Proyecto App Linux

2026-05-03 23:43:09 +02:00
commit 7482733843
1248 changed files with 189750 additions and 0 deletions
@@ -0,0 +1,72 @@
+const fs = require('fs/promises');
+const path = require('path');
+
+function log(message) {
+    console.log(`  - ${message}`);
+}
+
+function createLoaderScript({ executableName, productName }) {
+    return `#!/usr/bin/env bash
+set -u
+
+UNPRIVILEGED_USERNS_ENABLED=$(cat /proc/sys/kernel/unprivileged_userns_clone 2>/dev/null)
+RESTRICT_UNPRIVILEGED_USERNS=$(cat /proc/sys/kernel/apparmor_restrict_unprivileged_userns 2>/dev/null)
+
+SCRIPT_PATH="\${BASH_SOURCE[0]}"
+if command -v readlink >/dev/null 2>&1; then
+    RESOLVED_SCRIPT_PATH=$(readlink -f "$SCRIPT_PATH" 2>/dev/null || true)
+    if [ -n "$RESOLVED_SCRIPT_PATH" ]; then
+        SCRIPT_PATH="$RESOLVED_SCRIPT_PATH"
+    fi
+fi
+
+SCRIPT_DIR="$(cd "$(dirname "$SCRIPT_PATH")" && pwd)"
+
+APPLY_NO_SANDBOX_FLAG=0
+if [ "$UNPRIVILEGED_USERNS_ENABLED" != 1 ] || [ "$RESTRICT_UNPRIVILEGED_USERNS" = 1 ]; then
+    APPLY_NO_SANDBOX_FLAG=1
+fi
+
+if [ "$SCRIPT_DIR" = "/usr/bin" ]; then
+    SCRIPT_DIR="/opt/${productName}"
+fi
+
+EXEC_ARGS=()
+if [ "$APPLY_NO_SANDBOX_FLAG" = 1 ]; then
+    echo "Note: Running with --no-sandbox since unprivileged_userns_clone is disabled or apparmor_restrict_unprivileged_userns is enabled."
+    EXEC_ARGS+=(--no-sandbox)
+fi
+
+exec "$SCRIPT_DIR/${executableName}.bin" "\${EXEC_ARGS[@]}" "$@"
+`;
+}
+
+async function afterPackHook(params) {
+    if (params.electronPlatformName !== 'linux') {
+        return;
+    }
+
+    log('applying Linux launcher sandbox fix');
+
+    const executable = path.join(params.appOutDir, params.packager.executableName);
+
+    try {
+        await fs.rename(executable, `${executable}.bin`);
+        await fs.writeFile(
+            executable,
+            createLoaderScript({
+                executableName: params.packager.executableName,
+                productName: params.packager.appInfo.productName,
+            })
+        );
+        await fs.chmod(executable, 0o755);
+    } catch (error) {
+        log(`failed to create launcher wrapper: ${error.message}`);
+        throw new Error('Failed to create launcher wrapper');
+    }
+
+    log('Linux launcher sandbox fix applied');
+}
+
+module.exports = afterPackHook;
+module.exports.createLoaderScript = createLoaderScript;