mirror of
https://github.com/ivabus/pantry
synced 2024-11-10 10:35:17 +03:00
259 lines
8 KiB
YAML
259 lines
8 KiB
YAML
name: build
|
||
|
||
on:
|
||
workflow_call:
|
||
inputs:
|
||
projects:
|
||
required: true
|
||
type: string
|
||
upload:
|
||
required: false
|
||
type: boolean
|
||
default: false
|
||
|
||
env:
|
||
TEA_PANTRY_PATH: ${{ github.workspace }}/pantry
|
||
|
||
jobs:
|
||
build:
|
||
runs-on: ${{ matrix.os }}
|
||
strategy:
|
||
matrix:
|
||
include:
|
||
- os: macos-11
|
||
- os: ubuntu-latest
|
||
container:
|
||
image: debian:buster-slim
|
||
options: --memory=16g
|
||
- os: [self-hosted, macOS, ARM64]
|
||
tag: darwin-aarch64
|
||
- os: [self-hosted, linux, ARM64]
|
||
tag: linux-aarch64
|
||
container: ${{ matrix.container }}
|
||
outputs:
|
||
built: ${{ steps.build.outputs.pkgs }}
|
||
srcs: ${{ steps.build.outputs.srcs }}
|
||
pkgs: ${{ steps.sorted.outputs.pkgs }} ${{ steps.sorted.outputs.pre-install }}
|
||
steps:
|
||
- name: co pantry
|
||
uses: actions/checkout@v3
|
||
with:
|
||
path: pantry
|
||
|
||
- name: co cli
|
||
uses: actions/checkout@v3
|
||
with:
|
||
path: cli
|
||
repository: teaxyz/cli
|
||
|
||
- uses: teaxyz/setup@v0
|
||
id: tea
|
||
with:
|
||
# necessary because we currently require a `.git` directory
|
||
srcroot: /opt/tea.xyz/var/pantry
|
||
prefix: /opt
|
||
|
||
- name: HACKS
|
||
run: |
|
||
case ${{ matrix.os }} in
|
||
ubuntu-latest)
|
||
#FIXME our LLVM doesn't provide c/c++ headers for some reason
|
||
apt-get update
|
||
apt-get --yes install libc-dev libstdc++-8-dev libgcc-8-dev
|
||
;;
|
||
macos-11)
|
||
#FIXME we need a clean install of macOS for builds
|
||
#TODO stop using GHA images or chroot or something
|
||
for x in /usr/local/*; do sudo mv $x /tmp; done
|
||
;;
|
||
esac
|
||
|
||
ln -s $GITHUB_WORKSPACE/cli /opt/tea.xyz/var/cli
|
||
|
||
# in case this PR contains updates to the scripts
|
||
#TODO only do for PRs
|
||
if test "$GITHUB_REPOSITORY" = "teaxyz/pantry.core"; then
|
||
cp -rv pantry/scripts/* /opt/tea.xyz/var/pantry/scripts
|
||
fi
|
||
|
||
- run: /opt/tea.xyz/var/pantry/scripts/sort.ts ${{ inputs.projects }}
|
||
id: sorted
|
||
|
||
- run: /opt/tea.xyz/var/pantry/scripts/build-deps.ts ${{ steps.sorted.outputs.pkgs }}
|
||
id: deps
|
||
|
||
- run: cli/scripts/install.ts ${{ steps.deps.outputs.pkgs }}
|
||
|
||
# running out of /opt because only pantry.core has these scripts
|
||
- run: /opt/tea.xyz/var/pantry/scripts/build.plumbing.ts ${{ steps.sorted.outputs.pkgs }}
|
||
id: build
|
||
env:
|
||
GITHUB_TOKEN: ${{ github.token }}
|
||
FORCE_UNSAFE_CONFIGURE: 1 # some configure scripts refuse to run as root
|
||
|
||
# tarring ourselves ∵ GHA-artifacts (ludicrously) lose permissions
|
||
# /ref https://github.com/actions/upload-artifact/issues/38
|
||
- run:
|
||
tar czf $GITHUB_WORKSPACE/artifacts.tgz
|
||
${{ steps.build.outputs.relative-paths }}
|
||
${{ steps.build.outputs.srcs-relative-paths }}
|
||
working-directory: ${{ steps.tea.outputs.prefix }}
|
||
|
||
- name: upload artifacts
|
||
uses: actions/upload-artifact@v3
|
||
with:
|
||
name: ${{ matrix.tag || matrix.os }}
|
||
path: artifacts.tgz
|
||
if-no-files-found: error
|
||
|
||
test:
|
||
needs: [build]
|
||
runs-on: ${{ matrix.os }}
|
||
strategy:
|
||
matrix:
|
||
include:
|
||
- os: macos-11
|
||
- os: ubuntu-latest
|
||
- os: ubuntu-latest
|
||
container: ghcr.io/teaxyz/infuser:slim-latest
|
||
- os: ubuntu-latest
|
||
container: debian:buster-slim
|
||
- os: [self-hosted, macOS, ARM64]
|
||
tag: darwin-aarch64
|
||
- os: [self-hosted, linux, ARM64]
|
||
tag: linux-aarch64
|
||
container: ${{ matrix.container }}
|
||
steps:
|
||
- uses: actions/checkout@v3
|
||
with:
|
||
path: tea.xyz/var/cli
|
||
repository: teaxyz/cli
|
||
|
||
- uses: actions/checkout@v3
|
||
with:
|
||
path: pantry
|
||
|
||
- uses: teaxyz/setup@v0
|
||
id: tea
|
||
with:
|
||
