aboutsummaryrefslogtreecommitdiff
path: root/.github/workflows/ci.yml
blob: 0525c28559cc0e4f7ddd9a4725e080cb6c43049b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
name: CI

on:
  push:
    branches: [main]
  pull_request:
  workflow_dispatch:

env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ghcr.io/sulfurnitride/fluorine-builder

jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      packages: write

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Log in to GHCR
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Pull or build Docker image
        run: |
          if docker pull ${{ env.IMAGE_NAME }}:latest; then
            docker tag ${{ env.IMAGE_NAME }}:latest fluorine-builder:latest
          else
            echo "Pull failed, building from scratch..."
            docker build -t fluorine-builder:latest docker/
          fi

      - name: Restore ccache
        uses: actions/cache@v4
        with:
          path: ~/.cache/fluorine-ccache
          key: ccache-${{ runner.os }}-${{ github.sha }}
          restore-keys: |
            ccache-${{ runner.os }}-

      - name: Determine build metadata
        id: channel
        run: |
          # CI only publishes beta rolling builds. Stable releases are cut
          # manually against a tag — see CHANGELOG.md for the process.
          echo "channel=beta" >> "$GITHUB_OUTPUT"
          echo "timestamp=$(date -u +%Y%m%d%H%M)" >> "$GITHUB_OUTPUT"
          echo "commit=$(git rev-parse --short HEAD)" >> "$GITHUB_OUTPUT"

      - name: Build inside container
        run: |
          mkdir -p ~/.cache/fluorine-ccache
          docker run --rm \
            -v "${{ github.workspace }}:/src:rw" \
            -v "$HOME/.cache/fluorine-ccache:/ccache:rw" \
            -e CCACHE_DIR=/ccache \
            -e CCACHE_BASEDIR=/src \
            -e CCACHE_COMPILERCHECK=content \
            -e CCACHE_SLOPPINESS=time_macros,include_file_mtime,include_file_ctime,pch_defines \
            -e CCACHE_MAXSIZE=5G \
            -e BUILD_MODE=tarball \
            -e FLUORINE_BUILD_CHANNEL=${{ steps.channel.outputs.channel }} \
            -e FLUORINE_BUILD_TIMESTAMP=${{ steps.channel.outputs.timestamp }} \
            -e FLUORINE_BUILD_COMMIT=${{ steps.channel.outputs.commit }} \
            -w /src \
            fluorine-builder:latest \
            bash -c 'ccache -s; bash /src/docker/build-inner.sh; status=$?; echo "=== ccache stats after build ==="; ccache -s; exit $status'

      - name: Package tarball
        run: |
          # The docker build runs as root inside the container, leaving
          # build/ root-owned on the runner. Fix up ownership so subsequent
          # steps (tar write, artifact upload) can operate on it as the
          # regular runner user.
          sudo chown -R "$(id -u):$(id -g)" build
          cd build
          ARCHIVE_NAME="fluorine-manager-beta.tar.gz"
          tar czf "${ARCHIVE_NAME}" fluorine-manager/
          echo "archive=${ARCHIVE_NAME}" >> "$GITHUB_ENV"
          echo "archive_path=build/${ARCHIVE_NAME}" >> "$GITHUB_ENV"

      - name: Upload build
        uses: actions/upload-artifact@v4
        with:
          name: Fluorine-Manager
          path: build/fluorine-manager/
          compression-level: 6
          if-no-files-found: warn

