yugui-chkbuild 0.1.2

data/sample/build-yarv

@@ -0,0 +1,35 @@
+#!/usr/bin/env ruby
+
+# Copyright (C) 2006,2009 Tanaka Akira  <akr@fsij.org>
+# 
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are met:
+# 
+#  1. Redistributions of source code must retain the above copyright notice, this
+#     list of conditions and the following disclaimer.
+#  2. Redistributions in binary form must reproduce the above copyright notice,
+#     this list of conditions and the following disclaimer in the documentation
+#     and/or other materials provided with the distribution.
+#  3. The name of the author may not be used to endorse or promote products
+#     derived from this software without specific prior written permission.
+# 
+# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
+# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
+# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+# EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
+# OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
+# IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY
+# OF SUCH DAMAGE.
+
+require 'chkbuild'
+
+ChkBuild.limit(:data=>1024*1024*800, :as=>1024*1024*800)
+
+ChkBuild::Ruby.def_target(
+  ["yarv"],
+  :separated_srcdir => true)
+
+ChkBuild.main

data/sample/test-apr

@@ -0,0 +1,12 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("apr") {|b,|
+  Dir.chdir("..") {
+    b.svn("http://svn.apache.org/repos/asf", "apr/apr/trunk", 'apr',
+      :viewvc=>"http://svn.apache.org/viewvc")
+  }
+}
+
+ChkBuild.main

data/sample/test-catcherr

@@ -0,0 +1,23 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("catcherr-fails",
+  %w[true false],
+  %w[true false]) {|b, *commands|
+  b.catch_error { b.run(commands[0]) }
+  b.catch_error { b.run(commands[1]) }
+}
+
+ChkBuild.def_target("catcherr-branch",
+  %w[true false],
+  %w[true false],
+  %w[true false],
+  %w[true false]) {|b, *commands|
+  r1 = b.catch_error { b.run(commands[0]) }
+  r1 && b.catch_error { b.run(commands[1]) }
+  r1 && b.catch_error { b.run(commands[2]) }
+  r1 && b.catch_error { b.run(commands[3]) }
+}
+
+ChkBuild.main

data/sample/test-combfail

@@ -0,0 +1,21 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+COMBFAIL1 = ChkBuild.def_target("combfail1",
+  ["succ", "fail"]) {|b, suffix|
+  case suffix
+  when "succ" then command = "true"
+  when "fail" then command = "false"
+  end
+  b.run(command)
+}
+
+ChkBuild.def_target("combfail2", COMBFAIL1) {|b, cf1|
+  combfail2_dir = b.build_dir
+  /\Acombfail1=/ =~ cf1
+  combfail1_dir = $'
+  b.run(*%W(echo #{combfail1_dir} #{combfail2_dir}))
+}
+
+ChkBuild.main

data/sample/test-core

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("coretest") {|b|
+  FileUtils.cp(`which ruby`.chomp, "ruby")
+  b.run("./ruby", "-e", <<'End')
+Process.setrlimit(Process::RLIMIT_CORE, Process::RLIM_INFINITY, Process::RLIM_INFINITY)
+trap("SEGV", "DEFAULT")
+Process.kill("SEGV", $$)
+End
+}
+
+ChkBuild.main

data/sample/test-core2

@@ -0,0 +1,19 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+def coredump(b)
+  b.run("./ruby", "-e", <<'End')
+Process.setrlimit(Process::RLIMIT_CORE, Process::RLIM_INFINITY, Process::RLIM_INFINITY)
+trap("SEGV", "DEFAULT")
+Process.kill("SEGV", $$)
+End
+end
+
+ChkBuild.def_target("core2test") {|b|
+  FileUtils.cp(`which ruby`.chomp, "ruby")
+  b.catch_error { coredump(b) }
+  b.catch_error { coredump(b) }
+}
+
+ChkBuild.main

data/sample/test-date

@@ -0,0 +1,9 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("date") {|b|
+  b.run("date")
+}
+
+ChkBuild.main

data/sample/test-dep

@@ -0,0 +1,17 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+Dep1 = ChkBuild.def_target("dep1",
+  ["dev", "stable"]) {|b, suffix|
+  b.catch_error { raise "foo error" }
+}
+
+ChkBuild.def_target("dep2",
+  ["dev", "stable"],
+  Dep1) {
+    |b, suffix, dep1|
+  p b.suffixed_name
+}
+
+ChkBuild.main

