Tools for working on Wren Linux (extras/wren-dev.sh)

SYNOPSIS

wrenctl install wren-dev                     install them
wrenctl remove wren-dev                      remove them (shellcheck stays while the Claude Code sandbox uses it)
wrenctl manual wren-dev                      print the manual steps below

bash test.sh                   in ~/wren-linux: every check, shellcheck on every script included
bash extras/signing-key.sh     the key to sign Wren Linux with, if you publish it
wren-release                   from any folder: publish, then install here (--local: install only)
bash tools/git-push.sh         publish: signs, checks, asks, pushes
bash tools/build-deb.sh        build the package; lintian checks it
lintian FILE.deb               check any package
shellcheck SCRIPT              check one script

For the computer where you work on Wren Linux and build its package: lintian, Debian's own checker for packages, which tools/build-deb.sh runs on every package it builds, and shellcheck, which test.sh runs on every script. Both come from Debian. They aren't in the base install: lintian brings over a hundred packages (mostly Perl), and every other Wren Linux computer is better off without code it never uses. It also gets you a git copy of Wren Linux in ~/wren-linux, unless you are in one or have one there: the package leaves out the tests (tools/), the build tools, docs/maintaining.md, docs/distro-plan.md and the signing key's tools, which only someone working on Wren Linux uses. It is fetched from @WREN_GIT_URL@, and checked against Wren Linux's key once one is pinned.

LIMITS

• lintian and shellcheck point out mistakes they know about; a package or script they pass can still be wrong or unsafe.
• lintian unpacks the packages it checks: check only packages you built or trust.
• Until a signing key is pinned, the copy is what the server gives you: read it before you run it.

MANUAL INSTALL

# lintian and shellcheck, from Debian
sudo apt install --no-install-recommends lintian shellcheck git
# A copy of Wren Linux to work on, unless you have one
git clone @WREN_GIT_URL@ ~/wren-linux
# wren-release, to publish and install from any folder
printf '#!/bin/bash\nexec bash ~/wren-linux/tools/release.sh "$@"\n' >~/.local/bin/wren-release
chmod +x ~/.local/bin/wren-release

To undo:

# lintian goes; shellcheck is marked automatic, so apt removes it once nothing
# else needs it (the Claude Code sandbox installs it too)
sudo apt purge lintian
sudo apt-mark auto shellcheck
sudo apt autoremove --purge
rm ~/.local/bin/wren-release