homebrew-devsetup/install_brew.sh at main · nsheaps/homebrew-devsetup · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
#!/usr/bin/env bash

set -euo pipefail

if ! command -v brew >/dev/null; then
  # brew is not installed
  # Install brew - Keep up to date with homepage script here: https://brew.sh/
  echo "🍺 Installing brew..."
  /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

  # If you're on linux, add the necessary parts
  ## sets up brew on the CLI for getting `brew --prefix` later
  test -d ~/.linuxbrew && eval "$(~/.linuxbrew/bin/brew shellenv)"
  test -d /home/linuxbrew/.linuxbrew && eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
  test -d /opt/homebrew && eval "$(/opt/homebrew/bin/brew shellenv)"

  echo "ℹ️  Brew version: $(brew --version)"
  echo "ℹ️  Brew prefix: $(brew --prefix)"

  echo "✅ Brew installed."
else
  echo "✅ Brew already installed."
fi

function line-exists-in-file() {
  # $1 = file
  # $2 = line
  # todo: make this platform independent, macos and linux have different grep
  if [ ! -f "$1" ]; then
    # file doesn't exist, so line can't exist
    return 1
  fi
  if grep -qxF "$2" "$1"; then
    # line exists
    return 0
  else
    # line doesn't exist
    return 1
  fi
}

function enforce-line-in-file() {
  # $1 = file
  # $2 = line
  if [ -f "$1" ]; then
    if line-exists-in-file "$1" "$2"; then
      echo "✅ already in $1"
    else
      # if the file is write protected, use sudo
      if [ ! -w "$1" ]; then
        # ensure sudo access
        # sudo -v -p "🔒 requesting sudo access for protected file $1, please enter password: "
        # echo "🔒 adding to $1 with sudo"
        # echo "$2" | sudo tee -a "$1" >/dev/null
        echo "WARN: Skipping write protected file $1. Make sure to add the following to the file:"
        echo "$2"
      else
        # echo "adding to $1"
        echo "$2" >>"$1"
        echo "✅ added to $1"
      fi
    fi
  else
    # echo "❓ $1 does not exist"
    true
  fi
}

function enforce_current_shell_rcfile_exists() {
  if [[ "$SHELL" == *zsh* ]]; then
    touch "$HOME/.zshrc"
  elif [[ "$SHELL" == *bash* ]]; then
    touch "$HOME/.bashrc"
  else
    echo "WARN: Unsupported shell $SHELL"
  fi
}

enforce_current_shell_rcfile_exists

echo "🍺 Adding brew shellenvs..."

HOMEBREW_PREFIX="$(brew --prefix)"

LINE="eval \"\$($HOMEBREW_PREFIX/bin/brew shellenv)\""
enforce-line-in-file ~/.bashrc "$LINE"
enforce-line-in-file ~/.zshrc "$LINE"
enforce-line-in-file ~/.profile "$LINE"
enforce-line-in-file /etc/profile "$LINE"

# if secure_path is set, add the brew path to it, $HOMEBREW_PREFIX/sbin:$HOMEBREW_PREFIX/bin
# sudo -v -p "🔒 requesting sudo access for protected file /etc/sudoers, please enter password: "
# if sudo grep -qF "secure_path" /etc/sudoers; then
#   echo "🍺 Ensuring sudo can use brew-installed packages"
#   # secure_path exists
#   if sudo cat /etc/sudoers | grep -q "secure_path=.*$HOMEBREW_PREFIX/sbin:$HOMEBREW_PREFIX/bin"; then
#     # brew path already in secure_path
#     echo "✅ brew path already in secure_path"
#   else
#     # brew path not in secure_path
#     echo "🔒 adding brew path to secure_path"
#     # todo sed is not the same on macos and linux
#     sudo sed -i "s#secure_path=\"#secure_path=\"$HOMEBREW_PREFIX/sbin:$HOMEBREW_PREFIX/bin:#g" /etc/sudoers
#     echo "✅ brew path added to secure_path"
#   fi
# else
#   # secure_path doesn't exist
#   echo "🔒 adding secure_path to sudoers"
#   sudo sed -i "s/Defaults    env_reset/Defaults    env_reset,secure_path=\"$BREW_PREFIX\/sbin:$BREW_PREFIX\/bin\"/g" /etc/sudoers
#   echo "✅ secure_path added to sudoers"
# fi

echo "🍺 Brew setup complete."