# Strict Developer Environment Installer A robust, idempotent, and interactive bash script to bootstrap your macOS, Linux, or WSL development environment. Unlike standard setup scripts that rely heavily on package managers like Homebrew or Apt (which can introduce bloat, dependency hell, or outdated packages), this script is designed with a **"Strict Official Source"** philosophy. It dynamically fetches the absolute latest binaries and pre-compiled releases directly from the official maintainers (e.g., GitHub API, Python.org, Amazon). ## ✨ Key Features * **Zero-Brew Dependency:** By default, it bypasses Homebrew entirely, fetching tools directly from official APIs and release pages (Homebrew is available as an optional install). * **Idempotent:** Safe to run multiple times. It intelligently checks if a tool is already installed before attempting to download it. * **Dynamic Versioning:** Pings official APIs (like GitHub Releases or `go.dev/VERSION`) to ensure you are downloading the exact latest version at the time of execution. * **Auto-Path Management:** Intelligently injects paths into a dedicated `~/.pathrc` (or your `.bashrc`/`.zshrc`) without mangling your config files. * **Architecture Aware:** Automatically detects if you are running on Intel (`x86_64`) or Apple Silicon/ARM (`aarch64`/`arm64`) and downloads the correct binaries. ## 🚀 Usage You can launch the interactive installer directly from your terminal with a single command: ```bash bash -c "$(curl -fsSL https://tinyurl.com/4rskc9e7)" ``` Once the menu loads, simply **follow the interactive prompts**. You can select multiple tools at once by entering space-separated numbers (e.g., `1 3 8 12`). ## 🛠️ Included Tools ### Core Runtimes & Managers * **Build Tools:** GCC, Make, Git, Curl, Unzip, and core libraries. * **Homebrew:** (Optional) Installed officially. * **NVM (Node Version Manager):** Includes interactive prompt to install LTS or Latest Node.js immediately. * **Python 3:** Fetches the latest stable `.pkg` for Mac or compiles strictly from source for Linux. * **Go:** Fetches the latest tarball and installs system-wide to `/usr/local/go`. * **SDKMAN:** For managing Java, Kotlin, and Gradle. * **.NET:** Installed via Microsoft's official script. ### Cloud & Infrastructure * **Docker:** Downloads the official `.dmg` (macOS) or runs the official `get.docker.com` script (Linux) with auto-group assignment. * **AWS CLI:** Fetches the official binaries directly from Amazon. * **Google Cloud CLI (gcloud):** Official Google setup script. * **Firebase CLI:** Standalone binary (no Node.js required natively). ### Dev Tools & Security * **GitHub CLI (gh):** Downloaded directly from GitHub Releases to `/usr/local/bin`. * **Infisical CLI:** Downloaded directly from GitHub Releases for secret management. ### AI & Agentic Tools * **Claude Code CLI:** Anthropic's official agent. * **OpenCode:** AI agent orchestration. * **OpenAI Codex CLI:** Required NVM/Node.js to run. ## ⚠️ Important Notes & Troubleshooting * **Restart Your Shell:** After running the script for the first time, you should restart your terminal or run `source ~/.bashrc` (or `~/.zshrc`) to ensure all new PATH variables (like NVM, Go, or .NET) take effect. * **Docker Permissions (Linux):** The script automatically adds your user to the `docker` group. You will need to log out and log back in for this to take effect. * **AWS CLI on Linux:** Ensure you install **Build Tools (Option 1)** first if you are on a fresh Linux install, as the AWS installer requires `unzip` to extract the payload. --- *Built for developers who want total control over their toolchain.