From d615f394c88bdafacdf3020a66a966b7b9c7e2c3 Mon Sep 17 00:00:00 2001
From: "Sean T. Allen" <sean@seantallen.com>
Date: Sun, 13 Oct 2024 20:50:10 +0000
Subject: [PATCH] Add LibreSSL 3.9.2 builder

---
 .github/workflows/linux-builder-update.yml    | 31 +++++++++++++++++++
 .github/workflows/pr.yml                      |  8 +++++
 .../Dockerfile                                | 11 +++++++
 .../README.md                                 |  3 ++
 .../build-and-push.bash                       | 29 +++++++++++++++++
 5 files changed, 82 insertions(+)
 create mode 100644 x86-64-unknown-linux-builder-with-libressl-3.9.2/Dockerfile
 create mode 100644 x86-64-unknown-linux-builder-with-libressl-3.9.2/README.md
 create mode 100644 x86-64-unknown-linux-builder-with-libressl-3.9.2/build-and-push.bash

diff --git a/.github/workflows/linux-builder-update.yml b/.github/workflows/linux-builder-update.yml
index 47cbc49..7f7ce7d 100644
--- a/.github/workflows/linux-builder-update.yml
+++ b/.github/workflows/linux-builder-update.yml
@@ -91,6 +91,35 @@ jobs:
           topic: ${{ github.repository }} scheduled job failure
           content: ${{ github.server_url}}/${{ github.repository }}/actions/runs/${{ github.run_id }} failed.
 
+  x86-64-unknown-linux-builder-with-libressl_3_9_2:
+    needs:
+      - x86-64-unknown-linux-builder
+
+    name: Update x86-64-unknown-linux-builder-with-libressl-3.9.2
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4.1.1
+      - name: Login to GitHub Container Registry
+        # v2.2.0
+        uses: docker/login-action@5139682d94efc37792e6b54386b5b470a68a4737
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build and push
+        run: bash x86-64-unknown-linux-builder-with-libressl-3.9.2/build-and-push.bash
+      - name: Send alert on failure
+        if: ${{ failure() }}
+        uses: zulip/github-actions-zulip/send-message@e4c8f27c732ba9bd98ac6be0583096dea82feea5
+        with:
+          api-key: ${{ secrets.ZULIP_SCHEDULED_JOB_FAILURE_API_KEY }}
+          email: ${{ secrets.ZULIP_SCHEDULED_JOB_FAILURE_EMAIL }}
+          organization-url: 'https://ponylang.zulipchat.com/'
+          to: notifications
+          type: stream
+          topic: ${{ github.repository }} scheduled job failure
+          content: ${{ github.server_url}}/${{ github.repository }}/actions/runs/${{ github.run_id }} failed.
+
   x86-64-unknown-linux-builder-with-openssl_1_1_1w:
     needs:
       - x86-64-unknown-linux-builder
@@ -241,6 +270,7 @@ jobs:
       - x86-64-unknown-linux-builder
       - x86-64-unknown-linux-builder-with-libressl_3_7_3
       - x86-64-unknown-linux-builder-with-libressl_3_9_1
+      - x86-64-unknown-linux-builder-with-libressl_3_9_2
       - x86-64-unknown-linux-builder-with-openssl_1_1_1w
       - x86-64-unknown-linux-builder-with-openssl_3_1_3
       - x86-64-unknown-linux-builder-with-openssl_3_2_0
@@ -314,6 +344,7 @@ jobs:
           - shared-docker-ci-x86-64-unknown-linux-builder
           - shared-docker-ci-x86-64-unknown-linux-builder-with-libressl-3.7.3
           - shared-docker-ci-x86-64-unknown-linux-builder-with-libressl-3.9.1
+          - shared-docker-ci-x86-64-unknown-linux-builder-with-libressl-3.9.2
           - shared-docker-ci-x86-64-unknown-linux-builder-with-openssl_1.1.1w
           - shared-docker-ci-x86-64-unknown-linux-builder-with-openssl_3.1.3
           - shared-docker-ci-x86-64-unknown-linux-builder-with-openssl_3.2.0
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 3224f97..9555dae 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -70,6 +70,14 @@ jobs:
       - name: Docker build
         run: "docker build --pull --file=x86-64-unknown-linux-builder-with-libressl-3.9.1/Dockerfile ."
 
