Initial commit

pkg/build/build.go

@@ -0,0 +1,838 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package build
+
+import (
+	"bytes"
+	"context"
+	"encoding/hex"
+	"fmt"
+	"io"
+	"os"
+	"path/filepath"
+	"runtime"
+	"slices"
+	"strconv"
+	"strings"
+	"time"
+
+	_ "github.com/goreleaser/nfpm/v2/apk"
+	_ "github.com/goreleaser/nfpm/v2/arch"
+	_ "github.com/goreleaser/nfpm/v2/deb"
+	_ "github.com/goreleaser/nfpm/v2/rpm"
+
+	"github.com/goreleaser/nfpm/v2"
+	"github.com/goreleaser/nfpm/v2/files"
+	"lure.sh/lure/internal/cliutils"
+	"lure.sh/lure/internal/config"
+	"lure.sh/lure/internal/cpu"
+	"lure.sh/lure/internal/db"
+	"lure.sh/lure/internal/dl"
+	"lure.sh/lure/internal/shutils/decoder"
+	"lure.sh/lure/internal/shutils/handlers"
+	"lure.sh/lure/internal/shutils/helpers"
+	"lure.sh/lure/internal/types"
+	"lure.sh/lure/pkg/distro"
+	"lure.sh/lure/pkg/loggerctx"
+	"lure.sh/lure/pkg/manager"
+	"lure.sh/lure/pkg/repos"
+	"mvdan.cc/sh/v3/expand"
+	"mvdan.cc/sh/v3/interp"
+	"mvdan.cc/sh/v3/syntax"
+)
+
+// BuildPackage builds the script at the given path. It returns two slices. One contains the paths
+// to the built package(s), the other contains the names of the built package(s).
+func BuildPackage(ctx context.Context, opts types.BuildOpts) ([]string, []string, error) {
+	log := loggerctx.From(ctx)
+
+	info, err := distro.ParseOSRelease(ctx)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	fl, err := parseScript(info, opts.Script)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	// The first pass is just used to get variable values and runs before
+	// the script is displayed, so it's restricted so as to prevent malicious
+	// code from executing.
+	vars, err := executeFirstPass(ctx, info, fl, opts.Script)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	dirs := getDirs(ctx, vars, opts.Script)
+
+	// If opts.Clean isn't set and we find the package already built,
+	// just return it rather than rebuilding
+	if !opts.Clean {
+		builtPkgPath, ok, err := checkForBuiltPackage(opts.Manager, vars, getPkgFormat(opts.Manager), dirs.BaseDir)
+		if err != nil {
+			return nil, nil, err
+		}
+
+		if ok {
+			return []string{builtPkgPath}, nil, err
+		}
+	}
+
+	// Ask the user if they'd like to see the build script
+	err = cliutils.PromptViewScript(ctx, opts.Script, vars.Name, config.Config(ctx).PagerStyle, opts.Interactive)
+	if err != nil {
+		log.Fatal("Failed to prompt user to view build script").Err(err).Send()
+	}
+
+	log.Info("Building package").Str("name", vars.Name).Str("version", vars.Version).Send()
+
+	// The second pass will be used to execute the actual code,
+	// so it's unrestricted. The script has already been displayed
+	// to the user by this point, so it should be safe
+	dec, err := executeSecondPass(ctx, info, fl, dirs)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	// Get the installed packages on the system
+	installed, err := opts.Manager.ListInstalled(nil)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	cont, err := performChecks(ctx, vars, opts.Interactive, installed)
+	if err != nil {
+		return nil, nil, err
+	} else if !cont {
+		os.Exit(1)
+	}
+
+	// Prepare the directories for building
+	err = prepareDirs(dirs)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	buildDeps, err := installBuildDeps(ctx, vars, opts, installed)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	err = installOptDeps(ctx, vars, opts, installed)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	builtPaths, builtNames, repoDeps, err := buildLUREDeps(ctx, opts, vars)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	log.Info("Downloading sources").Send()
+
+	err = getSources(ctx, dirs, vars)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	err = executeFunctions(ctx, dec, dirs, vars)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	log.Info("Building package metadata").Str("name", vars.Name).Send()
+
+	pkgFormat := getPkgFormat(opts.Manager)
+
+	pkgInfo, err := buildPkgMetadata(vars, dirs, pkgFormat, append(repoDeps, builtNames...))
+	if err != nil {
+		return nil, nil, err
+	}
+
+	packager, err := nfpm.Get(pkgFormat)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	pkgName := packager.ConventionalFileName(pkgInfo)
+	pkgPath := filepath.Join(dirs.BaseDir, pkgName)
+
+	pkgFile, err := os.Create(pkgPath)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	log.Info("Compressing package").Str("name", pkgName).Send()
+
+	err = packager.Package(pkgInfo, pkgFile)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	err = removeBuildDeps(ctx, buildDeps, opts)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	// Add the path and name of the package we just built to the
+	// appropriate slices
+	pkgPaths := append(builtPaths, pkgPath)
+	pkgNames := append(builtNames, vars.Name)
+
+	// Remove any duplicates from the pkgPaths and pkgNames.
+	// Duplicates can be introduced if several of the dependencies
+	// depend on the same packages.
+	pkgPaths = removeDuplicates(pkgPaths)
+	pkgNames = removeDuplicates(pkgNames)
+
+	return pkgPaths, pkgNames, nil
+}
+
+// parseScript parses the build script using the built-in bash implementation
+func parseScript(info *distro.OSRelease, script string) (*syntax.File, error) {
+	fl, err := os.Open(script)
+	if err != nil {
+		return nil, err
+	}
+	defer fl.Close()
+
+	file, err := syntax.NewParser().Parse(fl, "lure.sh")
+	if err != nil {
+		return nil, err
+	}
+
+	return file, nil
+}
+
+// executeFirstPass executes the parsed script in a restricted environment
+// to extract the build variables without executing any actual code.
+func executeFirstPass(ctx context.Context, info *distro.OSRelease, fl *syntax.File, script string) (*types.BuildVars, error) {
+	scriptDir := filepath.Dir(script)
+	env := createBuildEnvVars(info, types.Directories{ScriptDir: scriptDir})
+
+	runner, err := interp.New(
+		interp.Env(expand.ListEnviron(env...)),
+		interp.StdIO(os.Stdin, os.Stdout, os.Stderr),
+		interp.ExecHandler(helpers.Restricted.ExecHandler(handlers.NopExec)),
+		interp.ReadDirHandler(handlers.RestrictedReadDir(scriptDir)),
+		interp.StatHandler(handlers.RestrictedStat(scriptDir)),
+		interp.OpenHandler(handlers.RestrictedOpen(scriptDir)),
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	err = runner.Run(ctx, fl)
+	if err != nil {
+		return nil, err
+	}
+
+	dec := decoder.New(info, runner)
+
+	var vars types.BuildVars
+	err = dec.DecodeVars(&vars)
+	if err != nil {
+		return nil, err
+	}
+
+	return &vars, nil
+}
+
+// getDirs returns the appropriate directories for the script
+func getDirs(ctx context.Context, vars *types.BuildVars, script string) types.Directories {
+	baseDir := filepath.Join(config.GetPaths(ctx).PkgsDir, vars.Name)
+	return types.Directories{
+		BaseDir:   baseDir,
+		SrcDir:    filepath.Join(baseDir, "src"),
+		PkgDir:    filepath.Join(baseDir, "pkg"),
+		ScriptDir: filepath.Dir(script),
+	}
+}
+
+// executeSecondPass executes the build script for the second time, this time without any restrictions.
+// It returns a decoder that can be used to retrieve functions and variables from the script.
+func executeSecondPass(ctx context.Context, info *distro.OSRelease, fl *syntax.File, dirs types.Directories) (*decoder.Decoder, error) {
+	env := createBuildEnvVars(info, dirs)
+
+	fakeroot := handlers.FakerootExecHandler(2 * time.Second)
+	runner, err := interp.New(
+		interp.Env(expand.ListEnviron(env...)),
+		interp.StdIO(os.Stdin, os.Stdout, os.Stderr),
+		interp.ExecHandler(helpers.Helpers.ExecHandler(fakeroot)),
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	err = runner.Run(ctx, fl)
+	if err != nil {
+		return nil, err
+	}
+
+	return decoder.New(info, runner), nil
+}
+
+// prepareDirs prepares the directories for building.
+func prepareDirs(dirs types.Directories) error {
+	err := os.RemoveAll(dirs.BaseDir)
+	if err != nil {
+		return err
+	}
+	err = os.MkdirAll(dirs.SrcDir, 0o755)
+	if err != nil {
+		return err
+	}
+	return os.MkdirAll(dirs.PkgDir, 0o755)
+}
+
+// performChecks checks various things on the system to ensure that the package can be installed.
+func performChecks(ctx context.Context, vars *types.BuildVars, interactive bool, installed map[string]string) (bool, error) {
+	log := loggerctx.From(ctx)
+	if !cpu.IsCompatibleWith(cpu.Arch(), vars.Architectures) {
+		cont, err := cliutils.YesNoPrompt(ctx, "Your system's CPU architecture doesn't match this package. Do you want to build anyway?", interactive, true)
+		if err != nil {
+			return false, err
+		}
+
+		if !cont {
+			return false, nil
+		}
+	}
+
+	if instVer, ok := installed[vars.Name]; ok {
+		log.Warn("This package is already installed").
+			Str("name", vars.Name).
+			Str("version", instVer).
+			Send()
+	}
+
+	return true, nil
+}
+
+// installBuildDeps installs any build dependencies that aren't already installed and returns
+// a slice containing the names of all the packages it installed.
+func installBuildDeps(ctx context.Context, vars *types.BuildVars, opts types.BuildOpts, installed map[string]string) ([]string, error) {
+	log := loggerctx.From(ctx)
+	var buildDeps []string
+	if len(vars.BuildDepends) > 0 {
+		found, notFound, err := repos.FindPkgs(ctx, vars.BuildDepends)
+		if err != nil {
+			return nil, err
+		}
+
+		found = removeAlreadyInstalled(found, installed)
+
+		log.Info("Installing build dependencies").Send()
+
+		flattened := cliutils.FlattenPkgs(ctx, found, "install", opts.Interactive)
+		buildDeps = packageNames(flattened)
+		InstallPkgs(ctx, flattened, notFound, opts)
+	}
+	return buildDeps, nil
+}
+
+// installOptDeps asks the user which, if any, optional dependencies they want to install.
+// If the user chooses to install any optional dependencies, it performs the installation.
+func installOptDeps(ctx context.Context, vars *types.BuildVars, opts types.BuildOpts, installed map[string]string) error {
+	if len(vars.OptDepends) > 0 {
+		optDeps, err := cliutils.ChooseOptDepends(ctx, vars.OptDepends, "install", opts.Interactive)
+		if err != nil {
+			return err
+		}
+
+		if len(optDeps) == 0 {
+			return nil
+		}
+
+		found, notFound, err := repos.FindPkgs(ctx, optDeps)
+		if err != nil {
+			return err
+		}
+
+		found = removeAlreadyInstalled(found, installed)
+		flattened := cliutils.FlattenPkgs(ctx, found, "install", opts.Interactive)
+		InstallPkgs(ctx, flattened, notFound, opts)
+	}
+	return nil
+}
+
+// buildLUREDeps builds all the LURE dependencies of the package. It returns the paths and names
+// of the packages it built, as well as all the dependencies it didn't find in the LURE repo so
+// they can be installed from the system repos.
+func buildLUREDeps(ctx context.Context, opts types.BuildOpts, vars *types.BuildVars) (builtPaths, builtNames, repoDeps []string, err error) {
+	log := loggerctx.From(ctx)
+	if len(vars.Depends) > 0 {
+		log.Info("Installing dependencies").Send()
+
+		found, notFound, err := repos.FindPkgs(ctx, vars.Depends)
+		if err != nil {
+			return nil, nil, nil, err
+		}
+		repoDeps = notFound
+
+		// If there are multiple options for some packages, flatten them all into a single slice
+		pkgs := cliutils.FlattenPkgs(ctx, found, "install", opts.Interactive)
+		scripts := GetScriptPaths(ctx, pkgs)
+		for _, script := range scripts {
+			newOpts := opts
+			newOpts.Script = script
+
+			// Build the dependency
+			pkgPaths, pkgNames, err := BuildPackage(ctx, newOpts)
+			if err != nil {
+				return nil, nil, nil, err
+			}
+
+			// Append the paths of all the built packages to builtPaths
+			builtPaths = append(builtPaths, pkgPaths...)
+			// Append the names of all the built packages to builtNames
+			builtNames = append(builtNames, pkgNames...)
+			// Append the name of the current package to builtNames
