set -ex
    apt-get install -y ansible curl git gnupg make openssh-server openssl snapd sudo

    export HOME="/root"
    GITDIR="/tmp/isucon13"

    mkdir -p /etc/apt/keyrings
    curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
    NODE_MAJOR=20
    echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" > /etc/apt/sources.list.d/nodesource.list

    apt-get update
    apt-get install -y --no-install-recommends nodejs

    # OrbStack環境では1回目は失敗するので最大2回実施する
    snap install go --channel=1.21/stable --classic || snap install go --channel=1.21/stable --classic
    . /etc/profile.d/apps-bin-path.sh

    rm -rf ${GITDIR}
    git clone --depth=1 https://github.com/saza-ku/isucon13-fix.git ${GITDIR}

    # devドメインはHSTSが強制有効でブラウザでの動作確認が難しいためドメインを書き換える
    find ${GITDIR} -type f -exec sed -i -e "s/u\.isucon\.dev/u.isucon.local/g" {} +
    openssl req -subj '/CN=*.t.isucon.local' -nodes -newkey rsa:2048 -keyout ${GITDIR}/provisioning/ansible/roles/nginx/files/etc/nginx/tls/_.u.isucon.local.key -out ${GITDIR}/provisioning/ansible/roles/nginx/files/etc/nginx/tls/_.u.isucon.local.csr
    echo "subjectAltName=DNS.1:*.u.isucon.local, DNS.2:*.u.isucon.dev" > ${GITDIR}/provisioning/ansible/roles/nginx/files/etc/nginx/tls/extfile.txt
    openssl x509 -in ${GITDIR}/provisioning/ansible/roles/nginx/files/etc/nginx/tls/_.u.isucon.local.csr -req -signkey ${GITDIR}/provisioning/ansible/roles/nginx/files/etc/nginx/tls/_.u.isucon.local.key -sha256 -days 3650 -out ${GITDIR}/provisioning/ansible/roles/nginx/files/etc/nginx/tls/_.u.isucon.local.crt -extfile ${GITDIR}/provisioning/ansible/roles/nginx/files/etc/nginx/tls/extfile.txt
    cp -p ${GITDIR}/provisioning/ansible/roles/nginx/files/etc/nginx/tls/_.u.isucon.local.crt ${GITDIR}/provisioning/ansible/roles/nginx/files/etc/nginx/tls/_.u.isucon.local.issuer.crt
    mv ${GITDIR}/webapp/pdns/u.isucon.dev.zone ${GITDIR}/webapp/pdns/u.isucon.local.zone
    # 自己署名証明書を利用するため
    sed -i -e '/InsecureSkipVerify/s/false/true/' ${GITDIR}/bench/cmd/bench/benchmarker.go ${GITDIR}/bench/cmd/bench/bench.go

    # standaloneのためグローバルIPを取得しない
    sed -i -e "/enabled/s/true/false/" ${GITDIR}/provisioning/ansible/roles/globalip/tasks/main.yml
    sed -i -e "s/{{ ansible_default_ipv4.address }}/127.0.0.1/" ${GITDIR}/provisioning/ansible/roles/isucon-user/templates/env.sh

    # amd64以外でも動作するように
    sed -i -e "/go-install/s/$/ `uname -s | tr 'A-Z' 'a-z'` `dpkg --print-architecture`/" ${GITDIR}/provisioning/ansible/roles/xbuild/tasks/main.yml
    sed -i -e "s/_linux_amd64//" ${GITDIR}/provisioning/ansible/roles/bench/tasks/main.yaml
    sed -i -e 's/\$(LINUX_TARGET_ENV)//' ${GITDIR}/webapp/go/Makefile
    (

      cd ${GITDIR}/bench
      go build -o ../provisioning/ansible/roles/bench/files/bench -buildvcs=false ./cmd/bench
    )
    (
      cd ${GITDIR}/frontend
      npm install -g corepack
      make
      npm uninstall corepack
      cp -r ./dist/ ../webapp/public/
    )
    (
      cd ${GITDIR}/envcheck
      CGO_ENABLED=0 go build -o ../provisioning/ansible/roles/envcheck/files/envcheck -buildvcs=false -ldflags "-s -w"
    )
    (
      cd ${GITDIR}
      tar zcf provisioning/ansible/roles/webapp/files/webapp.tar.gz webapp
    )
    (
      cd ${GITDIR}/provisioning/ansible
      ansible-playbook -i inventory/localhost application.yml
      ansible-playbook -i inventory/localhost benchmark.yml
    )
    rm -rf ${GITDIR}
    apt-get purge -y ansible nodejs
    apt-get autoremove -y

    rm -f /etc/apt/sources.list.d/nodesource.list
    rm -f /etc/apt/keyrings/nodesource.gpg

    snap remove go
    echo ok