ci: implement update homebrew formula job #9
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| branches: | |
| - master | |
| paths: | |
| - Cargo.toml | |
| - Cargo.lock | |
| - 'crates/**' | |
| - .github/workflows/rust_binaries_release.yml | |
| pull_request: | |
| types: [opened, synchronize, reopened] | |
| branches: | |
| - master | |
| paths: | |
| - Cargo.toml | |
| - Cargo.lock | |
| - 'crates/**' | |
| - .github/workflows/rust_binaries_release.yml | |
| jobs: | |
| prepare: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| is_release_candidate: ${{ steps.check_release_candidate.outputs.is_release_candidate }} | |
| binary_matrix: ${{ steps.setup_matrix.outputs.binary_matrix }} | |
| steps: | |
| - name: Check if release candidate | |
| id: check_release_candidate | |
| run: | | |
| # Additional checks for head_ref when PR because GH doesn't support that | |
| if [ "${{ github.event_name }}" == "pull_request" ] && ! [[ "${{ github.head_ref }}" == prerelease/* ]]; then | |
| echo 'is_release_candidate=false' >> "$GITHUB_OUTPUT" | |
| else | |
| echo 'is_release_candidate=true' >> "$GITHUB_OUTPUT" | |
| fi | |
| - name: Setup matrix | |
| id: setup_matrix | |
| run: | | |
| echo 'binary_matrix=["merod", "meroctl"]' >> "$GITHUB_OUTPUT" | |
| build: | |
| if: needs.prepare.outputs.is_release_candidate == 'true' | |
| strategy: | |
| matrix: | |
| include: | |
| - os: ubuntu-latest | |
| target: x86_64-unknown-linux-gnu | |
| - os: ubuntu-latest | |
| target: aarch64-unknown-linux-gnu | |
| - os: macos-latest | |
| target: x86_64-apple-darwin | |
| - os: macos-latest | |
| target: aarch64-apple-darwin | |
| runs-on: ${{ matrix.os }} | |
| needs: prepare | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Craft cargo arguments | |
| id: cargo_args | |
| run: | | |
| binaries=$(echo '${{ needs.prepare.outputs.binary_matrix }}' | jq -r 'join(" ") | split(" ") | map("-p " + .) | join(" ")') | |
| args="$binaries --release --target ${{ matrix.target }}" | |
| echo "Cargo build arguments: $args" | |
| echo args="$args" >> "$GITHUB_OUTPUT" | |
| - name: Install rustup and Rust toolchain | |
| if: matrix.os == 'macos-latest' | |
| run: | | |
| curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y | |
| source $HOME/.cargo/env | |
| rustup toolchain install stable | |
| rustup default stable | |
| - name: Setup rust toolchain | |
| run: rustup toolchain install stable --profile minimal | |
| - name: Setup rust cache | |
| uses: Swatinem/rust-cache@v2 | |
| with: | |
| key: rust-binaries-${{ runner.os }}-${{ matrix.target }} | |
| - name: Install target for ${{ matrix.target }} | |
| run: rustup target add ${{ matrix.target }} | |
| - name: Install dependencies for cross-compilation | |
| if: matrix.os == 'ubuntu-latest' | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y \ | |
| gcc-aarch64-linux-gnu g++-aarch64-linux-gnu \ | |
| libstdc++-11-dev-arm64-cross \ | |
| zlib1g-dev \ | |
| libsnappy-dev \ | |
| libbz2-dev \ | |
| liblz4-dev \ | |
| libzstd-dev \ | |
| clang \ | |
| libc6-dev-arm64-cross | |
| - name: Download and set up OpenSSL for cross-compilation | |
| if: matrix.target == 'aarch64-unknown-linux-gnu' | |
| run: | | |
| wget https://www.openssl.org/source/openssl-1.1.1g.tar.gz | |
| tar -xzf openssl-1.1.1g.tar.gz | |
| cd openssl-1.1.1g | |
| # More restrictive C99 flags and additional compiler options | |
| export CROSS_COMPILE="" # Clear CROSS_COMPILE to prevent double prefix | |
| export CC="aarch64-linux-gnu-gcc" | |
| export CXX="aarch64-linux-gnu-g++" | |
| export CFLAGS="-std=gnu99 -O2 -fPIC -D_GNU_SOURCE -I/usr/aarch64-linux-gnu/include" | |
| export LDFLAGS="-L/usr/aarch64-linux-gnu/lib" | |
| ./Configure linux-aarch64 --prefix=$HOME/openssl-aarch64 \ | |
| no-asm \ | |
| no-shared \ | |
| no-async \ | |
| no-engine \ | |
| no-dso \ | |
| no-deprecated | |
| make -j$(nproc) CFLAGS="$CFLAGS" LDFLAGS="$LDFLAGS" | |
| make install_sw | |
| cd .. | |
| echo "OPENSSL_DIR=$HOME/openssl-aarch64" >> $GITHUB_ENV | |
| echo "OPENSSL_LIB_DIR=$HOME/openssl-aarch64/lib" >> $GITHUB_ENV | |
| echo "OPENSSL_INCLUDE_DIR=$HOME/openssl-aarch64/include" >> $GITHUB_ENV | |
