mirror of
https://github.com/containers/podman.git
synced 2025-08-06 19:44:14 +08:00
260 lines
8.9 KiB
YAML
260 lines
8.9 KiB
YAML
name: Upload Release Artifacts
|
|
|
|
on:
|
|
release:
|
|
types: [published]
|
|
workflow_dispatch:
|
|
inputs:
|
|
version:
|
|
description: 'Release version to build and upload (e.g. "v9.8.7")'
|
|
required: true
|
|
dryrun:
|
|
description: 'Perform all the steps except uploading to the release page'
|
|
required: true
|
|
default: "true" # 'choice' type requires string value
|
|
type: choice
|
|
options:
|
|
- "true" # Must be quoted string, boolean value not supported.
|
|
- "false"
|
|
|
|
permissions:
|
|
contents: write
|
|
actions: write
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-22.04
|
|
steps:
|
|
# If the job fails, these details are all but impossible to observe.yy
|
|
- name: Provide github event JSON for examination
|
|
run: |
|
|
echo "::group::Event JSON"
|
|
jq --color-output "." "${{ github.event_path }}"
|
|
echo "::endgroup::"
|
|
|
|
- name: Determine Version
|
|
id: getversion
|
|
run: |
|
|
if [[ -z "${{ inputs.version }}" ]]
|
|
then
|
|
VERSION=${{ github.event.release.tag_name }}
|
|
else
|
|
VERSION=${{ inputs.version }}
|
|
fi
|
|
|
|
if ! grep -Eq 'v[0-9]+(\.[0-9]+(\.[0-9]+(-.+)?)?)?$' <<<"$VERSION"
|
|
then
|
|
echo "Unable to parse release version '$VERSION' from github event JSON, or workflow 'version' input."
|
|
exit 1
|
|
fi
|
|
|
|
if grep -Eq '.+-dev$' <<<"$VERSION"
|
|
then
|
|
echo "Refusing to process a "-dev" version '$VERSION'"
|
|
exit 1
|
|
fi
|
|
|
|
echo
|
|
echo "version=$VERSION" >> $GITHUB_OUTPUT
|
|
|
|
- name: Consolidate dryrun setting to always be true or false
|
|
id: actual_dryrun
|
|
run: |
|
|
# The 'release' trigger will not have a 'dryrun' input set. Handle
|
|
# this case in a readable/maintainable way.
|
|
if [[ -z "${{ inputs.dryrun }}" ]]
|
|
then
|
|
echo "dryrun=false" >> $GITHUB_OUTPUT
|
|
else
|
|
echo "dryrun=${{ inputs.dryrun }}" >> $GITHUB_OUTPUT
|
|
fi
|
|
|
|
- name: Dry Run Status
|
|
run: |
|
|
echo "::notice::This workflow execution will be a dry-run: ${{ steps.actual_dryrun.outputs.dryrun }}"
|
|
|
|
- name: Check uploads
|
|
id: check
|
|
run: |
|
|
URI="https://github.com/containers/podman/releases/download/${{steps.getversion.outputs.version}}"
|
|
for artifact in "podman-remote-release-darwin_amd64.zip darwin_amd" \
|
|
'podman-remote-release-darwin_arm64.zip darwin_arm' \
|
|
'podman-remote-release-windows_amd64.zip windows_amd' \
|
|
'podman-remote-static-linux_amd64.tar.gz linux_amd' \
|
|
'podman-remote-static-linux_arm64.tar.gz linux_arm'
|
|
do
|
|
set -- $artifact # Convert the "tuple" into the param args $1 $2...
|
|
status=$(curl -s -o /dev/null -w "%{http_code}" "${URI}/${1:?}")
|
|
if [[ "$status" == "404" ]] ; then
|
|
echo "${1:?} will be built"
|
|
needsbuild=true
|
|
echo "${2:?}=true" >> $GITHUB_OUTPUT
|
|
else
|
|
echo "::warning::${1:?} already exists, skipping"
|
|
fi
|
|
done
|
|
|
|
if [ "$needsbuild" = true ]; then
|
|
echo "buildartifacts=true" >> $GITHUB_OUTPUT
|
|
else
|
|
echo "No new artifacts need to be built."
