build.yml

name: build

on:
  push:
    tags: ["v*"]
  pull_request:
    branches: ["main"]
  workflow_dispatch:

env:
  CARGO_TERM_COLOR: always

jobs:
  lint-audit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: EmbarkStudios/cargo-deny-action@v2
        with:
          command: check licenses

  test:
    needs: lint-audit
    name: cargo test (unit + integration)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - name: Rust Cache
        uses: swatinem/rust-cache@v2
        with:
          key: test-ubuntu
      - name: Check formatting
        run: cargo fmt --check
      - name: Lint with clippy
        run: cargo clippy --all-targets -- -D warnings
      - name: Run unit tests
        run: cargo test --lib
      - name: Run integration tests
        run: cargo test --test bypass --test dns --test encrypted_tunnel --test plain_tunnel --test rotation

  linux-gnu:
    needs: [lint-audit, test]
    name: Build Linux (GNU)
    runs-on: ubuntu-latest
    strategy:
      matrix:
        include:
          - target: x86_64
            target_triple: x86_64-unknown-linux-gnu
            apt_packages: ""
            custom_env:
              RUSTFLAGS: -C target-cpu=x86-64-v3
          - target: arm64
            target_triple: aarch64-unknown-linux-gnu
            apt_packages: crossbuild-essential-arm64
            custom_env:
              CFLAGS_aarch64_unknown_linux_gnu: -D__ARM_ARCH=8
              CC: aarch64-linux-gnu-gcc
              CXX: aarch64-linux-gnu-g++
              CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER: aarch64-linux-gnu-g++
              RUSTC_LINKER: aarch64-linux-gnu-g++
    steps:
      - uses: actions/checkout@v6
      - name: Rust Cache
        uses: swatinem/rust-cache@v2
        with:
          key: ${{ matrix.target_triple }}
      - name: Install base dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y build-essential cmake perl pkg-config libclang-dev
      - name: Install target dependencies
        if: ${{ matrix.apt_packages != '' }}
        run: sudo apt-get install -y ${{ matrix.apt_packages }}
      - name: Add Rust target
        run: rustup target add ${{ matrix.target_triple }}
      - name: Build
        env: ${{ matrix.custom_env }}
        run: cargo build --release --target ${{ matrix.target_triple }}
      - name: Archive
        run: |
          mkdir -p dist
          cp target/${{ matrix.target_triple }}/release/client dist/
          cp target/${{ matrix.target_triple }}/release/server dist/
      - name: Upload
        uses: actions/upload-artifact@v6
        with:
          name: httproxy-linux-${{ matrix.target }}
          path: dist/

  linux-musl:
    needs: [lint-audit, test]
    name: Build Linux (musl)
    runs-on: ubuntu-latest
    strategy:
      matrix:
        include:
          - target: x86_64
            target_triple: x86_64-unknown-linux-musl
            package: x86_64-linux-musl-cross
            custom_env:
              CC: x86_64-linux-musl-gcc
              CXX: x86_64-linux-musl-g++
              CARGO_TARGET_X86_64_UNKNOWN_LINUX_MUSL_LINKER: x86_64-linux-musl-g++
              RUSTC_LINKER: x86_64-linux-musl-g++
              RUSTFLAGS: -C target-cpu=x86-64-v3
          - target: arm64
            target_triple: aarch64-unknown-linux-musl
            package: aarch64-linux-musl-cross
            custom_env:
              CC: aarch64-linux-musl-gcc
              CXX: aarch64-linux-musl-g++
              CARGO_TARGET_AARCH64_UNKNOWN_LINUX_MUSL_LINKER: aarch64-linux-musl-g++
              RUSTC_LINKER: aarch64-linux-musl-g++
              BINDGEN_EXTRA_CLANG_ARGS: "--sysroot=/opt/aarch64-linux-musl-cross/aarch64-linux-musl"
    steps:
      - uses: actions/checkout@v6
      - name: Rust Cache
        uses: swatinem/rust-cache@v2
        with:
          key: ${{ matrix.target_triple }}
      - name: Install base dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y build-essential cmake perl pkg-config libclang-dev musl-tools
      - name: Prepare musl cross-compiler
        run: |
          wget https://github.com/musl-cc/musl.cc/releases/latest/download/${{ matrix.package }}.tgz
          tar xzf ${{ matrix.package }}.tgz -C /opt
          echo "/opt/${{ matrix.package }}/bin/" >> $GITHUB_PATH
      - name: Add Rust target
        run: rustup target add ${{ matrix.target_triple }}
      - name: Build
        env: ${{ matrix.custom_env }}
        run: cargo build --release --target ${{ matrix.target_triple }}
      - name: Archive
        run: |
          mkdir -p dist
          cp target/${{ matrix.target_triple }}/release/client dist/
          cp target/${{ matrix.target_triple }}/release/server dist/
      - name: Upload
        uses: actions/upload-artifact@v6
        with:
          name: httproxy-linux-${{ matrix.target }}-musl
          path: dist/

