Makefile.container

# Podman/Docker build configuration — uses prebuilt GHCR image
CONTAINER_IMAGE := ghcr.io/themactep/thingino-builder-image
CONTAINER_TAG := latest
SHELL := /bin/bash
CONTAINER_ENGINE ?= $(shell command -v podman 2>/dev/null || command -v docker 2>/dev/null)
USER_ID := $(shell id -u)
GROUP_ID := $(shell id -g)
DL_DIR := dl
DL_IMAGE := ghcr.io/themactep/thingino-dl
DL_CONTAINER := thingino-dl-cache

# Directories
WORKSPACE_DIR := $(shell pwd)

# SELinux volume labels (Podman/Docker on Fedora, Bazzite, RHEL, CentOS Stream).
# Without a label, Enforcing hosts often fail with "Permission denied" on bind mounts.
# Non-SELinux hosts (Debian/Ubuntu/etc.) leave this empty — :z/:Z are unnecessary there.
#
# Preference order:
#   1. CONTAINER_VOLUME_LABEL override (z | Z | none | off | empty)
#   2. Auto :z when getenforce reports Enforcing
#   3. Otherwise unlabeled
#
# Use shared :z (not private :Z) by default so the host IDE and container can both
# use the workspace. Override with CONTAINER_VOLUME_LABEL=Z only if you need a
# private container label.
CONTAINER_VOLUME_LABEL ?=
ifeq ($(CONTAINER_VOLUME_LABEL),)
  ifeq ($(shell getenforce 2>/dev/null),Enforcing)
    CONTAINER_VOLUME_LABEL := z
  endif
endif
ifneq ($(filter $(CONTAINER_VOLUME_LABEL),none off),)
  CONTAINER_VOLUME_SUFFIX :=
  CONTAINER_VOLUME_LABEL_DESC := none (forced off)
else ifneq ($(CONTAINER_VOLUME_LABEL),)
  CONTAINER_VOLUME_SUFFIX := :$(CONTAINER_VOLUME_LABEL)
  CONTAINER_VOLUME_LABEL_DESC := $(CONTAINER_VOLUME_LABEL)
else
  CONTAINER_VOLUME_SUFFIX :=
  CONTAINER_VOLUME_LABEL_DESC := none (SELinux not enforcing or unavailable)
endif

# Container run command
ifeq ($(findstring podman,$(CONTAINER_ENGINE)),podman)
	CONTAINER_RUN := $(CONTAINER_ENGINE) run --rm --userns=keep-id
else
	CONTAINER_RUN := $(CONTAINER_ENGINE) run --rm --user $(USER_ID):$(GROUP_ID) --network=host
endif

CONTAINER_RUN_OPTS := \
	--volumes-from $(DL_CONTAINER) \
	-v $(WORKSPACE_DIR):/workspace$(CONTAINER_VOLUME_SUFFIX) \
	-v $(shell readlink -f overrides):/overrides$(CONTAINER_VOLUME_SUFFIX) \
	-w /workspace \
	-e TERM=xterm-256color \
	-e BR2_DL_DIR=/dl

# Mount external THINGINO_USER_DIR into container if set outside workspace.
# Default (user/ inside workspace) is already visible via the workspace mount.
USER_DIR_MOUNT :=
USER_DIR_LABEL := (default: workspace/user/)
ifdef THINGINO_USER_DIR
  ifeq ($(THINGINO_USER_DIR),/dev/null)
    USER_DIR_MOUNT := -e THINGINO_USER_DIR=/dev/null
    USER_DIR_LABEL := /dev/null (PRISTINE)
  else
    _USER_DIR_REAL := $(shell readlink -f "$(THINGINO_USER_DIR)" 2>/dev/null || echo "$(THINGINO_USER_DIR)")
    _USER_DIR_IN_WS := $(or $(filter $(WORKSPACE_DIR),$(_USER_DIR_REAL)),$(filter $(WORKSPACE_DIR)/%,$(_USER_DIR_REAL)))
    ifeq ($(_USER_DIR_IN_WS),)
      USER_DIR_MOUNT := -v $(_USER_DIR_REAL):/user-dir$(CONTAINER_VOLUME_SUFFIX) -e THINGINO_USER_DIR=/user-dir
      USER_DIR_LABEL := $(THINGINO_USER_DIR) → /user-dir (mounted)
    else
      USER_DIR_LABEL := $(THINGINO_USER_DIR) (in workspace)
    endif
  endif
endif

