UltradesuandClaude Opus 4.8
3752419075
Release / tsunagi-linux-aarch64 (push) Successful in 4m14s
Release / tsunagi-linux-x86_64 (push) Failing after 4m29s
Release / tsunagi-macos-aarch64 (push) Canceled after 0s
Release / tsunagi-windows-x86_64 (push) Canceled after 0s
Release / Publish release (push) Canceled after 0s
The aarch64 GUI cross-build failed: tray-icon links GTK and libappindicator through pkg-config, which zig cross-compilation cannot satisfy without a target sysroot. Rather than set one up, the Linux tray is now built natively on the x86_64 runner with libgtk-3-dev and libayatana-appindicator3-dev installed, so pkg-config just works. The agent is still static musl for both arches. The aarch64 Linux GUI is dropped for now: that archive stays agent-only and no aarch64 tsunagi-gui package is produced. x86_64 gets the tray in its archive and the tsunagi-gui .deb/.pkg.tar.zst. macOS and Windows build the tray natively as before. Guarded on matrix.gnu_target (set only on x86_64 Linux). Note: the native build links the runner's glibc, so the Linux GUI binary needs a reasonably recent glibc; fine for current desktops. A lower baseline would need a GTK sysroot or an older runner image. YAML validated; the Linux GUI build is exercised only by a real CI run. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
285 lines
11 KiB
YAML
285 lines
11 KiB
YAML
name: Release
|
|
|
|
# GitHub version of the release pipeline. The build half mirrors the Gitea one
|
|
# in .gitea/workflows/release.yml (static musl Linux via cargo-zigbuild, native
|
|
# macOS and Windows); only the publish half differs: it uses the current
|
|
# artifact actions (Node 24) and fills the release with `gh`.
|
|
#
|
|
# Every job is gated on `github.server_url == 'https://github.com'`, so this file
|
|
# runs only on GitHub. Gitea runs its own copy in .gitea/workflows (which pins
|
|
# the older @v3 artifact actions it supports); should a Gitea instance also read
|
|
# .github/workflows, the guard skips these jobs there so they never fail on the
|
|
# artifact backend or `gh`.
|
|
on:
|
|
push:
|
|
tags: ["v*"]
|
|
|
|
permissions:
|
|
contents: write
|
|
|
|
env:
|
|
CARGO_TERM_COLOR: always
|
|
CARGO_NET_RETRY: "10"
|
|
|
|
jobs:
|
|
build:
|
|
name: ${{ matrix.asset }}
|
|
if: ${{ github.server_url == 'https://github.com' }}
|
|
runs-on: ${{ matrix.os }}
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- os: ubuntu-latest
|
|
target: x86_64-unknown-linux-musl
|
|
asset: tsunagi-linux-x86_64
|
|
archive: tar.gz
|
|
zig: true
|
|
deb: true
|
|
deb_arch: amd64
|
|
pkg_arch: x86_64
|
|
gnu_target: x86_64-unknown-linux-gnu
|
|
- os: ubuntu-latest
|
|
target: aarch64-unknown-linux-musl
|
|
asset: tsunagi-linux-aarch64
|
|
archive: tar.gz
|
|
zig: true
|
|
deb: true
|
|
deb_arch: arm64
|
|
pkg_arch: aarch64
|
|
- os: macos-latest
|
|
target: aarch64-apple-darwin
|
|
asset: tsunagi-macos-aarch64
|
|
archive: tar.gz
|
|
zig: false
|
|
- os: windows-latest
|
|
target: x86_64-pc-windows-msvc
|
|
asset: tsunagi-windows-x86_64
|
|
archive: zip
|
|
zig: false
|
|
|
|
steps:
|
|
- uses: actions/checkout@v5
|
|
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
with:
|
|
targets: ${{ matrix.target }}
|
|
|
|
- uses: Swatinem/rust-cache@v2
|
|
with:
|
|
key: ${{ matrix.target }}
|
|
|
|
# aws-lc-sys (iroh's rustls backend) and the bundled sqlite are C, and the
|
|
# musl targets have no prebuilt bindings, so bindgen needs libclang and the
|
|
# C build needs cmake. zig is the cross C compiler cargo-zigbuild drives.
|
|
- name: Install musl build and packaging tooling
|
|
if: matrix.zig
|
|
run: sudo apt-get update && sudo apt-get install -y --no-install-recommends cmake clang libclang-dev libarchive-tools zstd
|
|
- name: Install zig
|
|
if: matrix.zig
|
|
uses: mlugg/setup-zig@v2
|
|
with:
