#!/bin/bash #* === Step 1: Bootstrap base system === if [ ! -f "$CHROOT_ROOT/.bootstrapped" ]; then echo "[1/6] Bootstrapping Debian into $CHROOT_ROOT" sudo debootstrap --variant=minbase bookworm "$CHROOT_ROOT" http://deb.debian.org/debian sudo touch "$CHROOT_ROOT/.bootstrapped" fi #* === Step 2: Install base packages === if [ ! -f "$CHROOT_ROOT/.packages_installed" ]; then echo "[2/6] Installing base packages" sudo mount -t proc none "$CHROOT_ROOT/proc" sudo chroot "$CHROOT_ROOT" bash -c " apt-get update && apt-get install -y --no-install-recommends \ ca-certificates \ bash \ curl \ unzip \ default-jdk " sudo umount "$CHROOT_ROOT/proc" sudo touch "$CHROOT_ROOT/.packages_installed" fi #* === Step 3: Install CodeQL CLI === if [ ! -f "$CHROOT_ROOT/opt/codeql/codeql" ]; then echo "[3/6] Installing CodeQL CLI" echo " -> Using CodeQL version: $CODEQL_TAG" mkdir -p "$CHROOT_ROOT/opt" curl -L "https://github.com/github/codeql-cli-binaries/releases/download/$CODEQL_TAG/codeql-linux64.zip" -o /tmp/codeql.zip sudo unzip -q /tmp/codeql.zip -d "$CHROOT_ROOT/opt" # optional: rm /tmp/codeql.zip fi #* === Step 4: Set CodeQL env vars === if [ ! -f "$CHROOT_ROOT/etc/profile.d/codeql.sh" ]; then echo "[4/6] Adding CodeQL environment to chroot" sudo tee "$CHROOT_ROOT/etc/profile.d/codeql.sh" > /dev/null <