Adds git-lfs to installdeps target

Provides a convenient method for installing git-lfs, as part of the
install-required-dependencies step. Added a conditional check to ensure
that the wheels are indeed retrieved via git-lfs. This change is
required by developers only on first-run, thus the conditional, but
required in CI all the time, since the repo is cloned before deps are
installed.

.circleci/config.yml

@@ -188,7 +188,6 @@ jobs:
       - image: circleci/python:3.7-buster
     steps:
       - checkout
-      - *installgitlfs
       - *installdeps
       - *clonesecuredroplog
       - *getlatestreleasedversion
@@ -200,14 +199,12 @@ jobs:
       - image: circleci/python:3.7-buster
     steps:
       - checkout
-      - *installgitlfs
       - *installdeps
       - *clonesecuredroplog
       - *getnightlyversion
       - *makesourcetarball
       - *updatedebianchangelog
       - *builddebianpackage
-      - *installgitlfs
       - *addsshkeys
       - *commitworkstationdebs
 
@@ -216,7 +213,6 @@ jobs:
       - image: circleci/python:3.7-buster
     steps:
       - checkout
-      - *installgitlfs
       - *installdeps
       - *clonesecuredropclient
       - *getlatestreleasedversion
@@ -228,14 +224,12 @@ jobs:
       - image: circleci/python:3.7-buster
     steps:
       - checkout
-      - *installgitlfs
       - *installdeps
       - *clonesecuredropclient
       - *getnightlyversion
       - *makesourcetarball
       - *updatedebianchangelog
       - *builddebianpackage
-      - *installgitlfs
       - *addsshkeys
       - *commitworkstationdebs
 
@@ -244,7 +238,6 @@ jobs:
       - image: circleci/python:3.7-buster
     steps:
       - checkout
-      - *installgitlfs
       - *installdeps
       - *clonesecuredropproxy
       - *getlatestreleasedversion
@@ -256,14 +249,12 @@ jobs:
       - image: circleci/python:3.7-buster
     steps:
       - checkout
-      - *installgitlfs
       - *installdeps
       - *clonesecuredropproxy
       - *getnightlyversion
       - *makesourcetarball
       - *updatedebianchangelog
       - *builddebianpackage
-      - *installgitlfs
       - *addsshkeys
       - *commitworkstationdebs
 
@@ -272,7 +263,6 @@ jobs:
       - image: circleci/python:3.7-buster
     steps:
       - checkout
-      - *installgitlfs
       - *installdeps
       - *clonesecuredropexport
       - *getlatestreleasedversion
@@ -284,14 +274,12 @@ jobs:
       - image: circleci/python:3.7-buster
     steps:
       - checkout
-      - *installgitlfs
       - *installdeps
       - *clonesecuredropexport
       - *getnightlyversion
       - *makesourcetarball
       - *updatedebianchangelog
       - *builddebianpackage
-      - *installgitlfs
       - *addsshkeys
       - *commitworkstationdebs
 
@@ -300,7 +288,6 @@ jobs:
       - image: circleci/python:3.7-buster
     steps:
       - checkout
-      - *installgitlfs
       - *installdeps
       - *setsvsdispname
       - *setmetapackageversion
@@ -311,7 +298,6 @@ jobs:
       - image: circleci/python:3.7-buster
     steps:
       - checkout
-      - *installgitlfs
       - *installdeps
       - *setsdgrsecname
       - *setmetapackageversion

scripts/install-deps

@@ -1,6 +1,6 @@
 #!/bin/bash
 # Installs required dependencies for building SecureDrop Worsktation packages.
-# Assumes a Debian 9 machine, ideally a Qubes AppVM.
+# Assumes a Debian 10 machine, ideally a Qubes AppVM.
 
 sudo apt-get update
 sudo apt-get install  \
@@ -10,7 +10,21 @@ sudo apt-get install  \
     dh-make \
     dh-python \
     dh-virtualenv \
+    git-lfs \
     libffi-dev \
     libssl-dev \
     python3-all \
     python3-setuptools
+
+
+# Inspect the wheel files present locally. If repo was cloned
+# without git-lfs, they'll be "text/plain", rather than "application/zip".
+wheel_mime_types="$(find localwheels/ -type f -iname '*.whl' -exec file --mime-type {} + | perl -F':\s+' -lanE 'say $F[-1]' | sort -u)"
+if [[ "$wheel_mime_types" != "application/zip" ]]; then
+    echo "Re-fetching git-lfs assets..."
+    git lfs install
+    # Re-fetch assets to resolve pointers to actual files
+    rm -r localwheels/
+    git checkout localwheels/
+    git lfs fetch
+fi