      # -------------------------------------------------------------------
      # Beta rolling release: every push to main overwrites the `beta` tag's
      # release assets so the in-app updater always sees the latest build
      # without cluttering the release history with new tags.
      # -------------------------------------------------------------------
      - name: Publish beta rolling release
        if: github.ref == 'refs/heads/main' && github.event_name == 'push'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GH_REPO: ${{ github.repository }}
        run: |
          TAG="beta"
          BETA_TS="${{ steps.channel.outputs.timestamp }}"
          BETA_COMMIT="${GITHUB_SHA}"
          BETA_SHORT="${BETA_COMMIT:0:7}"
          TITLE="Fluorine Manager beta ${BETA_TS} (${BETA_SHORT})"
          NOTES_FILE="$(mktemp)"
          {
            echo "Rolling beta build from main @ ${BETA_SHORT}."
            echo ""
            echo "- Channel: beta"
            echo "- Timestamp (UTC): ${BETA_TS}"
            echo "- Commit: ${BETA_COMMIT}"
            echo ""
            echo "This release is overwritten with each successful CI build on main."
            echo "For stable releases, see tagged v* releases."
            echo ""
            # Machine-parseable block used by the in-app updater to decide
            # whether the currently-installed beta build already matches. Do
            # not remove or reformat — the updater reads it line-by-line.
            echo "<!-- fluorine-meta"
            echo "channel=beta"
            echo "timestamp=${BETA_TS}"
            echo "commit=${BETA_COMMIT}"
            echo "short=${BETA_SHORT}"
            echo "-->"
          } > "${NOTES_FILE}"

          # Move the rolling tag to the current commit.
          git tag -f "${TAG}" "${GITHUB_SHA}"
          git push -f origin "refs/tags/${TAG}"

          if gh release view "${TAG}" >/dev/null 2>&1; then
            gh release edit "${TAG}" \
              --title "${TITLE}" \
              --notes-file "${NOTES_FILE}" \
              --prerelease
            # Replace the tarball asset (clobber wins over upload+delete race).
            gh release upload "${TAG}" "${archive_path}" --clobber
          else
            gh release create "${TAG}" "${archive_path}" \
              --title "${TITLE}" \
              --notes-file "${NOTES_FILE}" \
              --prerelease
          fi

  build-nixos-mobase:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install Nix
        uses: cachix/install-nix-action@v30
        with:
          nix_path: nixpkgs=channel:nixos-unstable

      - name: Cache Nix store
        uses: actions/cache@v4
        with:
          path: /tmp/nix-cache
          key: nix-mobase-${{ hashFiles('nix/mobase-shell.nix') }}
          restore-keys: nix-mobase-

      - name: Build mobase.so for NixOS
        run: |
          nix-shell nix/mobase-shell.nix --run "
            set -euo pipefail

            # Build libloot from source (not in nixpkgs)
            git clone --depth 1 https://github.com/loot/libloot.git /tmp/libloot
            cmake -S /tmp/libloot/cpp -B /tmp/libloot/build -G Ninja \
              -DCMAKE_BUILD_TYPE=Release \
              -DBUILD_SHARED_LIBS=ON \
              -DLIBLOOT_INSTALL_DOCS=OFF \
              -DBUILD_TESTING=OFF \
              -DCMAKE_INSTALL_PREFIX=/tmp/libloot-install
            cmake --build /tmp/libloot/build --parallel
            cmake --install /tmp/libloot/build

            # Configure full project (only mobase target will be built)
            # Use NIX_PYTHON3 (real nix python) for cmake, not the venv wrapper
            PYBIND11_DIR=\$(python3 -c 'import pybind11; print(pybind11.get_cmake_dir())')
            cmake -S . -B build-nix -G Ninja \
              -DCMAKE_BUILD_TYPE=RelWithDebInfo \
              -DPython_EXECUTABLE=\"\${NIX_PYTHON3}\" \
              -Dpybind11_DIR=\"\${PYBIND11_DIR}\" \
              -DBUILD_PLUGIN_PYTHON=ON \
              -DCMAKE_PREFIX_PATH=/tmp/libloot-install \
              -Dlibloot_DIR=/tmp/libloot-install

            # Build only mobase target
            cmake --build build-nix --target mobase --parallel

            # Package it
            mkdir -p nixos-mobase
            cp build-nix/libs/plugin_python/src/mobase/mobase.cpython-*-linux-gnu.so nixos-mobase/
            echo 'NixOS-compatible mobase pybind11 module for Fluorine Manager.' > nixos-mobase/README.txt
            echo 'Drop this .so into your plugins/libs/ directory, replacing the existing one.' >> nixos-mobase/README.txt
          "

      - name: Upload NixOS mobase
        uses: actions/upload-artifact@v4
        with:
          name: mobase-nixos
          path: nixos-mobase/
          compression-level: 6
          if-no-files-found: warn