a4bf2234cd
Build the EternalTerminal `et` client in CI the way mosh-client is:
- build-et-binaries.yml builds et for linux x64/arm64, macOS universal
and windows x64, uploads artifacts, and optionally publishes them to a
dedicated binary repository on manual workflow_dispatch.
- scripts/build-et/{linux,macos,windows} compile et from upstream.
- .gitignore excludes the fetched binaries; resources/et/README.md
documents source provenance.
223 lines
7.8 KiB
YAML
223 lines
7.8 KiB
YAML
name: build-et-binaries
|
|
|
|
# Trigger philosophy (mirrors build-mosh-binaries.yml):
|
|
# - Pushes that touch the et build pipeline + PRs run the matrix so we can
|
|
# validate workflow / script changes without tagging. Artifacts upload as
|
|
# workflow artifacts only; *no* release.
|
|
# - Manual `workflow_dispatch` with `release_tag` publishes the binaries +
|
|
# SHA256SUMS to the dedicated binary repository
|
|
# (`binaricat/Netcatty-et-bin` by default).
|
|
#
|
|
# `paths` keeps unrelated commits (UI, bridges, etc) from rebuilding the et
|
|
# binaries on every push.
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
et_ref:
|
|
description: "EternalTerminal git ref (tag/branch/commit) — see https://github.com/MisterTea/EternalTerminal"
|
|
type: string
|
|
default: "et-v6.2.10"
|
|
release_tag:
|
|
description: "Optional release tag to attach binaries to (e.g. et-bin-6.2.10-1). Empty = artifacts only."
|
|
type: string
|
|
default: ""
|
|
release_repo:
|
|
description: "Repository that stores et binary releases."
|
|
type: string
|
|
default: "binaricat/Netcatty-et-bin"
|
|
push:
|
|
branches:
|
|
- "**"
|
|
paths:
|
|
- ".github/workflows/build-et-binaries.yml"
|
|
- "electron-builder.config.cjs"
|
|
- "package.json"
|
|
- "scripts/build-et/**"
|
|
- "scripts/fetch-et-binaries.cjs"
|
|
- "scripts/et-extra-resources.cjs"
|
|
pull_request:
|
|
paths:
|
|
- ".github/workflows/build-et-binaries.yml"
|
|
- "electron-builder.config.cjs"
|
|
- "package.json"
|
|
- "scripts/build-et/**"
|
|
- "scripts/fetch-et-binaries.cjs"
|
|
- "scripts/et-extra-resources.cjs"
|
|
|
|
concurrency:
|
|
group: build-et-binaries-${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
env:
|
|
ET_REF: ${{ inputs.et_ref || 'et-v6.2.10' }}
|
|
|
|
jobs:
|
|
# ------------------------------------------------------------------
|
|
# Linux x64 (manylinux2014 / glibc 2.17, broad distro compatibility).
|
|
# ------------------------------------------------------------------
|
|
build-linux-x64:
|
|
name: build-linux-x64
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Build et (linux-x64)
|
|
run: |
|
|
docker run --rm \
|
|
-e ET_REF="${ET_REF}" \
|
|
-e OUT_DIR=/work/out \
|
|
-e ARCH=x64 \
|
|
-v "${GITHUB_WORKSPACE}:/work" \
|
|
-w /work \
|
|
quay.io/pypa/manylinux2014_x86_64 \
|
|
bash scripts/build-et/build-linux.sh
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: et-linux-x64
|
|
path: out/
|
|
|
|
build-linux-arm64:
|
|
name: build-linux-arm64
|
|
runs-on: ubuntu-24.04-arm
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Build et (linux-arm64)
|
|
run: |
|
|
docker run --rm \
|
|
-e ET_REF="${ET_REF}" \
|
|
-e OUT_DIR=/work/out \
|
|
-e ARCH=arm64 \
|
|
-v "${GITHUB_WORKSPACE}:/work" \
|
|
-w /work \
|
|
quay.io/pypa/manylinux2014_aarch64 \
|
|
bash scripts/build-et/build-linux.sh
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: et-linux-arm64
|
|
path: out/
|
|
|
|
# ------------------------------------------------------------------
|
|
# macOS universal2 (arm64 + x86_64 lipo). Min deployment target macOS 11.
|
|
# ------------------------------------------------------------------
|
|
build-macos-universal:
|
|
name: build-macos-universal
|
|
runs-on: macos-15
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Build et (darwin-universal)
|
|
env:
|
|
ET_REF: ${{ env.ET_REF }}
|
|
OUT_DIR: ${{ github.workspace }}/out
|
|
MACOSX_DEPLOYMENT_TARGET: "11.0"
