add file locking to deploy/process scripts

.gitignore

@@ -2,3 +2,4 @@ nginx-tmp
 node_modules
 static-tmp
 releases-base
+lock

deploy-static

@@ -2,7 +2,14 @@
 
 set -o errexit -o nounset -o pipefail
 
-./process-static
+touch lock
+exec {fd}< lock
+if ! flock -n $fd; then
+    echo deploy_static already locked >&2
+    exit 1
+fi
+
+./process-static $fd
 
 servers=({0..2}.grapheneos.org)
 

process-static

@@ -3,6 +3,18 @@
 set -o errexit -o nounset -o pipefail
 shopt -s dotglob extglob globstar
 
+if [[ $# -eq 1 ]]; then
+    fd=$1
+else
+    touch lock
+    exec {fd}< lock
+fi
+
+if ! flock -n $fd; then
+    echo deploy_static already locked >&2
+    exit 1
+fi
+
 export PATH="$PWD/node_modules/.bin:$PATH"
 
 # can use file:// to avoid network requests