  windows:
    needs: [lint-audit, test]
    name: Build Windows
    runs-on: windows-latest
    strategy:
      matrix:
        include:
          - target: x86_64
            target_triple: x86_64-pc-windows-msvc
            custom_env:
              RUSTFLAGS: -C target-cpu=x86-64-v3
          - target: arm64
            target_triple: aarch64-pc-windows-msvc
    steps:
      - uses: actions/checkout@v6
      - name: Rust Cache
        uses: swatinem/rust-cache@v2
        with:
          key: ${{ matrix.target_triple }}
      - name: Install dependencies
        run: choco install cmake strawberryperl pkgconfiglite llvm nasm -y
        shell: cmd
      - name: Build
        env:
          RUSTFLAGS: "-C target-feature=+crt-static"
        run: |
          rustup target add ${{ matrix.target_triple }}
          cargo build --release --target ${{ matrix.target_triple }}
      - name: Archive
        shell: pwsh
        run: |
          New-Item -ItemType Directory -Force -Path dist
          Copy-Item "target\${{ matrix.target_triple }}\release\client.exe" -Destination dist\
          Copy-Item "target\${{ matrix.target_triple }}\release\server.exe" -Destination dist\
      - name: Upload
        uses: actions/upload-artifact@v6
        with:
          name: httproxy-windows-${{ matrix.target }}
          path: dist/

  darwin:
    needs: [lint-audit, test]
    name: Build Darwin
    runs-on: macos-latest
    strategy:
      matrix:
        include:
          - target: x86_64
            target_triple: x86_64-apple-darwin
          - target: arm64
            target_triple: aarch64-apple-darwin
    steps:
      - uses: actions/checkout@v6
      - name: Rust Cache
        uses: swatinem/rust-cache@v2
        with:
          key: ${{ matrix.target_triple }}
      - name: Install dependencies
        run: brew install llvm
      - name: Add Rust target
        run: rustup target add ${{ matrix.target_triple }}
      - name: Build
        run: cargo build --release --target ${{ matrix.target_triple }}
      - name: Archive
        run: |
          mkdir -p dist
          cp target/${{ matrix.target_triple }}/release/client dist/
          cp target/${{ matrix.target_triple }}/release/server dist/
      - name: Upload
        uses: actions/upload-artifact@v6
        with:
          name: httproxy-darwin-${{ matrix.target }}
          path: dist/

  android:
    needs: [lint-audit, test]
    name: Build Android
    runs-on: ubuntu-latest
    strategy:
      matrix:
        include:
          - target: x86_64
            target_triple: x86_64-linux-android
          - target: arm64
            target_triple: aarch64-linux-android
    steps:
      - uses: actions/checkout@v6
      - name: Rust Cache
        uses: swatinem/rust-cache@v2
        with:
          key: ${{ matrix.target_triple }}
      - name: Install Android Tools
        run: cargo install cargo-ndk
      - name: Add Rust target
        run: rustup target add ${{ matrix.target_triple }}
      - name: Build
        run: cargo ndk --target ${{ matrix.target_triple }} --platform 28 build --release
      - name: Archive
        run: |
          mkdir -p dist
          cp target/${{ matrix.target_triple }}/release/client dist/
          cp target/${{ matrix.target_triple }}/release/server dist/
      - name: Upload
        uses: actions/upload-artifact@v6
        with:
          name: httproxy-android-${{ matrix.target }}
          path: dist/

  create-release:
    needs: [linux-gnu, linux-musl, windows, darwin, android]
    if: startsWith(github.ref, 'refs/tags/')
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v6
      - name: Generate Third-Party Licenses
        run: |
          cargo install cargo-bundle-licenses
          cargo bundle-licenses --format yaml --output THIRD-PARTY-LICENSES.txt
      - name: Download All Artifacts
        uses: actions/download-artifact@v8
        with:
          path: artifacts
      - name: Final Packaging
        run: |
          mkdir final_dist
          for dir in artifacts/*/; do
            name=$(basename "$dir")
            zip -j "final_dist/${name}.zip" "$dir"/* CONFIGURATION.md README.md LICENSE THIRD-PARTY-LICENSES.txt
          done
          cd final_dist
          sha256sum *.zip > sha256sums.txt
      - name: Create GitHub Release
        uses: softprops/action-gh-release@v2
        with:
          files: |
            final_dist/*.zip
            final_dist/sha256sums.txt
          generate_release_notes: true