update image refs #9
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: targets | |
| on: | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - build/** | |
| - image-ref/** | |
| jobs: | |
| image-ref-changes: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - id: filter | |
| uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 | |
| with: | |
| filters: | | |
| kernel: image-ref/kernel.txt | |
| ovmf: image-ref/ovmf.txt | |
| qemu: image-ref/qemu.txt | |
| outputs: | |
| kernel: ${{ steps.filter.outputs.kernel }} | |
| ovmf: ${{ steps.filter.outputs.ovmf }} | |
| qemu: ${{ steps.filter.outputs.qemu }} | |
| build-script-changes: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - id: filter | |
| uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 | |
| with: | |
| filters: | | |
| kernel: build/kernel.sh | |
| ovmf: build/ovmf.sh | |
| qemu: build/qemu.sh | |
| outputs: | |
| kernel: ${{ steps.filter.outputs.kernel }} | |
| ovmf: ${{ steps.filter.outputs.ovmf }} | |
| qemu: ${{ steps.filter.outputs.qemu }} | |
| kernel: | |
| runs-on: ubuntu-latest | |
| needs: [image-ref-changes, build-script-changes] | |
| if: needs.image-ref-changes.outputs.kernel == 'true' || needs.build-script-changes.outputs.kernel == 'true' | |
| strategy: | |
| matrix: | |
| include: | |
| - target: host | |
| upstream: AMDESE/linux | |
| ref: 05b10142ac6a1a3b02d4be018e119c2648d1da6c | |
| - target: guest | |
| upstream: AMDESE/linux | |
| ref: a38297e3fb012ddfa7ce0321a7e5a8daeb1872b6 | |
| steps: | |
| - name: Clone self | |
| uses: actions/checkout@v4 | |
| with: | |
| path: ${{ github.workspace }}/local | |
| - name: Clone upstream | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: ${{ matrix.upstream }} | |
| ref: ${{ matrix.ref }} | |
| path: ${{ github.workspace }}/upstream | |
| - name: Set builder from file | |
| run: echo "BUILDER_REF=$(cat ${{ github.workspace }}/local/image-ref/kernel.txt)" >> $GITHUB_ENV | |
| - name: Login to container registry | |
| run: | | |
| echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io \ | |
| -u ${{ github.actor }} \ | |
| --password-stdin | |
| - name: Build upstream | |
| run: | | |
| docker run --rm \ | |
| -v ${{ github.workspace }}/local:/local \ | |
| -v ${{ github.workspace }}/upstream:/upstream -w /upstream \ | |
| -v ${{ github.workspace }}/out:/out \ | |
| -e CONFIG_PATH="/local/cfg/.config" \ | |
| -e OUT_DIR="/out" \ | |
| -e LOCALVERSION="-snp-${{ matrix.target }}-$(echo ${{ matrix.ref }} | cut -c -7)" \ | |
| -e KBUILD_BUILD_TIMESTAMP='1970-01-01' \ | |
| -e KBUILD_BUILD_HOST='host' \ | |
| -e SOURCE_DATE_EPOCH='0' \ | |
| ghcr.io/dfinity/kernel-builder:${{ env.BUILDER_REF }} \ | |
| bash /local/build/kernel.sh | |
| - name: Publish | |
| uses: softprops/action-gh-release@v1 | |
| with: | |
| token: ${{ secrets.RELEASE_ACCESS_TOKEN }} | |
| tag_name: ${{ matrix.upstream }}-${{ matrix.ref }} | |
| files: | | |
| ${{ github.workspace }}/out/* | |
| body: | | |
| | Name | Value | | |
| | ------------- | ------------- | | |
| | Builder | `ghcr.io/dfinity/kernel-builder:${{ env.BUILDER_REF }}` | | |
| | Upstream | [`${{ matrix.upstream }}:${{ matrix.ref }}`](https://github.com/${{ matrix.upstream }}/tree/${{ matrix.ref }}) | | |
| ovmf: | |
| runs-on: ubuntu-latest | |
| needs: [image-ref-changes, build-script-changes] | |
| if: needs.image-ref-changes.outputs.ovmf == 'true' || needs.build-script-changes.outputs.ovmf == 'true' | |
| strategy: | |
| matrix: | |
| include: | |
