the same
# `dist/release-binaries/` tree that the workflow uploads.
stage-release-scripts:
	mkdir -p ${DIST_FOLDER}/release-binaries
	cp tunnel/dist/scripts/install.sh   ${DIST_FOLDER}/release-binaries/install.sh
	cp tunnel/dist/scripts/uninstall.sh ${DIST_FOLDER}/release-binaries/uninstall.sh
	chmod 0755 ${DIST_FOLDER}/release-binaries/install.sh
	chmod 0755 ${DIST_FOLDER}/release-binaries/uninstall.sh

# SHA256SUMS over the release binaries + install scripts, ready to
# attach to a GitHub Release. Generated in
# `dist/release-binaries/SHA256SUMS` so consumers can verify with
# `sha256sum -c SHA256SUMS` after downloading.
#
# We include the scripts in the checksum file because RD-227's
# build-time download pipeline verifies *every* file it pulls from
# the hoop release against this SHA256SUMS — leaving scripts out
# would create a hole in the trust chain.
build-release-checksums: stage-release-scripts
	cd ${DIST_FOLDER}/release-binaries && sha256sum hsh-tunneld-* install.sh uninstall.sh > SHA256SUMS

build-webapp:
	mkdir -p ${DIST_FOLDER}
	# Build CLJS bundle
	cd ./webapp && npm install && npm run release:hoop-ui && cd ../
	cat ./webapp/src/webapp/version.js | awk -F"'" '{printf "%s", $$2}' > ./webapp/resources/version.txt
	# Build React shell (webapp_v2)
	cd ./webapp_v2 && npm ci && npm run build && cd ../
	# Merge: CLJS resources first, React shell on top (React's index.html wins)
	mkdir -p ${DIST_FOLDER}/_ui_merge
	cp -a ./webapp/resources/. ${DIST_FOLDER}/_ui_merge/
	cp -a ./webapp_v2/dist/. ${DIST_FOLDER}/_ui_merge/public/
	tar -czf ${DIST_FOLDER}/webapp.tar.gz -C ${DIST_FOLDER}/_ui_merge .
	rm -rf ${DIST_FOLDER}/_ui_merge

extract-webapp:
	mkdir -p ./rootfs/app/ui && tar -xf ${DIST_FOLDER}/webapp.tar.gz -C rootfs/app/ui/

build-helm-chart:
	mkdir -p ${DIST_FOLDER}
	helm package ./deploy/helm-chart/chart/agent/ --app-version ${VERSION} --destination ${DIST_FOLDER}/ --version ${VERSION}
	helm package ./deploy/helm-chart/chart/gateway/ --app-version ${VERSION} --destination ${DIST_FOLDER}/ --version ${VERSION}
	helm registry login ghcr.io --username ${GITHUB_USERNAME} --password ${GITHUB_CONTAINER_REGISTRY_TOKEN}
	helm push ${DIST_FOLDER}/hoop-chart-${VERSION}.tgz oci://ghcr.io/hoophq/helm-charts/
	helm push ${DIST_FOLDER}/hoopagent-chart-${VERSION}.tgz oci://ghcr.io/hoophq/helm-charts/

build-gateway-bundle:
	rm -rf ${DIST_FOLDER}/hoopgateway
	mkdir -p ${DIST_FOLDER}/hoopgateway/opt/hoop/bin
	mkdir -p ${DIST_FOLDER}/hoopgateway/opt/hoop/migrations
	mkdir -p ${DIST_FOLDER}/hoopgateway/opt/hoop/webapp
	tar -xf ${DIST_FOLDER}/binaries/hoop_${VERSION}_Linux_${GOARCH}.tar.gz -C ${DIST_FOLDER}/hoopgateway/opt/hoop/bin/ && \
	cp rootfs/app/migrations/*.up.sql ${DIST_FOLDER}/hoopgateway/opt/hoop/migrations/ && \
	tar -xf ${DIST_FOLDER}/webapp.tar.gz -C ${DIST_FOLDER}/hoopgateway/opt/hoop/webapp --strip 1 && \
	tar -czf ${DIST_FOLDER}/hoopgateway_${VERSION}-Linux_${GOARCH}.tar.gz -C ${DIST_FOLDER}/ hoopgateway