+			builtNames = append(builtNames, filepath.Base(filepath.Dir(script)))
+		}
+	}
+
+	// Remove any potential duplicates, which can be introduced if
+	// several of the dependencies depend on the same packages.
+	repoDeps = removeDuplicates(repoDeps)
+	builtPaths = removeDuplicates(builtPaths)
+	builtNames = removeDuplicates(builtNames)
+	return builtPaths, builtNames, repoDeps, nil
+}
+
+// executeFunctions executes the special LURE functions, such as version(), prepare(), etc.
+func executeFunctions(ctx context.Context, dec *decoder.Decoder, dirs types.Directories, vars *types.BuildVars) (err error) {
+	log := loggerctx.From(ctx)
+	version, ok := dec.GetFunc("version")
+	if ok {
+		log.Info("Executing version()").Send()
+
+		buf := &bytes.Buffer{}
+
+		err = version(
+			ctx,
+			interp.Dir(dirs.SrcDir),
+			interp.StdIO(os.Stdin, buf, os.Stderr),
+		)
+		if err != nil {
+			return err
+		}
+
+		newVer := strings.TrimSpace(buf.String())
+		err = setVersion(ctx, dec.Runner, newVer)
+		if err != nil {
+			return err
+		}
+		vars.Version = newVer
+
+		log.Info("Updating version").Str("new", newVer).Send()
+	}
+
+	prepare, ok := dec.GetFunc("prepare")
+	if ok {
+		log.Info("Executing prepare()").Send()
+
+		err = prepare(ctx, interp.Dir(dirs.SrcDir))
+		if err != nil {
+			return err
+		}
+	}
+
+	build, ok := dec.GetFunc("build")
+	if ok {
+		log.Info("Executing build()").Send()
+
+		err = build(ctx, interp.Dir(dirs.SrcDir))
+		if err != nil {
+			return err
+		}
+	}
+
+	packageFn, ok := dec.GetFunc("package")
+	if ok {
+		log.Info("Executing package()").Send()
+
+		err = packageFn(ctx, interp.Dir(dirs.SrcDir))
+		if err != nil {
+			return err
+		}
+	} else {
+		log.Fatal("The package() function is required").Send()
+	}
+
+	return nil
+}
+
+// buildPkgMetadata builds the metadata for the package that's going to be built.
+func buildPkgMetadata(vars *types.BuildVars, dirs types.Directories, pkgFormat string, deps []string) (*nfpm.Info, error) {
+	pkgInfo := &nfpm.Info{
+		Name:        vars.Name,
+		Description: vars.Description,
+		Arch:        cpu.Arch(),
+		Platform:    "linux",
+		Version:     vars.Version,
+		Release:     strconv.Itoa(vars.Release),
+		Homepage:    vars.Homepage,
+		License:     strings.Join(vars.Licenses, ", "),
+		Maintainer:  vars.Maintainer,
+		Overridables: nfpm.Overridables{
+			Conflicts: vars.Conflicts,
+			Replaces:  vars.Replaces,
+			Provides:  vars.Provides,
+			Depends:   deps,
+		},
+	}
+
+	if pkgFormat == "apk" {
+		// Alpine refuses to install packages that provide themselves, so remove any such provides
+		pkgInfo.Overridables.Provides = slices.DeleteFunc(pkgInfo.Overridables.Provides, func(s string) bool {
+			return s == pkgInfo.Name
+		})
+	}
+
+	if vars.Epoch != 0 {
+		pkgInfo.Epoch = strconv.FormatUint(uint64(vars.Epoch), 10)
+	}
+
+	setScripts(vars, pkgInfo, dirs.ScriptDir)
+
+	if slices.Contains(vars.Architectures, "all") {
+		pkgInfo.Arch = "all"
+	}
+
+	contents, err := buildContents(vars, dirs)
+	if err != nil {
+		return nil, err
+	}
+	pkgInfo.Overridables.Contents = contents
+
+	return pkgInfo, nil
+}
+
+// buildContents builds the contents section of the package, which contains the files
+// that will be placed into the final package.
+func buildContents(vars *types.BuildVars, dirs types.Directories) ([]*files.Content, error) {
+	contents := []*files.Content{}
+	err := filepath.Walk(dirs.PkgDir, func(path string, fi os.FileInfo, err error) error {
+		trimmed := strings.TrimPrefix(path, dirs.PkgDir)
+
+		if fi.IsDir() {
+			f, err := os.Open(path)
+			if err != nil {
+				return err
+			}
+
+			// If the directory is empty, skip it
+			_, err = f.Readdirnames(1)
+			if err != io.EOF {
+				return nil
+			}
+
+			contents = append(contents, &files.Content{
+				Source:      path,
+				Destination: trimmed,
+				Type:        "dir",
+				FileInfo: &files.ContentFileInfo{
+					MTime: fi.ModTime(),
+				},
+			})
+
+			return f.Close()
+		}
+
+		if fi.Mode()&os.ModeSymlink != 0 {
+			link, err := os.Readlink(path)
+			if err != nil {
+				return err
+			}
+			// Remove pkgdir from the symlink's path
+			link = strings.TrimPrefix(link, dirs.PkgDir)
+
+			contents = append(contents, &files.Content{
+				Source:      link,
+				Destination: trimmed,
+				Type:        "symlink",
+				FileInfo: &files.ContentFileInfo{
+					MTime: fi.ModTime(),
+					Mode:  fi.Mode(),
+				},
+			})
+
+			return nil
+		}
+
+		fileContent := &files.Content{
+			Source:      path,
+			Destination: trimmed,
+			FileInfo: &files.ContentFileInfo{
+				MTime: fi.ModTime(),
+				Mode:  fi.Mode(),
+				Size:  fi.Size(),
+			},
+		}
+
+		// If the file is supposed to be backed up, set its type to config|noreplace
+		if slices.Contains(vars.Backup, trimmed) {
+			fileContent.Type = "config|noreplace"
+		}
+
+		contents = append(contents, fileContent)
+
+		return nil
+	})
+	return contents, err
+}
+
+// removeBuildDeps asks the user if they'd like to remove the build dependencies that were
+// installed by installBuildDeps. If so, it uses the package manager to do that.
+func removeBuildDeps(ctx context.Context, buildDeps []string, opts types.BuildOpts) error {
+	if len(buildDeps) > 0 {
+		remove, err := cliutils.YesNoPrompt(ctx, "Would you like to remove the build dependencies?", opts.Interactive, false)
+		if err != nil {
+			return err
+		}
+
+		if remove {
+			err = opts.Manager.Remove(
+				&manager.Opts{
+					AsRoot:    true,
+					NoConfirm: true,
+				},
+				buildDeps...,
+			)
+			if err != nil {
+				return err
+			}
+		}
+	}
+	return nil
+}
+
+// checkForBuiltPackage tries to detect a previously-built package and returns its path
+// and true if it finds one. If it doesn't find it, it returns "", false, nil.
+func checkForBuiltPackage(mgr manager.Manager, vars *types.BuildVars, pkgFormat, baseDir string) (string, bool, error) {
+	filename, err := pkgFileName(vars, pkgFormat)
+	if err != nil {
+		return "", false, err
+	}
+
+	pkgPath := filepath.Join(baseDir, filename)
+
+	_, err = os.Stat(pkgPath)
+	if err != nil {
+		return "", false, nil
+	}
+
+	return pkgPath, true, nil
+}
+
+// pkgFileName returns the filename of the package if it were to be built.
+// This is used to check if the package has already been built.
+func pkgFileName(vars *types.BuildVars, pkgFormat string) (string, error) {
+	pkgInfo := &nfpm.Info{
+		Name:    vars.Name,
+		Arch:    cpu.Arch(),
+		Version: vars.Version,
+		Release: strconv.Itoa(vars.Release),
+		Epoch:   strconv.FormatUint(uint64(vars.Epoch), 10),
+	}
+
+	packager, err := nfpm.Get(pkgFormat)
+	if err != nil {
+		return "", err
+	}
+
+	return packager.ConventionalFileName(pkgInfo), nil
+}
+
+// getPkgFormat returns the package format of the package manager,
+// or LURE_PKG_FORMAT if that's set.
+func getPkgFormat(mgr manager.Manager) string {
+	pkgFormat := mgr.Format()
+	if format, ok := os.LookupEnv("LURE_PKG_FORMAT"); ok {
+		pkgFormat = format
+	}
+	return pkgFormat
+}
+
+// createBuildEnvVars creates the environment variables that will be set in the
+// build script when it's executed.
+func createBuildEnvVars(info *distro.OSRelease, dirs types.Directories) []string {
+	env := os.Environ()
+
+	env = append(
+		env,
+		"DISTRO_NAME="+info.Name,
+		"DISTRO_PRETTY_NAME="+info.PrettyName,
+		"DISTRO_ID="+info.ID,
+		"DISTRO_VERSION_ID="+info.VersionID,
+		"DISTRO_ID_LIKE="+strings.Join(info.Like, " "),
+		"ARCH="+cpu.Arch(),
+		"NCPU="+strconv.Itoa(runtime.NumCPU()),
+	)
+
+	if dirs.ScriptDir != "" {
+		env = append(env, "scriptdir="+dirs.ScriptDir)
+	}
+
+	if dirs.PkgDir != "" {
+		env = append(env, "pkgdir="+dirs.PkgDir)
+	}
+
+	if dirs.SrcDir != "" {
+		env = append(env, "srcdir="+dirs.SrcDir)
+	}
+
+	return env
+}
+
+// getSources downloads the sources from the script.
+func getSources(ctx context.Context, dirs types.Directories, bv *types.BuildVars) error {
+	log := loggerctx.From(ctx)
+	if len(bv.Sources) != len(bv.Checksums) {
+		log.Fatal("The checksums array must be the same length as sources").Send()
+	}
+
+	for i, src := range bv.Sources {
+		opts := dl.Options{
+			Name:        fmt.Sprintf("%s[%d]", bv.Name, i),
+			URL:         src,
+			Destination: dirs.SrcDir,
+			Progress:    os.Stderr,
+			LocalDir:    dirs.ScriptDir,
+		}
+
+		if !strings.EqualFold(bv.Checksums[i], "SKIP") {
+			// If the checksum contains a colon, use the part before the colon
+			// as the algorithm and the part after as the actual checksum.
+			// Otherwise, use the default sha256 with the whole string as the checksum.
+			algo, hashData, ok := strings.Cut(bv.Checksums[i], ":")
+			if ok {
+				checksum, err := hex.DecodeString(hashData)
+				if err != nil {
+					return err
+				}
+				opts.Hash = checksum
+				opts.HashAlgorithm = algo
+			} else {
+				checksum, err := hex.DecodeString(bv.Checksums[i])
+				if err != nil {
+					return err
+				}
+				opts.Hash = checksum
+			}
+		}
+
+		err := dl.Download(ctx, opts)
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+// setScripts adds any hook scripts to the package metadata.
+func setScripts(vars *types.BuildVars, info *nfpm.Info, scriptDir string) {
+	if vars.Scripts.PreInstall != "" {
+		info.Scripts.PreInstall = filepath.Join(scriptDir, vars.Scripts.PreInstall)
+	}
+
+	if vars.Scripts.PostInstall != "" {
+		info.Scripts.PostInstall = filepath.Join(scriptDir, vars.Scripts.PostInstall)
+	}
+
+	if vars.Scripts.PreRemove != "" {
+		info.Scripts.PreRemove = filepath.Join(scriptDir, vars.Scripts.PreRemove)
+	}
+
+	if vars.Scripts.PostRemove != "" {
+		info.Scripts.PostRemove = filepath.Join(scriptDir, vars.Scripts.PostRemove)
+	}
+
+	if vars.Scripts.PreUpgrade != "" {
+		info.ArchLinux.Scripts.PreUpgrade = filepath.Join(scriptDir, vars.Scripts.PreUpgrade)
+		info.APK.Scripts.PreUpgrade = filepath.Join(scriptDir, vars.Scripts.PreUpgrade)
+	}
+
+	if vars.Scripts.PostUpgrade != "" {
+		info.ArchLinux.Scripts.PostUpgrade = filepath.Join(scriptDir, vars.Scripts.PostUpgrade)
+		info.APK.Scripts.PostUpgrade = filepath.Join(scriptDir, vars.Scripts.PostUpgrade)
+	}
+
+	if vars.Scripts.PreTrans != "" {
+		info.RPM.Scripts.PreTrans = filepath.Join(scriptDir, vars.Scripts.PreTrans)
+	}
+
+	if vars.Scripts.PostTrans != "" {
+		info.RPM.Scripts.PostTrans = filepath.Join(scriptDir, vars.Scripts.PostTrans)
+	}
+}
+
+// setVersion changes the version variable in the script runner.
+// It's used to set the version to the output of the version() function.
+func setVersion(ctx context.Context, r *interp.Runner, to string) error {
+	fl, err := syntax.NewParser().Parse(strings.NewReader("version='"+to+"'"), "")
+	if err != nil {
+		return err
+	}
+	return r.Run(ctx, fl)
+}
+
+// removeAlreadyInstalled returns a map without any dependencies that are already installed
+func removeAlreadyInstalled(found map[string][]db.Package, installed map[string]string) map[string][]db.Package {
+	filteredPackages := make(map[string][]db.Package)
+
+	for name, pkgList := range found {
+		filteredPkgList := []db.Package{}
+		for _, pkg := range pkgList {
+			if _, isInstalled := installed[pkg.Name]; !isInstalled {
+				filteredPkgList = append(filteredPkgList, pkg)
+			}
+		}
+		filteredPackages[name] = filteredPkgList
+	}
+
+	return filteredPackages
+}
+
+// packageNames returns the names of all the given packages
+func packageNames(pkgs []db.Package) []string {
+	names := make([]string, len(pkgs))
+	for i, p := range pkgs {
+		names[i] = p.Name
+	}
+	return names
+}
+
+// removeDuplicates removes any duplicates from the given slice
+func removeDuplicates(slice []string) []string {
+	seen := map[string]struct{}{}
+	result := []string{}
+
+	for _, s := range slice {
+		if _, ok := seen[s]; !ok {
+			seen[s] = struct{}{}
+			result = append(result, s)
+		}
+	}
+
+	return result
+}