|
|
# Pin a real, archived Zig release. Left unpinned the action resolves
|
|
# to the newest version it knows of (a yet-unreleased 0.16.0-dev),
|
|
# whose tarball 404s on ziglang.org while the community mirrors flake.
|
|
version: 0.14.1
|
|
- name: Install cargo-zigbuild
|
|
if: matrix.zig
|
|
uses: taiki-e/install-action@v2
|
|
with:
|
|
tool: cargo-zigbuild
|
|
|
|
- name: Build
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
if [[ "${{ matrix.zig }}" == "true" ]]; then
|
|
# zig's linker ignores the `-O1` GNU-ld optimization flag Rust passes
|
|
# and says so on stderr, which rustc now surfaces as a linker_messages
|
|
# warning. It is cosmetic — the binary is correct — so quiet just that
|
|
# one lint to keep the musl build log clean. A real link error still
|
|
# fails the build.
|
|
export RUSTFLAGS="${RUSTFLAGS:-} -A linker_messages"
|
|
cargo zigbuild --release --locked --target "${{ matrix.target }}" --bin tsunagi
|
|
else
|
|
cargo build --release --locked --target "${{ matrix.target }}" --bin tsunagi
|
|
fi
|
|
|
|
# The tray GUI. On Linux it is built against glibc (an old baseline for
|
|
# portability), not musl: a GUI must dlopen libGL/X11/Wayland at runtime,
|
|
# which a static musl binary cannot. macOS and Windows build it natively.
|
|
- name: Build the tray GUI
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
if [[ "${{ runner.os }}" == "Linux" ]]; then
|
|
if [[ -n "${{ matrix.gnu_target }}" ]]; then
|
|
# tray-icon links GTK and libappindicator through pkg-config, which
|
|
# has no cross story under zig, so the Linux GUI is built natively
|
|
# (x86_64 only) against the runner's glibc.
|
|
sudo apt-get update
|
|
sudo apt-get install -y --no-install-recommends \
|
|
libgtk-3-dev libayatana-appindicator3-dev
|
|
cargo build --release --locked \
|
|
--target "${{ matrix.gnu_target }}" --bin tsunagi-tray
|
|
else
|
|
echo "no GUI build for ${{ matrix.target }}"
|
|
fi
|
|
else
|
|
cargo build --release --locked --target "${{ matrix.target }}" --bin tsunagi-tray
|
|
fi
|
|
|
|
- name: Package
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
version="${GITHUB_REF_NAME#v}"
|
|
stage="dist/pkg/${{ matrix.asset }}"
|
|
mkdir -p "$stage"
|
|
|
|
bin="tsunagi"
|
|
[[ "${{ runner.os }}" == "Windows" ]] && bin="tsunagi.exe"
|
|
cp "target/${{ matrix.target }}/release/${bin}" "$stage/"
|
|
|
|
# The tray GUI alongside it, where it was built (Linux: x86_64 only).
|
|
tray="tsunagi-tray"
|
|
[[ "${{ runner.os }}" == "Windows" ]] && tray="tsunagi-tray.exe"
|
|
if [[ "${{ runner.os }}" == "Linux" ]]; then
|
|
if [[ -n "${{ matrix.gnu_target }}" ]]; then
|
|
cp "target/${{ matrix.gnu_target }}/release/${tray}" "$stage/"
|
|
fi
|
|
else
|
|
cp "target/${{ matrix.target }}/release/${tray}" "$stage/"
|
|
fi
|
|
|
|
# The top-level README, plus the per-OS install notes and integration
|
|
# files, so the archive carries what the platform needs to set up.
|
|
cp README.md "$stage/"
|
|
case "${{ runner.os }}" in
|
|
Linux)
|
|
cp dist/linux/tsunagi.service dist/linux/install.sh \
|
|
dist/linux/50-tsunagi-resolved.rules "$stage/"
|
|
cp dist/linux/README.md "$stage/INSTALL.md"
|
|
;;
|
|
macOS)
|
|
cp dist/macos/cy.hexor.tsunagi.plist "$stage/"
|
|
cp dist/macos/README.md "$stage/INSTALL.md"
|
|
;;
|
|
Windows)
|
|
cp dist/windows/README.md "$stage/INSTALL.md"
|
|
;;
|
|
esac
|
|
|
|
archive="${{ matrix.asset }}-${version}.${{ matrix.archive }}"
|
|
if [[ "${{ matrix.archive }}" == "zip" ]]; then
|
|
(cd dist/pkg && 7z a "../../${archive}" "${{ matrix.asset }}")
|
|
else
|
|
tar -C dist/pkg -czf "${archive}" "${{ matrix.asset }}"
