pullpiri/.github/workflows/dev-release.yml at main · eclipse-pullpiri/pullpiri · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
name: Dev Release (Fast Artifacts)

on:
  push:
    tags:
      - dev*

concurrency:
  group: "dev-release-${{ github.ref }}"
  cancel-in-progress: true

permissions:
  contents: write
  packages: write

env:
  CONTAINER_REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}

jobs:
  build-nodeagent:
    name: Build nodeagent (${{ matrix.arch }})
    runs-on: ${{ matrix.runner }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - arch: amd64
            runner: ubuntu-latest
            rust_target: x86_64-unknown-linux-musl
            extra_apt_packages: musl-tools
            output_name: nodeagent-linux-amd64
            output_path: src/agent/nodeagent/target/x86_64-unknown-linux-musl/release/nodeagent
            asset_name: nodeagent-linux-amd64
          - arch: arm64
            runner: ubuntu-22.04-arm
            rust_target: aarch64-unknown-linux-musl
            extra_apt_packages: ""
            output_name: nodeagent-linux-arm64
            output_path: src/agent/nodeagent/target/aarch64-unknown-linux-musl/release/nodeagent
            asset_name: nodeagent-linux-arm64

    steps:
      - name: Checkout repository
        uses: actions/checkout@v6

      - name: Install build dependencies
        run: |
          sudo apt-get update -y
          sudo apt-get install -y \
            protobuf-compiler \
            libdbus-1-dev \
            pkg-config \
            build-essential

      - name: Install architecture specific dependencies
        if: matrix.extra_apt_packages != ''
        run: |
          sudo apt-get install -y ${{ matrix.extra_apt_packages }}

      - name: Set up Rust toolchain
        uses: dtolnay/rust-toolchain@stable
        with:
          targets: ${{ matrix.rust_target }}

      - name: Build nodeagent binary
        run: |
          cd src/agent/nodeagent
          cargo build --release --target "${{ matrix.rust_target }}"

      - name: Stage binary artifact
        run: |
          mkdir -p dist/binaries
          cp "${{ matrix.output_path }}" "dist/binaries/${{ matrix.output_name }}"
          chmod +x "dist/binaries/${{ matrix.output_name }}"

      - name: Upload workflow artifact
        uses: actions/upload-artifact@v7
        with:
          name: nodeagent-binary-${{ matrix.arch }}
          path: dist/binaries/${{ matrix.output_name }}

      - name: Upload binary to GitHub Release
        uses: svenstaro/upload-release-action@v2
        with:
          repo_token: ${{ secrets.GITHUB_TOKEN }}
          file: dist/binaries/${{ matrix.output_name }}
          asset_name: ${{ matrix.asset_name }}
          tag: ${{ github.ref }}

  upload-nodeagent-checksums:
    name: Upload nodeagent checksums
    runs-on: ubuntu-latest
    needs:
      - build-nodeagent

    steps:
      - name: Download nodeagent binary (amd64)
        uses: actions/download-artifact@v8
        with:
          name: nodeagent-binary-amd64
          path: dist/binaries/amd

      - name: Download nodeagent binary (arm64)
        uses: actions/download-artifact@v8
        with:
          name: nodeagent-binary-arm64
          path: dist/binaries/arm

      - name: Generate nodeagent checksum file
        shell: bash
        run: |
          sha256sum dist/binaries/amd/nodeagent-linux-amd64 > dist/binaries/amd/nodeagent-linux-amd64.sha256
          sha256sum dist/binaries/arm/nodeagent-linux-arm64 > dist/binaries/arm/nodeagent-linux-arm64.sha256
          cat dist/binaries/amd/nodeagent-linux-amd64.sha256 dist/binaries/arm/nodeagent-linux-arm64.sha256 > dist/binaries/SHA256SUMS-nodeagent

      - name: Upload nodeagent checksum file to release
        uses: svenstaro/upload-release-action@v2
        with:
          repo_token: ${{ secrets.GITHUB_TOKEN }}
          file: dist/binaries/SHA256SUMS-nodeagent
          asset_name: SHA256SUMS-nodeagent
          tag: ${{ github.ref }}

  build-and-push-container:
    name: Build and push container image (amd64/arm64)
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v6

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v4
        with:
          registry: ${{ env.CONTAINER_REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Normalize image repository to lowercase
        id: normalize-image
        shell: bash
        run: |
          image_repo="${IMAGE_NAME,,}"
          echo "image_repo=${image_repo}" >> "$GITHUB_OUTPUT"

      - name: Build and push multi-arch image
        uses: docker/build-push-action@v7
        with:
          context: .
          file: containers/Dockerfile
          platforms: linux/amd64,linux/arm64
          push: true
          build-args: |
            TARGETARCH
          tags: |
            ${{ env.CONTAINER_REGISTRY }}/${{ steps.normalize-image.outputs.image_repo }}:${{ github.ref_name }}
            ${{ env.CONTAINER_REGISTRY }}/${{ steps.normalize-image.outputs.image_repo }}:dev-latest