pkg/build/install.go

@@ -0,0 +1,72 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package build
+
+import (
+	"context"
+	"path/filepath"
+
+	"lure.sh/lure/internal/config"
+	"lure.sh/lure/internal/db"
+	"lure.sh/lure/internal/types"
+	"lure.sh/lure/pkg/loggerctx"
+)
+
+// InstallPkgs installs native packages via the package manager,
+// then builds and installs the LURE packages
+func InstallPkgs(ctx context.Context, lurePkgs []db.Package, nativePkgs []string, opts types.BuildOpts) {
+	log := loggerctx.From(ctx)
+
+	if len(nativePkgs) > 0 {
+		err := opts.Manager.Install(nil, nativePkgs...)
+		if err != nil {
+			log.Fatal("Error installing native packages").Err(err).Send()
+		}
+	}
+
+	InstallScripts(ctx, GetScriptPaths(ctx, lurePkgs), opts)
+}
+
+// GetScriptPaths returns a slice of script paths corresponding to the
+// given packages
+func GetScriptPaths(ctx context.Context, pkgs []db.Package) []string {
+	var scripts []string
+	for _, pkg := range pkgs {
+		scriptPath := filepath.Join(config.GetPaths(ctx).RepoDir, pkg.Repository, pkg.Name, "lure.sh")
+		scripts = append(scripts, scriptPath)
+	}
+	return scripts
+}
+
+// InstallScripts builds and installs the given LURE build scripts
+func InstallScripts(ctx context.Context, scripts []string, opts types.BuildOpts) {
+	log := loggerctx.From(ctx)
+	for _, script := range scripts {
+		opts.Script = script
+		builtPkgs, _, err := BuildPackage(ctx, opts)
+		if err != nil {
+			log.Fatal("Error building package").Err(err).Send()
+		}
+
+		err = opts.Manager.InstallLocal(nil, builtPkgs...)
+		if err != nil {
+			log.Fatal("Error installing package").Err(err).Send()
+		}
+	}
+}

pkg/distro/osrelease.go

@@ -0,0 +1,118 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package distro
+
+import (
+	"context"
+	"os"
+	"strings"
+
+	"lure.sh/lure/internal/shutils/handlers"
+	"mvdan.cc/sh/v3/expand"
+	"mvdan.cc/sh/v3/interp"
+	"mvdan.cc/sh/v3/syntax"
+)
+
+// OSRelease contains information from an os-release file
+type OSRelease struct {
+	Name             string
+	PrettyName       string
+	ID               string
+	Like             []string
+	VersionID        string
+	ANSIColor        string
+	HomeURL          string
+	DocumentationURL string
+	SupportURL       string
+	BugReportURL     string
+	Logo             string
+}
+
+var parsed *OSRelease
+
+// OSReleaseName returns a struct parsed from the system's os-release
+// file. It checks /etc/os-release as well as /usr/lib/os-release.
+// The first time it's called, it'll parse the os-release file.
+// Subsequent calls will return the same value.
+func ParseOSRelease(ctx context.Context) (*OSRelease, error) {
+	if parsed != nil {
+		return parsed, nil
+	}
+
+	fl, err := os.Open("/usr/lib/os-release")
+	if err != nil {
+		fl, err = os.Open("/etc/os-release")
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	file, err := syntax.NewParser().Parse(fl, "/usr/lib/os-release")
+	if err != nil {
+		return nil, err
+	}
+
+	fl.Close()
+
+	// Create new shell interpreter with nop open, exec, readdir, and stat handlers
+	// as well as no environment variables in order to prevent vulnerabilities
+	// caused by changing the os-release file.
+	runner, err := interp.New(
+		interp.OpenHandler(handlers.NopOpen),
+		interp.ExecHandler(handlers.NopExec),
+		interp.ReadDirHandler(handlers.NopReadDir),
+		interp.StatHandler(handlers.NopStat),
+		interp.Env(expand.ListEnviron()),
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	err = runner.Run(ctx, file)
+	if err != nil {
+		return nil, err
+	}
+
+	out := &OSRelease{
+		Name:             runner.Vars["NAME"].Str,
+		PrettyName:       runner.Vars["PRETTY_NAME"].Str,
+		ID:               runner.Vars["ID"].Str,
+		VersionID:        runner.Vars["VERSION_ID"].Str,
+		ANSIColor:        runner.Vars["ANSI_COLOR"].Str,
+		HomeURL:          runner.Vars["HOME_URL"].Str,
+		DocumentationURL: runner.Vars["DOCUMENTATION_URL"].Str,
+		SupportURL:       runner.Vars["SUPPORT_URL"].Str,
+		BugReportURL:     runner.Vars["BUG_REPORT_URL"].Str,
+		Logo:             runner.Vars["LOGO"].Str,
+	}
+
+	distroUpdated := false
+	if distID, ok := os.LookupEnv("LURE_DISTRO"); ok {
+		out.ID = distID
+	}
+
+	if distLike, ok := os.LookupEnv("LURE_DISTRO_LIKE"); ok {
+		out.Like = strings.Split(distLike, " ")
+	} else if runner.Vars["ID_LIKE"].IsSet() && !distroUpdated {
+		out.Like = strings.Split(runner.Vars["ID_LIKE"].Str, " ")
+	}
+
+	parsed = out
+	return out, nil
+}

