350 lines
10 KiB
YAML
350 lines
10 KiB
YAML
name: Cross build packages
|
|
|
|
concurrency:
|
|
group: build-${{ github.event_name }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '0 */6 * * *'
|
|
push:
|
|
branches:
|
|
- 'ci/**'
|
|
tags:
|
|
- v*
|
|
- e*
|
|
workflow_dispatch:
|
|
inputs:
|
|
branch_or_tag:
|
|
required: false
|
|
profile:
|
|
required: false
|
|
|
|
jobs:
|
|
prepare:
|
|
runs-on: ubuntu-20.04
|
|
container: ghcr.io/emqx/emqx-builder/5.0-18:1.13.4-24.3.4.2-1-ubuntu20.04
|
|
outputs:
|
|
BUILD_PROFILE: ${{ steps.get_profile.outputs.BUILD_PROFILE }}
|
|
IS_EXACT_TAG: ${{ steps.get_profile.outputs.IS_EXACT_TAG }}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
with:
|
|
ref: ${{ github.event.inputs.branch_or_tag }} # when input is not given, the event tag is used
|
|
path: source
|
|
fetch-depth: 0
|
|
|
|
- name: Get profile to build
|
|
id: get_profile
|
|
run: |
|
|
cd source
|
|
git config --global --add safe.directory "$(pwd)"
|
|
tag=${{ github.ref }}
|
|
if git describe --tags --match "[v|e]*" --exact; then
|
|
echo "WARN: This is an exact git tag, will publish release"
|
|
is_exact_tag='true'
|
|
else
|
|
echo "WARN: This is NOT an exact git tag, will not publish release"
|
|
is_exact_tag='false'
|
|
fi
|
|
echo "::set-output name=IS_EXACT_TAG::${is_exact_tag}"
|
|
case $tag in
|
|
refs/tags/v*)
|
|
PROFILE='emqx'
|
|
;;
|
|
refs/tags/e*)
|
|
PROFILE=emqx-enterprise
|
|
;;
|
|
*)
|
|
PROFILE=${{ github.event.inputs.profile }}
|
|
case "$PROFILE" in
|
|
emqx)
|
|
true
|
|
;;
|
|
emqx-enterprise)
|
|
true
|
|
;;
|
|
*)
|
|
# maybe triggered from schedule
|
|
echo "WARN: \"$PROFILE\" is not a valid profile."
|
|
echo "building the default profile 'emqx' instead"
|
|
PROFILE='emqx'
|
|
;;
|
|
esac
|
|
;;
|
|
esac
|
|
echo "BUILD_PROFILE=$PROFILE" >> $GITHUB_OUTPUT
|
|
- name: get_all_deps
|
|
run: |
|
|
make -C source deps-all
|
|
zip -ryq source.zip source/* source/.[^.]*
|
|
- uses: actions/upload-artifact@v3
|
|
with:
|
|
name: source
|
|
path: source.zip
|
|
|
|
windows:
|
|
runs-on: windows-2019
|
|
needs: prepare
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
profile: # for now only CE for windows
|
|
- emqx
|
|
otp:
|
|
- 24.2.1
|
|
steps:
|
|
- uses: actions/download-artifact@v3
|
|
with:
|
|
name: source
|
|
path: .
|
|
- name: unzip source code
|
|
run: Expand-Archive -Path source.zip -DestinationPath ./
|
|
- uses: ilammy/msvc-dev-cmd@v1.12.0
|
|
- uses: erlef/setup-beam@v1
|
|
with:
|
|
otp-version: ${{ matrix.otp }}
|
|
- name: build
|
|
env:
|
|
PYTHON: python
|
|
DIAGNOSTIC: 1
|
|
working-directory: source
|
|
run: |
|
|
# ensure crypto app (openssl)
|
|
erl -eval "erlang:display(crypto:info_lib())" -s init stop
|
|
make ${{ matrix.profile }}-tgz
|
|
- name: run emqx
|
|
timeout-minutes: 5
|
|
working-directory: source
|
|
run: |
|
|
./_build/${{ matrix.profile }}/rel/emqx/bin/emqx start
|
|
Start-Sleep -s 5
|
|
echo "EMQX started"
|
|
./_build/${{ matrix.profile }}/rel/emqx/bin/emqx stop
|
|
echo "EMQX stopped"
|
|
./_build/${{ matrix.profile }}/rel/emqx/bin/emqx install
|
|
echo "EMQX installed"
|
|
./_build/${{ matrix.profile }}/rel/emqx/bin/emqx uninstall
|
|
echo "EMQX uninstalled"
|
|
- uses: actions/upload-artifact@v3
|
|
with:
|
|
name: ${{ matrix.profile }}-windows
|
|
path: source/_packages/${{ matrix.profile }}/
|
|
|
|
mac:
|
|
needs: prepare
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
profile:
|
|
- ${{ needs.prepare.outputs.BUILD_PROFILE }}
|
|
otp:
|
|
- 24.3.4.2-1
|
|
os:
|
|
- macos-11
|
|
- macos-12-arm64
|
|
runs-on: ${{ matrix.os }}
|
|
steps:
|
|
- uses: emqx/self-hosted-cleanup-action@v1.0.3
|
|
- uses: actions/download-artifact@v3
|
|
with:
|
|
name: source
|
|
path: .
