fc-kernels/.github/workflows/release.yml at c167397e7a8039be25de95d538e3ad1cd563d56e · e2b-dev/fc-kernels · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
name: Build & Release

on:
  workflow_dispatch:
  pull_request:

permissions:
  contents: write
  id-token: write

jobs:
  matrix:
    runs-on: ubuntu-24.04
    outputs:
      build_matrix: ${{ steps.gen.outputs.matrix }}
    steps:
      - uses: actions/checkout@v4
      - id: gen
        run: |
          python3 - >> "$GITHUB_OUTPUT" <<'PY'
          import json
          versions = []
          for line in open("kernel_versions.txt").read().splitlines():
              v = line.split("#", 1)[0].strip()
              if v:
                  versions.append(v)
          include = []
          for v in versions:
              include.append({"version": v, "arch": "amd64", "target_arch": "x86_64", "runner": "ubuntu-24.04"})
              include.append({"version": v, "arch": "arm64", "target_arch": "arm64", "runner": "ubuntu-24.04-arm"})
          print(f"matrix={json.dumps({'include': include})}")
          PY

  build:
    needs: matrix
    name: Build ${{ matrix.version }} (${{ matrix.arch }})
    strategy:
      fail-fast: false
      matrix: ${{ fromJson(needs.matrix.outputs.build_matrix) }}
    runs-on: ${{ matrix.runner }}
    steps:
      - uses: actions/checkout@v4

      - name: Build kernel
        run: sudo ./build.sh "${{ matrix.version }}" "${{ matrix.target_arch }}"

      - uses: actions/upload-artifact@v4
        with:
          name: kernel-${{ matrix.version }}-${{ matrix.arch }}
          path: ./builds
          retention-days: 7

  publish:
    needs: build
    if: github.event_name == 'workflow_dispatch'
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - uses: actions/download-artifact@v4
        with:
          path: ./builds
          merge-multiple: true

      - name: Prepare release assets
        run: |
          set -euo pipefail
          mkdir -p release-assets
          for dir in ./builds/vmlinux-*/; do
            name=$(basename "$dir")
            [ -f "$dir/amd64/vmlinux.bin" ] && cp "$dir/amd64/vmlinux.bin" "release-assets/${name}-amd64.bin"
            [ -f "$dir/arm64/vmlinux.bin" ] && cp "$dir/arm64/vmlinux.bin" "release-assets/${name}-arm64.bin"
            # Legacy non-arch-suffixed asset (= amd64) for backwards compat.
            [ -f "$dir/vmlinux.bin" ] && cp "$dir/vmlinux.bin" "release-assets/${name}.bin"
          done
          ls -la release-assets/

      - name: Pick calver tag
        id: tag
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail
          base="$(date -u +%Y.%m.%d)"
          tag="$base"
          n=0
          while gh release view "$tag" >/dev/null 2>&1; do
            n=$((n + 1))
            tag="${base}.${n}"
          done
          echo "tag=$tag" >> "$GITHUB_OUTPUT"

      - name: Create release
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git tag "${{ steps.tag.outputs.tag }}"
          git push origin "${{ steps.tag.outputs.tag }}"
          gh release create "${{ steps.tag.outputs.tag }}" \
            --title "Kernels ${{ steps.tag.outputs.tag }}" \
            --notes "Built from commit ${{ github.sha }} on ${{ github.ref_name }}" \
            ./release-assets/*

      - uses: google-github-actions/auth@v2
        with:
          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
          service_account: ${{ secrets.GCP_SERVICE_ACCOUNT_EMAIL }}

      - uses: google-github-actions/upload-cloud-storage@v2
        with:
          path: ./builds
          destination: ${{ vars.GCP_BUCKET_NAME }}/kernels
          gzip: false
          parent: false