data/sample/test-depver

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+Dep1 = ChkBuild.def_target("lib1", ["dev", "stable"]) {|b|
+}
+
+Dep2 = ChkBuild.def_target("lib2", ["dev", "stable"]) {|b|
+}
+
+ChkBuild.def_target("app", ["dev", "stable"], Dep1, Dep2) {|b, suffix, lib1, lib2|
+}
+
+ChkBuild.main

data/sample/test-echo

@@ -0,0 +1,9 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("echo") {|b|
+  b.run("echo", "f&<>oo http://foo.example.net/bar?a=b&c=d baz")
+}
+
+ChkBuild.main

data/sample/test-env

@@ -0,0 +1,9 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("env") {|b|
+  b.run("sh", "-c", "echo $AAA", "ENV:AAA"=>"foooo")
+}
+
+ChkBuild.main

data/sample/test-error

@@ -0,0 +1,9 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("error") {|b|
+  x
+}
+
+ChkBuild.main

data/sample/test-fail

@@ -0,0 +1,18 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+t = ChkBuild.def_target("fail") {|b|
+  b.run("echo", "[bug]")
+  b.run("false")
+}
+
+t.add_title_hook(nil) {|title, log|
+  mark = ''
+  mark << "[BUG]" if /\[BUG\]/i =~ log
+  mark << "[SEGV]" if /Segmentation fault/i =~ log
+  mark << "[FATAL]" if /\[FATAL\]/i =~ log
+  title.update_title(:mark, mark)
+}
+
+ChkBuild.main

data/sample/test-fmesg

@@ -0,0 +1,16 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+t = ChkBuild.def_target("fmesg") {|b|
+  b.run("echo", "this fails")
+  if /this fails/ =~ b.logfile.get_section('echo')
+    raise ChkBuild::Build::CommandError.new(0, "echo")
+  end
+}
+
+t.add_failure_hook('echo') {|log|
+  'FAIL'
+}
+
+ChkBuild.main

data/sample/test-gcc-v

@@ -0,0 +1,15 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+gcc_v = ChkBuild.def_target("gcc-v") {|b|
+  b.run("gcc", '-v', :section=>'version')
+}
+
+gcc_v.add_title_hook('version') {|title, log|
+  if /^gcc version (.*)$/ =~ log
+    title.update_title(:gcc_version, "(gcc #{$1})")
+  end
+}
+
+ChkBuild.main

data/sample/test-git

@@ -0,0 +1,11 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("git") {|b,|
+  opts = {:shared_gitdir=>ChkBuild.build_top}
+  #b.git("git://github.com/brixen/rubyspec.git", 'tst-rubyspec', opts)
+  b.github("brixen", "rubyspec", "tst-rubyspec2", opts)
+}
+
+ChkBuild.main

data/sample/test-leave-proc

@@ -0,0 +1,9 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("leave-proc") {|b|
+  b.run("sleep 1000 &")
+}
+
+ChkBuild.main

data/sample/test-limit

@@ -0,0 +1,9 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("limit") {|b|
+  b.run("sh", "-c", "ulimit -a", :rlimit_data => 800*1024)
+}
+
+ChkBuild.main

data/sample/test-make

@@ -0,0 +1,9 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("make-failure") {|b|
+  b.make("nonexisting-target")
+}
+
+ChkBuild.main

data/sample/test-neterr

@@ -0,0 +1,16 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+t = ChkBuild.def_target("network-error") {|b|
+  b.network_access {
+    if rand < 0.5
+      b.run("false")
+    else
+      b.run("true")
+    end
+  }
+  b.run("true")
+}
+
+ChkBuild.main

data/sample/test-savannah

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+t = ChkBuild.def_target("savannah") {|b|
+  b.gnu_savannah_cvs('config', 'config', nil)
+  b.run("config/config.guess")
+}
+
+t.add_title_hook('config.guess') {|title, log|
+  title.update_title(:status, log.chomp[/[^\n]*\z/])
+}
+
+ChkBuild.main

data/sample/test-sleep

@@ -0,0 +1,9 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("sleep") {|b|
+  b.run("sleep", "60")
+}
+
+ChkBuild.main

