LG_Buddy/.github/workflows/ci.yml at main · Staphylococcus/LG_Buddy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
name: CI

on:
  pull_request:
  push:

permissions:
  contents: read

jobs:
  verify:
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.x"

      - name: Run Rust test suite
        run: cargo test -p lg-buddy

      - name: Verify root-scoped TV helper launcher
        run: |
          sudo_target_dir="$(mktemp -d)"
          sudo env "PATH=$PATH" "CARGO_HOME=$CARGO_HOME" "RUSTUP_HOME=$RUSTUP_HOME" "RUSTUP_TOOLCHAIN=${RUSTUP_TOOLCHAIN:-stable}" "CARGO_TARGET_DIR=$sudo_target_dir" cargo test -p lg-buddy --lib tv::tests::user_scoped_launcher_drops_privileges_to_sudo_user_when_running_as_root -- --exact

      - name: Run clippy
        run: cargo clippy -p lg-buddy --all-targets --all-features -- -D warnings

      - name: Validate shell scripts
        run: bash -n install.sh uninstall.sh configure.sh bin/LG_Buddy_Common scripts/build-release-bundle.sh scripts/test-release-bundle.sh scripts/publish-release-assets.sh

  bundle-smoke-test:
    runs-on: ubuntu-latest
    needs: verify

    steps:
      - name: Check out repository
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable
        with:
          targets: x86_64-unknown-linux-musl

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.x"

      - name: Install smoke-test prerequisites
        run: sudo apt-get update && sudo apt-get install -y musl-tools zenity

      - name: Build lg-buddy release binary
        run: cargo build --release -p lg-buddy --target x86_64-unknown-linux-musl

      - name: Create release bundle
        run: ./scripts/build-release-bundle.sh --target x86_64-unknown-linux-musl --version ci-smoke --output-dir dist

      - name: Smoke test release bundle
        run: ./scripts/test-release-bundle.sh --skip-pip-install --archive dist/lg-buddy-ci-smoke-x86_64-unknown-linux-musl.tar.gz

      - name: Generate checksums
        run: |
          cd dist
          sha256sum ./*.tar.gz > sha256sums.txt

      - name: Verify checksums
        run: |
          cd dist
          sha256sum -c sha256sums.txt

      - name: Dry-run publish release assets
        env:
          GH_RELEASE_DRY_RUN: "1"
        run: ./scripts/publish-release-assets.sh --dist-dir dist --tag v0.0.0-ci-smoke