| - upstream: AMDESE/ovmf | |
| ref: 4b6ee06a090d956f80b4a92fb9bf03098a372f39 | |
| steps: | |
| - name: Clone self | |
| uses: actions/checkout@v4 | |
| with: | |
| path: ${{ github.workspace }}/local | |
| - name: Clone upstream | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: ${{ matrix.upstream }} | |
| ref: ${{ matrix.ref }} | |
| path: ${{ github.workspace }}/upstream | |
| submodules: true | |
| - name: Set builder from file | |
| run: echo "BUILDER_REF=$(cat ${{ github.workspace }}/local/image-ref/ovmf.txt)" >> $GITHUB_ENV | |
| - name: Login to container registry | |
| run: | | |
| echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io \ | |
| -u ${{ github.actor }} \ | |
| --password-stdin | |
| - name: Build upstream | |
| run: | | |
| docker run --rm \ | |
| -v ${{ github.workspace }}/local:/local \ | |
| -v ${{ github.workspace }}/upstream:/upstream -w /upstream \ | |
| -v ${{ github.workspace }}/out:/out \ | |
| -e SOURCE_DIR="/upstream" \ | |
| -e OUT_DIR="/out" \ | |
| ghcr.io/dfinity/ovmf-builder:${{ env.BUILDER_REF }} \ | |
| bash /local/build/ovmf.sh | |
| - name: Publish | |
| uses: softprops/action-gh-release@v1 | |
| with: | |
| token: ${{ secrets.RELEASE_ACCESS_TOKEN }} | |
| tag_name: ${{ matrix.upstream }}-${{ matrix.ref }} | |
| files: | | |
| ${{ github.workspace }}/out/OVMF.fd | |
| body: | | |
| | Name | Value | | |
| | ------------- | ------------- | | |
| | Builder | `ghcr.io/dfinity/ovmf-builder:${{ env.BUILDER_REF }}` | | |
| | Upstream | [`${{ matrix.upstream }}:${{ matrix.ref }}`](https://github.com/${{ matrix.upstream }}/tree/${{ matrix.ref }}) | | |
| qemu: | |
| runs-on: ubuntu-latest | |
| needs: [image-ref-changes, build-script-changes] | |
| if: needs.image-ref-changes.outputs.qemu == 'true' || needs.build-script-changes.outputs.qemu == 'true' | |
| strategy: | |
| matrix: | |
| include: | |
| - upstream: AMDESE/qemu | |
| ref: fb924a5139bff1d31520e007ef97b616af1e22a1 | |
| steps: | |
| - name: Clone self | |
| uses: actions/checkout@v4 | |
| with: | |
| path: ${{ github.workspace }}/local | |
| - name: Clone upstream | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: ${{ matrix.upstream }} | |
| ref: ${{ matrix.ref }} | |
| path: ${{ github.workspace }}/upstream | |
| submodules: true | |
| - name: Set builder from file | |
| run: echo "BUILDER_REF=$(cat ${{ github.workspace }}/local/image-ref/qemu.txt)" >> $GITHUB_ENV | |
| - name: Login to container registry | |
| run: | | |
| echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io \ | |
| -u ${{ github.actor }} \ | |
| --password-stdin | |
| - name: Build upstream | |
| run: | | |
| docker run --rm \ | |
| -v ${{ github.workspace }}/local:/local \ | |
| -v ${{ github.workspace }}/upstream:/upstream \ | |
| -v ${{ github.workspace }}/build:/build -w /build \ | |
| -e SOURCE_DIR="/upstream" \ | |
| -e SOURCE_DATE_EPOCH=0 \ | |
| ghcr.io/dfinity/qemu-builder:${{ env.BUILDER_REF }} \ | |
| bash /local/build/qemu.sh | |
| - name: Publish | |
| uses: softprops/action-gh-release@v1 | |
| with: | |
| token: ${{ secrets.RELEASE_ACCESS_TOKEN }} | |
| tag_name: ${{ matrix.upstream }}-${{ matrix.ref }} | |
| files: | | |
| ${{ github.workspace }}/build/qemu_*.deb | |
| body: | | |
| | Name | Value | | |
| | ------------- | ------------- | | |
| | Builder | `ghcr.io/dfinity/qemu-builder:${{ env.BUILDER_REF }}` | | |
| | Upstream | [`${{ matrix.upstream }}:${{ matrix.ref }}`](https://github.com/${{ matrix.upstream }}/tree/${{ matrix.ref }}) | |