data/sample/test-timeout

@@ -0,0 +1,9 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("timeout", :timeout=>Time.now+4) {|b|
+  b.run("sleep", "60")
+}
+
+ChkBuild.main

data/sample/test-timeout2

@@ -0,0 +1,10 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("timeout2", :timeout=>'3s') {|b|
+  b.catch_error { b.run("sleep", "60") }
+  b.catch_error { b.run("sleep", "60") }
+}
+
+ChkBuild.main

data/sample/test-timeout3

@@ -0,0 +1,9 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.def_target("timeout3", :timeout=>'10s', :output_interval_timeout=>'3s') {|b|
+  b.run("sleep", "60")
+}
+
+ChkBuild.main

data/sample/test-upload

@@ -0,0 +1,13 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+ChkBuild.add_upload_hook {|name|
+  p "#{ChkBuild.public_top}/#{name}"
+}
+
+ChkBuild.def_target("uptest", ["dev", "stable"]) {|b,|
+  b.run("echo", "uptest")
+}
+
+ChkBuild.main

data/sample/test-warn

@@ -0,0 +1,13 @@
+#!/usr/bin/env ruby
+
+require 'chkbuild'
+
+warn = ChkBuild.def_target("warn") {|b|
+  b.run("echo", "warn")
+}
+
+warn.add_title_hook('echo') {|title, log|
+  title.update_title(:version, "foo") 
+}
+
+ChkBuild.main

