Bendik Aagaard LynghaugandClaude Fable 5
76f5b39d5b
ci / quality (push) Successful in 2m17s
Both v0.1.0 build jobs failed: packaging used brace expansion under
plain sh (literal '{bin,systemd/user,man}' directory), and the aarch64
job lacked libc6-dev-arm64-cross because --no-install-recommends skips
it, so blake3's NEON unit compiled against host headers.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y42TyF8Zu7NGRR2893vNcZ
99 lines
4.0 KiB
YAML
99 lines
4.0 KiB
YAML
# Release pipeline: a `vX.Y.Z` tag (pushed by `cargo release`, see
|
|
# release.toml) builds distribution tarballs and attaches them to a
|
|
# Gitea release.
|
|
#
|
|
# Each tarball contains the two binaries (stripped, release profile),
|
|
# the systemd units, the example config, rendered man pages, and the
|
|
# license/readme — everything a distro package or a hand install needs.
|
|
name: release
|
|
|
|
on:
|
|
push:
|
|
tags: ["v*"]
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
container: rust:1
|
|
strategy:
|
|
matrix:
|
|
target: [x86_64-unknown-linux-gnu, aarch64-unknown-linux-gnu]
|
|
steps:
|
|
# Not the checkout action: it runs on node, which the rust:1 job
|
|
# container doesn't have and this runner doesn't inject (the v5
|
|
# run died with 'exec: "node": not found'). Plain git needs
|
|
# neither, and the token URL works against the private repo.
|
|
- name: checkout
|
|
run: |
|
|
git init -q .
|
|
git fetch --depth 1 \
|
|
"https://gitea:${{ secrets.GITHUB_TOKEN }}@${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" \
|
|
"$GITHUB_SHA"
|
|
git checkout -q FETCH_HEAD
|
|
|
|
- name: install tooling
|
|
run: |
|
|
apt-get update
|
|
apt-get install -y --no-install-recommends scdoc jq
|
|
if [ "${{ matrix.target }}" = "aarch64-unknown-linux-gnu" ]; then
|
|
# libc6-dev-arm64-cross is a Recommends of the cross gcc, so
|
|
# --no-install-recommends skips it — without it cc-rs builds
|
|
# (blake3's NEON unit) fall back to host headers and die on
|
|
# bits/wordsize.h.
|
|
apt-get install -y --no-install-recommends \
|
|
gcc-aarch64-linux-gnu libc6-dev-arm64-cross
|
|
fi
|
|
rustup target add ${{ matrix.target }}
|
|
|
|
- name: build
|
|
env:
|
|
CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER: aarch64-linux-gnu-gcc
|
|
run: |
|
|
cargo build --workspace --release --target ${{ matrix.target }}
|
|
|
|
- name: package
|
|
run: |
|
|
VERSION="${GITHUB_REF_NAME#v}"
|
|
PKG="varde-${VERSION}-${{ matrix.target }}"
|
|
# Steps run under plain `sh`, which has no brace expansion —
|
|
# spell the directories out.
|
|
mkdir -p "$PKG/bin" "$PKG/systemd/user" "$PKG/man"
|
|
cp "target/${{ matrix.target }}/release/varde-daemon" \
|
|
"target/${{ matrix.target }}/release/varde-ctl" "$PKG/bin/"
|
|
# Cross-strip is unavailable for the foreign target; native
|
|
# strip handles the host one.
|
|
if [ "${{ matrix.target }}" = "x86_64-unknown-linux-gnu" ]; then
|
|
strip "$PKG"/bin/*
|
|
else
|
|
aarch64-linux-gnu-strip "$PKG"/bin/*
|
|
fi
|
|
cp dist/varde.service dist/varde.socket "$PKG/systemd/"
|
|
cp dist/user/varde.service dist/user/varde.socket "$PKG/systemd/user/"
|
|
cp dist/config.toml "$PKG/config.toml.example"
|
|
scdoc < dist/varde.8.scd > "$PKG/man/varde.8"
|
|
scdoc < dist/varde-ctl.1.scd > "$PKG/man/varde-ctl.1"
|
|
cp README.md LICENSE-MIT LICENSE-APACHE "$PKG/"
|
|
tar czf "$PKG.tar.gz" "$PKG"
|
|
sha256sum "$PKG.tar.gz" > "$PKG.tar.gz.sha256"
|
|
|
|
- name: create release and upload
|
|
env:
|
|
TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
API="${GITHUB_SERVER_URL}/api/v1/repos/${GITHUB_REPOSITORY}"
|
|
# Create the release if this matrix job is first; 409 = the
|
|
# other job already made it.
|
|
curl -sf -X POST "$API/releases" \
|
|
-H "Authorization: token $TOKEN" \
|
|
-H "Content-Type: application/json" \
|
|
-d "{\"tag_name\": \"${GITHUB_REF_NAME}\", \"name\": \"${GITHUB_REF_NAME}\", \"draft\": false}" \
|
|
|| true
|
|
RELEASE_ID=$(curl -sf "$API/releases/tags/${GITHUB_REF_NAME}" \
|
|
-H "Authorization: token $TOKEN" | jq .id)
|
|
for f in varde-*.tar.gz varde-*.tar.gz.sha256; do
|
|
curl -sf -X POST \
|
|
"$API/releases/${RELEASE_ID}/assets?name=$(basename "$f")" \
|
|
-H "Authorization: token $TOKEN" \
|
|
-F "attachment=@$f"
|
|
done
|