+  validate-x86-64-unknown-linux-builder-with-libressl-3_9_2-image-builds:
+    name: Validate x86-64-unknown-linux-builder-with-libressl-3.9.2 Docker image builds
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4.1.1
+      - name: Docker build
+        run: "docker build --pull --file=x86-64-unknown-linux-builder-with-libressl-3.9.2/Dockerfile ."
+
   validate-x86-64-unknown-linux-builder-with-openssl_1_1_1w-image-builds:
     name: Validate x86-64-unknown-linux-builder-with-openssl_1.1.1w Docker image builds
     runs-on: ubuntu-latest
diff --git a/x86-64-unknown-linux-builder-with-libressl-3.9.2/Dockerfile b/x86-64-unknown-linux-builder-with-libressl-3.9.2/Dockerfile
new file mode 100644
index 0000000..c024e89
--- /dev/null
+++ b/x86-64-unknown-linux-builder-with-libressl-3.9.2/Dockerfile
@@ -0,0 +1,11 @@
+ARG FROM_TAG=release
+FROM ghcr.io/ponylang/shared-docker-ci-x86-64-unknown-linux-builder:${FROM_TAG}
+
+RUN cd /tmp && \
+  wget https://cdn.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.9.2.tar.gz && \
+  tar xf libressl-3.9.2.tar.gz && \
+  cd libressl-3.9.2/ && \
+  ./configure && \
+  make install && \
+  cd /tmp && \
+  rm -rf libressl*
diff --git a/x86-64-unknown-linux-builder-with-libressl-3.9.2/README.md b/x86-64-unknown-linux-builder-with-libressl-3.9.2/README.md
new file mode 100644
index 0000000..5d52c2c
--- /dev/null
+++ b/x86-64-unknown-linux-builder-with-libressl-3.9.2/README.md
@@ -0,0 +1,3 @@
+# x86-64-unknown-linux-builder-with-libressl-3.9.2
+
+The x86-64-unknown-linux-builder with libressl 3.9.2 SSL implementation installed as well. Rebuilt daily.
diff --git a/x86-64-unknown-linux-builder-with-libressl-3.9.2/build-and-push.bash b/x86-64-unknown-linux-builder-with-libressl-3.9.2/build-and-push.bash
new file mode 100644
index 0000000..0c5f83d
--- /dev/null
+++ b/x86-64-unknown-linux-builder-with-libressl-3.9.2/build-and-push.bash
@@ -0,0 +1,29 @@
+#!/bin/bash
+
+set -o errexit
+set -o nounset
+
+#
+# *** You should already be logged in to GitHub Container Registry when you run
+#     this ***
+#
+
+DOCKERFILE_DIR="$(dirname "$0")"
+
+## GitHub Container Registry
+
+NAME="ghcr.io/ponylang/shared-docker-ci-x86-64-unknown-linux-builder-with-libressl-3.9.2"
+
+# built from x86-64-unknown-linux-builder release tag
+FROM_TAG=release
+TAG_AS=release
+docker build --pull --build-arg FROM_TAG="${FROM_TAG}" \
+  -t "${NAME}:${TAG_AS}" "${DOCKERFILE_DIR}"
+docker push "${NAME}:${TAG_AS}"
+
+# built from x86-64-unknown-linux-builder latest tag
+FROM_TAG=latest
+TAG_AS=latest
+docker build --pull --build-arg FROM_TAG="${FROM_TAG}" \
+  -t "${NAME}:${TAG_AS}" "${DOCKERFILE_DIR}"
+docker push "${NAME}:${TAG_AS}"