srcroot: tea.xyz/var/pantry
|
||
prefix: ${{ github.workspace }}
|
||
|
||
- run: |
|
||
apt-get update
|
||
apt-get --yes install libc-dev libstdc++-8-dev libgcc-8-dev
|
||
if: ${{ matrix.container != '' }}
|
||
|
||
- uses: actions/download-artifact@v3
|
||
with:
|
||
name: ${{ matrix.tag || matrix.os }}
|
||
|
||
- run: tar xzf artifacts.tgz
|
||
|
||
- run: tea.xyz/var/pantry/scripts/test.ts ${{ inputs.projects }}
|
||
|
||
bottle:
|
||
name: ${{ matrix.name }}
|
||
needs: [test, build]
|
||
if: ${{ inputs.upload }}
|
||
runs-on: ${{ matrix.platform.os }}
|
||
defaults:
|
||
run:
|
||
working-directory: tea.xyz/var/pantry
|
||
strategy:
|
||
matrix:
|
||
platform:
|
||
- os: macos-11
|
||
name: darwin+x86-64
|
||
- os: ubuntu-latest
|
||
name: linux+x86-64
|
||
- os: [self-hosted, macOS, ARM64]
|
||
tag: darwin-aarch64
|
||
name: darwin+aarch64
|
||
- os: [self-hosted, linux, ARM64]
|
||
tag: linux-aarch64
|
||
name: linux+aarch64
|
||
steps:
|
||
- uses: actions/checkout@v3
|
||
with:
|
||
path: tea.xyz/var/cli
|
||
repository: teaxyz/cli
|
||
|
||
- uses: actions/checkout@v3
|
||
with:
|
||
path: pantry
|
||
|
||
- uses: teaxyz/setup@v0
|
||
id: tea
|
||
with:
|
||
srcroot: tea.xyz/var/pantry
|
||
prefix: ${{ github.workspace }}
|
||
|
||
- uses: actions/download-artifact@v3
|
||
with:
|
||
name: ${{ matrix.platform.tag || matrix.platform.os }}
|
||
path: ${{ steps.tea.outputs.prefix }}
|
||
|
||
- run: tar xzf artifacts.tgz
|
||
working-directory: ${{ steps.tea.outputs.prefix }}
|
||
|
||
- run: |
|
||
tea +gnupg.org gpg-agent --daemon || true
|
||
echo $GPG_PRIVATE_KEY | \
|
||
base64 -d | \
|
||
tea +gnupg.org gpg --import --batch --yes
|
||
env:
|
||
GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
|
||
|
||
- run: scripts/bottle.ts ${{ needs.build.outputs.built }}
|
||
id: bottle-xz
|
||
env:
|
||
COMPRESSION: xz
|
||
GPG_KEY_ID: ${{ secrets.GPG_KEY_ID }}
|
||
GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
|
||
|
||
- run: scripts/bottle.ts ${{ needs.build.outputs.built }}
|
||
id: bottle-gz
|
||
env:
|
||
COMPRESSION: gz
|
||
GPG_KEY_ID: ${{ secrets.GPG_KEY_ID }}
|
||
GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
|
||
|
||
- name: upload bottles
|
||
id: upload
|
||
run: scripts/upload.ts
|
||
--pkgs ${{ needs.build.outputs.built }} ${{ needs.build.outputs.built }}
|
||
--srcs ${{ needs.build.outputs.srcs }} ${{ needs.build.outputs.srcs }}
|
||
--bottles ${{ steps.bottle-gz.outputs.bottles }} ${{ steps.bottle-xz.outputs.bottles }}
|
||
--checksums ${{ steps.bottle-gz.outputs.checksums }} ${{ steps.bottle-xz.outputs.checksums }}
|
||
--signatures ${{ steps.bottle-gz.outputs.signatures }} ${{ steps.bottle-xz.outputs.signatures }}
|
||
env:
|
||
AWS_S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }}
|
||
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
||
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
||
|
||
#NOTE ideally we’d invalidate all at once so this is atomic
|
||
# however GHA can’t consolidate outputs from a matrix :/
|
||
- uses: chetan/invalidate-cloudfront-action@v2
|
||
env:
|
||
PATHS: ${{ steps.upload.outputs.cf-invalidation-paths }}
|
||
DISTRIBUTION: ${{ secrets.AWS_CF_DISTRIBUTION_ID }}
|
||
AWS_REGION: us-east-1
|
||
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
||
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
||
|
||
notify:
|
||
if: always()
|
||
needs: [test, build, bottle]
|
||
runs-on: ubuntu-latest
|
||
steps:
|
||
- uses: martialonline/workflow-status@v3
|
||
id: status
|
||
- uses: rtCamp/action-slack-notify@v2
|
||
if: ${{ env.SLACK_WEBHOOK != '' }}
|
||
env:
|
||
SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
|
||
SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }}
|
||
SLACK_MESSAGE: build job for ${{ inputs.projects }} ${{ steps.status.outputs.status }}
|
||
SLACK_COLOR: ${{ steps.status.outputs.status }}
|