cd-packages.yml

# SPDX-FileCopyrightText: 2026 BenJule <benjamin.luetker@gmail.com>
# SPDX-License-Identifier: AGPL-3.0-or-later
name: 'CD: Build Packages'
run-name: "Build packages — ${{ github.actor }}"

on:
  workflow_dispatch:
    inputs:
      retention-days:
        description: 'Artifact retention days'
        type: number
        default: 14
      skip-debian:
        description: 'Skip Debian trixie .deb build'
        type: boolean
        default: false
      skip-fedora:
        description: 'Skip Fedora 42 .rpm build'
        type: boolean
        default: false
      skip-arch:
        description: 'Skip Arch Linux .pkg.tar.zst build'
        type: boolean
        default: false
  workflow_call:
    inputs:
      retention-days:
        description: 'Artifact retention days'
        type: number
        default: 14
      skip-debian:
        description: 'Skip Debian trixie .deb build'
        type: boolean
        default: false
      skip-fedora:
        description: 'Skip Fedora 42 .rpm build'
        type: boolean
        default: false
      skip-arch:
        description: 'Skip Arch Linux .pkg.tar.zst build'
        type: boolean
        default: false

permissions: read-all
concurrency:
  group: ${{ github.workflow }}-packages-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}

jobs:
  # ── Debian trixie .deb ───────────────────────────────────────────────────
  build_debian:
    name: Linux / Debian trixie .deb
    if: ${{ !inputs.skip-debian }}
    runs-on: ubuntu-24.04
    timeout-minutes: 180
    container:
      image: ghcr.io/benjule/bambu-debian-trixie:trixie
      credentials:
        username: ${{ github.actor }}
        password: ${{ github.token }}
    permissions: read-all

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411  # v2.19.4
        with:
          egress-policy: audit

      - name: Bootstrap
        run: apt-get update -qq && apt-get install -y --no-install-recommends sudo git curl git-lfs ca-certificates

      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
        with:
          lfs: 'true'
          fetch-depth: 0

      - name: Cache deps
        id: cache-deps
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5
        with:
          path: deps/build/destdir
          key: pkg-deps-debian-trixie-${{ hashFiles('deps/CMakeLists.txt', 'deps/**/*.cmake') }}

      - name: Install build dependencies
        run: sudo ./BuildLinux.sh -ur

      - name: Fix permissions
        run: chown -R "$(id -u):$(id -g)" ./

      - name: Build deps
        if: steps.cache-deps.outputs.cache-hit != 'true'
        run: ./BuildLinux.sh -dfr

      - name: Build BambuStudio
        id: build-bambu
        run: |
          export CMAKE_BUILD_PARALLEL_LEVEL=$(nproc)
          ./BuildLinux.sh -sfr
          cd build && ./src/BuildLinuxImage.sh

      - name: Smoke test
        if: steps.build-bambu.outcome == 'success'
        run: |
          BINARY=./build/src/bambu-studio

          # 1. Shared library check — catch missing .so before packaging
          MISSING=$(ldd "$BINARY" 2>/dev/null | grep "not found" || true)
          if [[ -n "$MISSING" ]]; then
            echo "::error::Missing shared libraries in built binary:"
            echo "$MISSING"
            exit 1
          fi
          echo "OK: all shared libraries resolved"

          # 2. Resources check — catch missing profiles/images
          for dir in ./resources/profiles ./resources/images; do
            if [[ ! -d "$dir" ]]; then
              echo "::error::Expected resource directory missing: $dir"
              exit 1
            fi
          done
          PROFILES=$(find ./resources/profiles -name "*.json" 2>/dev/null | wc -l)
          echo "OK: $PROFILES printer profile files found"

          # 3. Headless startup check
          apt-get install -y --no-install-recommends xvfb

          Xvfb :99 -screen 0 1280x800x24 &
          sleep 2

          EXIT=0
          DISPLAY=:99 LIBGL_ALWAYS_SOFTWARE=1 \
            timeout 20 "$BINARY" > /tmp/smoke.log 2>&1 || EXIT=$?

          kill %1 2>/dev/null || true

          if [ "$EXIT" -ne 0 ] && [ "$EXIT" -ne 124 ]; then
            echo "::error::bambustudio crashed on startup (exit $EXIT)"
            cat /tmp/smoke.log
            exit 1
          fi

          if grep -q "gtk_window_resize: assertion" /tmp/smoke.log; then
            echo "::error::GTK regression detected: gtk_window_resize assertion 'width > 0' failed"
            grep "Gtk-CRITICAL" /tmp/smoke.log | head -10
            exit 1
          fi

          GTK_WARNS=$(grep -c "Gtk-CRITICAL" /tmp/smoke.log || true)

          echo "### Smoke test" >> "$GITHUB_STEP_SUMMARY"
          echo "✅ Started headless (Xvfb), ran 20s without crash" >> "$GITHUB_STEP_SUMMARY"
          if [ "$GTK_WARNS" -gt 0 ]; then
            echo "⚠️ $GTK_WARNS other Gtk-CRITICAL warning(s) — review log" >> "$GITHUB_STEP_SUMMARY"
          else
            echo "✅ No GTK-CRITICAL warnings" >> "$GITHUB_STEP_SUMMARY"
          fi