pkg/gen/funcs.go

@@ -0,0 +1,13 @@
+package gen
+
+import (
+	"strings"
+	"text/template"
+)
+
+var funcs = template.FuncMap{
+	"tolower": strings.ToLower,
+	"firstchar": func(s string) string {
+		return s[:1]
+	},
+}

pkg/gen/pip.go

@@ -0,0 +1,84 @@
+package gen
+
+import (
+	_ "embed"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"net/http"
+	"text/template"
+)
+
+//go:embed tmpls/pip.tmpl.sh
+var pipTmpl string
+
+type PipOptions struct {
+	Name        string
+	Version     string
+	Description string
+}
+
+type pypiAPIResponse struct {
+	Info pypiInfo  `json:"info"`
+	URLs []pypiURL `json:"urls"`
+}
+
+func (res pypiAPIResponse) SourceURL() (pypiURL, error) {
+	for _, url := range res.URLs {
+		if url.PackageType == "sdist" {
+			return url, nil
+		}
+	}
+	return pypiURL{}, errors.New("package doesn't have a source distribution")
+}
+
+type pypiInfo struct {
+	Name     string `json:"name"`
+	Version  string `json:"version"`
+	Summary  string `json:"summary"`
+	Homepage string `json:"home_page"`
+	License  string `json:"license"`
+}
+
+type pypiURL struct {
+	Digests     map[string]string `json:"digests"`
+	Filename    string            `json:"filename"`
+	PackageType string            `json:"packagetype"`
+}
+
+func Pip(w io.Writer, opts PipOptions) error {
+	tmpl, err := template.New("pip").
+		Funcs(funcs).
+		Parse(pipTmpl)
+	if err != nil {
+		return err
+	}
+
+	url := fmt.Sprintf(
+		"https://pypi.org/pypi/%s/%s/json",
+		opts.Name,
+		opts.Version,
+	)
+
+	res, err := http.Get(url)
+	if err != nil {
+		return err
+	}
+	defer res.Body.Close()
+	if res.StatusCode != 200 {
+		return fmt.Errorf("pypi: %s", res.Status)
+	}
+
+	var resp pypiAPIResponse
+	err = json.NewDecoder(res.Body).Decode(&resp)
+	if err != nil {
+		return err
+	}
+
+	if opts.Description != "" {
+		resp.Info.Summary = opts.Description
+	}
+
+	return tmpl.Execute(w, resp)
+}

pkg/gen/tmpls/pip.tmpl.sh

@@ -0,0 +1,31 @@
+name='{{.Info.Name | tolower}}'
+version='{{.Info.Version}}'
+release='1'
+desc='{{.Info.Summary}}'
+homepage='{{.Info.Homepage}}'
+maintainer='Example <user@example.com>'
+architectures=('all')
+license=('{{if .Info.License | ne ""}}{{.Info.License}}{{else}}custom:Unknown{{end}}')
+provides=('{{.Info.Name | tolower}}')
+conflicts=('{{.Info.Name | tolower}}')
+
+deps=("python3")
+deps_arch=("python")
+deps_alpine=("python3")
+
+build_deps=("python3" "python3-setuptools")
+build_deps_arch=("python" "python-setuptools")
+build_deps_alpine=("python3" "py3-setuptools")
+
+sources=("https://files.pythonhosted.org/packages/source/{{.SourceURL.Filename | firstchar}}/{{.Info.Name}}/{{.SourceURL.Filename}}")
+checksums=('blake2b-256:{{.SourceURL.Digests.blake2b_256}}')
+
+build() {
+	cd "$srcdir/{{.Info.Name}}-${version}"
+	python3 setup.py build
+}
+
+package() {
+	cd "$srcdir/{{.Info.Name}}-${version}"
+	python3 setup.py install --root="${pkgdir}/" --optimize=1 || return 1
+}

pkg/loggerctx/log.go

@@ -0,0 +1,29 @@
+package loggerctx
+
+import (
+	"context"
+
+	"go.elara.ws/logger"
+)
+
+// loggerCtxKey is used as the context key for loggers
+type loggerCtxKey struct{}
+
+// With returns a copy of ctx containing log
+func With(ctx context.Context, log logger.Logger) context.Context {
+	return context.WithValue(ctx, loggerCtxKey{}, log)
+}
+
+// From attempts to get a logger from ctx. If ctx doesn't
+// contain a logger, it returns a nop logger.
+func From(ctx context.Context) logger.Logger {
+	if val := ctx.Value(loggerCtxKey{}); val != nil {
+		if log, ok := val.(logger.Logger); ok && log != nil {
+			return log
+		} else {
+			return logger.NewNop()
+		}
+	} else {
+		return logger.NewNop()
+	}
+}

pkg/manager/apk.go

@@ -0,0 +1,166 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package manager
+
+import (
+	"bufio"
+	"fmt"
+	"os/exec"
+	"strings"
+)
+
+// APK represents the APK package manager
+type APK struct {
+	rootCmd string
+}
+
+func (*APK) Exists() bool {
+	_, err := exec.LookPath("apk")
+	return err == nil
+}
+
+func (*APK) Name() string {
+	return "apk"
+}
+
+func (*APK) Format() string {
+	return "apk"
+}
+
+func (a *APK) SetRootCmd(s string) {
+	a.rootCmd = s
+}
+
+func (a *APK) Sync(opts *Opts) error {
+	opts = ensureOpts(opts)
+	cmd := a.getCmd(opts, "apk", "update")
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("apk: sync: %w", err)
+	}
+	return nil
+}
+
+func (a *APK) Install(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := a.getCmd(opts, "apk", "add")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("apk: install: %w", err)
+	}
+	return nil
+}
+
+func (a *APK) InstallLocal(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := a.getCmd(opts, "apk", "add", "--allow-untrusted")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("apk: installlocal: %w", err)
+	}
+	return nil
+}
+
+func (a *APK) Remove(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := a.getCmd(opts, "apk", "del")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("apk: remove: %w", err)
+	}
+	return nil
+}
+
+func (a *APK) Upgrade(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := a.getCmd(opts, "apk", "upgrade")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("apk: upgrade: %w", err)
+	}
+	return nil
+}
+
+func (a *APK) UpgradeAll(opts *Opts) error {
+	opts = ensureOpts(opts)
+	return a.Upgrade(opts)
+}
+
+func (a *APK) ListInstalled(opts *Opts) (map[string]string, error) {
+	out := map[string]string{}
+	cmd := exec.Command("apk", "list", "-I")
+
+	stdout, err := cmd.StdoutPipe()
+	if err != nil {
+		return nil, err
+	}
+
+	err = cmd.Start()
+	if err != nil {
+		return nil, err
+	}
+
+	scanner := bufio.NewScanner(stdout)
+	for scanner.Scan() {
+		name, info, ok := strings.Cut(scanner.Text(), "-")
+		if !ok {
+			continue
+		}
+
+		version, _, ok := strings.Cut(info, " ")
+		if !ok {
+			continue
+		}
+
+		out[name] = version
+	}
+
+	err = scanner.Err()
+	if err != nil {
+		return nil, err
+	}
+
+	return out, nil
+}
+
+func (a *APK) getCmd(opts *Opts, mgrCmd string, args ...string) *exec.Cmd {
+	var cmd *exec.Cmd
+	if opts.AsRoot {
+		cmd = exec.Command(getRootCmd(a.rootCmd), mgrCmd)
+		cmd.Args = append(cmd.Args, opts.Args...)
+		cmd.Args = append(cmd.Args, args...)
+	} else {
+		cmd = exec.Command(mgrCmd, args...)
+	}
+
+	if !opts.NoConfirm {
+		cmd.Args = append(cmd.Args, "-i")
+	}
+
+	return cmd
+}

pkg/manager/apt.go

@@ -0,0 +1,152 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package manager
+
+import (
+	"bufio"
+	"fmt"
+	"os/exec"
+	"strings"
+)
+
+// APT represents the APT package manager
+type APT struct {
+	rootCmd string
+}
+
+func (*APT) Exists() bool {
+	_, err := exec.LookPath("apt")
+	return err == nil
+}
+
+func (*APT) Name() string {
+	return "apt"
+}
+
+func (*APT) Format() string {
+	return "deb"
+}
+
+func (a *APT) SetRootCmd(s string) {
+	a.rootCmd = s
+}
+
+func (a *APT) Sync(opts *Opts) error {
+	opts = ensureOpts(opts)
+	cmd := a.getCmd(opts, "apt", "update")
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("apt: sync: %w", err)
+	}
+	return nil
+}
+
+func (a *APT) Install(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := a.getCmd(opts, "apt", "install")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("apt: install: %w", err)
+	}
+	return nil
+}
+
+func (a *APT) InstallLocal(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	return a.Install(opts, pkgs...)
+}
+
+func (a *APT) Remove(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := a.getCmd(opts, "apt", "remove")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("apt: remove: %w", err)
+	}
+	return nil
+}
+
+func (a *APT) Upgrade(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	return a.Install(opts, pkgs...)
+}
+
+func (a *APT) UpgradeAll(opts *Opts) error {
+	opts = ensureOpts(opts)
+	cmd := a.getCmd(opts, "apt", "upgrade")
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("apt: upgradeall: %w", err)
+	}
+	return nil
+}
+
+func (a *APT) ListInstalled(opts *Opts) (map[string]string, error) {
+	out := map[string]string{}
+	cmd := exec.Command("dpkg-query", "-f", "${Package}\u200b${Version}\\n", "-W")
+
+	stdout, err := cmd.StdoutPipe()
+	if err != nil {
+		return nil, err
+	}
+
+	err = cmd.Start()
+	if err != nil {
+		return nil, err
+	}
+
+	scanner := bufio.NewScanner(stdout)
+	for scanner.Scan() {
+		name, version, ok := strings.Cut(scanner.Text(), "\u200b")
+		if !ok {
+			continue
+		}
+		out[name] = version
+	}
+
+	err = scanner.Err()
+	if err != nil {
+		return nil, err
+	}
+
+	return out, nil
+}
+
+func (a *APT) getCmd(opts *Opts, mgrCmd string, args ...string) *exec.Cmd {
+	var cmd *exec.Cmd
+	if opts.AsRoot {
+		cmd = exec.Command(getRootCmd(a.rootCmd), mgrCmd)
+		cmd.Args = append(cmd.Args, opts.Args...)
+		cmd.Args = append(cmd.Args, args...)
+	} else {
+		cmd = exec.Command(mgrCmd, args...)
+	}
+
+	if opts.NoConfirm {
+		cmd.Args = append(cmd.Args, "-y")
+	}
+
+	return cmd
+}

