main.yml

name: Prebuild DevX closures

on:
  workflow_call:
    inputs:
      platform:
        required: true
        type: string

env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}
  DEFAULT_TAG: latest
  GH_TOKEN: ${{ github.token }}

jobs:
  wait-for-hydra-eval:
    env:
      GH_TOKEN: ${{ github.token }}
    name: "Wait for hydra status"
    runs-on: ubuntu-latest
    steps:
    - uses: input-output-hk/actions/wait-for-hydra@latest
      with:
        check: required

  discover:
    needs: wait-for-hydra-eval
    name: Discover
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.set-matrix.outputs.matrix }}
    steps:
    - name: fetch all ci/hydra-build jobs
      id: set-matrix
      run: |
        # Group the output by platform.
        RUNS=$(gh api "repos/$GITHUB_REPOSITORY/commits/$GITHUB_SHA/check-runs" --paginate)
        echo "checks..."
        FILTERED=$(jq -c -r '.check_runs[] | select(.name | endswith("-env")) | select(.name | startswith("${{ inputs.platform }}")) | { "config": .name, "build_path": .output.summary, "short_name": .name | sub("${{ inputs.platform }}\\.";"") }' <<< "$RUNS")
        jq . <<< "$FILTERED"
        MATRIX=$(jq --slurp -c -r '.' <<< "$FILTERED")
        jq . <<< "$MATRIX"
        echo "creating result matrix."
        echo "matrix=$MATRIX" >> $GITHUB_OUTPUT

  # We need this process step in here, because we have in excess of 256 jobs.
  # Only upload to GHCR from the main branch to prevent PR pushes from
  # overwriting production container images.
  process:
    if: github.ref == 'refs/heads/main'
    needs: discover
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        job: ${{ fromJson(needs.discover.outputs.matrix) }}
    name: GHCR Upload for ${{ matrix.job.short_name }}
    permissions:
      contents: read
      packages: write
    steps:
      - name: Free Disk Space (Ubuntu)
        uses: jlumbroso/free-disk-space@main
      - name: Install Nix with good defaults
        uses: cachix/install-nix-action@v20
        with:
          extra_nix_config: |
            trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= hydra.iohk.io:f/Ea+s+dFdN+3Y/G+FDgSq+a5NEWhJGzdjvKNGv0/EQ= loony-tools:pr9m4BkM/5/eSTZlkQyRt57Jz7OMBxNSUiMC4FkcNfk=
            substituters = https://cache.iog.io/ https://cache.zw3rk.com/ https://cache.nixos.org/
          nix_path: nixpkgs=channel:nixos-unstable
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Log in to the Container registry
        uses: docker/login-action@v3.3.0
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Compute and upload closure and developer environment to ghcr.io
        env:
          DEV_SHELL: ${{ matrix.job.config }}
          SHELL_NIX_PATH: ${{ matrix.job.build_path }}
          NIX_STORE_SECRET_KEY: ${{ secrets.SECRET_KEY }}
        run: ./extra/ghcr-upload.sh



  # codespace-upload:
  #   env:
  #     IMAGE_NAME: input-output-hk/devx-devcontainer
  #   needs: process
  #   permissions:
  #     packages: write
  #   runs-on: ubuntu-latest
  #   # We want a GitHub Codespace image for each combination of devx developer shell option.
  #   # But, since the purpose of GitHub Codespace is to serve a complete development environment,
  #   # the user is likely to always expect HLS (I don't see the point otherwise).
  #   # Therefore, it doesn't seem useful to build an image on the `-minimal` flavor (without HLS),
  #   # or the `-static` one (especially since the latter currently requires `-minimal` to work).
  #   # Likely, we consider using `-iog` as the default and do not generate other images.
  #   # Then the user choices left would be between native, `-windows` or `-js` target platforms,
  #   # and the GHC version (currently `ghc810` and `ghc96`).
  #   if: false
  #   steps:
  #     - name: Checkout repository
  #       uses: actions/checkout@v4

  #     - name: Log in to the Container registry
  #       uses: docker/login-action@v2.1.0
  #       with:
  #         registry: ${{ env.REGISTRY }}
  #         username: ${{ github.actor }}
  #         password: ${{ secrets.GITHUB_TOKEN }}

  #     - name: Build and push Docker image
  #       uses: docker/build-push-action@v4
  #       with:
  #         context: .
  #         push: true
  #         tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ inputs.platform }}.${{ inputs.compiler-nix-name }}${{ inputs.target-platform }}${{ inputs.variant }}${{ inputs.iog }}
  #         build-args: |
  #           PLATFORM=${{ inputs.platform }}
  #           TARGET_PLATFORM=${{ inputs.target-platform }}
  #           COMPILER_NIX_NAME=${{ inputs.compiler-nix-name }}
  #           VARIANT=${{ inputs.variant }}
  #           IOG=${{ inputs.iog }}

  #     - name: Run test command inside the Dev Container
  #       run: |
  #         docker run --rm ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ inputs.platform }}.${{ inputs.compiler-nix-name }}${{ inputs.target-platform }}${{ inputs.variant }}${{ inputs.iog }} \
  #         bash -ic "cabal update && cabal unpack hello && cd hello-* && cabal build"