|
|
run: bash scripts/build-et/build-macos.sh
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: et-darwin-universal
|
|
path: out/
|
|
|
|
# ------------------------------------------------------------------
|
|
# Windows x64 — static MSVC build (no DLL bundle).
|
|
# ------------------------------------------------------------------
|
|
build-windows-x64:
|
|
name: build-windows-x64
|
|
runs-on: windows-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Install ninja
|
|
run: choco install -y ninja
|
|
- name: Set up MSVC developer command prompt
|
|
uses: ilammy/msvc-dev-cmd@v1
|
|
with:
|
|
arch: x64
|
|
- name: Build et (win32-x64)
|
|
env:
|
|
ET_REF: ${{ env.ET_REF }}
|
|
OUT_DIR: ${{ github.workspace }}\out
|
|
shell: pwsh
|
|
run: pwsh -File scripts/build-et/build-windows.ps1
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: et-win32-x64
|
|
path: out/
|
|
|
|
# ------------------------------------------------------------------
|
|
# Windows arm64 — intentionally not built until a tested client exists.
|
|
# ------------------------------------------------------------------
|
|
|
|
# ------------------------------------------------------------------
|
|
# Aggregate + optional release to the dedicated binary repository.
|
|
# ------------------------------------------------------------------
|
|
release:
|
|
name: release
|
|
needs:
|
|
- build-linux-x64
|
|
- build-linux-arm64
|
|
- build-macos-universal
|
|
- build-windows-x64
|
|
runs-on: ubuntu-latest
|
|
if: github.event_name == 'workflow_dispatch' && inputs.release_tag != ''
|
|
permissions:
|
|
contents: read
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Download artifacts
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
path: artifacts
|
|
- name: Stage release files
|
|
run: |
|
|
set -euo pipefail
|
|
mkdir -p release
|
|
for d in artifacts/*/; do
|
|
find "$d" -maxdepth 1 -type f -exec cp {} release/ \;
|
|
done
|
|
(cd release && find . -maxdepth 1 -type f ! -name SHA256SUMS -printf '%P\n' | sort | xargs sha256sum > SHA256SUMS)
|
|
ls -la release
|
|
cat release/SHA256SUMS
|
|
- name: Determine tag
|
|
id: tag
|
|
env:
|
|
RELEASE_TAG: ${{ inputs.release_tag }}
|
|
run: |
|
|
tag="${RELEASE_TAG}"
|
|
if [[ ! "$tag" =~ ^et-bin-[A-Za-z0-9._-]+$ ]]; then
|
|
echo "Invalid et binary release tag: $tag" >&2
|
|
exit 1
|
|
fi
|
|
printf 'name=%s\n' "$tag" >> "$GITHUB_OUTPUT"
|
|
- name: Create / update release
|
|
env:
|
|
GH_TOKEN: ${{ secrets.ET_BIN_RELEASE_TOKEN }}
|
|
RELEASE_REPO: ${{ inputs.release_repo }}
|
|
RELEASE_TAG: ${{ steps.tag.outputs.name }}
|
|
run: |
|
|
set -euo pipefail
|
|
if [[ -z "${GH_TOKEN:-}" ]]; then
|
|
echo "::error::ET_BIN_RELEASE_TOKEN is required to publish into ${RELEASE_REPO}."
|
|
exit 1
|
|
fi
|
|
{
|
|
printf '%s\n' 'Pre-built EternalTerminal `et` client binaries consumed by `scripts/fetch-et-binaries.cjs` during `npm run pack`.'
|
|
printf 'Built from `MisterTea/EternalTerminal` upstream ref `%s`.\n\n' "${ET_REF}"
|
|
printf 'Source workflow: %s/%s/actions/runs/%s\n' "${GITHUB_SERVER_URL}" "${GITHUB_REPOSITORY}" "${GITHUB_RUN_ID}"
|
|
printf 'Source commit: `%s`\n\n' "${GITHUB_SHA}"
|
|
printf '%s\n' 'All artifacts are Apache-2.0; see `resources/et/README.md` for source provenance.'
|
|
} > release-notes.md
|
|
if gh release view "${RELEASE_TAG}" --repo "${RELEASE_REPO}" >/dev/null 2>&1; then
|
|
gh release edit "${RELEASE_TAG}" \
|
|
--repo "${RELEASE_REPO}" \
|
|
--title "${RELEASE_TAG}" \
|
|
--notes-file release-notes.md
|
|
gh release upload "${RELEASE_TAG}" release/* \
|
|
--repo "${RELEASE_REPO}" \
|
|
--clobber
|
|
else
|
|
gh release create "${RELEASE_TAG}" release/* \
|
|
--repo "${RELEASE_REPO}" \
|
|
--title "${RELEASE_TAG}" \
|
|
--notes-file release-notes.md
|
|
fi
|