pkg/manager/dnf.go

@@ -0,0 +1,160 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package manager
+
+import (
+	"bufio"
+	"fmt"
+	"os/exec"
+	"strings"
+)
+
+// DNF represents the DNF package manager
+type DNF struct {
+	rootCmd string
+}
+
+func (*DNF) Exists() bool {
+	_, err := exec.LookPath("dnf")
+	return err == nil
+}
+
+func (*DNF) Name() string {
+	return "dnf"
+}
+
+func (*DNF) Format() string {
+	return "rpm"
+}
+
+func (d *DNF) SetRootCmd(s string) {
+	d.rootCmd = s
+}
+
+func (d *DNF) Sync(opts *Opts) error {
+	opts = ensureOpts(opts)
+	cmd := d.getCmd(opts, "dnf", "upgrade")
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("dnf: sync: %w", err)
+	}
+	return nil
+}
+
+func (d *DNF) Install(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := d.getCmd(opts, "dnf", "install", "--allowerasing")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("dnf: install: %w", err)
+	}
+	return nil
+}
+
+func (d *DNF) InstallLocal(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	return d.Install(opts, pkgs...)
+}
+
+func (d *DNF) Remove(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := d.getCmd(opts, "dnf", "remove")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("dnf: remove: %w", err)
+	}
+	return nil
+}
+
+func (d *DNF) Upgrade(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := d.getCmd(opts, "dnf", "upgrade")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("dnf: upgrade: %w", err)
+	}
+	return nil
+}
+
+func (d *DNF) UpgradeAll(opts *Opts) error {
+	opts = ensureOpts(opts)
+	cmd := d.getCmd(opts, "dnf", "upgrade")
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("dnf: upgradeall: %w", err)
+	}
+	return nil
+}
+
+func (d *DNF) ListInstalled(opts *Opts) (map[string]string, error) {
+	out := map[string]string{}
+	cmd := exec.Command("rpm", "-qa", "--queryformat", "%{NAME}\u200b%|EPOCH?{%{EPOCH}:}:{}|%{VERSION}-%{RELEASE}\\n")
+
+	stdout, err := cmd.StdoutPipe()
+	if err != nil {
+		return nil, err
+	}
+
+	err = cmd.Start()
+	if err != nil {
+		return nil, err
+	}
+
+	scanner := bufio.NewScanner(stdout)
+	for scanner.Scan() {
+		name, version, ok := strings.Cut(scanner.Text(), "\u200b")
+		if !ok {
+			continue
+		}
+		version = strings.TrimPrefix(version, "0:")
+		out[name] = version
+	}
+
+	err = scanner.Err()
+	if err != nil {
+		return nil, err
+	}
+
+	return out, nil
+}
+
+func (d *DNF) getCmd(opts *Opts, mgrCmd string, args ...string) *exec.Cmd {
+	var cmd *exec.Cmd
+	if opts.AsRoot {
+		cmd = exec.Command(getRootCmd(d.rootCmd), mgrCmd)
+		cmd.Args = append(cmd.Args, opts.Args...)
+		cmd.Args = append(cmd.Args, args...)
+	} else {
+		cmd = exec.Command(mgrCmd, args...)
+	}
+
+	if opts.NoConfirm {
+		cmd.Args = append(cmd.Args, "-y")
+	}
+
+	return cmd
+}

pkg/manager/managers.go

@@ -0,0 +1,124 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package manager
+
+import (
+	"os"
+	"os/exec"
+)
+
+var Args []string
+
+type Opts struct {
+	AsRoot    bool
+	NoConfirm bool
+	Args      []string
+}
+
+var DefaultOpts = &Opts{
+	AsRoot:    true,
+	NoConfirm: false,
+}
+
+// DefaultRootCmd is the command used for privilege elevation by default
+var DefaultRootCmd = "sudo"
+
+var managers = []Manager{
+	&Pacman{},
+	&APT{},
+	&DNF{},
+	&YUM{},
+	&APK{},
+	&Zypper{},
+}
+
+// Register registers a new package manager
+func Register(m Manager) {
+	managers = append(managers, m)
+}
+
+// Manager represents a system package manager
+type Manager interface {
+	// Name returns the name of the manager.
+	Name() string
+	// Format returns the packaging format of the manager.
+	// 	Examples: rpm, deb, apk
+	Format() string
+	// Returns true if the package manager exists on the system.
+	Exists() bool
+	// Sets the command used to elevate privileges. Defaults to DefaultRootCmd.
+	SetRootCmd(string)
+	// Sync fetches repositories without installing anything
+	Sync(*Opts) error
+	// Install installs packages
+	Install(*Opts, ...string) error
+	// Remove uninstalls packages
+	Remove(*Opts, ...string) error
+	// Upgrade upgrades packages
+	Upgrade(*Opts, ...string) error
+	// InstallLocal installs packages from local files rather than repos
+	InstallLocal(*Opts, ...string) error
+	// UpgradeAll upgrades all packages
+	UpgradeAll(*Opts) error
+	// ListInstalled returns all installed packages mapped to their versions
+	ListInstalled(*Opts) (map[string]string, error)
+}
+
+// Detect returns the package manager detected on the system
+func Detect() Manager {
+	for _, mgr := range managers {
+		if mgr.Exists() {
+			return mgr
+		}
+	}
+	return nil
+}
+
+// Get returns the package manager with the given name
+func Get(name string) Manager {
+	for _, mgr := range managers {
+		if mgr.Name() == name {
+			return mgr
+		}
+	}
+	return nil
+}
+
+// getRootCmd returns rootCmd if it's not empty, otherwise returns DefaultRootCmd
+func getRootCmd(rootCmd string) string {
+	if rootCmd != "" {
+		return rootCmd
+	}
+	return DefaultRootCmd
+}
+
+func setCmdEnv(cmd *exec.Cmd) {
+	cmd.Env = os.Environ()
+	cmd.Stdin = os.Stdin
+	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
+}
+
+func ensureOpts(opts *Opts) *Opts {
+	if opts == nil {
+		opts = DefaultOpts
+	}
+	opts.Args = append(opts.Args, Args...)
+	return opts
+}

pkg/manager/pacman.go

@@ -0,0 +1,159 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package manager
+
+import (
+	"bufio"
+	"fmt"
+	"os/exec"
+	"strings"
+)
+
+// Pacman represents the Pacman package manager
+type Pacman struct {
+	rootCmd string
+}
+
+func (*Pacman) Exists() bool {
+	_, err := exec.LookPath("pacman")
+	return err == nil
+}
+
+func (*Pacman) Name() string {
+	return "pacman"
+}
+
+func (*Pacman) Format() string {
+	return "archlinux"
+}
+
+func (p *Pacman) SetRootCmd(s string) {
+	p.rootCmd = s
+}
+
+func (p *Pacman) Sync(opts *Opts) error {
+	opts = ensureOpts(opts)
+	cmd := p.getCmd(opts, "pacman", "-Sy")
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("pacman: sync: %w", err)
+	}
+	return nil
+}
+
+func (p *Pacman) Install(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := p.getCmd(opts, "pacman", "-S", "--needed")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("pacman: install: %w", err)
+	}
+	return nil
+}
+
+func (p *Pacman) InstallLocal(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := p.getCmd(opts, "pacman", "-U", "--needed")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("pacman: installlocal: %w", err)
+	}
+	return nil
+}
+
+func (p *Pacman) Remove(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := p.getCmd(opts, "pacman", "-R")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("pacman: remove: %w", err)
+	}
+	return nil
+}
+
+func (p *Pacman) Upgrade(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	return p.Install(opts, pkgs...)
+}
+
+func (p *Pacman) UpgradeAll(opts *Opts) error {
+	opts = ensureOpts(opts)
+	cmd := p.getCmd(opts, "pacman", "-Su")
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("pacman: upgradeall: %w", err)
+	}
+	return nil
+}
+
+func (p *Pacman) ListInstalled(opts *Opts) (map[string]string, error) {
+	out := map[string]string{}
+	cmd := exec.Command("pacman", "-Q")
+
+	stdout, err := cmd.StdoutPipe()
+	if err != nil {
+		return nil, err
+	}
+
+	err = cmd.Start()
+	if err != nil {
+		return nil, err
+	}
+
+	scanner := bufio.NewScanner(stdout)
+	for scanner.Scan() {
+		name, version, ok := strings.Cut(scanner.Text(), " ")
+		if !ok {
+			continue
+		}
+		out[name] = version
+	}
+
+	err = scanner.Err()
+	if err != nil {
+		return nil, err
+	}
+
+	return out, nil
+}
+
+func (p *Pacman) getCmd(opts *Opts, mgrCmd string, args ...string) *exec.Cmd {
+	var cmd *exec.Cmd
+	if opts.AsRoot {
+		cmd = exec.Command(getRootCmd(p.rootCmd), mgrCmd)
+		cmd.Args = append(cmd.Args, opts.Args...)
+		cmd.Args = append(cmd.Args, args...)
+	} else {
+		cmd = exec.Command(mgrCmd, args...)
+	}
+
+	if opts.NoConfirm {
+		cmd.Args = append(cmd.Args, "--noconfirm")
+	}
+
+	return cmd
+}