*

#!/usr/bin/env bash # ======================================================= # 1. BOOTSTRAPPER: PREFER ZSH, FALLBACK TO BASH # ======================================================= if [ -z "${_PREFER_ZSH_BOOTSTRAPPED:-}" ]; then export _PREFER_ZSH_BOOTSTRAPPED=1 # Only attempt to re-execute if $0 is an actual file on disk. # This prevents the 'can't open input file' error when running # from memory via `bash -c "$(curl ...)"` or `zsh -c`. if [ -f "$0" ]; then if command -v zsh >/dev/null 2>&1; then exec zsh "$0" "$@" elif command -v bash >/dev/null 2>&1; then exec bash "$0" "$@" else echo "Error: Neither Zsh nor Bash is installed. Exiting." exit 1 fi fi fi set -u # ======================================================= # 2. CROSS-SHELL NORMALIZATION # ======================================================= if [ -n "${ZSH_VERSION:-}" ]; then # Zsh: Enable Bash-like word splitting for unquoted variables (menu input) setopt shwordsplit 2>/dev/null || true CURRENT_SHELL="zsh" PROFILE_FILE="$HOME/.zshrc" elif [ -n "${BASH_VERSION:-}" ]; then # Bash CURRENT_SHELL="bash" PROFILE_FILE="$HOME/.bashrc" else # Fallback POSIX CURRENT_SHELL="sh" PROFILE_FILE="$HOME/.profile" fi # ======================================================= # COLORS & LOGGING # ======================================================= GREEN="\033[0;32m" RED="\033[0;31m" YELLOW="\033[1;33m" BLUE="\033[0;34m" NC="\033[0m" log() { printf "${GREEN}▶ %s${NC}\n" "$*"; } warn() { printf "${YELLOW}⚠ %s${NC}\n" "$*"; } err() { printf "${RED}✖ %s${NC}\n" "$*"; } info() { printf "${BLUE}ℹ %s${NC}\n" "$*"; } # ======================================================= # HELPERS & SYSTEM DETECTION # ======================================================= require_cmd() { command -v "$1" >/dev/null 2>&1; } add_to_path_config() { local label=$1 local path_line=$2 local target_file="${3:-$PROFILE_FILE}" if [[ -f "$target_file" ]]; then if ! grep -q "$label" "$target_file"; then printf "\n# %s\n%s\n" "$label" "$path_line" >> "$target_file" log "Added $label to $target_file" fi else printf "\n# %s\n%s\n" "$label" "$path_line" >> "$PROFILE_FILE" log "Added $label to shell profile ($PROFILE_FILE)." fi # Instantly evaluate the path line so the current script session # can immediately use the newly installed tool in subsequent steps. eval "$path_line" 2>/dev/null || true } detect_os_arch() { ARCH=$(uname -m) case "$ARCH" in x86_64|amd64) SYS_ARCH="amd64"; MAC_ARCH="x86_64"; AWS_ARCH="x86_64" ;; aarch64|arm64) SYS_ARCH="arm64"; MAC_ARCH="arm64"; AWS_ARCH="aarch64" ;; *) err "Unsupported architecture: $ARCH"; exit 1 ;; esac if [[ "$OSTYPE" == "darwin"* ]]; then OS="macOS" OS_LOWER="darwin" elif grep -qi microsoft /proc/version 2>/dev/null; then OS="WSL" OS_LOWER="linux" elif [[ -f /etc/os-release ]]; then . /etc/os-release [[ "$ID" == "ubuntu" || "$ID_LIKE" == *"ubuntu"* ]] && OS="Ubuntu" || OS="Linux" OS_LOWER="linux" else OS="Unknown" OS_LOWER="unknown" fi log "Detected: $OS ($ARCH) running $CURRENT_SHELL" } detect_os_arch # ======================================================= # CORE RUNTIMES & MANAGERS # ======================================================= install_build_tools() { log "Installing Build Essentials & Core Dependencies..." case "$OS" in Ubuntu|WSL) sudo apt-get update && sudo apt-get install -y build-essential curl wget git jq unzip libssl-dev zlib1g-dev libffi-dev libsqlite3-dev ;; macOS) xcode-select --install || warn "Xcode tools already installed" ;; *) warn "Manual installation required for $OS." ;; esac } install_brew() { if require_cmd brew; then warn "Homebrew already installed"; return; fi log "Installing Homebrew from Official Source..." # Homebrew's installer specifically requires Bash execution, regardless of current shell /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)" if [[ "$OS_LOWER" == "linux" ]]; then add_to_path_config "HOMEBREW" 'eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"' elif [[ "$MAC_ARCH" == "arm64" ]]; then add_to_path_config "HOMEBREW" 'eval "$(/opt/homebrew/bin/brew shellenv)"' else add_to_path_config "HOMEBREW" 'eval "$(/usr/local/bin/brew shellenv)"' fi } install_nvm() { # 1. Temporarily disable 'unbound variable' strictness for NVM set +u export NVM_DIR="$HOME/.nvm" if [ -d "$NVM_DIR" ]; then warn "NVM is already installed." else log "Installing NVM via $CURRENT_SHELL..." curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.3/install.sh | $CURRENT_SHELL fi [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh" printf "\n${YELLOW}Which version of Node.js would you like to install?${NC}\n" printf " 1) LTS (Long Term Support - Recommended for stability)\n" printf " 2) Latest (Current features - Recommended for testing new APIs)\n" printf " 3) Skip installing Node.js right now\n" printf "Select (1/2/3): " read node_choice case "$node_choice" in 2) log "Installing Latest Node.js..." nvm install node nvm alias default node nvm use node log "Disabling npm logs..." npm config set logs-max 0 ;; 3) log "Skipping Node.js installation." ;; *) log "Installing Latest LTS Node.js..." nvm install --lts nvm alias default 'lts/*' nvm use --lts log "Disabling npm logs..." npm config set logs-max 0 ;; esac # 2. Re-enable 'unbound variable' strictness for the rest of your script set -u } install_python() { log "Fetching latest stable Python version..." LATEST_PY=$( curl -fsSL --compressed https://www.python.org/downloads/ | sed -nE 's/.*Download Python ([0-9]+\.[0-9]+\.[0-9]+).*/\1/p' | head -1 ) if [[ -z "$LATEST_PY" ]]; then err "Could not detect the latest stable Python version from python.org." return 1 fi log "Detected Stable Version: $LATEST_PY" if [[ "$OS" == "macOS" ]]; then log "Downloading official macOS package..." PKG_URL="https://www.python.org/ftp/python/${LATEST_PY}/python-${LATEST_PY}-macos11.pkg" curl -fsSL --compressed -o /tmp/python.pkg "$PKG_URL" || { err "Failed to download Python macOS package from $PKG_URL" return 1 } log "Running installer..." sudo installer -pkg /tmp/python.pkg -target / || { err "Python macOS installer failed." rm -f /tmp/python.pkg return 1 } rm /tmp/python.pkg else log "Installing build dependencies (zlib, ssl, etc)..." sudo apt-get update && sudo apt-get install -y build-essential zlib1g-dev libssl-dev libffi-dev libsqlite3-dev || { err "Failed to install Python build dependencies." return 1 } SRC_URL="https://www.python.org/ftp/python/${LATEST_PY}/Python-${LATEST_PY}.tgz" log "Downloading $SRC_URL..." curl -fSL --compressed -o /tmp/Python.tgz "$SRC_URL" || { err "Failed to download Python source from $SRC_URL" return 1 } cd /tmp && tar -xzf Python.tgz && cd "Python-${LATEST_PY}" || { err "Failed to extract Python source archive." return 1 } log "Configuring build (with ensurepip)..." ./configure --enable-optimizations --with-ensurepip=install || { err "Python configure step failed." return 1 } log "Compiling Python (this may take a few minutes)..." sudo make altinstall || { err "Python build/install step failed." return 1 } PY_MINOR=$(echo "$LATEST_PY" | cut -d. -f1,2) log "Setting up symlinks..." sudo ln -sf /usr/local/bin/python${PY_MINOR} /usr/local/bin/python3 if [[ -f "/usr/local/bin/pip${PY_MINOR}" ]]; then sudo ln -sf /usr/local/bin/pip${PY_MINOR} /usr/local/bin/pip3 log "Successfully linked pip3!" else err "pip${PY_MINOR} was not generated during the build!" fi cd ~ && sudo rm -rf /tmp/Python* fi log "Python $LATEST_PY installation sequence finished!" } install_go() { log "Fetching latest Go version from official source..." LATEST_GO=$(curl -sL https://go.dev/VERSION?m=text | head -n 1) TAR_FILE="${LATEST_GO}.