feat: add nc

Author: 11notes

.github/workflows/nc.yml

@@ -0,0 +1,48 @@
+name: nc
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 5 * * *"
+  push:
+    tags:
+      - 'nc'
+jobs:
+  nc:
+    runs-on: ubuntu-latest
+    steps:
+      - name: cron-update / get latest version
+        run: |
+          LATEST_VERSION=$(curl -sfL https://salsa.debian.org/debian/netcat-openbsd/tags | grep -oE "debian/[0-9]+.[0-9]+" | head -n 1 | sed 's|debian/||')
+          if [ "${LATEST_VERSION}" != "null" ]; then
+            if curl -kILs --fail https://hub.docker.com/v2/repositories/11notes/distroless/tags/nc-${LATEST_VERSION}; then
+              echo "tag ${LATEST_VERSION} exists already!"
+            else
+              echo "WORKFLOW_AUTO_UPDATE=true" >> "${GITHUB_ENV}"
+              echo "LATEST_VERSION=${LATEST_VERSION}" >> "${GITHUB_ENV}"
+            fi
+          else
+            echo "tag ${LATEST_VERSION} is null!"
+          fi
+
+      - name: init / base64 nested json
+        if: env.WORKFLOW_AUTO_UPDATE == 'true'
+        uses: actions/github-script@62c3794a3eb6788d9a2a72b219504732c0c9a298
+        with:
+          script: |
+            const { Buffer } = require('node:buffer');
+            const etc = {
+              dockerfile:"nc.dockerfile",
+              tag:"nc",
+              version:"${{ env.LATEST_VERSION }}",
+              semver:{disable:{rolling: true}}
+            };
+            core.exportVariable('WORKFLOW_BASE64JSON', Buffer.from(JSON.stringify(etc)).toString('base64'));
+
+      - name: build docker image
+        if: env.WORKFLOW_AUTO_UPDATE == 'true'
+        uses: the-actions-org/workflow-dispatch@3133c5d135c7dbe4be4f9793872b6ef331b53bc7
+        with:
+          wait-for-completion: false
+          workflow: docker.yml
+          token: "${{ secrets.REPOSITORY_TOKEN }}"
+          inputs: '{ "release":"false", "readme":"false", "run-name":"nc", "etc":"${{ env.WORKFLOW_BASE64JSON }}" }'

nc.dockerfile

@@ -0,0 +1,87 @@
+# ╔═════════════════════════════════════════════════════╗
+# ║                       SETUP                         ║
+# ╚═════════════════════════════════════════════════════╝
+# GLOBAL
+  ARG APP_UID=1000 \
+      APP_GID=1000 \
+      BUILD_SRC=https://salsa.debian.org/debian/netcat-openbsd.git \
+      BUILD_ROOT=/netcat-openbsd
+  ARG BUILD_BIN=${BUILD_ROOT}/nc
+
+# :: FOREIGN IMAGES
+  FROM 11notes/util:bin AS util-bin
+
+
+# ╔═════════════════════════════════════════════════════╗
+# ║                       BUILD                         ║
+# ╚═════════════════════════════════════════════════════╝
+# :: NC
+  FROM alpine AS build
+  COPY --from=util-bin / /
+  ARG APP_VERSION \
+      BUILD_SRC \
+      BUILD_ROOT \
+      BUILD_BIN
+
+  RUN set -ex; \
+    apk --update --no-cache add \
+      git \
+      g++ \
+      make \
+      patch \
+      libbsd-dev \
+      libbsd-static;
+
+  RUN set -ex; \
+    git clone ${BUILD_SRC} -b debian/${APP_VERSION}-1;
+
+  COPY ./src/nc/ /
+
+  RUN set -ex; \
+    cd ${BUILD_ROOT}; \
+    git apply b64.patch; \
+    sed -i -e "/SRCS=/s;\(.*\);& base64.c;" Makefile; \
+    while read -r PATCH; do \
+		  patch -Np1 < debian/patches/${PATCH} || echo "warning"; \
+    done < debian/patches/series;
+
+  RUN set -ex; \
+    cd ${BUILD_ROOT}; \
+    make -s -j $(nproc) LDFLAGS="--static" 2>&1 > /dev/null;
+
+  RUN set -ex; \
+    eleven distroless ${BUILD_BIN};
+
+
+# ╔═════════════════════════════════════════════════════╗
+# ║                       IMAGE                         ║
+# ╚═════════════════════════════════════════════════════╝
+  # :: HEADER
+  FROM scratch
+
+  # :: default arguments
+    ARG TARGETPLATFORM \
+        TARGETOS \
+        TARGETARCH \
+        TARGETVARIANT \
+        APP_IMAGE \
+        APP_NAME \
+        APP_VERSION \
+        APP_ROOT \
+        APP_UID \
+        APP_GID \
+        APP_NO_CACHE
+
+  # :: default environment
+    ENV APP_IMAGE=${APP_IMAGE} \
+        APP_NAME=${APP_NAME} \
+        APP_VERSION=${APP_VERSION} \
+        APP_ROOT=${APP_ROOT}
+
+  # :: multi-stage
+    COPY --from=build ${APP_ROOT}/ /
+
+# :: EXECUTE
+  USER ${APP_UID}:${APP_GID}
+  ENTRYPOINT ["/usr/local/bin/nc"]
+  CMD ["-version"]

src/nc/netcat-openbsd/b64.patch

@@ -0,0 +1,14 @@
+declare ahead of time so it's not implicit which is invalid in c23
+diff --git a/socks.c b/socks.c
+index 7c7448c..ce2533d 100644
+--- a/socks.c
++++ b/socks.c
+@@ -53,6 +54,8 @@
+ #define SOCKS_DOMAIN	3
+ #define SOCKS_IPV6	4
+ 
++int b64_ntop(const uint8_t *, size_t, char *, size_t);
++
+ int	remote_connect(const char *, const char *, struct addrinfo, char *);
+ int	socks_connect(const char *, const char *, struct addrinfo,
+ 	    const char *, const char *, struct addrinfo, int,