pkg/manager/yum.go

@@ -0,0 +1,160 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package manager
+
+import (
+	"bufio"
+	"fmt"
+	"os/exec"
+	"strings"
+)
+
+// YUM represents the YUM package manager
+type YUM struct {
+	rootCmd string
+}
+
+func (*YUM) Exists() bool {
+	_, err := exec.LookPath("yum")
+	return err == nil
+}
+
+func (*YUM) Name() string {
+	return "yum"
+}
+
+func (*YUM) Format() string {
+	return "rpm"
+}
+
+func (y *YUM) SetRootCmd(s string) {
+	y.rootCmd = s
+}
+
+func (y *YUM) Sync(opts *Opts) error {
+	opts = ensureOpts(opts)
+	cmd := y.getCmd(opts, "yum", "upgrade")
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("yum: sync: %w", err)
+	}
+	return nil
+}
+
+func (y *YUM) Install(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := y.getCmd(opts, "yum", "install", "--allowerasing")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("yum: install: %w", err)
+	}
+	return nil
+}
+
+func (y *YUM) InstallLocal(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	return y.Install(opts, pkgs...)
+}
+
+func (y *YUM) Remove(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := y.getCmd(opts, "yum", "remove")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("yum: remove: %w", err)
+	}
+	return nil
+}
+
+func (y *YUM) Upgrade(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := y.getCmd(opts, "yum", "upgrade")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("yum: upgrade: %w", err)
+	}
+	return nil
+}
+
+func (y *YUM) UpgradeAll(opts *Opts) error {
+	opts = ensureOpts(opts)
+	cmd := y.getCmd(opts, "yum", "upgrade")
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("yum: upgradeall: %w", err)
+	}
+	return nil
+}
+
+func (y *YUM) ListInstalled(opts *Opts) (map[string]string, error) {
+	out := map[string]string{}
+	cmd := exec.Command("rpm", "-qa", "--queryformat", "%{NAME}\u200b%|EPOCH?{%{EPOCH}:}:{}|%{VERSION}-%{RELEASE}\\n")
+
+	stdout, err := cmd.StdoutPipe()
+	if err != nil {
+		return nil, err
+	}
+
+	err = cmd.Start()
+	if err != nil {
+		return nil, err
+	}
+
+	scanner := bufio.NewScanner(stdout)
+	for scanner.Scan() {
+		name, version, ok := strings.Cut(scanner.Text(), "\u200b")
+		if !ok {
+			continue
+		}
+		version = strings.TrimPrefix(version, "0:")
+		out[name] = version
+	}
+
+	err = scanner.Err()
+	if err != nil {
+		return nil, err
+	}
+
+	return out, nil
+}
+
+func (y *YUM) getCmd(opts *Opts, mgrCmd string, args ...string) *exec.Cmd {
+	var cmd *exec.Cmd
+	if opts.AsRoot {
+		cmd = exec.Command(getRootCmd(y.rootCmd), mgrCmd)
+		cmd.Args = append(cmd.Args, opts.Args...)
+		cmd.Args = append(cmd.Args, args...)
+	} else {
+		cmd = exec.Command(mgrCmd, args...)
+	}
+
+	if opts.NoConfirm {
+		cmd.Args = append(cmd.Args, "-y")
+	}
+
+	return cmd
+}

pkg/manager/zypper.go

@@ -0,0 +1,160 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package manager
+
+import (
+	"bufio"
+	"fmt"
+	"os/exec"
+	"strings"
+)
+
+// Zypper represents the Zypper package manager
+type Zypper struct {
+	rootCmd string
+}
+
+func (*Zypper) Exists() bool {
+	_, err := exec.LookPath("zypper")
+	return err == nil
+}
+
+func (*Zypper) Name() string {
+	return "zypper"
+}
+
+func (*Zypper) Format() string {
+	return "rpm"
+}
+
+func (z *Zypper) SetRootCmd(s string) {
+	z.rootCmd = s
+}
+
+func (z *Zypper) Sync(opts *Opts) error {
+	opts = ensureOpts(opts)
+	cmd := z.getCmd(opts, "zypper", "refresh")
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("zypper: sync: %w", err)
+	}
+	return nil
+}
+
+func (z *Zypper) Install(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := z.getCmd(opts, "zypper", "install", "-y")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("zypper: install: %w", err)
+	}
+	return nil
+}
+
+func (z *Zypper) InstallLocal(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	return z.Install(opts, pkgs...)
+}
+
+func (z *Zypper) Remove(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := z.getCmd(opts, "zypper", "remove", "-y")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("zypper: remove: %w", err)
+	}
+	return nil
+}
+
+func (z *Zypper) Upgrade(opts *Opts, pkgs ...string) error {
+	opts = ensureOpts(opts)
+	cmd := z.getCmd(opts, "zypper", "update", "-y")
+	cmd.Args = append(cmd.Args, pkgs...)
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("zypper: upgrade: %w", err)
+	}
+	return nil
+}
+
+func (z *Zypper) UpgradeAll(opts *Opts) error {
+	opts = ensureOpts(opts)
+	cmd := z.getCmd(opts, "zypper", "update", "-y")
+	setCmdEnv(cmd)
+	err := cmd.Run()
+	if err != nil {
+		return fmt.Errorf("zypper: upgradeall: %w", err)
+	}
+	return nil
+}
+
+func (z *Zypper) ListInstalled(opts *Opts) (map[string]string, error) {
+	out := map[string]string{}
+	cmd := exec.Command("rpm", "-qa", "--queryformat", "%{NAME}\u200b%|EPOCH?{%{EPOCH}:}:{}|%{VERSION}-%{RELEASE}\\n")
+
+	stdout, err := cmd.StdoutPipe()
+	if err != nil {
+		return nil, err
+	}
+
+	err = cmd.Start()
+	if err != nil {
+		return nil, err
+	}
+
+	scanner := bufio.NewScanner(stdout)
+	for scanner.Scan() {
+		name, version, ok := strings.Cut(scanner.Text(), "\u200b")
+		if !ok {
+			continue
+		}
+		version = strings.TrimPrefix(version, "0:")
+		out[name] = version
+	}
+
+	err = scanner.Err()
+	if err != nil {
+		return nil, err
+	}
+
+	return out, nil
+}
+
+func (z *Zypper) getCmd(opts *Opts, mgrCmd string, args ...string) *exec.Cmd {
+	var cmd *exec.Cmd
+	if opts.AsRoot {
+		cmd = exec.Command(getRootCmd(z.rootCmd), mgrCmd)
+		cmd.Args = append(cmd.Args, opts.Args...)
+		cmd.Args = append(cmd.Args, args...)
+	} else {
+		cmd = exec.Command(mgrCmd, args...)
+	}
+
+	if opts.NoConfirm {
+		cmd.Args = append(cmd.Args, "-y")
+	}
+
+	return cmd
+}

pkg/repos/find.go

@@ -0,0 +1,83 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package repos
+
+import (
+	"context"
+
+	"lure.sh/lure/internal/db"
+)
+
+// FindPkgs looks for packages matching the inputs inside the database.
+// It returns a map that maps the package name input to any packages found for it.
+// It also returns a slice that contains the names of all packages that were not found.
+func FindPkgs(ctx context.Context, pkgs []string) (map[string][]db.Package, []string, error) {
+	found := map[string][]db.Package{}
+	notFound := []string(nil)
+
+	for _, pkgName := range pkgs {
+		if pkgName == "" {
+			continue
+		}
+
+		result, err := db.GetPkgs(ctx, "json_array_contains(provides, ?)", pkgName)
+		if err != nil {
+			return nil, nil, err
+		}
+
+		added := 0
+		for result.Next() {
+			var pkg db.Package
+			err = result.StructScan(&pkg)
+			if err != nil {
+				return nil, nil, err
+			}
+
+			added++
+			found[pkgName] = append(found[pkgName], pkg)
+		}
+		result.Close()
+
+		if added == 0 {
+			result, err := db.GetPkgs(ctx, "name LIKE ?", pkgName)
+			if err != nil {
+				return nil, nil, err
+			}
+
+			for result.Next() {
+				var pkg db.Package
+				err = result.StructScan(&pkg)
+				if err != nil {
+					return nil, nil, err
+				}
+
+				added++
+				found[pkgName] = append(found[pkgName], pkg)
+			}
+
+			result.Close()
+		}
+
+		if added == 0 {
+			notFound = append(notFound, pkgName)
+		}
+	}
+
+	return found, notFound, nil
+}

pkg/repos/find_test.go

@@ -0,0 +1,148 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package repos_test
+
+import (
+	"context"
+	"reflect"
+	"strings"
+	"testing"
+
+	"lure.sh/lure/internal/db"
+	"lure.sh/lure/internal/types"
+	"lure.sh/lure/pkg/repos"
+)
+
+func TestFindPkgs(t *testing.T) {
+	_, err := db.Open(":memory:")
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+	defer db.Close()
+
+	setCfgDirs(t)
+	defer removeCacheDir(t)
+
+	ctx := context.Background()
+
+	err = repos.Pull(ctx, []types.Repo{
+		{
+			Name: "default",
+			URL:  "https://github.com/Arsen6331/lure-repo.git",
+		},
+	})
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+
+	found, notFound, err := repos.FindPkgs([]string{"itd", "nonexistentpackage1", "nonexistentpackage2"})
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+
+	if !reflect.DeepEqual(notFound, []string{"nonexistentpackage1", "nonexistentpackage2"}) {
+		t.Errorf("Expected 'nonexistentpackage{1,2} not to be found")
+	}
+
+	if len(found) != 1 {
+		t.Errorf("Expected 1 package found, got %d", len(found))
+	}
+
+	itdPkgs, ok := found["itd"]
+	if !ok {
+		t.Fatalf("Expected 'itd' packages to be found")
+	}
+
+	if len(itdPkgs) < 2 {
+		t.Errorf("Expected two 'itd' packages to be found")
+	}
+
+	for i, pkg := range itdPkgs {
+		if !strings.HasPrefix(pkg.Name, "itd") {
+			t.Errorf("Expected package name of all found packages to start with 'itd', got %s on element %d", pkg.Name, i)
+		}
+	}
+}
+
+func TestFindPkgsEmpty(t *testing.T) {
+	_, err := db.Open(":memory:")
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+	defer db.Close()
+
+	setCfgDirs(t)
+	defer removeCacheDir(t)
+
+	err = db.InsertPackage(db.Package{
+		Name:       "test1",
+		Repository: "default",
+		Version:    "0.0.1",
+		Release:    1,
+		Description: db.NewJSON(map[string]string{
+			"en": "Test package 1",
+			"ru": "Проверочный пакет 1",
+		}),
+		Provides: db.NewJSON([]string{""}),
+	})
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+
+	err = db.InsertPackage(db.Package{
+		Name:       "test2",
+		Repository: "default",
+		Version:    "0.0.1",
+		Release:    1,
+		Description: db.NewJSON(map[string]string{
+			"en": "Test package 2",
+			"ru": "Проверочный пакет 2",
+		}),
+		Provides: db.NewJSON([]string{"test"}),
+	})
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+
+	found, notFound, err := repos.FindPkgs([]string{"test", ""})
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+
+	if len(notFound) != 0 {
+		t.Errorf("Expected all packages to be found")
+	}
+
+	if len(found) != 1 {
+		t.Errorf("Expected 1 package found, got %d", len(found))
+	}
+
+	testPkgs, ok := found["test"]
+	if !ok {
+		t.Fatalf("Expected 'test' packages to be found")
+	}
+
+	if len(testPkgs) != 1 {
+		t.Errorf("Expected one 'test' package to be found, got %d", len(testPkgs))
+	}
+
+	if testPkgs[0].Name != "test2" {
+		t.Errorf("Expected 'test2' package, got '%s'", testPkgs[0].Name)
+	}
+}