# Workaround: prebuilt image ships uutils install which breaks Buildroot dep check.
# Switch to GNU install on every container invocation.
CONTAINER_PREBUILD := sudo update-alternatives --install /usr/bin/install install /usr/bin/gnuinstall 100 2>/dev/null && true &&

# Interactive container
CONTAINER_RUN_INTERACTIVE := $(CONTAINER_RUN) -it $(CONTAINER_RUN_OPTS) $(USER_DIR_MOUNT)

# Non-interactive container (with -i to receive signals, but no -t for non-TTY)
CONTAINER_RUN_EXEC := $(CONTAINER_RUN) -i $(CONTAINER_RUN_OPTS) $(USER_DIR_MOUNT)

.PHONY: container-pull
container-pull: dl-container
	@if ! $(CONTAINER_ENGINE) images | grep -q "$(CONTAINER_IMAGE)"; then \
		echo "Pulling container image: $(CONTAINER_IMAGE):$(CONTAINER_TAG)"; \
		$(CONTAINER_ENGINE) pull $(CONTAINER_IMAGE):$(CONTAINER_TAG); \
	else \
		echo "Container image $(CONTAINER_IMAGE):$(CONTAINER_TAG) already present"; \
	fi

.PHONY: dl-pull
dl-pull:
	$(CONTAINER_ENGINE) pull $(DL_IMAGE):latest || \
		echo "Warning: Could not pull dl cache image. Downloads will be needed."

.PHONY: dl-container
dl-container: dl-pull
	@if ! $(CONTAINER_ENGINE) ps -a --format '{{.Names}}' | grep -q '^$(DL_CONTAINER)$$'; then \
		echo "Creating dl cache helper container..."; \
		$(CONTAINER_ENGINE) create --name $(DL_CONTAINER) $(DL_IMAGE):latest /bin/true; \
		$(CONTAINER_ENGINE) create --name $(DL_CONTAINER)-src $(DL_IMAGE):latest /bin/true; \
		$(CONTAINER_ENGINE) export $(DL_CONTAINER)-src | tar -x --strip-components=1 --directory=$$($(CONTAINER_ENGINE) inspect $(DL_CONTAINER) --format '{{range .Mounts}}{{if eq .Destination "/dl"}}{{.Source}}{{end}}{{end}}') dl/; \
		$(CONTAINER_ENGINE) rm $(DL_CONTAINER)-src >/dev/null; \
		echo "dl cache volume populated"; \
	else \
		echo "dl cache helper container already exists"; \
	fi

.PHONY: dl-clean
dl-clean:
	$(CONTAINER_ENGINE) rm -f $(DL_CONTAINER) || true

.PHONY: container-shell
container-shell: container-pull
	@echo "Starting interactive shell in container..."
	$(CONTAINER_RUN_INTERACTIVE) $(CONTAINER_IMAGE):$(CONTAINER_TAG) bash -c "$(CONTAINER_PREBUILD) exec /bin/bash"

.PHONY: container-make
container-make: container-pull
	$(eval CAMERA_ARG := $(if $(CAMERA),CAMERA=$(CAMERA)))
	$(eval GROUP_ARG := $(if $(GROUP),GROUP=$(GROUP)))
	$(eval IP_ARG := $(if $(IP),IP=$(IP)))
	@echo "Running make $(CAMERA_ARG) $(GROUP_ARG) $(IP_ARG) $(MAKECMDGOALS) in container..."
	@echo '#!/bin/bash' > /tmp/container-make-run.sh
	@echo 'cleanup() {' >> /tmp/container-make-run.sh
	@echo '    echo' >> /tmp/container-make-run.sh
	@echo '    echo "Interrupted! Stopping container..."' >> /tmp/container-make-run.sh
	@echo '    $(CONTAINER_ENGINE) stop -t 2 $$($(CONTAINER_ENGINE) ps -q --filter ancestor=$(CONTAINER_IMAGE):$(CONTAINER_TAG)) 2>/dev/null || true' >> /tmp/container-make-run.sh
	@echo '    exit 130' >> /tmp/container-make-run.sh
	@echo '}' >> /tmp/container-make-run.sh
	@echo 'trap cleanup INT TERM' >> /tmp/container-make-run.sh
	@echo '$(CONTAINER_RUN_EXEC) $(CONTAINER_IMAGE):$(CONTAINER_TAG) bash -c "$(CONTAINER_PREBUILD) make $(CAMERA_ARG) $(GROUP_ARG) $(IP_ARG) $(MAKECMDGOALS)" &' >> /tmp/container-make-run.sh
	@echo 'wait $$!' >> /tmp/container-make-run.sh
	@chmod +x /tmp/container-make-run.sh
	@/tmp/container-make-run.sh

