v2.16.0 #99
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
on: | |
release: | |
types: | |
- published | |
workflow_dispatch: | |
name: Publish binaries | |
env: | |
DISABLE_VERSION_CHECK: true | |
jobs: | |
validate-version: | |
name: Validate release (${{ github.event.release.tag_name }}) | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v3 | |
- name: validate version | |
if: github.event_name == 'release' | |
run: | | |
# Extract the version from the Cargo.toml | |
FP_VERSION=$(cat "Cargo.toml" | grep '^version' | awk '{ split($0,version,"=") ; gsub(/[\ \"]/, "", version[2]) ; print version[2] }') | |
if [ "v${FP_VERSION}" != "${{ github.event.release.tag_name }}" ]; then | |
echo "::error file=Cargo.toml::Version set in Cargo.toml (v${FP_VERSION}) does not match release version (${{ github.event.release.tag_name }})" | |
exit 1 | |
fi | |
test-release: | |
needs: validate-version | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: de-vri-es/setup-git-credentials@v2 | |
with: | |
credentials: "https://fiberplanebot:${{ secrets.PRIVATE_GITHUB_TOKEN }}@github.com/" | |
- uses: Swatinem/rust-cache@v2 | |
- name: Run tests | |
run: cargo test --release | |
build-upload-assets: | |
name: Build assets for ${{ matrix.build }} (${{ github.event.release.tag_name }}) | |
needs: test-release | |
runs-on: ${{ matrix.os }} | |
env: | |
CARGO: cargo | |
TARGET_FLAGS: "" | |
TARGET_DIR: ./target | |
RUST_BACKTRACE: 1 | |
strategy: | |
matrix: | |
build: [linux_x86_64, linux_aarch64, macos_x86_64, macos_aarch64] | |
include: | |
- build: linux_x86_64 | |
os: ubuntu-latest | |
rust: stable | |
target: x86_64-unknown-linux-gnu | |
- build: linux_aarch64 | |
os: ubuntu-latest | |
rust: stable | |
target: aarch64-unknown-linux-gnu | |
- build: macos_x86_64 | |
os: macOS-11 | |
rust: stable | |
target: x86_64-apple-darwin | |
- build: macos_aarch64 | |
os: macOS-11 | |
rust: stable | |
target: aarch64-apple-darwin | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: de-vri-es/setup-git-credentials@v2 | |
with: | |
credentials: "https://fiberplanebot:${{ secrets.PRIVATE_GITHUB_TOKEN }}@github.com/" | |
- name: cargo fetch | |
run: cargo fetch --target ${{ matrix.target }} | |
- name: Install Rust | |
uses: actions-rust-lang/setup-rust-toolchain@v1 | |
with: | |
toolchain: ${{ matrix.rust }} | |
profile: minimal | |
override: true | |
target: ${{ matrix.target }} | |
- name: Use Cross | |
run: | | |
cargo install cross | |
echo "CARGO=cross" >> $GITHUB_ENV | |
echo "TARGET_FLAGS=--target ${{ matrix.target }}" >> $GITHUB_ENV | |
echo "TARGET_DIR=./target/${{ matrix.target }}" >> $GITHUB_ENV | |
- name: Show command used for Cargo | |
run: | | |
echo "cargo command is: ${{ env.CARGO }}" | |
echo "target flag is: ${{ env.TARGET_FLAGS }}" | |
echo "target dir is: ${{ env.TARGET_DIR }}" | |
- name: Build release binary | |
run: ${{ env.CARGO }} build --verbose --release ${{ env.TARGET_FLAGS }} | |
- name: Strip release binary (linux and macos) | |
if: matrix.build == 'linux_x86_64' || matrix.build == 'macos_x86_64' | |
run: strip "target/${{ matrix.target }}/release/fp" | |
- name: Prepare artifact | |
run: | | |
mkdir -p /tmp/artifact/ | |
cp "target/${{ matrix.target }}/release/fp" /tmp/artifact/ | |
# We only run x86_64 binaries because this is the platform github runners use | |
- name: Release version information | |
if: matrix.build == 'linux_x86_64' || matrix.build == 'macos_x86_64' | |
run: | | |
target/${{ matrix.target }}/release/fp version -o verbose | |
target/${{ matrix.target }}/release/fp version -o json > /tmp/artifact/manifest.json | |
# - name: Strip release binary (arm) | |
# if: matrix.build == 'macos_aarch64' | |
# run: | | |
# docker run --rm -v \ | |
# "$PWD/target:/target:Z" \ | |
# rustembedded/cross:arm-unknown-linux-gnueabihf \ | |
# arm-linux-gnueabihf-strip \ | |
# /target/arm-unknown-linux-gnueabihf/release/rg | |
- name: Upload artifact | |
uses: actions/upload-artifact@v3 | |
with: | |
name: ${{ matrix.target }} | |
path: /tmp/artifact/ | |
if-no-files-found: error | |
retention-days: 1 | |
publish-artifacts: | |
name: Publish artifacts to S3 GitHub build artifact (${{ github.event.release.tag_name }}) | |
runs-on: ubuntu-latest | |
needs: build-upload-assets | |
permissions: | |
id-token: write | |
contents: read | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: actions/download-artifact@v3 | |
with: | |
path: artifacts | |
- name: Create SHA256 sums for each artifact | |
run: | | |
for dir in artifacts/*/; do | |
pushd "$dir" | |
sha256sum * > checksum.sha256 | |
popd | |
done | |
- name: Prepare artifacts | |
if: github.event_name == 'release' | |
run: | | |
echo "${{ github.event.release.tag_name }}" | cut -c2- > artifacts/version | |
- name: Configure AWS Credentials | |
if: github.event_name == 'release' | |
uses: aws-actions/configure-aws-credentials@v2 | |
with: | |
aws-region: eu-central-1 | |
role-to-assume: arn:aws:iam::901443922744:role/github_actions | |
- name: Generate fp reference | |
run: | | |
chmod u+x artifacts/x86_64-unknown-linux-gnu/fp | |
artifacts/x86_64-unknown-linux-gnu/fp markdown > artifacts/reference.md | |
- name: Sync fp to S3 | |
if: github.event_name == 'release' | |
run: | | |
aws s3 sync \ | |
--acl public-read \ | |
--delete \ | |
artifacts/ \ | |
s3://fp.dev/fp/${{ github.event.release.tag_name }}/ | |
aws s3 sync \ | |
--acl public-read \ | |
--delete \ | |
artifacts/ \ | |
s3://fp.dev/fp/latest | |
- name: Invalidate latest path on CloudFront | |
if: github.event_name == 'release' | |
run: | | |
aws cloudfront create-invalidation \ | |
--distribution-id "${{ secrets.CF_BUILDS_ID }}" \ | |
--paths '/fp/latest*' | |
- name: Append front-matter to reference | |
run: cat files/frontmatter.txt artifacts/reference.md > readme_reference.md | |
- name: Sync fp reference to ReadMe | |
uses: readmeio/rdme@v8 | |
env: | |
RDME_API_KEY: ${{ secrets.README_API_KEY }} | |
with: | |
rdme: docs readme_reference.md |