pkg/repos/pull.go

@@ -0,0 +1,441 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package repos
+
+import (
+	"context"
+	"errors"
+	"io"
+	"net/url"
+	"os"
+	"path/filepath"
+	"reflect"
+	"strings"
+
+	"github.com/go-git/go-billy/v5"
+	"github.com/go-git/go-billy/v5/osfs"
+	"github.com/go-git/go-git/v5"
+	"github.com/go-git/go-git/v5/plumbing"
+	"github.com/go-git/go-git/v5/plumbing/format/diff"
+	"github.com/pelletier/go-toml/v2"
+	"go.elara.ws/vercmp"
+	"lure.sh/lure/internal/config"
+	"lure.sh/lure/internal/db"
+	"lure.sh/lure/internal/shutils/decoder"
+	"lure.sh/lure/internal/shutils/handlers"
+	"lure.sh/lure/internal/types"
+	"lure.sh/lure/pkg/distro"
+	"lure.sh/lure/pkg/loggerctx"
+	"mvdan.cc/sh/v3/expand"
+	"mvdan.cc/sh/v3/interp"
+	"mvdan.cc/sh/v3/syntax"
+)
+
+// Pull pulls the provided repositories. If a repo doesn't exist, it will be cloned
+// and its packages will be written to the DB. If it does exist, it will be pulled.
+// In this case, only changed packages will be processed if possible.
+// If repos is set to nil, the repos in the LURE config will be used.
+func Pull(ctx context.Context, repos []types.Repo) error {
+	log := loggerctx.From(ctx)
+
+	if repos == nil {
+		repos = config.Config(ctx).Repos
+	}
+
+	for _, repo := range repos {
+		repoURL, err := url.Parse(repo.URL)
+		if err != nil {
+			return err
+		}
+
+		log.Info("Pulling repository").Str("name", repo.Name).Send()
+		repoDir := filepath.Join(config.GetPaths(ctx).RepoDir, repo.Name)
+
+		var repoFS billy.Filesystem
+		gitDir := filepath.Join(repoDir, ".git")
+		// Only pull repos that contain valid git repos
+		if fi, err := os.Stat(gitDir); err == nil && fi.IsDir() {
+			r, err := git.PlainOpen(repoDir)
+			if err != nil {
+				return err
+			}
+
+			w, err := r.Worktree()
+			if err != nil {
+				return err
+			}
+
+			old, err := r.Head()
+			if err != nil {
+				return err
+			}
+
+			err = w.PullContext(ctx, &git.PullOptions{Progress: os.Stderr})
+			if errors.Is(err, git.NoErrAlreadyUpToDate) {
+				log.Info("Repository up to date").Str("name", repo.Name).Send()
+			} else if err != nil {
+				return err
+			}
+			repoFS = w.Filesystem
+
+			// Make sure the DB is created even if the repo is up to date
+			if !errors.Is(err, git.NoErrAlreadyUpToDate) || db.IsEmpty(ctx) {
+				new, err := r.Head()
+				if err != nil {
+					return err
+				}
+
+				// If the DB was not present at startup, that means it's
+				// empty. In this case, we need to update the DB fully
+				// rather than just incrementally.
+				if db.IsEmpty(ctx) {
+					err = processRepoFull(ctx, repo, repoDir)
+					if err != nil {
+						return err
+					}
+				} else {
+					err = processRepoChanges(ctx, repo, r, w, old, new)
+					if err != nil {
+						return err
+					}
+				}
+			}
+		} else {
+			err = os.RemoveAll(repoDir)
+			if err != nil {
+				return err
+			}
+
+			err = os.MkdirAll(repoDir, 0o755)
+			if err != nil {
+				return err
+			}
+
+			_, err = git.PlainCloneContext(ctx, repoDir, false, &git.CloneOptions{
+				URL:      repoURL.String(),
+				Progress: os.Stderr,
+			})
+			if err != nil {
+				return err
+			}
+
+			err = processRepoFull(ctx, repo, repoDir)
+			if err != nil {
+				return err
+			}
+
+			repoFS = osfs.New(repoDir)
+		}
+
+		fl, err := repoFS.Open("lure-repo.toml")
+		if err != nil {
+			log.Warn("Git repository does not appear to be a valid LURE repo").Str("repo", repo.Name).Send()
+			continue
+		}
+
+		var repoCfg types.RepoConfig
+		err = toml.NewDecoder(fl).Decode(&repoCfg)
+		if err != nil {
+			return err
+		}
+		fl.Close()
+
+		// If the version doesn't have a "v" prefix, it's not a standard version.
+		// It may be "unknown" or a git version, but either way, there's no way
+		// to compare it to the repo version, so only compare versions with the "v".
+		if strings.HasPrefix(config.Version, "v") {
+			if vercmp.Compare(config.Version, repoCfg.Repo.MinVersion) == -1 {
+				log.Warn("LURE repo's minumum LURE version is greater than the current version. Try updating LURE if something doesn't work.").Str("repo", repo.Name).Send()
+			}
+		}
+	}
+
+	return nil
+}
+
+type actionType uint8
+
+const (
+	actionDelete actionType = iota
+	actionUpdate
+)
+
+type action struct {
+	Type actionType
+	File string
+}
+
+func processRepoChanges(ctx context.Context, repo types.Repo, r *git.Repository, w *git.Worktree, old, new *plumbing.Reference) error {
+	oldCommit, err := r.CommitObject(old.Hash())
+	if err != nil {
+		return err
+	}
+
+	newCommit, err := r.CommitObject(new.Hash())
+	if err != nil {
+		return err
+	}
+
+	patch, err := oldCommit.Patch(newCommit)
+	if err != nil {
+		return err
+	}
+
+	var actions []action
+	for _, fp := range patch.FilePatches() {
+		from, to := fp.Files()
+
+		if !isValid(from, to) {
+			continue
+		}
+
+		if to == nil {
+			actions = append(actions, action{
+				Type: actionDelete,
+				File: from.Path(),
+			})
+		} else if from == nil {
+			actions = append(actions, action{
+				Type: actionUpdate,
+				File: to.Path(),
+			})
+		} else {
+			if from.Path() != to.Path() {
+				actions = append(actions,
+					action{
+						Type: actionDelete,
+						File: from.Path(),
+					},
+					action{
+						Type: actionUpdate,
+						File: to.Path(),
+					},
+				)
+			} else {
+				actions = append(actions, action{
+					Type: actionUpdate,
+					File: to.Path(),
+				})
+			}
+		}
+	}
+
+	repoDir := w.Filesystem.Root()
+	parser := syntax.NewParser()
+
+	for _, action := range actions {
+		env := append(os.Environ(), "scriptdir="+filepath.Dir(filepath.Join(repoDir, action.File)))
+		runner, err := interp.New(
+			interp.Env(expand.ListEnviron(env...)),
+			interp.ExecHandler(handlers.NopExec),
+			interp.ReadDirHandler(handlers.RestrictedReadDir(repoDir)),
+			interp.StatHandler(handlers.RestrictedStat(repoDir)),
+			interp.OpenHandler(handlers.RestrictedOpen(repoDir)),
+			interp.StdIO(handlers.NopRWC{}, handlers.NopRWC{}, handlers.NopRWC{}),
+		)
+		if err != nil {
+			return err
+		}
+
+		switch action.Type {
+		case actionDelete:
+			if filepath.Base(action.File) != "lure.sh" {
+				continue
+			}
+
+			scriptFl, err := oldCommit.File(action.File)
+			if err != nil {
+				return nil
+			}
+
+			r, err := scriptFl.Reader()
+			if err != nil {
+				return nil
+			}
+
+			var pkg db.Package
+			err = parseScript(ctx, parser, runner, r, &pkg)
+			if err != nil {
+				return err
+			}
+
+			err = db.DeletePkgs(ctx, "name = ? AND repository = ?", pkg.Name, repo.Name)
+			if err != nil {
+				return err
+			}
+		case actionUpdate:
+			if filepath.Base(action.File) != "lure.sh" {
+				action.File = filepath.Join(filepath.Dir(action.File), "lure.sh")
+			}
+
+			scriptFl, err := newCommit.File(action.File)
+			if err != nil {
+				return nil
+			}
+
+			r, err := scriptFl.Reader()
+			if err != nil {
+				return nil
+			}
+
+			pkg := db.Package{
+				Description:  db.NewJSON(map[string]string{}),
+				Homepage:     db.NewJSON(map[string]string{}),
+				Maintainer:   db.NewJSON(map[string]string{}),
+				Depends:      db.NewJSON(map[string][]string{}),
+				BuildDepends: db.NewJSON(map[string][]string{}),
+				Repository:   repo.Name,
+			}
+
+			err = parseScript(ctx, parser, runner, r, &pkg)
+			if err != nil {
+				return err
+			}
+
+			resolveOverrides(runner, &pkg)
+
+			err = db.InsertPackage(ctx, pkg)
+			if err != nil {
+				return err
+			}
+		}
+	}
+
+	return nil
+}
+
+// isValid makes sure the path of the file being updated is valid.
+// It checks to make sure the file is not within a nested directory
+// and that it is called lure.sh.
+func isValid(from, to diff.File) bool {
+	var path string
+	if from != nil {
+		path = from.Path()
+	}
+	if to != nil {
+		path = to.Path()
+	}
+
+	match, _ := filepath.Match("*/*.sh", path)
+	return match
+}
+
+func processRepoFull(ctx context.Context, repo types.Repo, repoDir string) error {
+	glob := filepath.Join(repoDir, "/*/lure.sh")
+	matches, err := filepath.Glob(glob)
+	if err != nil {
+		return err
+	}
+
+	parser := syntax.NewParser()
+
+	for _, match := range matches {
+		env := append(os.Environ(), "scriptdir="+filepath.Dir(match))
+		runner, err := interp.New(
+			interp.Env(expand.ListEnviron(env...)),
+			interp.ExecHandler(handlers.NopExec),
+			interp.ReadDirHandler(handlers.RestrictedReadDir(repoDir)),
+			interp.StatHandler(handlers.RestrictedStat(repoDir)),
+			interp.OpenHandler(handlers.RestrictedOpen(repoDir)),
+			interp.StdIO(handlers.NopRWC{}, handlers.NopRWC{}, handlers.NopRWC{}),
+		)
+		if err != nil {
+			return err
+		}
+
+		scriptFl, err := os.Open(match)
+		if err != nil {
+			return err
+		}
+
+		pkg := db.Package{
+			Description:  db.NewJSON(map[string]string{}),
+			Homepage:     db.NewJSON(map[string]string{}),
+			Maintainer:   db.NewJSON(map[string]string{}),
+			Depends:      db.NewJSON(map[string][]string{}),
+			BuildDepends: db.NewJSON(map[string][]string{}),
+			Repository:   repo.Name,
+		}
+
+		err = parseScript(ctx, parser, runner, scriptFl, &pkg)
+		if err != nil {
+			return err
+		}
+
+		resolveOverrides(runner, &pkg)
+
+		err = db.InsertPackage(ctx, pkg)
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+func parseScript(ctx context.Context, parser *syntax.Parser, runner *interp.Runner, r io.ReadCloser, pkg *db.Package) error {
+	defer r.Close()
+	fl, err := parser.Parse(r, "lure.sh")
+	if err != nil {
+		return err
+	}
+
+	runner.Reset()
+	err = runner.Run(ctx, fl)
+	if err != nil {
+		return err
+	}
+
+	d := decoder.New(&distro.OSRelease{}, runner)
+	d.Overrides = false
+	d.LikeDistros = false
+	return d.DecodeVars(pkg)
+}
+
+var overridable = map[string]string{
+	"deps":       "Depends",
+	"build_deps": "BuildDepends",
+	"desc":       "Description",
+	"homepage":   "Homepage",
+	"maintainer": "Maintainer",
+}
+
+func resolveOverrides(runner *interp.Runner, pkg *db.Package) {
+	pkgVal := reflect.ValueOf(pkg).Elem()
+	for name, val := range runner.Vars {
+		for prefix, field := range overridable {
+			if strings.HasPrefix(name, prefix) {
+				override := strings.TrimPrefix(name, prefix)
+				override = strings.TrimPrefix(override, "_")
+
+				field := pkgVal.FieldByName(field)
+				varVal := field.FieldByName("Val")
+				varType := varVal.Type()
+
+				switch varType.Elem().String() {
+				case "[]string":
+					varVal.SetMapIndex(reflect.ValueOf(override), reflect.ValueOf(val.List))
+				case "string":
+					varVal.SetMapIndex(reflect.ValueOf(override), reflect.ValueOf(val.Str))
+				}
+				break
+			}
+		}
+	}
+}