.PHONY: container-clean
container-clean:
	@echo "Removing container image..."
	@echo "Stopping and removing containers using $(CONTAINER_IMAGE):$(CONTAINER_TAG)..."
	@$(CONTAINER_ENGINE) ps -a --filter ancestor=$(CONTAINER_IMAGE):$(CONTAINER_TAG) -q | xargs -r $(CONTAINER_ENGINE) rm -f 2>/dev/null || true
	$(CONTAINER_ENGINE) rmi $(CONTAINER_IMAGE):$(CONTAINER_TAG) || true

.PHONY: container-nuke
container-nuke: container-clean
	@echo "Removing dl cache container and volume..."
	@$(CONTAINER_ENGINE) ps -a --filter reference=$(DL_IMAGE) -q | xargs -r $(CONTAINER_ENGINE) rm -f 2>/dev/null || true
	$(CONTAINER_ENGINE) rm -f $(DL_CONTAINER) 2>/dev/null || true
	$(CONTAINER_ENGINE) rmi $(DL_IMAGE):latest 2>/dev/null || true
	@echo "Pruning unused volumes..."
	$(CONTAINER_ENGINE) volume prune -f 2>/dev/null || true
	@echo "Pruning unused images..."
	$(CONTAINER_ENGINE) image prune -f 2>/dev/null || true
	@echo "All container artifacts removed."

.PHONY: container-info
container-info:
	@echo "Container Configuration:"
	@echo "  Engine:     $(CONTAINER_ENGINE)"
	@echo "  Image:      $(CONTAINER_IMAGE):$(CONTAINER_TAG)"
	@echo "  DL Image:   $(DL_IMAGE):latest"
	@echo "  DL Cache:   $(DL_CONTAINER)"
	@echo "  DL Source:  container volume"
	@echo "  User ID:    $(USER_ID)"
	@echo "  Group ID:   $(GROUP_ID)"
	@echo "  Workspace:  $(WORKSPACE_DIR)"
	@echo "  Downloads:  $(DL_DIR)"
	@echo "  User Dir:   $(USER_DIR_LABEL)"
	@echo "  SELinux:    $(CONTAINER_VOLUME_LABEL_DESC)"

# Convenience targets for building in container
.PHONY: container-build-firmware
container-build-firmware: container-pull
	$(CONTAINER_RUN_EXEC) $(CONTAINER_IMAGE):$(CONTAINER_TAG) bash -c "$(CONTAINER_PREBUILD) make"

.PHONY: container-dev
container-dev: container-pull
	$(CONTAINER_RUN_EXEC) $(CONTAINER_IMAGE):$(CONTAINER_TAG) bash -c "$(CONTAINER_PREBUILD) make dev"

.PHONY: container-menuconfig
container-menuconfig: container-pull
	$(CONTAINER_RUN_INTERACTIVE) $(CONTAINER_IMAGE):$(CONTAINER_TAG) bash -c "$(CONTAINER_PREBUILD) make menuconfig"

.PHONY: container-linux-menuconfig
container-linux-menuconfig: container-pull
	$(CONTAINER_RUN_INTERACTIVE) $(CONTAINER_IMAGE):$(CONTAINER_TAG) bash -c "$(CONTAINER_PREBUILD) make linux-menuconfig"

.PHONY: container-busybox-menuconfig
container-busybox-menuconfig: container-pull
	$(CONTAINER_RUN_INTERACTIVE) $(CONTAINER_IMAGE):$(CONTAINER_TAG) bash -c "$(CONTAINER_PREBUILD) make busybox-menuconfig"

.PHONY: container-clean-build
container-clean-build: container-pull
	$(CONTAINER_RUN_EXEC) $(CONTAINER_IMAGE):$(CONTAINER_TAG) bash -c "$(CONTAINER_PREBUILD) make distclean && make"

.PHONY: container-ota
container-ota: container-pull
	$(eval IP_ARG := $(if $(IP),IP=$(IP)))
	$(eval CAMERA_ARG := $(if $(CAMERA),CAMERA=$(CAMERA)))
	$(eval GROUP_ARG := $(if $(GROUP),GROUP=$(GROUP)))
	$(CONTAINER_RUN_INTERACTIVE) $(CONTAINER_IMAGE):$(CONTAINER_TAG) bash -c "$(CONTAINER_PREBUILD) make ota $(IP_ARG) $(CAMERA_ARG) $(GROUP_ARG)"

# Allow make targets to be passed through to container
%:
	@: