Update build_deb_package.yml #103
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Package OVIS-LDMS SlingShot Switch Sampler for Debian ARM64 | |
| on: | |
| push: | |
| branches: [ "debian", "tidy" ] | |
| pull_request: | |
| branches: [ "debian" ] | |
| # Allows you to run this workflow manually from the Actions tab | |
| workflow_dispatch: | |
| inputs: | |
| logLevel: | |
| description: 'Log level' | |
| required: true | |
| default: 'warning' | |
| type: choice | |
| options: | |
| - info | |
| - warning | |
| - debug | |
| print_tags: | |
| description: 'True to print to STDOUT' | |
| required: true | |
| type: boolean | |
| tags: | |
| description: 'Test scenario tags' | |
| required: true | |
| type: string | |
| environment: | |
| description: 'Environment to run tests against' | |
| type: environment | |
| required: true | |
| jobs: | |
| build: | |
| runs-on: ubuntu-20.04 | |
| env: | |
| DOCKER_REGISTRY: docker.io | |
| DOCKER_IMAGE: jkgreen76/ldms-slingshot-switch-sampler | |
| DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }} | |
| DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }} | |
| GPG_USERNAME: ${{ secrets.GPG_USERNAME }} | |
| GPG_EMAIL: ${{ secrets.GPG_EMAIL }} | |
| GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }} | |
| GPG_PUBLIC_KEY: ${{ secrets.GPG_PUBLIC_KEY }} | |
| GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }} | |
| DOCKER_TARGET_PLATFORM: 'linux/arm64' | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v3 | |
| with: | |
| platforms: 'linux/arm64' | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| with: | |
| version: latest | |
| - name: Prepare | |
| if: success() | |
| id: prepare | |
| run: | | |
| echo "docker_image=${DOCKER_REGISTRY}/${DOCKER_IMAGE}" >> "$GITHUB_OUTPUT" | |
| echo "buildx_version=${GITHUB_RUN_NUMBER}" >> "$GITHUB_OUTPUT" | |
| echo "docker_platform=${DOCKER_TARGET_PLATFORM}" >> "$GITHUB_OUTPUT" | |
| echo ":white_check_mark: Prepare Step Successful" >> $GITHUB_STEP_SUMMARY | |
| - name: Docker Login | |
| if: success() | |
| run: | | |
| echo "${DOCKER_PASSWORD}" | docker login ${DOCKER_REGISTRY} --username "${DOCKER_USERNAME}" --password-stdin | |
| echo ":white_check_mark: Docker Login Successful" >> $GITHUB_STEP_SUMMARY | |
| - name: Build Debian Package | |
| if: success() | |
| run: | | |
| docker buildx build \ | |
| --platform ${{ steps.prepare.outputs.docker_platform }} \ | |
| --tag ${{ steps.prepare.outputs.docker_image }} \ | |
| --provenance false \ | |
| --sbom false \ | |
| --file ./Dockerfile \ | |
| --output "type=image,push=true" . | |
| echo ":white_check_mark: ovis-ldms_4.4.3-1_arm.deb created!" >> $GITHUB_STEP_SUMMARY | |
| - name: Stage artifacts to bindmount | |
| if: success() | |
| run: | | |
| mkdir -p ldms-slingshot-switch-sampler | |
| sudo chmod -R 777 $(pwd)/ldms-slingshot-switch-sampler | |
| docker run -i \ | |
| -v $(pwd)/ldms-slingshot-switch-sampler:/ldms-slingshot-switch-sampler:rw ${DOCKER_IMAGE} \ | |
| cp -Rf /ovis-ldms-debian-package/ovis-ldms_4.4.3-1_arm64.deb /ldms-slingshot-switch-sampler/. | |
| echo ":white_check_mark: Artifacts staged to bindmount" >> $GITHUB_STEP_SUMMARY | |
| - name: list directory contents of ldms-slingshot-switch-sampler | |
| if: success() | |
| run: | | |
| ls -al ldms-slingshot-switch-sampler | |
| - name: 🔍 Check for dependencies | |
| run: | | |
| command -v apt-ftparchive || sudo apt install apt-utils | |
| sudo apt-get install --reinstall ca-certificates | |
| sudo apt-get install --reinstall dpkg-sig | |
| - name: Create APT repo | |
| if: success() | |
| run: | | |
| set -e | |
| cat << DOCKERFILE >Dockerfile | |
| FROM docker.io/jkgreen76:ldms-slingshot-switch-sampler | |
| RUN bash <<EOF > /gpg_sign.log | |
| printf 'do_hash() {\n HASH_NAME=$1\n HASH_CMD=$2\n echo "${HASH_NAME}:"\n for f in $(find -type f); do\n f=$(echo $f | cut -c3-)\n if [ "$f" = "Release" ]; then\n continue\n fi\n echo " $(${HASH_CMD} ${f} | cut -d" " -f1) $(wc -c $f)"\n done\n}\n' >> ~/.bash_custom_functions && | |
