mirror of
https://github.com/outbackdingo/Biohazard.git
synced 2026-01-27 10:18:27 +00:00
chore: yeet
This commit is contained in:
144
.github/workflows/vyos-build.yaml
vendored
144
.github/workflows/vyos-build.yaml
vendored
@@ -1,144 +0,0 @@
|
||||
---
|
||||
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
|
||||
name: "VyOS Build"
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
version:
|
||||
description: VyOS version to build
|
||||
# renovate: datasource=github-tags depName=vyos/vyos-1x
|
||||
default: "1.4.0-epa1"
|
||||
required: true
|
||||
type:
|
||||
description: VyOS version type
|
||||
type: choice
|
||||
options: ["lts", "rolling"]
|
||||
required: true
|
||||
debian:
|
||||
description: |
|
||||
Debian version codename
|
||||
(only used by custom packages' APT repos)
|
||||
default: "bookworm"
|
||||
required: true
|
||||
docker:
|
||||
description: vyos-build image tag (`sagitta`/`current`/custom)
|
||||
# type: choice
|
||||
# options: ["sagitta", "current"]
|
||||
type: string
|
||||
required: false
|
||||
push:
|
||||
branches: ["main"]
|
||||
paths:
|
||||
- vyos/build.sh
|
||||
- .github/workflows/vyos-build.yaml
|
||||
|
||||
env:
|
||||
VYOS_BUILDER: "${{ github.repository_owner }}"
|
||||
# renovate: datasource=github-tags depName=vyos/vyos-1x
|
||||
VYOS_VERSION: "1.4.0-epa1"
|
||||
VYOS_VERSION_TYPE: "${{ github.event.inputs.type || 'lts' }}"
|
||||
VYOS_ARCH: "amd64"
|
||||
DEBIAN_CODENAME: "${{ github.event.inputs.debian || 'bookworm' }}"
|
||||
|
||||
jobs:
|
||||
build:
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: write
|
||||
container:
|
||||
image: "docker.io/vyos/vyos-build:${{ github.event.inputs.docker || 'sagitta' }}"
|
||||
options: --privileged
|
||||
steps:
|
||||
- name: "Setup variables"
|
||||
id: "vars"
|
||||
shell: "bash"
|
||||
run: |
|
||||
echo "VYOS_BUILD_TIME=$(date +%Y%m%d%H%M)" >> "${GITHUB_ENV}"
|
||||
echo "VYOS_VERSION=${{ github.event.inputs.version || env.VYOS_VERSION }}" >> "${GITHUB_ENV}"
|
||||
|
||||
- name: "Generate Short Lived OAuth App Token (ghs_*)"
|
||||
uses: actions/create-github-app-token@7bfa3a4717ef143a604ee0a99d859b8886a96d00 # v1.9.3
|
||||
id: oauth-token
|
||||
with:
|
||||
app-id: "${{ secrets.BOT_APP_ID }}" # $BOT_APP_ID is found in GitHub App main settings page
|
||||
private-key: "${{ secrets.BOT_JWT_PRIVATE_KEY }}" # $BOT_JWT_PRIVATE_KEY is generated in GitHub App main settings page, uses the X.509 private key format
|
||||
|
||||
- name: Checkout
|
||||
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
|
||||
with:
|
||||
token: "${{ steps.oauth-token.outputs.token }}"
|
||||
|
||||
- name: Build
|
||||
shell: bash
|
||||
run: |
|
||||
sudo \
|
||||
VYOS_VERSION=${{ env.VYOS_VERSION }} \
|
||||
VYOS_VERSION_TYPE=${{ env.VYOS_VERSION_TYPE }} \
|
||||
VYOS_ARCH=${{ env.VYOS_ARCH }} \
|
||||
VYOS_BUILDER=${{ env.VYOS_BUILDER }} \
|
||||
VYOS_BUILD_TIME=${{ env.VYOS_BUILD_TIME }} \
|
||||
DEBIAN_CODENAME=${{ env.DEBIAN_CODENAME }} \
|
||||
bash ./vyos/build.sh
|
||||
|
||||
- name: Upload output ISO as artifact
|
||||
uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