data/setup/upload-rsync-ssh

@@ -0,0 +1,572 @@
+#!/usr/bin/env ruby
+
+# Copyright (C) 2005 Tanaka Akira  <akr@fsij.org>
+# 
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are met:
+# 
+#  1. Redistributions of source code must retain the above copyright notice, this
+#     list of conditions and the following disclaimer.
+#  2. Redistributions in binary form must reproduce the above copyright notice,
+#     this list of conditions and the following disclaimer in the documentation
+#     and/or other materials provided with the distribution.
+#  3. The name of the author may not be used to endorse or promote products
+#     derived from this software without specific prior written permission.
+# 
+# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
+# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
+# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+# EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
+# OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
+# IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY
+# OF SUCH DAMAGE.
+
+# usage: setup/upload-rsync-ssh [remoteuser@]remotehost [remote-dir [chkbuild-user]]
+#
+# setup/upload-rsync-ssh setups upload configuration.
+# 1. generate ssh key dedicated for the upload.
+#    localhost:~/.ssh/chkbuild-localhost-remotehost
+#    localhost:~/.ssh/chkbuild-localhost-remotehost.pub
+# 2. ssh client setup
+#    localhost:~chkbuild-user/.ssh/chkbuild-localhost-remotehost
+#    localhost:~chkbuild-user/.ssh/known_hosts
+# 2. setup rsync server via ssh on remotehost.
+#    remotehost:~remoteuser/.ssh/chkbuild-rsyncd-localhost-remotehost.conf
+#    remotehost:~remoteuser/.ssh/authorized_keys
+#    remotehost:~remoteuser/public_html/chkbuild/localhost/
+
+# You need an user dedicated to chkbuild before using setup/upload-rsync-ssh.
+# Assume the login name of the dedicated user is chkbuild and
+# your login name is luser.
+#
+#   /home/chkbuild              user=luser group=chkbuild mode=2750
+#   /home/chkbuild/build        user=luser group=chkbuild mode=2775
+#   /home/chkbuild/public_html  user=luser group=chkbuild mode=2775
+#
+#   # adduser --disabled-login --no-create-home --shell /home/luser/chkbuild/start-build chkbuild
+#   # usermod -G ...,chkbuild luser
+#   # cd /home
+#   # mkdir chkbuild chkbuild/build chkbuild/public_html
+#   # chown luser chkbuild
+#   # chown chkbuild:luser chkbuild/build chkbuild/public_html
+#   # chmod 2775 chkbuild/build chkbuild/public_html
+#   # setup/upload-rsync-ssh chkbuild remote-user@remotehost
+#   ...
+#   rsync target: remote-user@remotehost::upload
+#
+# Note that setup/upload-rsync-ssh invokes ssh twice.
+
+require 'etc'
+require 'socket'
+require 'fileutils'
+
+local_host = Socket.gethostname
+DEFAULT_CHKBUILD_UESR = 'chkbuild'
+DEFAULT_REMOTE_DIR = "public_html/chkbuild/#{local_host}"
+
+def usage(status)
+  puts <<"End"
+usage: setup/upload-rsync-ssh [remoteuser@]remotehost [remote-dir [chkbuild-user]]
+default:
+  remote-dir    = #{DEFAULT_REMOTE_DIR.inspect}
+  chkbuild-user = #{DEFAULT_CHKBUILD_UESR.inspect}
+End
+  exit status
+end
+
+if ARGV.length < 1 || 3 < ARGV.length
+  puts "setup/upload-rsync-ssh needs exactly 1 to 3 arguments"
+  usage(1)
+end
+
+remote_info, remote_dir, chkbuild_user = ARGV
+remote_dir ||= DEFAULT_REMOTE_DIR
+chkbuild_user ||= DEFAULT_CHKBUILD_UESR
+
+local_user = Etc.getpwuid
+
+if /@/ =~ remote_info
+  remote_user = $`
+  remote_host = $'
+else
+  remote_user = local_user.name
+  remote_host = remote_info
+end
+
+begin
+  chkbuild_user = Etc.getpwnam(chkbuild_user)
+rescue ArgumentError
+  puts "no such user: #{chkbuild_user.inspect}"
+  exit 1
+end
+
+begin
+  chkbuild_group = Etc.getgrgid(chkbuild_user.gid)
+rescue ArgumentError
+  puts "no group which gid is #{chkbuild_user.gid}"
+  exit 1
+end
+
+if !chkbuild_group.mem.include?(local_user.name)
+  puts "#{local_user.name.inspect} is not a member of group #{chkbuild_group.name.inspect}"
+  exit 1
+end
+
+if !Process.groups.include?(chkbuild_user.gid)
+  puts "process supplementary groups doesn't contain #{chkbuild_group.name.inspect}"
+  exit 1
+end
+
+if local_user.uid == chkbuild_user.uid
+  puts "same uid #{local_user.name.inspect} and #{chkbuild_user.name}: #{local_user.uid}"
+  exit 1
+end