| echo "PKG_CONFIG_PATH=$HOME/openssl-aarch64/lib/pkgconfig" >> $GITHUB_ENV | |
| echo "PKG_CONFIG_ALLOW_CROSS=1" >> $GITHUB_ENV | |
| echo "PKG_CONFIG_SYSROOT_DIR=/" >> $GITHUB_ENV | |
| echo "OPENSSL_STATIC=1" >> $GITHUB_ENV | |
| - name: Build binaries | |
| if: matrix.target == 'aarch64-unknown-linux-gnu' | |
| env: | |
| CC_aarch64_unknown_linux_gnu: aarch64-linux-gnu-gcc | |
| CXX_aarch64_unknown_linux_gnu: aarch64-linux-gnu-g++ | |
| CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER: aarch64-linux-gnu-gcc | |
| OPENSSL_DIR: ${{ env.OPENSSL_DIR }} | |
| OPENSSL_LIB_DIR: ${{ env.OPENSSL_LIB_DIR }} | |
| OPENSSL_INCLUDE_DIR: ${{ env.OPENSSL_INCLUDE_DIR }} | |
| PKG_CONFIG_PATH: ${{ env.PKG_CONFIG_PATH }} | |
| PKG_CONFIG_ALLOW_CROSS: ${{ env.PKG_CONFIG_ALLOW_CROSS }} | |
| PKG_CONFIG_SYSROOT_DIR: ${{ env.PKG_CONFIG_SYSROOT_DIR }} | |
| OPENSSL_STATIC: ${{ env.OPENSSL_STATIC }} | |
| run: | | |
| cargo build ${{ steps.cargo_args.outputs.args }} | |
| - name: Build binaries | |
| if: matrix.target != 'aarch64-unknown-linux-gnu' | |
| run: cargo build ${{ steps.cargo_args.outputs.args }} | |
| - name: Compress artifacts using gzip | |
| run: | | |
| mkdir -p artifacts | |
| echo '${{ needs.prepare.outputs.binary_matrix }}' | jq -r '.[]' | while read binary; do | |
| tar -czf artifacts/"$binary"_${{ matrix.target }}.tar.gz -C target/${{ matrix.target }}/release "$binary" | |
| done | |
| - name: Upload artifacts | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: artifacts-${{ matrix.target }} | |
| path: artifacts/* | |
| retention-days: 2 | |
| release: | |
| if: needs.prepare.outputs.is_release_candidate == 'true' | |
| runs-on: ubuntu-latest | |
| needs: [prepare, build] | |
| strategy: | |
| matrix: | |
| binary: ${{ fromJSON(needs.prepare.outputs.binary_matrix) }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Download Artifact | |
| uses: actions/download-artifact@v4 | |
| with: | |
| path: artifacts/ | |
| merge-multiple: true | |
| - name: Get version info | |
| id: version_info | |
| shell: bash | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| echo "target_commit=${{ github.sha }}" >> $GITHUB_OUTPUT | |
| if [ "${{ github.ref }}" == "refs/heads/master" ]; then | |
| version=$(cargo metadata --format-version 1 --no-deps | jq -r '.packages[] | select(.name == "${{ matrix.binary }}") | .version') | |
| version="${{ matrix.binary }}-$version" | |
| echo "Master version: $version" | |
| if gh release view "$version" --repo ${{ github.repository }} >/dev/null 2>&1; then | |
| echo "Master release for this version already exists" | |
| echo "release_required=false" >> $GITHUB_OUTPUT | |
| else | |
| echo "New master release required" | |
| echo "release_required=true" >> $GITHUB_OUTPUT | |
| fi | |
| echo "prerelease=false" >> $GITHUB_OUTPUT | |
| echo "overwrite=false">> $GITHUB_OUTPUT | |
| echo "version=$version" >> $GITHUB_OUTPUT | |
| elif [ "${{ github.event_name }}" == "pull_request" ] && [[ "${{ github.head_ref }}" == prerelease/* ]]; then | |
| version="prerelease-${{ github.event.number }}" | |
| echo "Prerelease version: $version" | |
| echo "release_required=true" >> $GITHUB_OUTPUT | |
| echo "prerelease=true" >> $GITHUB_OUTPUT | |
| echo "overwrite=true">> $GITHUB_OUTPUT | |
| echo "version=$version" >> $GITHUB_OUTPUT | |
| else | |
| echo "This is not a master branch or a prerelease PR" | |
| echo "release_required=false" >> $GITHUB_OUTPUT | |
| fi | |
| - name: Remove other binaries from artifacts | |
| if: steps.version_info.outputs.release_required == 'true' | |
| run: | | |
| ls -al artifacts/ | |
| find artifacts/ -type f ! -name '${{ matrix.binary }}*' -exec rm {} + | |
| ls -al artifacts/ | |
| - name: Upload binaries to release | |
| if: steps.version_info.outputs.release_required == 'true' | |
| uses: svenstaro/upload-release-action@v2 | |
| with: | |
| repo_token: ${{ secrets.GITHUB_TOKEN }} | |
| file: artifacts/* | |
| file_glob: true | |
| tag: ${{ steps.version_info.outputs.version }} | |
| prerelease: ${{ steps.version_info.outputs.prerelease }} | |
| overwrite: ${{ steps.version_info.outputs.overwrite }} | |
| target_commit: ${{ steps.version_info.outputs.target_commit }} |