92 lines
2.9 KiB
YAML
Executable File
92 lines
2.9 KiB
YAML
Executable File
name: Publish to AUR
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v*"
|
|
workflow_dispatch:
|
|
inputs:
|
|
tag:
|
|
description: "Tag to publish to AUR (e.g. v0.1.0-alpha.8)"
|
|
required: true
|
|
type: string
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
aur-publish:
|
|
name: Publish deskify-bin
|
|
runs-on: ubuntu-latest
|
|
container: archlinux:latest
|
|
|
|
steps:
|
|
- name: Install dependencies
|
|
run: |
|
|
pacman -Syu --noconfirm
|
|
pacman -S --noconfirm --needed base-devel git openssh curl
|
|
useradd -m -u 1000 builder || true
|
|
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ inputs.tag || github.ref_name }}
|
|
|
|
- name: Generate PKGBUILD (deskify-bin)
|
|
run: bash packaging/generate-pkgbuild-bin.sh "${{ inputs.tag || github.ref_name }}"
|
|
|
|
- name: Generate .SRCINFO
|
|
run: |
|
|
rm -rf /home/builder/work
|
|
mkdir -p /home/builder/work
|
|
cp -R . /home/builder/work
|
|
chown -R builder:builder /home/builder/work
|
|
su - builder -c "cd /home/builder/work/packaging && makepkg --printsrcinfo > .SRCINFO"
|
|
cp /home/builder/work/packaging/.SRCINFO packaging/.SRCINFO
|
|
|
|
- name: Configure SSH for AUR
|
|
env:
|
|
AUR_SSH_PRIVATE_KEY: ${{ secrets.AUR_SSH_PRIVATE_KEY }}
|
|
run: |
|
|
test -n "${AUR_SSH_PRIVATE_KEY}" || { echo "Missing secret: AUR_SSH_PRIVATE_KEY" >&2; exit 1; }
|
|
mkdir -p ~/.ssh
|
|
chmod 700 ~/.ssh
|
|
printf "%s\n" "${AUR_SSH_PRIVATE_KEY}" > ~/.ssh/aur
|
|
chmod 600 ~/.ssh/aur
|
|
touch ~/.ssh/known_hosts
|
|
chmod 600 ~/.ssh/known_hosts
|
|
# Ensure host key is present for non-interactive git/ssh.
|
|
ssh-keyscan -t rsa,ecdsa,ed25519 aur.archlinux.org >> ~/.ssh/known_hosts 2>/dev/null
|
|
cat >> ~/.ssh/config <<'EOF'
|
|
Host aur.archlinux.org
|
|
User aur
|
|
IdentityFile ~/.ssh/aur
|
|
IdentitiesOnly yes
|
|
EOF
|
|
|
|
- name: Publish to AUR (deskify-bin)
|
|
env:
|
|
AUR_USERNAME: ${{ secrets.AUR_USERNAME }}
|
|
AUR_EMAIL: ${{ secrets.AUR_EMAIL }}
|
|
run: |
|
|
export GIT_SSH_COMMAND="ssh -i ~/.ssh/aur -o IdentitiesOnly=yes -o UserKnownHostsFile=$HOME/.ssh/known_hosts -o StrictHostKeyChecking=yes"
|
|
|
|
git config --global user.name "${AUR_USERNAME:-deskify-bot}"
|
|
git config --global user.email "${AUR_EMAIL:-noreply@example.invalid}"
|
|
|
|
rm -rf /tmp/aur-repo
|
|
git clone ssh://aur@aur.archlinux.org/deskify-bin.git /tmp/aur-repo
|
|
|
|
cp packaging/PKGBUILD /tmp/aur-repo/PKGBUILD
|
|
cp packaging/.SRCINFO /tmp/aur-repo/.SRCINFO
|
|
|
|
cd /tmp/aur-repo
|
|
if git diff --quiet; then
|
|
echo "No changes to publish."
|
|
exit 0
|
|
fi
|
|
|
|
git add PKGBUILD .SRCINFO
|
|
git commit -m "Update deskify-bin to ${{ inputs.tag || github.ref_name }}"
|
|
git push
|