ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
  merge_group:
  workflow_call:
    inputs:
      checkout_ref:
        description: Git ref to validate instead of the triggering commit
        required: false
        type: string

permissions:
  contents: read
  packages: write

concurrency:
  group: ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  ci-image:
    name: CI image
    runs-on: ubuntu-latest
    outputs:
      name: ${{ steps.image.outputs.name }}
    steps:
      - uses: actions/checkout@v7
        with:
          ref: ${{ inputs.checkout_ref || github.sha }}

      - name: Log in to GHCR
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Resolve CI image
        id: image
        run: |
          IMAGE="$(bash scripts/ci-image-name.sh)"
          echo "name=$IMAGE" >> "$GITHUB_OUTPUT"

          if docker manifest inspect "$IMAGE" >/dev/null 2>&1; then
            echo "exists=true" >> "$GITHUB_OUTPUT"
          else
            echo "exists=false" >> "$GITHUB_OUTPUT"
          fi

      - uses: docker/setup-qemu-action@v4
        if: steps.image.outputs.exists != 'true'

      - uses: docker/setup-buildx-action@v4
        if: steps.image.outputs.exists != 'true'

      - name: Build and publish CI image
        if: steps.image.outputs.exists != 'true'
        uses: docker/build-push-action@v7
        with:
          context: .
          file: Containerfile
          platforms: linux/amd64,linux/arm64
          push: true
          tags: |
            ${{ steps.image.outputs.name }}
            ghcr.io/luminusos/aurora-shell-ci:sha-${{ github.sha }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

  lint:
    name: Validate
    runs-on: ubuntu-latest
    needs: [ci-image]
    container:
      image: ${{ needs.ci-image.outputs.name }}
      credentials:
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}
    steps:
      - uses: actions/checkout@v7
        with:
          ref: ${{ inputs.checkout_ref || github.sha }}

      - name: Install dependencies
        run: just deps

      - name: Validate
        run: just validate

  unit-tests:
    name: Unit & regression tests
    runs-on: ubuntu-latest
    needs: [ci-image]
    container:
      image: ${{ needs.ci-image.outputs.name }}
      credentials:
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}
    steps:
      - uses: actions/checkout@v7
        with:
          ref: ${{ inputs.checkout_ref || github.sha }}

      - name: Install dependencies
        run: just deps

      - name: Run unit tests
        run: just test unit

  build:
    name: Build
    runs-on: ubuntu-latest
    needs: [ci-image, lint]
    container:
      image: ${{ needs.ci-image.outputs.name }}
      credentials:
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}
    steps:
      - uses: actions/checkout@v7
        with:
          ref: ${{ inputs.checkout_ref || github.sha }}

      - name: Install dependencies
        run: just deps

      - name: Build and inspect extension packages
        run: just package check

      - name: Upload extension zips
        uses: actions/upload-artifact@v7
        with:
          name: extension-zip
          path: |
            dist/target/aurora-shell@luminusos.github.io.shell-extension.zip
            dist/target/aurora-shell@luminusos.github.io.development.shell-extension.zip
          retention-days: 1

  integration-tests:
    name: Integration tests
    runs-on: ubuntu-latest
    needs: [ci-image, build, unit-tests]
    container:
      image: ${{ needs.ci-image.outputs.name }}
      credentials:
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}
      options: --privileged
    steps:
      - uses: actions/checkout@v7
        with:
          ref: ${{ inputs.checkout_ref || github.sha }}

      - name: Download extension zip
        uses: actions/download-artifact@v8
        with:
          name: extension-zip
          path: dist/target/

      - name: Run integration tests
        env:
          DISPLAY: ':0'
          GDK_DEBUG: no-portals
          LIBGL_ALWAYS_SOFTWARE: '1'
          WAYLAND_DISPLAY: gnome-shell-test-display
          XDG_RUNTIME_DIR: /tmp/xdg-runtime
          XDG_SESSION_ID: aurora_ci
        run: |
          install -d -m 0700 "$XDG_RUNTIME_DIR"
          mkdir -p /run/dbus
          mkdir -p /run/systemd/seats
          dbus-daemon --system --fork --nopidfile
          python3 -m dbusmock --system --template logind &
          logind_pid=$!
          python3 -m dbusmock --system --template tests/dbusmock/gdm.py &
          gdm_pid=$!
          trap 'kill "$logind_pid" "$gdm_pid" 2>/dev/null || true' EXIT
          sleep 1
          gdbus call --system \
            --dest org.freedesktop.login1 \
            --object-path /org/freedesktop/login1 \
            --method org.freedesktop.DBus.Mock.AddMethod \
            org.freedesktop.login1.Manager GetUser u o \
            'ret = "/org/freedesktop/login1/user/" + str(args[0])'
          gdbus call --system \
            --dest org.freedesktop.login1 \
            --object-path /org/freedesktop/login1 \
            --method org.freedesktop.DBus.Mock.AddSession \
            "$XDG_SESSION_ID" seat0 "$(id -u)" "$(id -un)" true
          bash scripts/run-shell-tests.sh \
            dist/target/aurora-shell@luminusos.github.io.shell-extension.zip
          AURORA_DEVTOOLS=1 bash scripts/run-shell-tests.sh \
            dist/target/aurora-shell@luminusos.github.io.development.shell-extension.zip \
            tests/shell/auroraDevTool.js