imsd/.forgejo/workflows/package.yml
Jorijn van der Graaf 1987275a54
All checks were successful
package / package (push) Successful in 1m55s
packaging: drop the aport; fp6-img installs the published apk
fp6-img no longer builds imsd from source: its images install the apk this
repo's package CI publishes to the registry (pinned version + sha256), so
the image and 'apk upgrade' carry the same binary and APKBUILD.binary is
the only imsd packaging left. The two payload files the aport carried
(kde-modem-daemon skel override, systemd preset) move up to packaging/,
where build-package.sh now takes them from.
2026-09-02 16:08:21 +02:00

69 lines
2.7 KiB
YAML

name: package
# Builds the imsd apk(s) for aarch64 from the pushed commit and publishes
# them to the Forgejo Alpine registry — the repo installed phones already
# point at (via catcrafts-fp6-repo), so a release reaches users through
# plain 'apk upgrade' without an fp6-img image run.
#
# Build: crafter-build cross-compiles against an Alpine aarch64 sysroot
# (packaging/build-package.sh — the README's "Cross-compiling" flow), the
# test suite runs natively, and packaging/APKBUILD.binary wraps the result.
# This needs no privileged runner: it runs in an alpine:edge container on
# the ordinary arch-latest runner.
#
# Release gating is the version: pkgver comes from implementations/main.cpp,
# the registry answers 409 for an already-published version, and the publish
# step treats that as "nothing to do" — so pushes only release when the
# Version constant bumps. This is the only producer of the imsd apk: fp6-img
# images install the published package from the registry (pinned version,
# pinned sha256) instead of building their own, so image and 'apk upgrade'
# carry the same binary.
#
# Publishing needs PACKAGE_TOKEN (catbot account, package:write scope) — an
# org-level secret on Catcrafts since 2026-09-02, shared with fp6-img;
# without it the build still runs and the publish step skips quietly.
on:
workflow_dispatch:
push:
branches: [main]
jobs:
package:
runs-on: arch-latest
container:
image: alpine:edge
timeout-minutes: 90
steps:
# actions/checkout is a Node action; bare alpine has no node
- name: Provision job container
run: apk add -q nodejs git curl
- name: Checkout
uses: actions/checkout@v4
- name: Build and package
run: ./packaging/build-package.sh
- name: Publish to the apk registry
env:
PACKAGE_TOKEN: ${{ secrets.PACKAGE_TOKEN }}
run: |
if [ -z "$PACKAGE_TOKEN" ]; then
echo "no PACKAGE_TOKEN secret configured; skipping package publish"
exit 0
fi
found=0
for f in /home/build/.local/share/abuild/*/aarch64/imsd*.apk; do
[ -e "$f" ] || continue
found=1
code=$(curl -s -o /dev/null -w '%{http_code}' \
--user "catbot:$PACKAGE_TOKEN" --upload-file "$f" \
"https://forgejo.catcrafts.net/api/packages/Catcrafts/alpine/edge/fp6")
case "$code" in
201) echo "published: $(basename "$f")" ;;
409) echo "already published: $(basename "$f")" ;;
*) echo "FAILED ($code): $(basename "$f")"; exit 1 ;;
esac
done
[ "$found" = 1 ] || { echo "no packages found to publish"; exit 1; }