|
|
- name: unzip source code
|
|
run: |
|
|
ln -s . source
|
|
unzip -o -q source.zip
|
|
rm source source.zip
|
|
- uses: ./.github/actions/package-macos
|
|
with:
|
|
profile: ${{ matrix.profile }}
|
|
otp: ${{ matrix.otp }}
|
|
os: ${{ matrix.os }}
|
|
apple_id_password: ${{ secrets.APPLE_ID_PASSWORD }}
|
|
apple_developer_identity: ${{ secrets.APPLE_DEVELOPER_IDENTITY }}
|
|
apple_developer_id_bundle: ${{ secrets.APPLE_DEVELOPER_ID_BUNDLE }}
|
|
apple_developer_id_bundle_password: ${{ secrets.APPLE_DEVELOPER_ID_BUNDLE_PASSWORD }}
|
|
- uses: actions/upload-artifact@v3
|
|
with:
|
|
name: ${{ matrix.profile }}-${{ matrix.otp }}
|
|
path: _packages/${{ matrix.profile }}/
|
|
|
|
linux:
|
|
needs: prepare
|
|
runs-on: ${{ matrix.build_machine }}
|
|
container:
|
|
image: "ghcr.io/emqx/emqx-builder/5.0-18:${{ matrix.elixir }}-${{ matrix.otp }}-${{ matrix.os }}"
|
|
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
profile:
|
|
- ${{ needs.prepare.outputs.BUILD_PROFILE }}
|
|
otp:
|
|
- 24.3.4.2-1 # we test with OTP 23, but only build package on OTP 24 versions
|
|
elixir:
|
|
- 1.13.4
|
|
# used to split elixir packages into a separate job, since the
|
|
# entire job may take a lot of time, especially on arm64
|
|
# emulation.
|
|
# we only want to build ubuntu and centos with elixir for the
|
|
# time being, so it's easier to just include those with
|
|
# `with_elixir` set.
|
|
build_elixir:
|
|
# - with_elixir
|
|
- no_elixir
|
|
arch:
|
|
- amd64
|
|
- arm64
|
|
os:
|
|
- ubuntu20.04
|
|
- ubuntu18.04
|
|
- ubuntu16.04
|
|
- debian11
|
|
- debian10
|
|
- debian9
|
|
- el8
|
|
- el7
|
|
- raspbian10
|
|
build_machine:
|
|
- aws-arm64
|
|
- ubuntu-20.04
|
|
exclude:
|
|
- arch: arm64
|
|
build_machine: ubuntu-20.04
|
|
- arch: amd64
|
|
build_machine: aws-arm64
|
|
- os: raspbian9
|
|
arch: amd64
|
|
- os: raspbian10
|
|
arch: amd64
|
|
- os: raspbian10 # we only have arm32 image
|
|
arch: arm64
|
|
- os: raspbian9
|
|
profile: emqx
|
|
- os: raspbian10
|
|
profile: emqx
|
|
- os: raspbian9
|
|
profile: emqx-enterprise
|
|
- os: raspbian10
|
|
profile: emqx-enterprise
|
|
include:
|
|
- profile: emqx
|
|
otp: 24.3.4.2-1
|
|
elixir: 1.13.4
|
|
build_elixir: with_elixir
|
|
arch: amd64
|
|
os: ubuntu20.04
|
|
build_machine: ubuntu-20.04
|
|
- profile: emqx
|
|
otp: 24.3.4.2-1
|
|
elixir: 1.13.4
|
|
build_elixir: with_elixir
|
|
arch: amd64
|
|
os: el8
|
|
build_machine: ubuntu-20.04
|
|
|
|
defaults:
|
|
run:
|
|
shell: bash
|
|
|
|
steps:
|
|
- uses: AutoModality/action-clean@v1
|
|
if: matrix.build_machine == 'aws-arm64'
|
|
- uses: actions/download-artifact@v3
|
|
with:
|
|
name: source
|
|
path: .
