MeshChatX/.github/workflows/build-linux-packages.yml at 81c09d48f7787a5ad1642ce91747b144c88b5014 · Quad4-Software/MeshChatX · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
# Linux packaging build test: Flatpak.
#
# Pinned first-party actions (bump tag and SHA together when upgrading):
#   actions/checkout@v6.0.1            8e8c483db84b4bee98b60c0593521ed34d9990e8
#   actions/setup-python@v6.2.0        a309ff8b426b58ec0e2a45f0f869d46889d02405
#   actions/setup-node@v6.1.0          395ad3262231945c25e8478fd5baf05154b1d79f
#   actions/upload-artifact@v5.0.0     330a01c490aca151604b8cf639adc76d48f6c5d4
#   actions/download-artifact@v5.0.0   634f93cb2916e3fdff6788551b99b062d0335ce0

name: Build Linux packages

on:
    push:
        branches:
            - dev
        tags:
            - "*"
    pull_request:
        branches:
            - dev
        paths:
            - "package.json"
            - "forge.config.js"
            - "scripts/electron-forge-local-tmp.js"
            - "scripts/ensure-flatpak-flathub-remote.sh"
            - "scripts/ci/github-build-linux-*.sh"
            - ".github/workflows/build-linux-packages.yml"
            - ".github/workflows/frontend-build.yml"
    workflow_dispatch:

permissions:
    contents: read

concurrency:
    group: ${{ github.workflow }}-${{ github.ref }}
    cancel-in-progress: true

env:
    FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
    NODE_OPTIONS: --max-old-space-size=8192
    PYTHON_VERSION: "3.14"
    NODE_VERSION: "24"
    POETRY_VERSION: "2.3.4"
    PNPM_VERSION: "10.32.1"

jobs:
    frontend:
        name: Build frontend artifact
        uses: ./.github/workflows/frontend-build.yml
        permissions:
            contents: read
        with:
            artifact_name: meshchatx-frontend-linux-pkg-${{ github.run_id }}-${{ github.run_attempt }}
            retention_days: 1

    flatpak:
        name: Flatpak (electron-forge)
        needs: frontend
        runs-on: ubuntu-latest
        timeout-minutes: 90
        permissions:
            contents: read
        env:
            FRONTEND_ARTIFACT_NAME: ${{ needs.frontend.outputs.artifact_name }}
            MESHCHATX_FRONTEND_PREBUILT: "1"
        steps:
            - name: Checkout
              uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8

            - name: Install flatpak toolchain
              run: |
                  set -euo pipefail
                  sudo apt-get update -y
                  sudo apt-get install -y --no-install-recommends \
                      flatpak \
                      flatpak-builder \
                      elfutils \
                      zstd \
                      desktop-file-utils \
                      appstream

            - name: Install flatpak runtimes (user scope)
              run: |
                  set -euo pipefail
                  bash scripts/ensure-flatpak-flathub-remote.sh
                  flatpak --user install -y --noninteractive flathub \
                      org.freedesktop.Platform//25.08 \
                      org.freedesktop.Sdk//25.08 \
                      org.electronjs.Electron2.BaseApp//25.08

            - name: Set up Python
              uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
              with:
                  python-version: ${{ env.PYTHON_VERSION }}

            - name: Install Poetry (PyPI pin)
              env:
                  POETRY_VERSION: ${{ env.POETRY_VERSION }}
              run: bash scripts/ci/github-install-poetry.sh

            - name: Set up Node
              uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
              with:
                  node-version: ${{ env.NODE_VERSION }}

            - name: Enable pnpm (corepack)
              run: corepack enable && corepack prepare "pnpm@${PNPM_VERSION}" --activate

            - name: Install dependencies
              run: bash scripts/ci/github-install-deps.sh

            - name: Download frontend artifact
              uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0
              with:
                  name: ${{ env.FRONTEND_ARTIFACT_NAME }}
                  path: meshchatx/public

            - name: Verify frontend artifact contents
              run: |
                  set -euo pipefail
                  test -f meshchatx/public/index.html
                  test -d meshchatx/public/assets
                  test -d meshchatx/public/reticulum-docs-bundled/current

            - name: Build flatpak bundle
              run: bash scripts/ci/github-build-linux-flatpak.sh

            - name: List flatpak output
              run: |
                  set -euo pipefail
                  ls -la out/make 2>/dev/null || true
                  find out/make -maxdepth 5 -type f \( -name "*.flatpak" -o -name "*.flatpakref" \) -print || true

            - name: Upload flatpak artifact
              uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
              with:
                  name: meshchatx-linux-flatpak-${{ github.ref_name }}-${{ github.run_id }}
                  path: |
                      out/make/**/*.flatpak
                  if-no-files-found: warn
                  retention-days: 7