release-s3: release-s3-cf-templates
	./scripts/generate-changelog.sh ${VERSION} > ${DIST_FOLDER}/CHANGELOG.txt
	find ${DIST_FOLDER}/binaries/ -name *_checksum.txt -exec cat '{}' \; > ${DIST_FOLDER}/checksums.txt
	mv ${DIST_FOLDER}/binaries/*.tar.gz ${DIST_FOLDER}/
	aws s3 cp ${DIST_FOLDER}/ s3://hoopartifacts/release/${VERSION}/ --exclude "*" --exclude webapp.tar.gz --include checksums.txt --include "*.tgz" --include "*.tar.gz" --recursive
	aws s3 cp ${DIST_FOLDER}/CHANGELOG.txt s3://hoopartifacts/release/${VERSION}/CHANGELOG.txt

release-s3-latest:
	echo -n "${VERSION}" > ${DIST_FOLDER}/latest.txt
	aws s3 cp ${DIST_FOLDER}/latest.txt s3://hoopartifacts/release/latest.txt
	aws s3 cp ./scripts/install-cli.sh s3://hoopartifacts/release/install-cli.sh

release-s3-cf-templates-latest:
	aws s3 cp --region us-east-1 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-us-east-1/latest/hoopdev-platform.template.yaml
	aws s3 cp --region us-east-2 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-us-east-2/latest/hoopdev-platform.template.yaml
	aws s3 cp --region us-west-1 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-us-west-1/latest/hoopdev-platform.template.yaml
	aws s3 cp --region us-west-2 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-us-west-2/latest/hoopdev-platform.template.yaml
	aws s3 cp --region eu-west-1 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-eu-west-1/latest/hoopdev-platform.template.yaml
	aws s3 cp --region eu-west-2 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-eu-west-2/latest/hoopdev-platform.template.yaml
	aws s3 cp --region eu-central-1 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-eu-central-1/latest/hoopdev-platform.template.yaml
	aws s3 cp --region ap-southeast-2 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-ap-southeast-2/latest/hoopdev-platform.template.yaml

release-s3-cf-templates:
	sed "s|LATEST_HOOP_VERSION|${VERSION}|g" deploy/aws/hoopdev-platform.template.yaml > ${DIST_FOLDER}/hoopdev-platform.template.yaml
	aws s3 cp --region us-east-1 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-us-east-1/${VERSION}/hoopdev-platform.template.yaml
	aws s3 cp --region us-east-2 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-us-east-2/${VERSION}/hoopdev-platform.template.yaml
	aws s3 cp --region us-west-1 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-us-west-1/${VERSION}/hoopdev-platform.template.yaml
	aws s3 cp --region us-west-2 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-us-west-2/${VERSION}/hoopdev-platform.template.yaml
	aws s3 cp --region eu-west-1 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-eu-west-1/${VERSION}/hoopdev-platform.template.yaml
	aws s3 cp --region eu-west-2 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-eu-west-2/${VERSION}/hoopdev-platform.template.yaml
	aws s3 cp --region eu-central-1 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-eu-central-1/${VERSION}/hoopdev-platform.template.yaml
	aws s3 cp --region ap-southeast-2 ${DIST_FOLDER}/hoopdev-platform.template.yaml s3://hoopdev-platform-cf-ap-southeast-2/${VERSION}/hoopdev-platform.template.yaml

publish-sentry-sourcemaps:
	tar -xvf ${DIST_FOLDER}/webapp.tar.gz
	sentry-cli sourcemaps upload --release=$$(cat ./version.txt) ./public/js/app.js.map --org hoopdev --project webapp

.PHONY: run-dev run-dev-postgres build-dev-webapp test-enterprise test-oss test test-integration generate-openapi-docs build-go build-dev-client build-webapp build-helm-chart build-gateway-bundle extract-webapp publish release-s3 release-s3-latest release-s3-cf-templates-latest release-s3-cf-templates-latest swag-fmt build-rust-darwin-all build-rust-linux-all build-rust-single build-empty-folder build-dev-rust install-rust merge-artifacts generate-wasm build-hsh-tunneld build-hsh-tunneld-all build-release-checksums stage-release-scripts