+
+# xxx: gid check?
+
+class FileMap
+  def initialize(filemap)
+    @paths = []
+    @filemap = {}
+    filemap.each_line {|line|
+      next if /\A\s*\z/ =~ line
+      path, *spec_list = line.split(/\s+/)
+      if %r{/\z} =~ path
+        spec_list << "dir"
+        path.sub!(%r{/\z}, '')
+      end
+      specs = {}
+      spec_list.each {|spec|
+        if /=/ =~ spec
+          key = $`
+          val = $'
+          case key
+          when /\Auser\z/
+            val = val.to_i
+          when /\Agroup\z/
+            val = val.to_i
+          when /\Amode\z/
+            mode, mask = val.split(%r{/})
+            val = [mode.oct, mask.oct]
+          end
+          specs[key] = val
+        else
+          specs[spec] = true
+        end
+      }
+      if @filemap[path]
+        raise ArgumentError, "duplicate path: #{path.inspect}"
+      end
+      @paths << path
+      @filemap[path] = specs
+    }
+    @filemap.each {|path, specs|
+      dir = File.dirname(path)
+      while @filemap.include? dir
+        @filemap[dir]['dir'] = true
+        dir = File.dirname(dir)
+      end
+    }
+  end
+
+  def creatable_target?(specs, parent_specs, parent)
+    parent_uid = nil
+    parent_gid = nil
+    parent_mode = nil
+    parent_mask = nil
+    if parent_specs
+      parent_specs.each {|key, val|
+        case key
+        when /\Auser\z/ then parent_uid = val
+        when /\Agroup\z/ then parent_gid = val
+        when /\Amode\z/ then parent_mode, parent_mask = val
+        when /\Afile\z/ then return false
+        end
+      }
+    else
+      begin
+        parent_stat = File.stat(parent)
+        return false unless parent_stat.directory?
+        parent_uid = parent_stat.uid
+        parent_gid = parent_stat.gid
+        parent_mode = parent_stat.mode
+        parent_mask = 07777
+      rescue Errno::ENOENT
+      end
+    end
+    if parent_uid && Process.uid == parent_uid
+      unless parent_mask & 0300 == 0300 && parent_mode & 0300 == 0300
+        return false
+      end
+    elsif parent_uid && parent_gid && (Process.gid == parent_gid || Process.groups.include?(parent_gid))
+      unless parent_mask & 0030 == 0030 && parent_mode & 0030 == 0030
+        return false
+      end
+    elsif parent_uid && parent_gid
+      unless parent_mask & 0003 == 0003 && parent_mode & 0003 == 0003
+        return false
+      end
+    else
+      return false
+    end
+    specs.each {|key, val|
+      case key
+      when /\Auser\z/
+        return false if Process.uid != val
+      when /\Agroup\z/
+        unless Process.gid == val ||
+               Process.groups.include?(val) ||
+               (parent_mask && parent_gid && parent_mask & 02000 != 0 && parent_mode & 02000 != 0 && parent_gid == val)
+          return false
+        end
+      end
+    }
+    return true
+  end
+
+  def check
+    stats = {}
+    errors = {}
+    fixable = {}
+    @paths.each {|path|
+      specs = @filemap[path]
+      errors[path] ||= []
+      fixable[path] ||= []
+      begin
+        stat = File.stat(path)
+      rescue Errno::ENOENT
+        parent = File.dirname(path)
+        if creatable_target?(specs, @filemap[parent], parent)
+          fixable[path] = specs
+        else
+          errors[path] << 'not-exist'
+        end
+      end
+      if stat
+        stats[path] = stat
+        specs.each {|key, val|
+          case key
+          when /\Auser\z/
+            errors[path] << [key, val, stat] if stat.uid != val
+          when /\Agroup\z/
+            if stat.gid != val
+              if specs['user'] == Process.uid && Process.groups.include?(val)
+                fixable[path] << [key, val, stat]
+              else
+                errors[path] << [key, val, stat]
+              end
+            end
+          when /\Amode\z/
+            mode, mask = val
+            if stat.mode & mask != mode
+              if specs['user'] == Process.uid
+                fixable[path] << [key, val, stat]
+              else
+                errors[path] << [key, val, stat]
+              end
+            end
+          when /\Afile\z/
+            errors[path] << [key, val, stat] if !stat.file?
+          when /\Adir\z/
+            errors[path] << [key, val, stat] if !stat.directory?
+          else
