add experimental publish pipeline

2024-05-21 18:28:51 +02:00 · 2024-05-21 18:28:51 +02:00 · 6eacaee971
parent 4572ab3de1
commit 6eacaee971
1 changed files with 126 additions and 0 deletions
--- a/.forgejo/workflows/publish.yaml
+++ b/.forgejo/workflows/publish.yaml
@ -0,0 +1,126 @@
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Build/Publish XBPS
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - "srcpkgs/**"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build-and-publish:
+    name: Build and publish packages
+    runs-on: ubuntu-latest
+    if: "!contains(github.event.pull_request.title, '[ci skip]') && !contains(github.event.pull_request.body, '[ci skip]')"
+    env:
+      MAINTAINER: "Luca Bilke <luca@bil.ke>"
+      PATH: "/usr/libexec/chroot-git:/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/sbin:/usr/local/bin:/tmp/bin"
+      ARCH: "${{ matrix.config.arch }}"
+      BOOTSTRAP: "${{ matrix.config.host }}"
+      TEST: "${{ matrix.config.test }}"
+      HOSTREPO: /hostrepo
+    strategy:
+      fail-fast: false
+      matrix:
+        config:
+          - arch: x86_64
+            host: x86_64
+            libc: glibc
+            platform: linux/amd64
+            test: 1
+          - arch: i686
+            host: i686
+            libc: glibc
+            platform: linux/386
+            test: 1
+          - arch: aarch64
+            host: x86_64
+            libc: glibc
+            platform: linux/amd64
+            test: 0
+          - arch: armv7l
+            host: x86_64
+            libc: glibc
+            platform: linux/amd64
+            test: 0
+          - arch: x86_64-musl
+            host: x86_64-musl
+            libc: musl
+            platform: linux/amd64
+            test: 1
+          - arch: armv6l-musl
+            host: x86_64-musl
+            libc: musl
+            platform: linux/amd64
+            test: 0
+          - arch: aarch64-musl
+            host: x86_64-musl
+            libc: musl
+            platform: linux/amd64
+            test: 0
+    container:
+      image: ghcr.io/void-linux/void-buildroot-${{ matrix.config.libc }}:20231230R1
+    steps:
+      - name: Checkout
+        uses: https://code.forgejo.org/actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+        with:
+          submodules: true
+
+      - name: Get changed packages
+        id: changed
+        uses: https://github.com/tj-actions/changed-files@a29e8b565651ce417abb5db7164b4a2ad8b6155c # v44
+        with:
+          since_last_remote_commit: true
+
+      - name: Prepare container
+        if: ${{ steps.changed.outputs.all_changed_files != '' }}
+        run: |
+          # switch to repo-ci mirror
+          mkdir -p /etc/xbps.d && cp /usr/share/xbps.d/*-repository-*.conf /etc/xbps.d/
+          sed -i 's|repo-default|repo-ci|g' /etc/xbps.d/*-repository-*.conf
+          # Sync and upgrade once, assume error comes from xbps update
+          xbps-install -Syu || xbps-install -yu xbps
+          # Upgrade again (in case there was a xbps update)
+          xbps-install -yu
+
+      - name: Create hostrepo and prepare masterdir
+        if: ${{ steps.changed.outputs.all_changed_files != '' }}
+        run: |
+          ln -s "$(pwd)" /hostrepo &&
+          common/travis/set_mirror.sh &&
+          common/travis/prepare.sh &&
+          common/travis/fetch-xtools.sh
+          mkdir -p /hostdir/binpkgs
+          curl -so "/hostdir/binpkgs/${{ matrix.config.arch }}-repodata" "https://xbps.snaile.de/${{ matrix.config.arch }}-repodata" || true
+
+      - name: Build packages
+        if: ${{ steps.changed.outputs.all_changed_files != '' }}
+        run: |
+          (
+            here="$(pwd)"
+            cd /
+            "$here/common/travis/build.sh" "$BOOTSTRAP" "$ARCH" "$TEST"
+          )
+
+      - name: Sign packages
+        if: ${{ steps.changed.outputs.all_changed_files != '' }}
+        run: |
+          echo '${{ secrets.XBPS_SIGNING_KEY }}' >"/tmp/privkey.pem"
+
+          for package in ${{ steps.changed.outputs.all_changed_files }}; do
+            file=$(echo /hostdir/binpkgs/${package}-*.${{ matrix.config.arch }}.xbps | cut -d ' ' -f 1)
+            [ -r "$file" ]
+            XBPS_PASSPHRASE=${{ secrets.XBPS_SIGNING_PASSPHRASE }} xbps-rindex --privkey "/tmp/privkey.pem" --sign-pkg --signedby "${{ env.MAINTAINER }}" "$file"
+          done
+
+          rm /tmp/privkey.pem
+
+      - name: Upload packages
+        if: ${{ steps.changed.outputs.all_changed_files != '' }}
+        run: |
+          find /hostdir/binpkgs -type f -exec sh -c 'curl -X PUT --digest -u "${{ vars.XBPS_WEBDAV_USER }}:${{ secrets.XBPS_WEBDAV_KEY }}" -T "${1}" "https://xbps.snaile.de/$(basename $1)"' find-shell {} \;