|
|
fi
|
|
|
|
- name: Checkout Version
|
|
uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{steps.getversion.outputs.version}}
|
|
|
|
- name: Set up Go
|
|
if: >-
|
|
steps.check.outputs.buildartifacts == 'true' ||
|
|
steps.actual_dryrun.outputs.dryrun == 'true'
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version: stable
|
|
|
|
- name: Setup artifact directory
|
|
if: >-
|
|
steps.check.outputs.buildartifacts == 'true' ||
|
|
steps.actual_dryrun.outputs.dryrun == 'true'
|
|
run: mkdir -p release/
|
|
|
|
- name: Build Darwin AMD
|
|
if: >-
|
|
steps.check.outputs.darwin_amd == 'true' ||
|
|
steps.actual_dryrun.outputs.dryrun == 'true'
|
|
run: |
|
|
make podman-remote-release-darwin_amd64.zip
|
|
mv podman-remote-release-darwin_amd64.zip release/
|
|
|
|
- name: Build Darwin ARM
|
|
if: >-
|
|
steps.check.outputs.darwin_arm == 'true' ||
|
|
steps.actual_dryrun.outputs.dryrun == 'true'
|
|
run: |
|
|
make podman-remote-release-darwin_arm64.zip
|
|
mv podman-remote-release-darwin_arm64.zip release/
|
|
|
|
- name: Build Linux AMD
|
|
if: >-
|
|
steps.check.outputs.linux_amd == 'true' ||
|
|
steps.actual_dryrun.outputs.dryrun == 'true'
|
|
run: |
|
|
make podman-remote-static-linux_amd64
|
|
tar -cvzf podman-remote-static-linux_amd64.tar.gz bin/podman-remote-static-linux_amd64
|
|
mv podman-remote-static-linux_amd64.tar.gz release/
|
|
|
|
- name: Build Linux ARM
|
|
if: >-
|
|
steps.check.outputs.linux_arm == 'true' ||
|
|
steps.actual_dryrun.outputs.dryrun == 'true'
|
|
run: |
|
|
make podman-remote-static-linux_arm64
|
|
tar -cvzf podman-remote-static-linux_arm64.tar.gz bin/podman-remote-static-linux_arm64
|
|
mv podman-remote-static-linux_arm64.tar.gz release/
|
|
|
|
- name: Build Windows AMD
|
|
if: >-
|
|
steps.check.outputs.windows_amd == 'true' ||
|
|
steps.actual_dryrun.outputs.dryrun == 'true'
|
|
run: |
|
|
sudo apt-get install -y pandoc
|
|
make podman-remote-release-windows_amd64.zip
|
|
mv podman-remote-release-windows_amd64.zip release/
|
|
|
|
- name: shasums
|
|
if: >-
|
|
steps.check.outputs.buildartifacts == 'true' ||
|
|
steps.actual_dryrun.outputs.dryrun == 'true'
|
|
run: |
|
|
pushd release
|
|
sha256sum *.zip *.tar.gz > shasums
|
|
popd
|
|
|
|
- name: Upload to Actions as artifact
|
|
if: >-
|
|
steps.check.outputs.buildartifacts == 'true' ||
|
|
steps.actual_dryrun.outputs.dryrun == 'true'
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: artifacts
|
|
path: |
|
|
release/*
|
|
|
|
- name: Upload to Release
|
|
id: upload
|
|
if: >-
|
|
steps.check.outputs.buildartifacts == 'true' &&
|
|
steps.actual_dryrun.outputs.dryrun == 'false'
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
(gh release download ${{steps.getversion.outputs.version}} -p "shasums" || exit 0)
|
|
cat release/shasums >> shasums
|
|
gh release upload ${{steps.getversion.outputs.version}} release/*.zip release/*.tar.gz
|
|
gh release upload ${{steps.getversion.outputs.version}} --clobber shasums
|
|
|
|
# WARNING: This should only be set when 'notification' job should be triggered
|
|
echo "complete=true" >> $GITHUB_OUTPUT
|
|
|
|
- name: Trigger Windows Installer
|
|
if: >-
|
|
steps.check.outputs.windows_amd == 'true' ||
|
|
steps.actual_dryrun.outputs.dryrun == 'false'
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
gh workflow run upload-win-installer.yml -f version=${{steps.getversion.outputs.version}} -f dryrun=false
|
|
|
|
outputs:
|
|
uploaded: ${{ steps.upload.outputs.complete }}
|
|
version: ${{ steps.getversion.outputs.version }}
|
|
|
|
notification:
|
|
if: needs.build.outputs.uploaded == 'true'
|
|
runs-on: ubuntu-22.04
|
|
needs: build
|
|
steps:
|
|
- name: Format release email
|
|
id: format
|
|
env:
|
|
VERSION: ${{ needs.build.outputs.version }}
|
|
run: |
|
|
if grep -Eq '.+-rc' <<<"$VERSION"
|
|
then
|
|
RC_PREFIX="candidate "
|
|
fi
|
|
|
|
echo "mail_subj=Podman ${RC_PREFIX}${VERSION} Released" >> $GITHUB_OUTPUT
|
|
|
|
cat <<EOF>email_body.txt
|
|
Hi all,
|
|
|
|
Podman ${RC_PREFIX}${VERSION} is now available. You may view the full details at
|
|
https://github.com/${{ github.repository }}/releases/tag/$VERSION
|
|
|
|
Release ${RC_PREFIX}Notes:
|
|
--------------
|
|
EOF
|
|
|
|
echo ${{ secrets.GITHUB_TOKEN }} | gh auth login --with-token
|
|
gh release view $VERSION \
|
|
--repo ${{ github.repository }} --json=body --jq '.body' >> email_body.txt
|
|
|
|
# If job fails, permit operator to observe contents in case helpful.
|
|
- name: Provide release e-mail contents for examination
|
|
run: cat email_body.txt
|
|
|
|
- name: Send release notification e-mail
|
|
# Ref: https://github.com/dawidd6/action-send-mail
|
|
uses: dawidd6/action-send-mail@v3.12.0
|
|
with:
|
|
server_address: ${{secrets.ACTION_MAIL_SERVER}}
|
|
server_port: 465
|
|
username: ${{secrets.ACTION_MAIL_USERNAME}}
|
|
password: ${{secrets.ACTION_MAIL_PASSWORD}}
|
|
subject: ${{ steps.format.outputs.mail_subj }}
|
|
to: Podman List <podman@lists.podman.io>
|
|
from: ${{secrets.ACTION_MAIL_SENDER}}
|
|
body: file://./email_body.txt
|