+            raise "unexpected file spec: #{key.inspect} (#{path.inspect})"
+          end
+        }
+      end
+      errors.delete(path) if errors[path].empty?
+      fixable.delete(path) if fixable[path].empty?
+    }
+    if errors.empty?
+      @stats = stats
+      @fixable = fixable
+      true
+    else
+      @errors = errors
+      false
+    end
+  end
+  attr_reader :stats
+
+  def inspect_uid(uid)
+    begin
+      info = Etc.getpwuid(uid)
+    rescue ArgumentError
+      uid.to_s
+    end
+    "#{uid} (#{info.name})"
+  end
+
+  def inspect_gid(gid)
+    begin
+      info = Etc.getgrgid(gid)
+    rescue ArgumentError
+      gid.to_s
+    end
+    "#{gid} (#{info.name})"
+  end
+
+  def print_errors
+    @errors.keys.sort.each {|path|
+      @errors[path].each {|errinfo|
+        key, val, *rest = errinfo
+        case key
+        when /\Auser\z/
+          stat, = rest
+          puts "#{path.inspect}: uid expected #{inspect_uid val} but #{inspect_uid stat.uid}"
+        when /\Agroup\z/
+          stat, = rest
+          puts "#{path.inspect}: gid expected #{inspect_gid val} but #{inspect_gid stat.gid}"
+        when %r{\Amode\z}
+          mode, mask = val
+          stat, = rest
+          puts "#{path.inspect}: mode expected #{"%o" % mode} but #{"%o" % (stat.mode & mask)} (mask=#{"%o" % mask})"
+        when /\Afile\z/
+          stat, = rest
+          puts "#{path.inspect}: regular file expected but #{stat.ftype}"
+        when /\Adir\z/
+          stat, = rest
+          puts "#{path.inspect}: directory expected but #{stat.ftype}"
+        when /\Anot-exist\z/
+          puts "#{path.inspect}: not exist"
+        else
+          raise "unexpected file spec: #{key.inspect} (#{path.inspect})"
+        end
+      }
+    }
+  end
+
+  def fix_permission(path, uid, gid, mode, mask, stat=nil)
+    if !stat
+      begin
+        stat = File.stat(path)
+      rescue Errno::ENOENT
+        puts "#{path.inspect}: not exist."
+        exit 1
+      end
+    end
+    if uid && stat.uid != uid
+      puts "#{path.inspect}: uid expected #{inspect_uid uid} but #{inspect_uid stat.uid}"
+      exit 1
+    end
+    if gid && stat.gid != gid
+      File.chown(-1, gid, path)
+    end
+    if mode && stat.mode & mask != mode
+      File.chmod(stat.mode & ~mask | mode, path)
+    end
+    stat = File.stat(path)
+    if gid && stat.gid != gid
+      puts "#{path.inspect}: gid expected #{inspect_uid gid} but #{inspect_gid stat.gid}"
+      exit 1
+    end
+    if mode && stat.mode & mask != mode
+      puts "#{path.inspect}: mode expected #{"%o" % gid} but #{"%o" % stat.gid}"
+      exit 1
+    end
+  end
+
+  def fix_directories
+    dirs = @paths.reject {|path| !@filemap[path]['dir'] }
+    dirs.each {|dir|
+      uid = @filemap[dir]['user']
+      gid = @filemap[dir]['group']
+      mode, mask = @filemap[dir]['mode']
+      stat = @stats[dir]
+      if !stat
+        Dir.mkdir(dir, mode)
+        stat = File.stat(dir)
+      end
+      fix_permission(dir, uid, gid, mode, mask, stat)
+    }
+  end
+
+  def fix_files
+    errors = 0
+    paths = @paths.reject {|path| @filemap[path]['dir'] }
+    paths.each {|path|
+      uid = @filemap[path]['user']
+      gid = @filemap[path]['group']
+      mode, mask = @filemap[path]['mode']
+      begin
+        stat = File.stat(path)
+      rescue Errno::ENOENT
+        puts "#{path.inspect}: not generated."
+        exit 1
+      end
+      fix_permission(path, uid, gid, mode, mask, stat)
+    }
+  end
+
+end
+
+cdir = chkbuild_user.dir
+cuid = chkbuild_user.uid
+cgid = chkbuild_user.gid
+ldir = local_user.dir
+luid = local_user.uid
+lgid = local_user.gid
+
+if cdir == ldir
+  puts "same home directory for #{local_user.name.inspect} and #{chkbuild_user.name.inspect}: #{cdir.inspect}"
+  exit 1
+end
+
+host_pair = "#{local_host}-#{remote_host}"
+filemap = FileMap.new(<<"End")
+#{cdir}                                user=#{luid} group=#{cgid} mode=2750/7777
+#{cdir}/.ssh                           user=#{luid} group=#{cgid} mode=2750/7777
+#{cdir}/.ssh/chkbuild-#{host_pair}     user=#{luid} group=#{cgid} mode=640/777   file
+#{cdir}/.ssh/known_hosts               user=#{luid} group=#{cgid} mode=640/777   file
+#{cdir}/build/                         user=#{luid} group=#{cgid} mode=2775/7777
