Andreas Brenner
3b3e550860
On a published GitHub Release, for each target (amd64 Linux, arm macOS) run the Rust test suite and the hurl HTTP contract tests, build the release binary on a stable toolchain, and upload it as a target-named asset on the triggering release. Trigger is release:published per ANW-29 -- aav creates the release and tag in the UI; the workflow never creates them.
86 lines
3.2 KiB
YAML
86 lines
3.2 KiB
YAML
# Release builds for anwesen ([ANW-29]).
|
|
#
|
|
# GitHub is a secondary remote that aav pushes to by hand; the primary home
|
|
# is the operator's forge. aav creates and publishes a GitHub Release in the
|
|
# UI (the release carries its own tag). This workflow reacts to that publish:
|
|
# for each target it runs the tests, builds the release binary, and uploads
|
|
# it as a target-named asset on the triggering release. It never creates the
|
|
# tag or the release.
|
|
name: release
|
|
|
|
on:
|
|
release:
|
|
types: [published]
|
|
|
|
# The build jobs attach binaries to the triggering release.
|
|
permissions:
|
|
contents: write
|
|
|
|
jobs:
|
|
build:
|
|
name: ${{ matrix.label }}
|
|
runs-on: ${{ matrix.runner }}
|
|
strategy:
|
|
# One target's failure should not cancel the other's build.
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
# amd64 Linux -- the deploy target. Built natively on ubuntu-latest.
|
|
- runner: ubuntu-latest
|
|
label: x86_64-linux
|
|
os: linux
|
|
# arm macOS -- aav's local machine. Built natively on Apple Silicon.
|
|
- runner: macos-14
|
|
label: aarch64-macos
|
|
os: macos
|
|
steps:
|
|
- name: Check out the release tag
|
|
uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ github.event.release.tag_name }}
|
|
|
|
# Stable channel; edition 2024 needs >= 1.85, and Cargo.toml pins the
|
|
# MSRV at 1.95. Pin an explicit version here if a frozen release
|
|
# toolchain is ever required.
|
|
- name: Install the Rust toolchain
|
|
uses: dtolnay/rust-toolchain@stable
|
|
|
|
- name: Cache cargo registry, index, and target
|
|
uses: Swatinem/rust-cache@v2
|
|
|
|
# The HTTP contract harness (tests/run-hurl.sh, per ADR-008) boots
|
|
# `anwesen serve` and runs hurl against it -- headless, so it runs in CI.
|
|
# The HTTP contract is arch-independent, so it runs once on Linux; the
|
|
# macOS runner's stock bash is 3.2 and the harness needs bash 4+
|
|
# (`shopt -s globstar`), which would only add fragility for no extra
|
|
# coverage.
|
|
- name: Install hurl
|
|
if: matrix.os == 'linux'
|
|
run: |
|
|
curl -fsSL -o /tmp/hurl.deb \
|
|
https://github.com/Orange-OpenSource/hurl/releases/download/8.0.0/hurl_8.0.0_amd64.deb
|
|
sudo dpkg -i /tmp/hurl.deb
|
|
|
|
# Test before building the artifact so a release never ships a red build.
|
|
# The debug build here is what run-hurl.sh exercises.
|
|
- name: Run the Rust test suite
|
|
run: cargo test --locked
|
|
|
|
- name: Run the HTTP contract tests
|
|
if: matrix.os == 'linux'
|
|
run: tests/run-hurl.sh
|
|
|
|
- name: Build the release binary
|
|
run: cargo build --release --locked
|
|
|
|
# The runner is native to its target, so target/release/anwesen is the
|
|
# target binary. Name it so the target is unambiguous on the release.
|
|
- name: Name the asset for its target
|
|
run: |
|
|
install -m 0755 target/release/anwesen \
|
|
"anwesen-${{ github.event.release.tag_name }}-${{ matrix.label }}"
|
|
|
|
- name: Upload the binary to the release
|
|
uses: softprops/action-gh-release@v2
|
|
with:
|
|
files: anwesen-${{ github.event.release.tag_name }}-${{ matrix.label }}
|