Release #39
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| version: | |
| description: "Release Version" | |
| required: true | |
| jobs: | |
| build-windows: | |
| runs-on: ubuntu-latest | |
| environment: release | |
| env: | |
| PUB_KEY: ${{ secrets.UID_PUBLIC_KEY_PEM }} | |
| MXE_DIR: /usr/lib/mxe | |
| MXE_TARGET: x86_64-w64-mingw32.static | |
| MXE_PACKAGE_PREFIX: mxe-x86-64-w64-mingw32.static | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Write PUB key into file | |
| run: | | |
| echo $PUB_KEY >> faf_pub.pem | |
| openssl rsa -noout -inform PEM -in faf_pub.pem -pubin -modulus | |
| - name: Configure MXE | |
| run: | | |
| echo "deb https://pkg.mxe.cc/repos/apt focal main" | sudo tee /etc/apt/sources.list.d/mxeapt.list | |
| wget -qO- https://pkg.mxe.cc/repos/apt/client-conf/mxeapt.gpg | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/mxeapt.gpg | |
| sudo apt-get update | |
| # the part without MXE_PACKAGE_PREFIX is from https://mxe.cc/#requirements | |
| sudo apt-get install \ | |
| autoconf \ | |
| automake \ | |
| autopoint \ | |
| bash \ | |
| bison \ | |
| bzip2 \ | |
| flex \ | |
| g++ \ | |
| g++-multilib \ | |
| gettext \ | |
| git \ | |
| gperf \ | |
| intltool \ | |
| libc6-dev-i386 \ | |
| libgdk-pixbuf2.0-dev \ | |
| libltdl-dev \ | |
| libgl-dev \ | |
| libpcre3-dev \ | |
| libssl-dev \ | |
| libtool-bin \ | |
| libxml-parser-perl \ | |
| lzip \ | |
| make \ | |
| openssl \ | |
| p7zip-full \ | |
| patch \ | |
| perl \ | |
| python3 \ | |
| python3-distutils \ | |
| python3-mako \ | |
| python3-packaging \ | |
| python3-pkg-resources \ | |
| python-is-python3 \ | |
| ruby \ | |
| sed \ | |
| sqlite3 \ | |
| unzip \ | |
| wget \ | |
| xz-utils \ | |
| $MXE_PACKAGE_PREFIX-jsoncpp \ | |
| $MXE_PACKAGE_PREFIX-cryptopp \ | |
| $MXE_PACKAGE_PREFIX-icu4c | |
| - name: Build | |
| run: | | |
| $MXE_DIR/usr/bin/$MXE_TARGET-cmake \ | |
| -DCMAKE_BUILD_TYPE=Release \ | |
| -DCRYPTOPP_LIBRARIES=$MXE_DIR/usr/$MXE_TARGET/lib/libcryptopp.a \ | |
| -DCRYPTOPP_INCLUDE_DIRS=$MXE_DIR/usr/$MXE_TARGET/include \ | |
| -DUID_SKIP_LEGACY=On \ | |
| -DUID_PUBKEY_BYTES=$(./encode_openssl_modulus.py $(openssl rsa -noout -inform PEM -in faf_pub.pem -pubin -modulus)) | |
| -B build | |
| make -C build | |
| - name: Upload artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: faf-uid-windows | |
| path: build/faf-uid.exe | |
| build-linux: | |
| runs-on: ubuntu-latest | |
| environment: release | |
| env: | |
| PUB_KEY: ${{ secrets.UID_PUBLIC_KEY_PEM }} | |
| JSONCPP_VERSION: 1.7.7 | |
| CRYPTOPP_VERSION: 8_9_0 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Write PUB key into file | |
| run: | | |
| echo $PUB_KEY >> faf_pub.pem | |
| openssl rsa -noout -inform PEM -in faf_pub.pem -pubin -modulus | |
| - name: Build jsoncpp | |
| run: | | |
| wget https://github.com/open-source-parsers/jsoncpp/archive/$JSONCPP_VERSION.tar.gz -O jsoncpp.tar.gz | |
| tar xfz jsoncpp.tar.gz | |
| cmake \ | |
| -DCMAKE_BUILD_TYPE=MinSizeRel \ | |
| -DJSONCPP_WITH_POST_BUILD_UNITTEST=OFF \ | |
| -DBUILD_STATIC_LIBS=ON \ | |
| -DBUILD_SHARED_LIBS=OFF \ | |
| -DUID_PUBKEY_BYTES=$(./encode_openssl_modulus.py $(openssl rsa -noout -inform PEM -in faf_pub.pem -pubin -modulus)) | |
| -B jsoncpp-build \ | |
| -S jsoncpp-$JSONCPP_VERSION | |
| make -C jsoncpp-build | |
| - name: Build cryptopp | |
| run: | | |
| wget https://github.com/weidai11/cryptopp/archive/CRYPTOPP_$CRYPTOPP_VERSION.zip -O cryptopp.zip | |
| unzip ./cryptopp.zip | |
| mv cryptopp-CRYPTOPP_$CRYPTOPP_VERSION cryptopp | |
| make -C cryptopp -f GNUmakefile CXXFLAGS='-DNDEBUG -O3' libcryptopp.a | |
| - name: Build | |
| run: | | |
| cmake \ | |
| -DJSONCPP_LIBRARIES=$(pwd)/jsoncpp-build/src/lib_json/libjsoncpp.a \ | |
| -DJSONCPP_INCLUDE_DIRS=$(pwd)/jsoncpp-$JSONCPP_VERSION/include \ | |
| -DCRYPTOPP_LIBRARIES=$(pwd)/cryptopp/libcryptopp.a \ | |
| -DCRYPTOPP_INCLUDE_DIRS=$(pwd)/cryptopp \ | |
| -DCMAKE_BUILD_TYPE=MinSizeRel \ | |
| -B build | |
| make -C build | |
| - name: Upload artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: faf-uid-linux | |
| path: build/faf-uid | |
| create-release: | |
| needs: [build-windows, build-linux] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Download Windows artifact | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: faf-uid-windows | |
| path: release-artifacts/ | |
| - name: Download Linux artifact | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: faf-uid-linux | |
| path: release-artifacts/ | |
| - name: Create release | |
| id: create_release | |
| uses: ncipollo/[email protected] | |
| with: | |
| commit: ${{ github.sha }} | |
| tag: ${{ github.event.inputs.version }} | |
| draft: true | |
| prerelease: true | |
| artifacts: "release-artifacts/*" |