e2c6452e4f
RC sign steps read ${VERSION} from the environment, but prepare only set
it locally. Export it via GITHUB_ENV like dev-bakery.yml. Drop paths:
filters on tag-triggered rc workflows (they pointed at the old beta-*.yml
names and can skip an RC publish when the tag diff misses those paths);
the job if: contains -rc. is the real gate. Skip -rc. tags in package.yml
because PKGBUILD pkgver cannot contain a hyphen. Rebuild bakery on
bread-utils changes (path dependency).
43 lines
1.9 KiB
YAML
43 lines
1.9 KiB
YAML
name: Build and publish package
|
|
|
|
on:
|
|
push:
|
|
tags: ['v*']
|
|
|
|
jobs:
|
|
package:
|
|
# PKGBUILD pkgver cannot contain `-`; skip RC tags the same way
|
|
# release-bakery.yml does.
|
|
if: ${{ !contains(github.ref_name, '-rc.') }}
|
|
runs-on: [self-hosted, hestia]
|
|
container:
|
|
image: archlinux:latest
|
|
steps:
|
|
# Note: no actions/checkout — the archlinux image has no Node, which JS
|
|
# actions require. Everything runs as shell steps and clones manually.
|
|
- name: Build and publish
|
|
env:
|
|
PUBLISH_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
|
|
run: |
|
|
set -euo pipefail
|
|
VERSION="${GITHUB_REF_NAME#v}"
|
|
pacman -Syu --noconfirm base-devel git rust cargo
|
|
useradd -m builder
|
|
git config --global --add safe.directory '*'
|
|
git clone --branch "${GITHUB_REF_NAME}" --depth 1 \
|
|
"https://git.breadway.dev/${GITHUB_REPOSITORY}.git" /home/builder/src
|
|
cd /home/builder/src
|
|
git archive --format=tar.gz --prefix="bakery-${VERSION}/" HEAD \
|
|
> packaging/arch/bakery-${VERSION}.tar.gz
|
|
SHA=$(sha256sum packaging/arch/bakery-${VERSION}.tar.gz | awk '{print $1}')
|
|
sed -i "s/^pkgver=.*/pkgver=${VERSION}/" packaging/arch/PKGBUILD
|
|
sed -i "s/^sha256sums=.*/sha256sums=('${SHA}')/" packaging/arch/PKGBUILD
|
|
chown -R builder:builder /home/builder/src
|
|
# --nocheck: packaging builds the artifact; tests belong in a CI job.
|
|
su builder -c "cd /home/builder/src/packaging/arch && makepkg -f --noconfirm --nocheck"
|
|
PKG=$(find /home/builder/src/packaging/arch -name '*.pkg.tar.zst' | head -1)
|
|
curl -fsS -X PUT \
|
|
-H "Authorization: token ${PUBLISH_TOKEN}" \
|
|
-H "Content-Type: application/octet-stream" \
|
|
--data-binary "@${PKG}" \
|
|
"https://git.breadway.dev/api/packages/Breadway/arch/os"
|