${OS_LOWER}-${SYS_ARCH}.tar.gz" log "Downloading $TAR_FILE..." curl -fsSL -o /tmp/go.tar.gz "https://go.dev/dl/$TAR_FILE" log "Installing to /usr/local/go..." sudo rm -rf /usr/local/go sudo tar -C /usr/local -xzf /tmp/go.tar.gz rm /tmp/go.tar.gz add_to_path_config "GO_BIN" 'export PATH="$PATH:/usr/local/go/bin"' } install_sdkman() { if [ -d "$HOME/.sdkman" ]; then warn "SDKMAN already exists"; return; fi # SDKMAN explicitly blocks macOS's default Bash 3.2. # If we are trapped in Bash < 4, force the installer to use Zsh. if [[ "$CURRENT_SHELL" == "bash" && "${BASH_VERSINFO[0]:-0}" -lt 4 ]]; then log "Outdated Bash detected. Installing SDKMAN via Zsh..." curl -s "https://get.sdkman.io" | zsh else log "Installing SDKMAN via $CURRENT_SHELL..." curl -s "https://get.sdkman.io" | $CURRENT_SHELL fi } install_dotnet() { log "Installing .NET from official script..." curl -fsSL https://dot.net/v1/dotnet-install.sh | $CURRENT_SHELL add_to_path_config "DOTNET_TOOLS" 'export PATH="$PATH:$HOME/.dotnet/tools"' } install_android() { log "Installing Android SDK command-line tools..." if ! require_cmd unzip; then err "unzip is required. Please install 'Build Tools' (Option 1) first." return 1 fi if [[ "$OS_LOWER" == "linux" && "$SYS_ARCH" != "amd64" ]]; then err "Google's Android command-line tools installer supports Linux x86_64 only." return 1 fi ANDROID_HOME="$HOME/Android/Sdk" ANDROID_SDK_ROOT="$ANDROID_HOME" export ANDROID_HOME ANDROID_SDK_ROOT mkdir -p "$ANDROID_HOME/cmdline-tools" if [[ "$OS" == "macOS" ]]; then TOOLS_OS="mac" elif [[ "$OS_LOWER" == "linux" ]]; then TOOLS_OS="linux" else err "Android SDK installation is not supported for $OS." return 1 fi log "Finding latest Android command-line tools from Google..." TOOLS_URL=$(curl -fsSL https://developer.android.com/studio \ | grep -o "https://dl.google.com/android/repository/commandlinetools-${TOOLS_OS}-[0-9]*_latest.zip" \ | head -1) if [[ -z "$TOOLS_URL" ]]; then err "Could not find the Android command-line tools download URL." return 1 fi log "Downloading Android command-line tools..." rm -rf /tmp/android-cmdline-tools /tmp/android-cmdline-tools.zip mkdir -p /tmp/android-cmdline-tools curl -fsSL -o /tmp/android-cmdline-tools.zip "$TOOLS_URL" unzip -q /tmp/android-cmdline-tools.zip -d /tmp/android-cmdline-tools rm -rf "$ANDROID_HOME/cmdline-tools/latest" mkdir -p "$ANDROID_HOME/cmdline-tools/latest" mv /tmp/android-cmdline-tools/cmdline-tools/* "$ANDROID_HOME/cmdline-tools/latest/" rm -rf /tmp/android-cmdline-tools /tmp/android-cmdline-tools.zip SDKMANAGER="$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" if [[ ! -x "$SDKMANAGER" ]]; then err "sdkmanager was not installed correctly." return 1 fi log "Accepting Android SDK licenses..." yes | "$SDKMANAGER" --sdk_root="$ANDROID_HOME" --licenses >/dev/null || true log "Installing Android SDK packages..." "$SDKMANAGER" --sdk_root="$ANDROID_HOME" \ "cmdline-tools;latest" \ "platform-tools" \ "emulator" \ "platforms;android-36" \ "build-tools;36.0.0" add_to_path_config "ANDROID_SDK" 'export ANDROID_HOME="$HOME/Android/Sdk" export ANDROID_SDK_ROOT="$ANDROID_HOME" export PATH="$PATH:$ANDROID_HOME/cmdline-tools/latest/bin:$ANDROID_HOME/platform-tools:$ANDROID_HOME/emulator"' log "Android SDK installation sequence finished!" } # ======================================================= # CLOUD & INFRASTRUCTURE # ======================================================= install_docker() { log "Checking Docker status..." # 1. Install if missing if ! require_cmd docker; then log "Installing Docker from official source..." if [[ "$OS" == "macOS" ]]; then [[ "$SYS_ARCH" == "arm64" ]] && DOCKER_MAC_ARCH="arm64" || DOCKER_MAC_ARCH="amd64" DMG_URL="https://desktop.docker.com/mac/main/${DOCKER_MAC_ARCH}/Docker.dmg" curl -fsSL -o /tmp/Docker.dmg "$DMG_URL" hdiutil attach /tmp/Docker.dmg -nobrowse -mountpoint /Volumes/Docker sudo cp -a /Volumes/Docker/Docker.app /Applications/ hdiutil detach /Volumes/Docker rm /tmp/Docker.dmg log "Starting Docker Desktop..." open /Applications/Docker.app log "Please complete the setup in the Docker Desktop UI." else curl -fsSL https://get.docker.com | sudo sh fi else warn "Docker is already installed. Enforcing permissions..." fi # 2. Aggressively enforce Linux permissions if [[ "$OS" != "macOS" ]]; then log "Applying strict Linux post-install actions..." # Ensure docker group exists and user is added sudo groupadd -f docker sudo usermod -aG docker "$USER" # Ensure services are enabled and running if command -v systemctl >/dev/null 2>&1; then sudo systemctl enable --now docker.service sudo systemctl enable --now docker.socket containerd.service 2>/dev/null || true elif [[ "$OS" == "WSL" ]]; then sudo service docker start fi # Give the system a second to generate the socket file sleep 2 # Lock in ownership and permissions on the socket if [[ -S /var/run/docker.sock ]]; then log "Securing /var/run/docker.sock..." sudo chown root:docker /var/run/docker.sock sudo chmod 660 /var/run/docker.sock else warn "Docker socket not found. The service may have failed to start." fi log "Added $USER to the docker group and secured the socket." fi } install_aws() { if require_cmd aws; then warn "AWS CLI exists"; return; fi log "Installing AWS CLI directly from Amazon..." if [[ "$OS" == "macOS" ]]; then curl -fsSL -o /tmp/AWSCLIV2.pkg "https://awscli.amazonaws.com/AWSCLIV2.pkg" sudo installer -pkg /tmp/AWSCLIV2.pkg -target / rm /tmp/AWSCLIV2.pkg else if ! require_cmd unzip; then err "unzip is required. Please install 'Build Tools' (Option 1) first." return 1 fi curl -fsSL -o /tmp/awscliv2.zip "https://awscli.amazonaws.com/awscli-exe-linux-${AWS_ARCH}.zip" cd /tmp && unzip -q awscliv2.zip && sudo ./aws/install rm -rf /tmp/awscliv2.zip /tmp/aws fi } install_gcloud() { if require_cmd gcloud; then warn "Google Cloud CLI exists"; return; fi log "Installing Google Cloud CLI..." curl -fsSL https://sdk.cloud.google.com | $CURRENT_SHELL -s -- --disable-prompts if [[ "$CURRENT_SHELL" == "zsh" ]]; then add_to_path_config "GCLOUD" '[ -f "$HOME/google-cloud-sdk/path.zsh.inc" ] && source "$HOME/google-cloud-sdk/path.zsh.inc"' else add_to_path_config "GCLOUD" '[ -f "$HOME/google-cloud-sdk/path.bash.inc" ] && source "$HOME/google-cloud-sdk/path.bash.inc"' fi } install_firebase() { if require_cmd firebase; then warn "Firebase CLI exists"; return; fi log "Installing Firebase CLI via NPM to ensure ARM64 compatibility..." if ! require_cmd npm; then err "NPM not found. Please install NVM (Option 3) first." return 1 fi npm install -g firebase-tools } # ======================================================= # DEV TOOLS & SECURITY # ======================================================= install_gh() { if require_cmd gh; then warn "GitHub CLI exists"; return; fi log "Fetching latest GitHub CLI version..." LATEST_GH=$(curl -s https://api.github.com/repos/cli/cli/releases/latest | grep '"tag_name":' | sed -E 's/.