| source ~/.bash_custom_functions && | |
| mkdir -p ovis-ldms/apt-repo/dists/stable/main/binary-arm64 && | |
| mkdir -p ovis-ldms/apt-repo/pool/main && | |
| [ -f $(pwd)/ldms-slingshot-switch-sampler/ovis-ldms_4.4.3-1_arm64.deb ] && | |
| deb_pkg_dir=$(dirname $(readlink -f $(pwd)/ldms-slingshot-switch-sampler/ovis-ldms_4.4.3-1_arm64.deb)) && | |
| cp $(pwd)/ldms-slingshot-switch-sampler/ovis-ldms_4.4.3-1_arm64.deb ovis-ldms/apt-repo/pool/main/. && | |
| cd ovis-ldms/apt-repo && | |
| dpkg-scanpackages --arch arm64 pool/ > dists/stable/main/binary-arm64/Packages && | |
| cat dists/stable/main/binary-arm64/Packages | gzip -9 > dists/stable/main/binary-arm64/Packages.gz && | |
| cd dists/stable && | |
| printf 'Architectures: arm64\nComponents: main\nDate: $(date -Ru)\nVersion: 4.4.3-1\nSuite: stable' > Release && | |
| do_hash "MD5Sum" "md5sum" >> Release && | |
| do_hash "SHA1" "sha1sum" >> Release && | |
| do_hash "SHA256" "sha256sum" >> Release && | |
| cat Release && | |
| set -x && | |
| mkdir -p ~/.gnupg && | |
| chmod 0700 ~/.gnupg && | |
| echo "${GPG_PASSWORD}" > ~/.gnupg/gpg_pwd.txt && | |
| chmod 0600 ~/.gnupg/gpg_pwd.txt && | |
| echo "${GPG_PUBLIC_KEY}" > ~/.gnupg/public.key && | |
| echo "${GPG_PRIVATE_KEY}" > ~/.gnupg/private.key && | |
| chmod 0700 ~/.gnupg && | |
| chmod 0600 ~/.gnupg/*.key && | |
| gpg -v --batch --import ~/.gnupg/public.key && | |
| gpg -v --batch --import ~/.gnupg/private.key && | |
| GPG_KEY=( $(gpg --list-keys --keyid-format=long | grep "^pub"| awk '{print $2}' | awk -F'/' '{print $2}') ) && | |
| echo -e "$GPG_USERNAME\n$GPG_EMAIL\nNo Comment\no\n" | gpg --batch --command-fd 0 --expert --edit-key ${GPG_KEY[1]} adduid && | |
| echo -e "5\ny\n" | gpg --batch --command-fd 0 --expert --edit-key ${GPG_KEY[1]} trust && | |
| gpg --list-keys ${GPG_USERNAME} && | |
| cd ${deb_pkg_dir} && file ovis-ldms_4.4.3-1_arm64.deb && | |
| printf "${GPG_PASSWORD}" > ~/.gnupg/gpg-passwd.txt && | |
| printf "use-agent\npinentry-mode loopback" > ~/.gnupg/gpg.conf && | |
| printf "allow-loopback-pinentry" > ~/.gnupg/gpg-agent.conf && | |
| echo RELOADAGENT | gpg-connect-agent && | |
| tty=$(which tty) && | |
| export GPG_TTY=$tty && | |
| ls -al ovis-ldms_4.4.3-1_arm64.deb && | |
| echo "$(pwd)/ovis-ldms_4.4.3-1_arm64.deb is $(file ovis-ldms_4.4.3-1_arm64.deb)" && | |
| dpkg-sig -k ${GPG_KEY[1]} --gpg-options '--passphrase-file ~/.gnupg/gpg-passwd.txt' --sign builder ovis-ldms_4.4.3-1_arm64.deb && | |
| DOCKERFILE | |
| docker run -i \ | |
| -v $(pwd)/ldms-slingshot-switch-sampler:/ldms-slingshot-switch-sampler:rw ${DOCKER_IMAGE} \ | |
| cp -Rf ovis-ldms/apt-repo /ldms-slingshot-switch-sampler/. | |
| echo ":white_check_mark: ### Apt-repo signed" >> $GITHUB_STEP_SUMMARY | |
| # - name: Build Test Server | |
| # if: success() | |
| # run: | | |
| # docker buildx build \ | |
| # --platform ${{ steps.prepare.outputs.docker_platform }} \ | |
| # --tag arm64-ubuntu-apt-webserver \ | |
| # --provenance false \ | |
| # --sbom false \ | |
| # --file ./test-apt-server/Dockerfile \ | |
| # --output "type=image,push=true" . | |
| # echo ":white_check_mark: ### ubuntu-arm64-apt-webserver created!" >> $GITHUB_STEP_SUMMARY | |
| # - name: Start Webserver | |
| # if: success() | |
| # users: hoverkraft-tech/compose-action@v2.0.1 | |
| # command -v python3 || apt-get update && apt-get install -y python3 | |
| # mkdir /www | |
| # cp -Rf /ovis-ldms/apt-repo /www/apt-repo | |
| # python3 -m "http.server" | |
| # - name: Test APT repo | |
| - name: Upload artifact | |
| if: success() | |
| uses: actions/upload-pages-artifact@v3.0.1 | |
| with: | |
| name: ldms-slingshot-switch-sampler | |
| path: ldms-slingshot-switch-sampler | |
| - name: Artifact Upload | |
| if: success() | |
| run: | | |
| echo "### ovis-ldms_4.4.3-1_arm.deb artifact uploaded! :rocket:" >> $GITHUB_STEP_SUMMARY |