238 lines
7.9 KiB
YAML
238 lines
7.9 KiB
YAML
name: sing-box sdk 24.10.6
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
rr_wrt_branch:
|
|
description: rr-wrt branch for SDK artifact lookup
|
|
required: false
|
|
default: rr-wrt-v24.10.6
|
|
rr_wrt_artifact_name:
|
|
description: rr-wrt SDK artifact name
|
|
required: false
|
|
default: openwrt-filogic-sdk-ci
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-22.04
|
|
timeout-minutes: 240
|
|
env:
|
|
DEBIAN_FRONTEND: noninteractive
|
|
steps:
|
|
- name: checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: install deps
|
|
run: |
|
|
set -euxo pipefail
|
|
sudo apt-get update
|
|
sudo apt-get install -y \
|
|
bash build-essential ca-certificates curl file findutils gawk git grep \
|
|
gzip jq rsync sed tar unzip wget xz-utils zstd
|
|
|
|
- name: setup external go
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version-file: sing-box-rr/go.mod
|
|
cache: false
|
|
|
|
- name: download sdk from rr-wrt artifact
|
|
shell: bash
|
|
env:
|
|
SAM_GAD: ${{ secrets.SAM_GAD }}
|
|
run: |
|
|
set -euxo pipefail
|
|
if [ -z "${SAM_GAD:-}" ]; then
|
|
echo "SAM_GAD secret is required for Gitea API artifact download"
|
|
exit 1
|
|
fi
|
|
|
|
RR_OWNER="routerich"
|
|
RR_REPO="rr-wrt"
|
|
RR_BRANCH='${{ inputs.rr_wrt_branch }}'
|
|
RR_ARTIFACT_NAME='${{ inputs.rr_wrt_artifact_name }}'
|
|
API_BASE="https://git.routerich.ru/api/v1/repos/${RR_OWNER}/${RR_REPO}/actions"
|
|
|
|
if [[ "$SAM_GAD" == *:* ]]; then
|
|
AUTH_ARGS=(-u "$SAM_GAD")
|
|
else
|
|
AUTH_ARGS=(-H "Authorization: token $SAM_GAD")
|
|
fi
|
|
|
|
artifacts_json="$RUNNER_TEMP/rr-wrt-artifacts.json"
|
|
curl -fsSL "${AUTH_ARGS[@]}" \
|
|
"${API_BASE}/artifacts?name=${RR_ARTIFACT_NAME}&per_page=100&page=1" \
|
|
-o "$artifacts_json"
|
|
|
|
jq -r '
|
|
def arr:
|
|
if type == "array" then .
|
|
elif has("artifacts") then .artifacts
|
|
elif has("data") then .data
|
|
else [] end;
|
|
arr[]? | "\(.id // "na")\t\(.name // "na")\t\(.workflow_run.head_branch? // .workflow_run.branch? // .workflow_run.ref? // .ref? // "na")\t\(.expired? // false)"
|
|
' "$artifacts_json" > "$RUNNER_TEMP/rr-wrt-artifacts-list.txt" || true
|
|
head -n 20 "$RUNNER_TEMP/rr-wrt-artifacts-list.txt" || true
|
|
|
|
artifact_id="$(jq -r --arg n "$RR_ARTIFACT_NAME" --arg b "$RR_BRANCH" '
|
|
def arr:
|
|
if type == "array" then .
|
|
elif has("artifacts") then .artifacts
|
|
elif has("data") then .data
|
|
else [] end;
|
|
[
|
|
arr[]?
|
|
| select((.name // "") == $n)
|
|
| select(
|
|
(
|
|
.workflow_run.head_branch?
|
|
// .workflow_run.branch?
|
|
// .workflow_run.ref?
|
|
// .ref?
|
|
// .source_branch?
|
|
// ""
|
|
) == $b
|
|
)
|
|
| select((.expired? // false) == false)
|
|
]
|
|
| sort_by(.id // 0)
|
|
| reverse
|
|
| .[0].id // empty
|
|
' "$artifacts_json")"
|
|
|
|
if [ -z "$artifact_id" ]; then
|
|
artifact_id="$(jq -r --arg n "$RR_ARTIFACT_NAME" '
|
|
def arr:
|
|
if type == "array" then .
|
|
elif has("artifacts") then .artifacts
|
|
elif has("data") then .data
|
|
else [] end;
|
|
[
|
|
arr[]?