+#{cdir}/public_html/                   user=#{luid} group=#{cgid} mode=2775/7777
+
+#{ldir}/.ssh/chkbuild-#{host_pair}     user=#{luid} group=#{lgid} mode=400/777   file
+#{ldir}/.ssh/chkbuild-#{host_pair}.pub user=#{luid} group=#{lgid} mode=444/777   file
+End
+
+unless filemap.check
+  filemap.print_errors
+  exit 1
+end
+
+stats = filemap.stats
+
+local_secret_key = "#{ldir}/.ssh/chkbuild-#{host_pair}"
+local_public_key = "#{ldir}/.ssh/chkbuild-#{host_pair}.pub"
+if stats[local_secret_key] && !stats[local_public_key]
+  puts "#{local_public_key.inspect}: local ssh secret key exists but no public key"
+  exit 1
+end
+if !stats[local_secret_key] && stats[local_public_key]
+  puts "#{local_secret_key.inspect}: local ssh public key exists but no secret key"
+  exit 1
+end
+
+chkbuild_secret_key = "#{cdir}/.ssh/chkbuild-#{host_pair}"
+if stats[chkbuild_secret_key]
+  if !stats[local_secret_key]
+    puts "#{chkbuild_secret_key.inspect} exists but not #{local_secret_key.inspect}"
+    exit 1
+  end
+  if !FileUtils.compare_file(chkbuild_secret_key, local_secret_key)
+    puts "different content: #{chkbuild_secret_key.inspect} and #{local_secret_key.inspect}"
+    exit 1
+  end
+end
+
+puts "trying to check rsync & ssh #{remote_user}@#{remote_host} possible..."
+output = `ssh #{remote_user}@#{remote_host} rsync --version`
+if $?.to_i != 0
+  puts "ssh/rsync failed."
+  exit 1
+end
+if /rsync\s+version\s+([\d.]+)/ !~ output
+  puts "unexpected ssh/rsync output:"
+  puts "--------------------------------"
+  puts output
+  puts "--------------------------------"
+  exit 1
+end
+rsync_version = $1
+if (rsync_version.split(/\./).map {|n| n.to_i } <=> [2,6,3]) < 0
+  puts "rsync in #{remote_host.inspect} is too old: #{rsync_version} (must be newer than or equal 2.6.3)"
+  exit 1
+end
+
+######################################################################
+
+filemap.fix_directories
+
+if !stats[local_secret_key]
+  system "ssh-keygen", "-t", "dsa", "-N", "", "-f", local_secret_key, "-C", "chkbuild@#{local_host}@#{remote_host}"
+  exit 1 if $?.to_i != 0
+end
+begin
+  File.unlink chkbuild_secret_key
+rescue Errno::ENOENT
+end
+FileUtils.copy_file(local_secret_key, chkbuild_secret_key)
+
+chkbuild_known_hosts = "#{cdir}/.ssh/known_hosts"
+local_known_hosts = "#{ldir}/.ssh/known_hosts"
+known_hosts_line = nil
+if File.exist? local_known_hosts
+  IO.foreach(local_known_hosts) {|line|
+    next if /\A#/ =~ line || /\A\s*\z/ =~ line
+    if /\A\S+/ =~ line
+      rest = $'
+      hostnames = $&.split(/,/)
+      if hostnames.include? remote_host
+	addrs = [remote_host]
+	Socket.getaddrinfo(remote_host, "ssh").each {|addrfamily, port, host, addr|
+	  if addrfamily == 'AF_INET'
+	    addrs << addr
+	  end
+	}
+	addrs.uniq!
+	known_hosts_line = "#{addrs.join(',')}#{rest}"
+	break
+      end
+    end
+  }
+end
+open(chkbuild_known_hosts, File::RDWR|File::CREAT) {|f|
+  if known_hosts_line
+    f.each_line {|line|
+      if line == known_hosts_line
+	known_hosts_line = nil
+      end
+    }
+    f.puts known_hosts_line if known_hosts_line
+  end
+}
+
+filemap.fix_files
+
+public_key = File.read(local_public_key).chomp
+
+puts "setup remote files using ssh #{remote_user}@#{remote_host}..."
+IO.popen("ssh #{remote_user}@#{remote_host} sh -s", "w") {|f|
+  commands = <<'End'
+[ -d .ssh ] || (
+  mkdir .ssh
+  chmod 700 .ssh
+)
+End
+  d = []
+  remote_dir.scan(%r{[^/]+}) {|n|
+    next if /\A\.\.?\z/ =~ n
+    d << n
+    dir = d.join('/')
+    commands << <<"End"
+[ -d #{dir} ] || (
+  mkdir #{dir}
+  chmod 755 #{dir}
+)
+End
+  }
+  dir = d.join('/')
+  commands << <<"End"
+cat <<E > .ssh/chkbuild-rsyncd-#{host_pair}.conf
+[upload]
+path = $HOME/#{dir}
+use chroot = no
+read only = no
+write only = yes
+E
+[ -f .ssh/authorized_keys ] || touch .ssh/authorized_keys
+cp .ssh/authorized_keys .ssh/authorized_keys.bak &&
+cat - .ssh/authorized_keys <<E | sort | uniq > .ssh/authorized_keys.new && 
+command="`which rsync` --server --daemon --config=$HOME/.ssh/chkbuild-rsyncd-#{host_pair}.conf .",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty #{public_key}
+E
+mv .ssh/authorized_keys.new .ssh/authorized_keys
+End
+  f << commands
+}
+
+puts "rsync target: #{remote_user}@#{remote_host}::upload"
+