|
||||
with:
|
||||
name: "vyos-v${{ env.VYOS_VERSION }}-${{ env.VYOS_VERSION_TYPE }}-${{ env.VYOS_BUILDER }}-${{ env.VYOS_BUILD_TIME }}-${{ env.VYOS_ARCH }}-iso"
|
||||
path: "./vyos-build/build/vyos-${{ env.VYOS_VERSION }}-${{ env.VYOS_VERSION_TYPE }}-${{ env.VYOS_BUILDER }}-${{ env.VYOS_BUILD_TIME }}-${{ env.VYOS_ARCH }}.iso"
|
||||
|
||||
upload:
|
||||
needs: build
|
||||
runs-on: ubuntu-latest
|
||||
container:
|
||||
image: "docker.io/rclone/rclone:1.66.0@sha256:c89de48cf43e665006077db2ebe47a52ab0f1d6846659f0ca6a0cb01b5559b85" # must be at least Alpine base, because of scripting
|
||||
steps:
|
||||
- name: Download ISO artifact
|
||||
uses: actions/download-artifact@v4
|
||||
- name: "Upload to Cloudflare R2"
|
||||
env:
|
||||
# backend config
|
||||
RCLONE_CONFIG_R2_TYPE: "s3"
|
||||
RCLONE_CONFIG_R2_PROVIDER: "Cloudflare"
|
||||
RCLONE_CONFIG_R2_ENV_AUTH: "true"
|
||||
RCLONE_CONFIG_R2_ENDPOINT: "${{ secrets.R2_ENDPOINT }}"
|
||||
RCLONE_CONFIG_R2_NO_CHECK_BUCKET: "true" # needed for single file copyto bucket root, https://github.com/rclone/rclone/issues/5271 https://forum.rclone.org/t/issue-using-copyto-for-single-files/38842
|
||||
AWS_ACCESS_KEY_ID: "${{ secrets.VYOS_BUILD_R2_ID }}"
|
||||
AWS_SECRET_ACCESS_KEY: "${{ secrets.VYOS_BUILD_R2_KEY }}"
|
||||
# verbosity
|
||||
RCLONE_PROGRESS: "true"
|
||||
# reducing S3 API costs
|
||||
RCLONE_FAST_LIST: "true"
|
||||
RCLONE_UPDATE: "true"
|
||||
RCLONE_USE_SERVER_MODTIME: "true"
|
||||
run:
|
||||
| # first copies ISO as is, then copies ISO with common "latest" filename (with some filters to avoid hardcoding and safeguard against uploading the wrong thing if somehow >1 file), then deletes files older than the past 5 number of files under that arch and builder name
|
||||
for i in $(find . -type f -iname "*.iso"); do mv $i ./; done
|
||||
ls -AlhR .
|
||||
export FILE=$(find . -type f | tail -n 1)
|
||||
echo "File to upload:"
|
||||
echo "${FILE}"
|
||||
rclone copy ./ r2:vyos-build/
|
||||
rclone copyto r2:vyos-build/${FILE} r2:vyos-build/${{ env.VYOS_VERSION_TYPE }}-${{ env.VYOS_ARCH }}.iso
|
||||
rclone lsf --format=p r2:vyos-build | grep "${{ env.VYOS_VERSION_TYPE }}" | grep "${{ env.VYOS_BUILDER }}" | grep "${{ env.VYOS_ARCH }}" | tail -n +3 | rclone delete --files-from - r2:vyos-build
|
||||
rclone cleanup r2:vyos-build
|
||||
|
||||
# OLD CHANGELOG, TODO: maybe add this as a CHANGELOG.md to R2 bucket?
|
||||
# body: |
|
||||
# # WARNING
|
||||
# PLEASE **DO NOT USE** MY IMAGES/ISO UNLESS YOU WANT SOME POTENTIALLY JANKY STUFF!
|
||||
# I **WILL NOT** BE PROVIDING ANY HELP OR SUPPORT OR WARRANTY, **YOU'RE ON YOUR OWN**!
|
||||
# This is for my own consumption only.
|
||||
|
||||
# **YOU HAVE BEEN WARNED!**
|
||||
|
||||
# # Changelog
|
||||
# Official VyOS Changelog:
|
||||
# https://docs.vyos.io/en/latest/changelog/1.4.html
|
||||
|
||||
# # Extra package versions
|
||||
# SOPS: ${{ env.SOPS_VERSION }}
|
||||
# vyaml: ${{ env.VYAML_VERSION }}
|
||||
# Atuin: ${{ env.ATUIN_VERSION }}
|
||||
# Task: ${{ env.TASK_VERSION }}
|
||||
# Duo Unix: ${{ env.DUO_VERSION }}
|
||||
Reference in New Issue
Block a user