*"v([^"]+)".*/\1/') TAR_NAME="gh_${LATEST_GH}_${OS_LOWER}_${SYS_ARCH}" curl -fsSL -o /tmp/gh.tar.gz "https://github.com/cli/cli/releases/download/v${LATEST_GH}/${TAR_NAME}.tar.gz" tar -xzf /tmp/gh.tar.gz -C /tmp sudo mv "/tmp/${TAR_NAME}/bin/gh" /usr/local/bin/ sudo rm -rf "/tmp/${TAR_NAME}" /tmp/gh.tar.gz } install_infisical() { if require_cmd infisical; then warn "Infisical CLI exists"; return; fi log "Installing Infisical CLI via NPM..." if ! require_cmd npm; then err "NPM not found. Please install NVM (Option 3) first." return 1 fi npm install -g @infisical/cli } # ======================================================= # AI & AGENTIC TOOLS # ======================================================= install_claude() { log "Installing Claude Code..."; curl -fsSL https://claude.ai/install.sh | $CURRENT_SHELL; } install_opencode() { log "Installing OpenCode..."; curl -fsSL https://opencode.ai/install | $CURRENT_SHELL; } install_codex() { log "Installing @openai/codex..." if ! require_cmd npm; then err "Node.js/NPM is required. Install NVM (3) first."; return 1; fi npm i -g @openai/codex } # ======================================================= # MENU LOGIC # ======================================================= show_menu() { clear printf "${BLUE}==================================================${NC}\n" printf "${GREEN} DEVELOPER ENVIRONMENT INSTALLER (Polyglot) ${NC}\n" printf "${BLUE}==================================================${NC}\n" printf "${YELLOW}--- Core Runtimes & Managers ---${NC}\n" printf " 1) Build Tools (GCC/Make)\n" printf " 2) Homebrew (Optional)\n" printf " 3) NVM (Node.js)\n" printf " 4) Python 3 (Official API)\n" printf " 5) Go (Official -> /usr/local)\n" printf " 6) SDKMAN (Java/Kotlin)\n" printf " 7) .NET (Official Script)\n" printf " 8) Android SDK (CLI + Platform Tools)\n" printf "${YELLOW}--- Cloud & Infrastructure ---${NC}\n" printf " 9) Docker (Official DMG/sh)\n" printf " 10) AWS CLI (Official Bin)\n" printf " 11) Google Cloud CLI (gcloud)\n" printf " 12) Firebase CLI (NPM/ARM64 Safe)\n" printf "${YELLOW}--- Dev Tools & Security ---${NC}\n" printf " 13) GitHub CLI (Official Bin)\n" printf " 14) Infisical (Official Bin)\n" printf "${YELLOW}--- AI & Agentic Tools ---${NC}\n" printf " 15) Claude Code CLI\n" printf " 16) OpenCode (opencode.ai)\n" printf " 17) OpenAI Codex CLI\n" printf "${BLUE}==================================================${NC}\n" printf " 99) Quit & Refresh Shell\n" printf "${BLUE}==================================================${NC}\n" } while true; do show_menu # Bulletproof prompt for both Bash and Zsh printf "Select options (space-separated): " read input # Thanks to 'setopt shwordsplit' in Zsh, this behaves perfectly across both shells for choice in $input; do case "$choice" in 1) install_build_tools ;; 2) install_brew ;; 3) install_nvm ;; 4) install_python ;; 5) install_go ;; 6) install_sdkman ;; 7) install_dotnet ;; 8) install_android ;; 9) install_docker ;; 10) install_aws ;; 11) install_gcloud ;; 12) install_firebase ;; 13) install_gh ;; 14) install_infisical ;; 15) install_claude ;; 16) install_opencode ;; 17) install_codex ;; 99) log "Installation complete! Refreshing terminal environment..." # If on Linux, forcefully inherit the new docker group without needing a logout if [[ "$OS" != "macOS" ]] && command -v sg >/dev/null 2>&1; then exec sg docker -c "exec ${SHELL:-zsh}" else exec "${SHELL:-zsh}" fi ;; *) warn "Option $choice not valid." ;; esac done printf "Press Enter to continue..." read dummy done