#!/bin/sh set -eu # Version: v0.68.0 __wrap__() { # Function to mask username and password in URLs for safe printing # Usage: mask_credentials "url" # Returns the URL with credentials replaced by ***:***@ # # [^:@/]+ - This matches the username part: # - [^:@/] means "any character EXCEPT :, @, or /" # - + means "one or more of these characters" # - So it captures everything up until it hits a colon, at-sign, or slash # - : - Matches the literal colon that separates username from password # # [^@/]+ - This matches the password part: # - [^@/] means "any character EXCEPT @ or /" # - + means "one or more of these characters" # - So it captures everything after the colon until it hits an at-sign or slash # - @ - Matches the literal at-sign that mask_credentials() { URL="$1" # Use sed to replace username:password@ pattern with ***:***@ echo "$URL" | sed -E 's|://[^:@/]+:[^@/]+@|://***:***@|g' } VERSION="${PIXI_VERSION:-latest}" PIXI_HOME="${PIXI_HOME:-$HOME/.pixi}" case "$PIXI_HOME" in '~' | '~'/*) PIXI_HOME="${HOME-}${PIXI_HOME#\~}" ;; # expand tilde esac PIXI_BIN_DIR="${PIXI_BIN_DIR:-$PIXI_HOME/bin}" REPOURL="${PIXI_REPOURL:-https://github.com/prefix-dev/pixi}" PLATFORM="$(uname -s)" ARCH="${PIXI_ARCH:-$(uname -m)}" IS_MSYS=false if [ "${PLATFORM-}" = "Darwin" ]; then PLATFORM="apple-darwin" elif [ "${PLATFORM-}" = "Linux" ]; then PLATFORM="unknown-linux-musl" elif [ "$(uname -o)" = "Msys" ]; then IS_MSYS=true PLATFORM="pc-windows-msvc" fi case "${ARCH-}" in arm64 | aarch64) ARCH="aarch64" ;; riscv64) ARCH="riscv64gc" ;; esac BINARY="pixi-${ARCH}-${PLATFORM}" if $IS_MSYS; then EXTENSION=".zip" hash unzip 2>/dev/null || EXTENSION=".exe" else EXTENSION=".tar.gz" hash tar 2>/dev/null || EXTENSION='' fi if [ "$VERSION" = "latest" ]; then DOWNLOAD_URL="${PIXI_DOWNLOAD_URL:-${REPOURL%/}/releases/latest/download/${BINARY}${EXTENSION-}}" else # Check if version is incorrectly specified without prefix 'v', and prepend 'v' in this case DOWNLOAD_URL="${PIXI_DOWNLOAD_URL:-${REPOURL%/}/releases/download/v${VERSION#v}/${BINARY}${EXTENSION-}}" fi printf "This script will automatically download and install Pixi (%s) for you.\nGetting it from this url: %s\n" "$VERSION" "$(mask_credentials "$DOWNLOAD_URL")" HAVE_CURL=false HAVE_CURL_8_8_0=false if hash curl 2>/dev/null; then # Check that the curl version is not 8.8.0, which is broken for --write-out # https://github.com/curl/curl/issues/13845 if [ "$(curl --version | ( IFS=' ' read -r _ v _ printf %s "${v-}" ))" = "8.8.0" ]; then HAVE_CURL_8_8_0=true else HAVE_CURL=true fi fi HAVE_WGET=true hash wget 2>/dev/null || HAVE_WGET=false if ! $HAVE_CURL && ! $HAVE_WGET; then echo "error: you need either 'curl' or 'wget' installed for this script." >&2 if $HAVE_CURL_8_8_0; then echo "error: curl 8.8.0 is known to be broken, please use a different version" >&2 if $IS_MSYS; then echo "A common way to get an updated version of curl is to upgrade Git for Windows:" >&2 echo " https://gitforwindows.org/" >&2 fi fi exit 1 fi TEMP_FILE="$(mktemp "${TMPDIR:-/tmp}/.pixi_install.XXXXXXXX")" cleanup() { rm -f "$TEMP_FILE" } trap cleanup EXIT # Test if stdout is a terminal before showing progress if [ ! -t 1 ]; then CURL_OPTIONS="--silent" # --no-progress-meter is better, but only available in 7.67+ WGET_OPTIONS="--no-verbose" else CURL_OPTIONS="--no-silent" WGET_OPTIONS="--show-progress" fi # Use .netrc for authentication - prioritize NETRC env var over default location if [ -n "${NETRC:-}" ]; then CURL_OPTIONS="$CURL_OPTIONS --netrc-file $NETRC" WGET_OPTIONS="$WGET_OPTIONS --netrc-file=$NETRC" elif [ -f "$HOME/.netrc" ]; then CURL_OPTIONS="$CURL_OPTIONS --netrc" WGET_OPTIONS="$WGET_OPTIONS --netrc" fi if $HAVE_CURL; then CURL_ERR=0 HTTP_CODE="$(curl -SL $CURL_OPTIONS "$DOWNLOAD_URL" --output "$TEMP_FILE" --write-out "%{http_code}")" || CURL_ERR=$? case "$CURL_ERR" in 35 | 53 | 54 | 59 | 66 | 77) if ! $HAVE_WGET; then echo "error: when download '$(mask_credentials "$DOWNLOAD_URL")', curl has some local ssl problems with error $CURL_ERR" >&2 exit 1 fi # fallback to wget ;; 0) if [ "${HTTP_CODE}" -eq 401 ]; then echo "error: authentication failed when downloading '$(mask_credentials "$DOWNLOAD_URL")'" >&2 echo " Check your .netrc file, NETRC environment variable, or the hardcoded credentials in PIXI_DOWNLOAD_URL." >&2 exit 1 elif [ "${HTTP_CODE}" -lt 200 ] || [ "${HTTP_CODE}" -gt 299 ]; then echo "error: '$(mask_credentials "$DOWNLOAD_URL")' is not available (HTTP ${HTTP_CODE})" >&2 exit 1 fi HAVE_WGET=false # download success, skip wget ;; *) echo "error: when download '$(mask_credentials "$DOWNLOAD_URL")', curl fails with error $CURL_ERR" >&2 exit 1 ;; esac fi if $HAVE_WGET && ! wget $WGET_OPTIONS --output-document="$TEMP_FILE" "$DOWNLOAD_URL"; then echo "error: '$(mask_credentials "$DOWNLOAD_URL")' is not available" >&2 exit 1 fi # Check that file was correctly created (https://github.com/prefix-dev/pixi/issues/446) if [ ! -s "$TEMP_FILE" ]; then echo "error: temporary file ${TEMP_FILE} not correctly created." >&2 echo " As a workaround, you can try set TMPDIR env variable to directory with write permissions." >&2 exit 1 fi # Extract pixi from the downloaded file mkdir -p "$PIXI_BIN_DIR" if [ "${EXTENSION-}" = ".zip" ]; then unzip "$TEMP_FILE" -d "$PIXI_BIN_DIR" elif [ "${EXTENSION-}" = ".tar.gz" ]; then # Extract to a temporary directory first TEMP_DIR=$(mktemp -d) tar -xzf "$TEMP_FILE" -C "$TEMP_DIR" # Find and move the `pixi` binary, making sure to handle the case where it's in a subdirectory if [ -f "$TEMP_DIR/pixi" ]; then mv "$TEMP_DIR/pixi" "$PIXI_BIN_DIR/" else mv "$(find "$TEMP_DIR" -type f -name pixi)" "$PIXI_BIN_DIR/" fi chmod +x "$PIXI_BIN_DIR/pixi" rm -rf "$TEMP_DIR" elif [ "${EXTENSION-}" = ".exe" ]; then cp -f "$TEMP_FILE" "$PIXI_BIN_DIR/pixi.exe" else chmod +x "$TEMP_FILE" cp -f "$TEMP_FILE" "$PIXI_BIN_DIR/pixi" fi echo "The 'pixi' binary is installed into '${PIXI_BIN_DIR}'" # shell update can be suppressed by `PIXI_NO_PATH_UPDATE` env var if [ -n "${PIXI_NO_PATH_UPDATE:-}" ]; then echo "No path update because PIXI_NO_PATH_UPDATE is set" else update_shell() { FILE="$1" LINE="$2" # Create the file if it doesn't exist if [ ! -f "$FILE" ]; then touch "$FILE" fi # Append the line if not already present if ! grep -Fxq "$LINE" "$FILE"; then echo "Updating '${FILE}'" echo >>"$FILE" echo "$LINE" >>"$FILE" echo "Please restart or source your shell." fi } case "$(basename "${SHELL-}")" in bash) # Default to bashrc as that is used in non login shells instead of the profile. LINE="export PATH=\"${PIXI_BIN_DIR}:\$PATH\"" update_shell ~/.bashrc "$LINE" ;; fish) # Use 'set -gx PATH' for compatibility with Fish < 3.2.0 (which lacks fish_add_path) LINE="set -gx PATH \"${PIXI_BIN_DIR}\" \$PATH" update_shell ~/.config/fish/config.fish "$LINE" ;; zsh) LINE="export PATH=\"${PIXI_BIN_DIR}:\$PATH\"" update_shell ~/.zshrc "$LINE" ;; tcsh) LINE="set path = ( ${PIXI_BIN_DIR} \$path )" update_shell ~/.tcshrc "$LINE" ;; '') echo "warn: Could not detect shell type." >&2 echo " Please permanently add '${PIXI_BIN_DIR}' to your \$PATH to enable the 'pixi' command." >&2 ;; *) echo "warn: Could not update shell $(basename "$SHELL")" >&2 echo " Please permanently add '${PIXI_BIN_DIR}' to your \$PATH to enable the 'pixi' command." >&2 ;; esac fi } && __wrap__