|
|
- name: unzip source code
|
|
run: unzip -q source.zip
|
|
- name: build emqx packages
|
|
working-directory: source
|
|
env:
|
|
OTP: ${{ matrix.otp }}
|
|
ELIXIR: ${{ matrix.elixir }}
|
|
PROFILE: ${{ matrix.profile }}
|
|
ARCH: ${{ matrix.arch }}
|
|
SYSTEM: ${{ matrix.os }}
|
|
run: |
|
|
set -eu
|
|
git config --global --add safe.directory "/__w/emqx/emqx"
|
|
# Align path for CMake caches
|
|
if [ ! "$PWD" = "/emqx" ]; then
|
|
ln -s $PWD /emqx
|
|
cd /emqx
|
|
fi
|
|
echo "pwd is $PWD"
|
|
PkgTypes="tgz pkg"
|
|
IsElixir="no"
|
|
if [ ${{ matrix.build_elixir }} = "with_elixir" ]; then
|
|
PkgTypes="tgz"
|
|
# set Elixir build flag
|
|
IsElixir="yes"
|
|
fi
|
|
for PKGTYPE in ${PkgTypes};
|
|
do
|
|
./scripts/buildx.sh \
|
|
--profile "${PROFILE}" \
|
|
--pkgtype "${PKGTYPE}" \
|
|
--arch "${ARCH}" \
|
|
--elixir "${IsElixir}" \
|
|
--builder "ghcr.io/emqx/emqx-builder/5.0-18:${ELIXIR}-${OTP}-${SYSTEM}"
|
|
done
|
|
- uses: actions/upload-artifact@v3
|
|
with:
|
|
name: ${{ matrix.profile }}-${{ matrix.otp }}
|
|
path: source/_packages/${{ matrix.profile }}/
|
|
|
|
publish_artifacts:
|
|
runs-on: ubuntu-20.04
|
|
needs: [prepare, mac, linux]
|
|
if: ${{ needs.prepare.outputs.IS_EXACT_TAG }}
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
profile:
|
|
- ${{ needs.prepare.outputs.BUILD_PROFILE }}
|
|
otp:
|
|
- 24.3.4.2-1
|
|
include:
|
|
- profile: emqx
|
|
otp: windows # otp version on windows is rather fixed
|
|
steps:
|
|
- uses: actions/download-artifact@v3
|
|
with:
|
|
name: ${{ matrix.profile }}-${{ matrix.otp }}
|
|
path: packages/${{ matrix.profile }}
|
|
- name: install dos2unix
|
|
run: sudo apt-get update && sudo apt install -y dos2unix
|
|
- name: get packages
|
|
run: |
|
|
set -e -u
|
|
cd packages/${{ matrix.profile }}
|
|
# fix the .sha256 file format
|
|
for var in $(ls | grep emqx | grep -v sha256); do
|
|
dos2unix $var.sha256
|
|
echo "$(cat $var.sha256) $var" | sha256sum -c || exit 1
|
|
done
|
|
cd -
|
|
- uses: aws-actions/configure-aws-credentials@v1-node16
|
|
with:
|
|
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
|
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
|
aws-region: ${{ secrets.AWS_DEFAULT_REGION }}
|
|
- name: upload to aws s3
|
|
env:
|
|
PROFILE: ${{ matrix.profile }}
|
|
run: |
|
|
set -e -u
|
|
if [ $PROFILE = 'emqx' ]; then
|
|
s3dir='emqx-ce'
|
|
elif [ $PROFILE = 'emqx-enterprise' ]; then
|
|
s3dir='emqx-ee'
|
|
else
|
|
echo "unknown profile $PROFILE"
|
|
exit 1
|
|
fi
|
|
aws s3 cp --recursive packages/$PROFILE s3://${{ secrets.AWS_S3_BUCKET }}/$s3dir/${{ github.ref_name }}
|
|
aws cloudfront create-invalidation --distribution-id ${{ secrets.AWS_CLOUDFRONT_ID }} --paths "/$s3dir/${{ github.ref_name }}/*"
|