.azure-pipelines/release.yml: add Linux builds

Add Linux release build definitions on Azure Pipelines.

Signed-off-by: Matthew John Cheetham <mjcheetham@outlook.com>

Author: mjcheetham

.azure-pipelines/release.yml

@@ -46,6 +46,16 @@ parameters:
         image: macOS-latest
         os: macos
 
+  - name: linux_matrix
+    type: object
+    default:
+      - id: linux_x64
+        jobName: 'Linux (x64)'
+        runtime: linux-x64
+        pool: GitClientPME-1ESHostedPool-intel-pc
+        image: ubuntu-x86_64-ado1es
+        os: linux
+
 variables:
   - name: 'esrpAppConnectionName'
     value: '1ESGitClient-ESRP-App'
@@ -456,3 +466,97 @@ extends:
                     targetType: inline
                     script: |
                       unzip -uo $(Build.ArtifactStagingDirectory)/tosign/installers.zip -d $(Build.ArtifactStagingDirectory)/installers
+
+          #
+          # Linux build jobs
+          #
+          - ${{ each dim in parameters.linux_matrix }}:
+            - job: ${{ dim.id }}
+              displayName: ${{ dim.jobName }}
+              pool:
+                name: ${{ dim.pool }}
+                image: ${{ dim.image }}
+                os: ${{ dim.os }}
+              variables:
+                version: $[stageDependencies.prebuild.vars.outputs['version.value']]
+              templateContext:
+                outputs:
+                  - output: pipelineArtifact
+                    targetPath: '$(Build.ArtifactStagingDirectory)/payload'
+                    artifactName: '${{ dim.runtime }}_payload'
+                  - output: pipelineArtifact
+                    targetPath: '$(Build.ArtifactStagingDirectory)/symbols'
+                    artifactName: '${{ dim.runtime }}_symbols'
+                  - output: pipelineArtifact
+                    targetPath: '$(Build.ArtifactStagingDirectory)/installers'
+                    artifactName: '${{ dim.runtime }}_installers'
+              steps:
+                - checkout: self
+                - task: UseDotNet@2
+                  displayName: 'Use .NET 8 SDK'
+                  inputs:
+                    packageType: sdk
+                    version: '8.x'
+                - task: Bash@3
+                  displayName: 'Build payload'
+                  inputs:
+                    targetType: filePath
+                    filePath: './src/linux/Packaging.Linux/layout.sh'
+                    arguments: |
+                      --runtime="${{ dim.runtime }}" \
+                      --configuration="Release" \
+                      --output="$(Build.ArtifactStagingDirectory)/payload" \
+                      --symbol-output="$(Build.ArtifactStagingDirectory)/symbols_raw"
+                - task: Bash@3
+                  displayName: 'Build packages'
+                  inputs:
+                    targetType: filePath
+                    filePath: './src/linux/Packaging.Linux/pack.sh'
+                    arguments: |
+                      --version="$(version)" \
+                      --runtime="${{ dim.runtime }}" \
+                      --payload="$(Build.ArtifactStagingDirectory)/payload" \
+                      --symbols="$(Build.ArtifactStagingDirectory)/symbols_raw" \
+                      --output="$(Build.ArtifactStagingDirectory)/pkg"
+                - task: Bash@3
+                  displayName: 'Move symbol packages'
+                  inputs:
+                    targetType: inline
+                    script: |
+                      mkdir -p $(Build.ArtifactStagingDirectory)/symbols
+                      mv $(Build.ArtifactStagingDirectory)/pkg/tar/gcm-*-symbols.tar.gz $(Build.ArtifactStagingDirectory)/symbols
+                - task: CopyFiles@2
+                  displayName: 'Collect packages for publishing'
+                  inputs:
+                    contents: |
+                      **/*.deb
+                      **/*.tar.gz
+                    sourceFolder: '$(Build.ArtifactStagingDirectory)/pkg'
+                    targetFolder: '$(Build.ArtifactStagingDirectory)/installers'
+                - task: EsrpCodeSigning@5
+                  condition: and(succeeded(), eq('${{ parameters.esrp }}', true))
+                  displayName: 'Sign packages'
+                  inputs:
+                    connectedServiceName: '$(esrpAppConnectionName)'
+                    useMSIAuthentication: true
+                    appRegistrationClientId: '$(esrpClientId)'
+                    appRegistrationTenantId: '$(esrpTenantId)'
+                    authAkvName: '$(esrpKeyVaultName)'
+                    authSignCertName: '$(esrpSignReqCertName)'
+                    serviceEndpointUrl: '$(esrpEndpointUrl)'
+                    folderPath: '$(Build.ArtifactStagingDirectory)/installers'
+                    pattern: |
+                      **/*.deb
+                      **/*.tar.gz
+                    useMinimatch: true
+                    signConfigType: inlineSignParams
+                    inlineOperation: |
+                      [
+                        {
+                          "KeyCode": "CP-453387-Pgp",
+                          "OperationCode": "LinuxSign",
+                          "ToolName": "sign",
+                          "ToolVersion": "1.0",
+                          "Parameters": {}
+                        }
+                      ]