pkg/repos/pull_test.go

@@ -0,0 +1,109 @@
+/*
+ * LURE - Linux User REpository
+ * Copyright (C) 2023 Elara Musayelyan
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+package repos_test
+
+import (
+	"context"
+	"os"
+	"path/filepath"
+	"testing"
+
+	"lure.sh/lure/internal/config"
+	"lure.sh/lure/internal/db"
+	"lure.sh/lure/internal/types"
+	"lure.sh/lure/pkg/repos"
+)
+
+func setCfgDirs(t *testing.T) {
+	t.Helper()
+
+	paths := config.GetPaths()
+
+	var err error
+	paths.CacheDir, err = os.MkdirTemp("/tmp", "lure-pull-test.*")
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+
+	paths.RepoDir = filepath.Join(paths.CacheDir, "repo")
+	paths.PkgsDir = filepath.Join(paths.CacheDir, "pkgs")
+
+	err = os.MkdirAll(paths.RepoDir, 0o755)
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+
+	err = os.MkdirAll(paths.PkgsDir, 0o755)
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+
+	paths.DBPath = filepath.Join(paths.CacheDir, "db")
+}
+
+func removeCacheDir(t *testing.T) {
+	t.Helper()
+
+	err := os.RemoveAll(config.GetPaths().CacheDir)
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+}
+
+func TestPull(t *testing.T) {
+	_, err := db.Open(":memory:")
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+	defer db.Close()
+
+	setCfgDirs(t)
+	defer removeCacheDir(t)
+
+	ctx := context.Background()
+
+	err = repos.Pull(ctx, []types.Repo{
+		{
+			Name: "default",
+			URL:  "https://github.com/Arsen6331/lure-repo.git",
+		},
+	})
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+
+	result, err := db.GetPkgs("name LIKE 'itd%'")
+	if err != nil {
+		t.Fatalf("Expected no error, got %s", err)
+	}
+
+	var pkgAmt int
+	for result.Next() {
+		var dbPkg db.Package
+		err = result.StructScan(&dbPkg)
+		if err != nil {
+			t.Errorf("Expected no error, got %s", err)
+		}
+		pkgAmt++
+	}
+
+	if pkgAmt < 2 {
+		t.Errorf("Expected 2 packages to match, got %d", pkgAmt)
+	}
+}

pkg/search/search.go

@@ -0,0 +1,167 @@
+package search
+
+import (
+	"context"
+	"errors"
+	"io"
+	"io/fs"
+	"os"
+	"path/filepath"
+	"strconv"
+	"strings"
+
+	"lure.sh/lure/internal/config"
+	"lure.sh/lure/internal/db"
+)
+
+// Filter represents search filters.
+type Filter int
+
+// Filters
+const (
+	FilterNone Filter = iota
+	FilterInRepo
+	FilterSupportsArch
+)
+
+// SoryBy represents a value that packages can be sorted by.
+type SortBy int
+
+// Sort values
+const (
+	SortByNone = iota
+	SortByName
+	SortByRepo
+	SortByVersion
+)
+
+// Package represents a package from LURE's database
+type Package struct {
+	Name          string
+	Version       string
+	Release       int
+	Epoch         uint
+	Description   map[string]string
+	Homepage      map[string]string
+	Maintainer    map[string]string
+	Architectures []string
+	Licenses      []string
+	Provides      []string
+	Conflicts     []string
+	Replaces      []string
+	Depends       map[string][]string
+	BuildDepends  map[string][]string
+	OptDepends    map[string][]string
+	Repository    string
+}
+
+func convertPkg(p db.Package) Package {
+	return Package{
+		Name:          p.Name,
+		Version:       p.Version,
+		Release:       p.Release,
+		Epoch:         p.Epoch,
+		Description:   p.Description.Val,
+		Homepage:      p.Homepage.Val,
+		Maintainer:    p.Maintainer.Val,
+		Architectures: p.Architectures.Val,
+		Licenses:      p.Licenses.Val,
+		Provides:      p.Provides.Val,
+		Conflicts:     p.Conflicts.Val,
+		Replaces:      p.Replaces.Val,
+		Depends:       p.Depends.Val,
+		BuildDepends:  p.BuildDepends.Val,
+		OptDepends:    p.OptDepends.Val,
+		Repository:    p.Repository,
+	}
+}
+
+// Options contains the options for a search.
+type Options struct {
+	Filter      Filter
+	FilterValue string
+	SortBy      SortBy
+	Limit       int64
+	Query       string
+}
+
+// Search searches for packages in the database based on the given options.
+func Search(ctx context.Context, opts Options) ([]Package, error) {
+	query := "(name LIKE ? OR description LIKE ? OR json_array_contains(provides, ?))"
+	args := []any{"%" + opts.Query + "%", "%" + opts.Query + "%", opts.Query}
+
+	if opts.Filter != FilterNone {
+		switch opts.Filter {
+		case FilterInRepo:
+			query += " AND repository = ?"
+		case FilterSupportsArch:
+			query += " AND json_array_contains(architectures, ?)"
+		}
+		args = append(args, opts.FilterValue)
+	}
+
+	if opts.SortBy != SortByNone {
+		switch opts.SortBy {
+		case SortByName:
+			query += " ORDER BY name"
+		case SortByRepo:
+			query += " ORDER BY repository"
+		case SortByVersion:
+			query += " ORDER BY version"
+		}
+	}
+
+	if opts.Limit != 0 {
+		query += " LIMIT " + strconv.FormatInt(opts.Limit, 10)
+	}
+
+	result, err := db.GetPkgs(ctx, query, args...)
+	if err != nil {
+		return nil, err
+	}
+
+	var out []Package
+	for result.Next() {
+		pkg := db.Package{}
+		err = result.StructScan(&pkg)
+		if err != nil {
+			return nil, err
+		}
+		out = append(out, convertPkg(pkg))
+	}
+
+	return out, err
+}
+
+// GetPkg gets a single package from the database and returns it.
+func GetPkg(ctx context.Context, repo, name string) (Package, error) {
+	pkg, err := db.GetPkg(ctx, "name = ? AND repository = ?", name, repo)
+	return convertPkg(*pkg), err
+}
+
+var (
+	// ErrInvalidArgument is an error returned by GetScript when one of its arguments
+	// contain invalid characters
+	ErrInvalidArgument = errors.New("name and repository must not contain . or /")
+
+	// ErrScriptNotFound is returned by GetScript if it can't find the script requested
+	// by the user.
+	ErrScriptNotFound = errors.New("requested script not found")
+)
+
+// GetScript returns a reader containing the build script for a given package.
+func GetScript(ctx context.Context, repo, name string) (io.ReadCloser, error) {
+	if strings.Contains(name, "./") || strings.ContainsAny(repo, "./") {
+		return nil, ErrInvalidArgument
+	}
+
+	scriptPath := filepath.Join(config.GetPaths(ctx).RepoDir, repo, name, "lure.sh")
+	fl, err := os.Open(scriptPath)
+	if errors.Is(err, fs.ErrNotExist) {
+		return nil, ErrScriptNotFound
+	} else if err != nil {
+		return nil, err
+	}
+
+	return fl, nil
+}