William Gill
8814a6e239
build / build (push) Has been cancelled
runs-on is now ubuntu-latest (any Linux runner with Docker; toolchain comes from the golang container). The workflow builds one version per run, triggered by a v* tag push or manual workflow_dispatch with a tag input - no scheduled builds. Removes the static matrix (and ci/matrix.sh) and hardens clone-source.sh tag detection to use GITHUB_REF. Docs/README updated. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
87 lines
3.3 KiB
YAML
87 lines
3.3 KiB
YAML
name: build
|
|
|
|
# One version per run. Two ways in, no cron:
|
|
# - push a vX.Y.Z tag to this repo -> builds upstream versitygw vX.Y.Z
|
|
# - run manually (workflow_dispatch) -> builds the tag you enter
|
|
on:
|
|
push:
|
|
tags:
|
|
- 'v*'
|
|
workflow_dispatch:
|
|
inputs:
|
|
tag:
|
|
description: "Upstream versitygw tag to build (e.g. v1.5.0)"
|
|
required: true
|
|
|
|
jobs:
|
|
build:
|
|
# Any Linux runner — the Go toolchain comes from the golang
|
|
# container below, so the runner only needs Docker.
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: golang:latest
|
|
options: --user 0:0
|
|
|
|
steps:
|
|
- name: Checkout CI scripts + patches
|
|
env:
|
|
# Stored Gitea PAT. read:repository is enough to clone this
|
|
# repo; the publish step needs write:repository.
|
|
GITEA_TOKEN: ${{ secrets.TOKEN_GITEA }}
|
|
run: |
|
|
set -eu
|
|
apt-get update -y >/dev/null
|
|
apt-get install -y --no-install-recommends git curl jq ca-certificates >/dev/null
|
|
if [ -z "${GITEA_TOKEN:-}" ]; then
|
|
echo "ERROR: secrets.TOKEN_GITEA is empty or not visible to this run." >&2
|
|
echo "Create it under: Repo -> Settings -> Actions -> Secrets" >&2
|
|
exit 1
|
|
fi
|
|
SERVER_HOST="${GITHUB_SERVER_URL#http://}"; SERVER_HOST="${SERVER_HOST#https://}"
|
|
SCHEME="${GITHUB_SERVER_URL%%://*}"
|
|
git config --global \
|
|
url."${SCHEME}://x-access-token:${GITEA_TOKEN}@${SERVER_HOST}/".insteadOf \
|
|
"${SCHEME}://${SERVER_HOST}/"
|
|
# On a tag push GITHUB_REF_NAME is the tag (carries the matching
|
|
# patches/<tag>/); on dispatch it's the default branch.
|
|
git clone --depth 1 --branch "${GITHUB_REF_NAME:-main}" \
|
|
"${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" /tmp/ci-repo
|
|
cp -a /tmp/ci-repo/ci /tmp/ci-repo/patches .
|
|
chmod +x ci/*.sh
|
|
|
|
- name: Install GoReleaser
|
|
run: |
|
|
set -eu
|
|
curl -fsSL https://github.com/goreleaser/goreleaser/releases/latest/download/goreleaser_Linux_x86_64.tar.gz \
|
|
| tar -xz -C /usr/local/bin goreleaser
|
|
goreleaser --version | head -1
|
|
|
|
- name: Clone upstream versitygw
|
|
env:
|
|
VGW_REPO_URL: ${{ vars.VGW_REPO_URL || 'https://github.com/versity/versitygw.git' }}
|
|
# Empty on a tag push -> clone-source.sh falls back to the
|
|
# pushed tag. Set on dispatch -> builds exactly that tag.
|
|
VGW_TAG: ${{ inputs.tag }}
|
|
run: bash ci/clone-source.sh
|
|
|
|
# apply / build / publish read VGW_TAG, VGW_SRC_DIR and VGW_DIST_DIR
|
|
# from $GITHUB_ENV, which clone-source.sh / build.sh populate.
|
|
- name: Apply de-brand patches
|
|
run: bash ci/apply-patches.sh
|
|
|
|
- name: Build release artifacts
|
|
run: bash ci/build.sh
|
|
|
|
- name: Publish to Gitea release
|
|
env:
|
|
GITEA_API_URL: ${{ github.server_url }}/api/v1
|
|
GITEA_OWNER: ${{ github.repository_owner }}
|
|
GITEA_REPO: ${{ github.event.repository.name }}
|
|
# Needs write:repository to create releases + upload assets.
|
|
GITEA_TOKEN: ${{ secrets.TOKEN_GITEA }}
|
|
run: bash ci/publish-release.sh
|
|
|
|
- name: Summary
|
|
if: always()
|
|
run: ls -1 src/dist/*.tar.gz src/dist/*.deb src/dist/*.rpm 2>/dev/null || true
|