125 lines
4.5 KiB
YAML
125 lines
4.5 KiB
YAML
name: Release Tool
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v*"
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: self-hosted
|
|
env:
|
|
CHECKOUT_PATH: ${{ vars.SOW_TOOLS_CHECKOUT_PATH }}
|
|
|
|
steps:
|
|
- name: Sync tools checkout to tag
|
|
env:
|
|
TAG_NAME: ${{ github.ref_name }}
|
|
run: |
|
|
set -euo pipefail
|
|
CHECKOUT_PATH="${CHECKOUT_PATH:-/home/ubuntu/tools-checkout}"
|
|
cd "${CHECKOUT_PATH}"
|
|
git fetch origin --prune --tags
|
|
git reset --hard "${TAG_NAME}"
|
|
git clean -fd
|
|
|
|
- name: Build sow-toolkit
|
|
run: |
|
|
set -euo pipefail
|
|
CHECKOUT_PATH="${CHECKOUT_PATH:-/home/ubuntu/tools-checkout}"
|
|
cd "${CHECKOUT_PATH}"
|
|
./build-tool.sh
|
|
|
|
- name: Pack release bundle
|
|
id: pack
|
|
env:
|
|
TAG_NAME: ${{ github.ref_name }}
|
|
run: |
|
|
set -euo pipefail
|
|
CHECKOUT_PATH="${CHECKOUT_PATH:-/home/ubuntu/tools-checkout}"
|
|
cd "${CHECKOUT_PATH}"
|
|
binary="tools/sow-toolkit"
|
|
if [[ ! -x "${binary}" ]]; then
|
|
echo "Missing built tool: ${binary}"
|
|
exit 1
|
|
fi
|
|
archive="/tmp/sow-toolkit-linux-amd64-${TAG_NAME}.tar.gz"
|
|
tar -czf "${archive}" -C tools sow-toolkit
|
|
echo "archive=${archive}" >> "$GITHUB_OUTPUT"
|
|
echo "asset_name=sow-toolkit-linux-amd64.tar.gz" >> "$GITHUB_OUTPUT"
|
|
echo "tag=${TAG_NAME}" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Create release and upload artifact
|
|
env:
|
|
GITEA_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
GITEA_SERVER_URL: ${{ github.server_url }}
|
|
GITEA_REPO: ${{ github.repository }}
|
|
ARCHIVE: ${{ steps.pack.outputs.archive }}
|
|
ASSET_NAME: ${{ steps.pack.outputs.asset_name }}
|
|
TAG_NAME: ${{ steps.pack.outputs.tag }}
|
|
run: |
|
|
set -euo pipefail
|
|
API="${GITEA_SERVER_URL%/}/api/v1"
|
|
OWNER="${GITEA_REPO%%/*}"
|
|
NAME="${GITEA_REPO#*/}"
|
|
AUTH=(-H "Authorization: token ${GITEA_API_TOKEN}" -H "Accept: application/json")
|
|
RESP_FILE=/tmp/gitea-release.json
|
|
|
|
CODE=$(curl -sS -o "${RESP_FILE}" -w "%{http_code}" "${AUTH[@]}" \
|
|
"${API}/repos/${OWNER}/${NAME}/releases/tags/${TAG_NAME}")
|
|
|
|
if [[ "${CODE}" == "200" ]]; then
|
|
RELEASE_ID=$(jq -r '.id' "${RESP_FILE}")
|
|
else
|
|
BODY=$(jq -n --arg t "${TAG_NAME}" \
|
|
'{tag_name: $t, name: $t, body: "sow-toolkit binary release built by Gitea Actions."}')
|
|
CODE=$(curl -sS -o "${RESP_FILE}" -w "%{http_code}" "${AUTH[@]}" \
|
|
-X POST -H "Content-Type: application/json" \
|
|
-d "${BODY}" \
|
|
"${API}/repos/${OWNER}/${NAME}/releases")
|
|
if [[ "${CODE}" != "201" && "${CODE}" != "200" ]]; then
|
|
echo "Create release failed (HTTP ${CODE}):"
|
|
cat "${RESP_FILE}"
|
|
exit 1
|
|
fi
|
|
RELEASE_ID=$(jq -r '.id' "${RESP_FILE}")
|
|
fi
|
|
|
|
ASSET_ID=$(jq -r --arg name "${ASSET_NAME}" '.assets[]? | select(.name == $name) | .id' "${RESP_FILE}" | head -n1)
|
|
if [[ -n "${ASSET_ID}" ]]; then
|
|
curl -sS -f "${AUTH[@]}" -X DELETE \
|
|
"${API}/repos/${OWNER}/${NAME}/releases/${RELEASE_ID}/assets/${ASSET_ID}"
|
|
fi
|
|
|
|
curl -sS -f "${AUTH[@]}" -X POST \
|
|
-F "attachment=@${ARCHIVE}" \
|
|
"${API}/repos/${OWNER}/${NAME}/releases/${RELEASE_ID}/assets?name=${ASSET_NAME}"
|
|
|
|
- name: Cleanup temporary files
|
|
if: always()
|
|
env:
|
|
TAG_NAME: ${{ github.ref_name }}
|
|
run: |
|
|
rm -f "/tmp/sow-toolkit-linux-amd64-${TAG_NAME}.tar.gz" /tmp/gitea-release.json
|
|
|
|
- name: Prune old releases (keep latest 1)
|
|
env:
|
|
GITEA_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
GITEA_SERVER_URL: ${{ github.server_url }}
|
|
GITEA_REPO: ${{ github.repository }}
|
|
run: |
|
|
set -euo pipefail
|
|
API="${GITEA_SERVER_URL%/}/api/v1"
|
|
OWNER="${GITEA_REPO%%/*}"
|
|
NAME="${GITEA_REPO#*/}"
|
|
AUTH=(-H "Authorization: token ${GITEA_API_TOKEN}" -H "Accept: application/json")
|
|
curl -sS "${AUTH[@]}" \
|
|
"${API}/repos/${OWNER}/${NAME}/releases?limit=50&page=1" \
|
|
-o /tmp/all-releases.json
|
|
jq -r '.[1:][].id' /tmp/all-releases.json | while read -r rid; do
|
|
[[ -n "${rid}" ]] || continue
|
|
curl -sS -f "${AUTH[@]}" -X DELETE \
|
|
"${API}/repos/${OWNER}/${NAME}/releases/${rid}"
|
|
done
|
|
rm -f /tmp/all-releases.json
|