|
|
| select((.name // "") == $n)
|
|
| select((.expired? // false) == false)
|
|
]
|
|
| sort_by(.id // 0)
|
|
| reverse
|
|
| .[0].id // empty
|
|
' "$artifacts_json")"
|
|
fi
|
|
|
|
if [ -z "$artifact_id" ]; then
|
|
echo "No artifact found: name=${RR_ARTIFACT_NAME}, branch=${RR_BRANCH}"
|
|
exit 1
|
|
fi
|
|
|
|
mkdir -p "$RUNNER_TEMP/sdk" "$RUNNER_TEMP/sdk-artifact"
|
|
SDK_ARTIFACT_ZIP="$RUNNER_TEMP/sdk-artifact.zip"
|
|
curl -fL "${AUTH_ARGS[@]}" \
|
|
"${API_BASE}/artifacts/${artifact_id}/zip" \
|
|
-o "$SDK_ARTIFACT_ZIP"
|
|
|
|
unzip -q "$SDK_ARTIFACT_ZIP" -d "$RUNNER_TEMP/sdk-artifact"
|
|
|
|
SDK_ARCHIVE="$(find "$RUNNER_TEMP/sdk-artifact" -type f -name '*.tar.zst' | head -n1)"
|
|
test -n "$SDK_ARCHIVE"
|
|
|
|
tar --zstd -xf "$SDK_ARCHIVE" -C "$RUNNER_TEMP/sdk"
|
|
|
|
SDK_DIR="$(find "$RUNNER_TEMP/sdk" -mindepth 1 -maxdepth 1 -type d | head -n1)"
|
|
test -n "$SDK_DIR"
|
|
|
|
echo "SDK_SOURCE_ARTIFACT_ID=$artifact_id" >> "$GITHUB_ENV"
|
|
echo "SDK_ARCHIVE=$SDK_ARCHIVE" >> "$GITHUB_ENV"
|
|
echo "SDK_DIR=$SDK_DIR" >> "$GITHUB_ENV"
|
|
|
|
- name: stage sing-box-rr package into sdk
|
|
shell: bash
|
|
run: |
|
|
set -euxo pipefail
|
|
test -d "$SDK_DIR"
|
|
|
|
rm -rf "$SDK_DIR/package/sing-box-rr"
|
|
mkdir -p "$SDK_DIR/package/sing-box-rr"
|
|
|
|
rsync -a --delete ./sing-box-rr/ "$SDK_DIR/package/sing-box-rr/"
|
|
cp -f ./VERSION "$SDK_DIR/package/VERSION"
|
|
cp -f ./SOURCE_DATE_EPOCH "$SDK_DIR/package/SOURCE_DATE_EPOCH"
|
|
|
|
- name: build package in sdk
|
|
id: build
|
|
continue-on-error: true
|
|
shell: bash
|
|
run: |
|
|
set -euxo pipefail
|
|
mkdir -p logs
|
|
cd "$SDK_DIR"
|
|
|
|
go version > "$GITHUB_WORKSPACE/logs/go-version.log" 2>&1
|
|
command -v go > "$GITHUB_WORKSPACE/logs/go-bin.log" 2>&1
|
|
make defconfig > "$GITHUB_WORKSPACE/logs/sdk-defconfig.log" 2>&1
|
|
|
|
set +e
|
|
# Clean first so the package rebuilds even when PKG_VERSION/PKG_RELEASE stay unchanged.
|
|
make -j"$(nproc)" package/sing-box-rr/clean > "$GITHUB_WORKSPACE/logs/pkg-clean.log" 2>&1
|
|
make -j"$(nproc)" package/sing-box-rr/compile V=s GO_BIN="$(command -v go)" > "$GITHUB_WORKSPACE/logs/pkg-build.log" 2>&1
|
|
rc=$?
|
|
if [ "$rc" -ne 0 ]; then
|
|
tail -n 400 "$GITHUB_WORKSPACE/logs/pkg-build.log" || true
|
|
fi
|
|
exit "$rc"
|
|
|
|
- name: collect packages artifact
|
|
if: always()
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
mkdir -p artifacts/packages logs
|
|
|
|
find "$SDK_DIR/bin/packages" -type f -name 'sing-box-rr_*.ipk' -print | sort > logs/packages-found.txt || true
|
|
|
|
pkg="$(tail -n1 logs/packages-found.txt || true)"
|
|
if [ -n "${pkg:-}" ]; then
|
|
cp -f "$pkg" artifacts/packages/
|
|
else
|
|
echo "err sing-box-rr package not found in sdk output" | tee -a logs/packages-filter.txt
|
|
fi
|
|
|
|
pkg_count=$(find artifacts/packages -maxdepth 1 -type f -name 'sing-box-rr_*.ipk' | wc -l | tr -d ' ')
|
|
if [ "$pkg_count" -ne 1 ]; then
|
|
echo "err expected exactly 1 sing-box-rr package in artifact, got $pkg_count" | tee -a logs/packages-filter.txt
|
|
exit 1
|
|
fi
|
|
|
|
ls -lah artifacts/packages > logs/packages-ls.txt 2>&1 || true
|
|
|
|
- name: upload logs
|
|
if: always()
|
|
uses: christopherhx/gitea-upload-artifact@v4
|
|
with:
|
|
name: sing-box-rr-build-logs
|
|
path: logs/
|
|
if-no-files-found: warn
|
|
compression-level: 0
|
|
|
|
- name: upload sdk archive
|
|
if: always()
|
|
uses: christopherhx/gitea-upload-artifact@v4
|
|
with:
|
|
name: openwrt-sdk-24.10.6
|
|
path: ${{ env.SDK_ARCHIVE }}
|
|
if-no-files-found: warn
|
|
compression-level: 0
|
|
|
|
# - name: upload packages artifact
|
|
# if: always()
|
|
# uses: christopherhx/gitea-upload-artifact@v4
|
|
# with:
|
|
# name: sing-box-rr-packages-24.10.6
|
|
# path: artifacts/packages/
|
|
# if-no-files-found: warn
|
|
# compression-level: 0
|
|
|
|
- name: fail workflow if build failed
|
|
if: steps.build.outcome == 'failure'
|
|
run: |
|
|
echo "package build failed"
|
|
exit 1
|