      - name: Build package
        run: ./BuildLinux.sh -pr

      - name: Get version
        id: ver
        uses: ./.github/actions/get-version

      - name: Upload artifact
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7
        with:
          name: BambuStudio_debian-trixie_deb_${{ steps.ver.outputs.ver }}
          path: ./build/bambustudio_*.deb
          if-no-files-found: error
          retention-days: ${{ inputs.retention-days || 14 }}

  # ── Fedora 42 .rpm ────────────────────────────────────────────────────────
  build_fedora:
    name: Linux / Fedora 42 .rpm
    if: ${{ !inputs.skip-fedora }}
    runs-on: ubuntu-24.04
    timeout-minutes: 180
    continue-on-error: true
    # Pull from our GHCR mirror (built by ci-fedora-container.yml) instead of
    # Docker Hub directly — avoids the anonymous Docker Hub pull-rate limit, same
    # as Debian and Arch.
    container:
      image: ghcr.io/benjule/bambu-fedora:42
      credentials:
        username: ${{ github.actor }}
        password: ${{ github.token }}
    permissions: read-all

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411  # v2.19.4
        with:
          egress-policy: audit

      - name: Bootstrap
        run: dnf install -y sudo git curl git-lfs

      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
        with:
          lfs: 'true'
          fetch-depth: 0

      - name: Cache deps
        id: cache-deps
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5
        with:
          path: deps/build/destdir
          key: pkg-deps-fedora42_rpm-${{ hashFiles('deps/CMakeLists.txt', 'deps/**/*.cmake') }}

      - name: Install build dependencies
        run: sudo ./BuildLinux.sh -ur

      - name: Fix permissions
        run: chown -R "$(id -u):$(id -g)" ./

      - name: Build deps
        if: steps.cache-deps.outputs.cache-hit != 'true'
        run: ./BuildLinux.sh -dfr

      - name: Build BambuStudio
        id: build-bambu
        run: |
          ./BuildLinux.sh -sfr
          cd build && ./src/BuildLinuxImage.sh

      - name: Build package
        run: bash scripts/build_rpm.sh

      - name: Get version
        id: ver
        uses: ./.github/actions/get-version

      - name: Upload artifact
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7
        with:
          name: BambuStudio_fedora42_rpm_${{ steps.ver.outputs.ver }}
          path: ./build/bambustudio-*.rpm
          if-no-files-found: warn
          retention-days: ${{ inputs.retention-days || 14 }}

  # ── Arch Linux .pkg.tar.zst ───────────────────────────────────────────────
  build_arch:
    name: Linux / Arch Linux .pkg.tar.zst
    if: ${{ !inputs.skip-arch }}
    runs-on: ubuntu-24.04
    timeout-minutes: 180
    continue-on-error: true
    # Pull from our GHCR mirror (built by ci-arch-container.yml) instead of
    # Docker Hub directly — avoids the anonymous Docker Hub pull-rate limit that
    # intermittently failed this job at "Initialize containers".
    container:
      image: ghcr.io/benjule/bambu-archlinux:base
      credentials:
        username: ${{ github.actor }}
        password: ${{ github.token }}
    permissions: read-all

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411  # v2.19.4
        with:
          egress-policy: audit

      - name: Bootstrap
        run: pacman -Syu --noconfirm sudo git curl git-lfs unzip

      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
        with:
          lfs: 'true'
          fetch-depth: 0

      - name: Cache deps
        id: cache-deps
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae  # v5
        with:
          path: deps/build/destdir
          key: pkg-deps-arch-${{ hashFiles('deps/CMakeLists.txt', 'deps/**/*.cmake') }}

      - name: Install cmake 3.31.x (Arch)
        uses: lukka/get-cmake@f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9  # v4.3.4
        with:
          cmakeVersion: "~3.31.0"
          useLocalCache: true
          useCloudCache: true

      - name: Install build dependencies
        run: sudo ./BuildLinux.sh -ur

      - name: Fix permissions
        run: chown -R "$(id -u):$(id -g)" ./

      - name: Build deps
        if: steps.cache-deps.outputs.cache-hit != 'true'
        run: ./BuildLinux.sh -dfr

      - name: Build BambuStudio
        id: build-bambu
        run: |
          export CMAKE_BUILD_PARALLEL_LEVEL=$(nproc)
          ./BuildLinux.sh -sfr
          cd build && ./src/BuildLinuxImage.sh

      - name: Build package
        run: bash scripts/build_pkg_arch.sh

      - name: Get version
        id: ver
        uses: ./.github/actions/get-version

      - name: Upload artifact
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7
        with:
          name: BambuStudio_arch_pkg_${{ steps.ver.outputs.ver }}
          path: ./build/bambustudio-*.pkg.tar.zst
          if-no-files-found: warn
          retention-days: ${{ inputs.retention-days || 14 }}