|
|
fi
|
|
|
|
# A dependency-free .deb for the x86_64 and aarch64 Linux builds: it drops
|
|
# the static binary, the systemd service and the polkit rule. Built with
|
|
# dpkg-deb (present on the runner); see dist/deb/build-deb.sh.
|
|
- name: Build the Debian package
|
|
if: matrix.deb
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
version="${GITHUB_REF_NAME#v}"
|
|
bash dist/deb/build-deb.sh \
|
|
"target/${{ matrix.target }}/release/tsunagi" \
|
|
"${{ matrix.deb_arch }}" \
|
|
"$version" \
|
|
"tsunagi_${version}_${{ matrix.deb_arch }}.deb"
|
|
|
|
# A dependency-free Arch package (.pkg.tar.zst), assembled with bsdtar and
|
|
# zstd (no makepkg); same binary, service and polkit rule. See
|
|
# dist/arch/build-pkg.sh.
|
|
- name: Build the Arch package
|
|
if: matrix.pkg_arch
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
version="${GITHUB_REF_NAME#v}"
|
|
pkgver="${version//-/_}"
|
|
bash dist/arch/build-pkg.sh \
|
|
"target/${{ matrix.target }}/release/tsunagi" \
|
|
"${{ matrix.pkg_arch }}" \
|
|
"$version" \
|
|
"tsunagi-${pkgver}-1-${{ matrix.pkg_arch }}.pkg.tar.zst"
|
|
|
|
# The GUI variants: the same agent plus the tray binary and a desktop
|
|
# launcher, named tsunagi-gui (conflicting with the headless packages).
|
|
- name: Build the GUI packages
|
|
if: matrix.gnu_target
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
version="${GITHUB_REF_NAME#v}"
|
|
pkgver="${version//-/_}"
|
|
tray="target/${{ matrix.gnu_target }}/release/tsunagi-tray"
|
|
bash dist/deb/build-deb.sh \
|
|
"target/${{ matrix.target }}/release/tsunagi" \
|
|
"${{ matrix.deb_arch }}" "$version" \
|
|
"tsunagi-gui_${version}_${{ matrix.deb_arch }}.deb" "$tray"
|
|
bash dist/arch/build-pkg.sh \
|
|
"target/${{ matrix.target }}/release/tsunagi" \
|
|
"${{ matrix.pkg_arch }}" "$version" \
|
|
"tsunagi-gui-${pkgver}-1-${{ matrix.pkg_arch }}.pkg.tar.zst" "$tray"
|
|
|
|
- name: Upload the build outputs as run artifacts
|
|
uses: actions/upload-artifact@v7
|
|
with:
|
|
name: ${{ matrix.asset }}
|
|
path: |
|
|
${{ matrix.asset }}-*.*
|
|
*.deb
|
|
*.pkg.tar.zst
|
|
if-no-files-found: error
|
|
|
|
publish:
|
|
name: Publish release
|
|
needs: build
|
|
if: ${{ github.server_url == 'https://github.com' }}
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write
|
|
steps:
|
|
- name: Download every build artifact
|
|
uses: actions/download-artifact@v8
|
|
with:
|
|
path: artifacts
|
|
|
|
- name: Show what was collected
|
|
run: find artifacts -type f
|
|
|
|
- name: Create the release and upload the archives
|
|
shell: bash
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
TAG: ${{ github.ref_name }}
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
# download-artifact nests each artifact under its own directory, so
|
|
# the archives are artifacts/<asset>/<file>.
|
|
mapfile -t files < <(find artifacts -type f \( -name '*.tar.gz' -o -name '*.zip' -o -name '*.deb' -o -name '*.pkg.tar.zst' \))
|
|
printf 'asset: %s\n' "${files[@]}"
|
|
|
|
prerelease=()
|
|
case "$TAG" in *-*) prerelease=(--prerelease) ;; esac
|
|
|
|
# Create the release on the first run; on a re-run, add/replace assets
|
|
# on the release that is already there.
|
|
if gh release view "$TAG" --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1; then
|
|
gh release upload "$TAG" "${files[@]}" --repo "$GITHUB_REPOSITORY" --clobber
|
|
else
|
|
gh release create "$TAG" "${files[@]}" \
|
|
--repo "$GITHUB_REPOSITORY" \
|
|
--title "tsunagi $TAG" \
|
|
--generate-notes \
|
|
--verify-tag \
|
|
"${prerelease[@]}"
|
|
fi
|