istore-repo/.github/workflows/ci.yml at main · linkease/istore-repo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
name: iStore Upload

on:
  workflow_dispatch:
  push:
    branches:
      - main
    paths:
      - 'bin/**'

env:
  SDK_NAME: openwrt-sdk-mini-25.12.2
  SDK_URL: https://github.com/linkease/istore-repo/releases/download/tools/
  TZ: Asia/Shanghai

jobs:
  build:
    runs-on: ubuntu-latest
    name: iStore Upload
    steps:

      - name: Initialization environment
        env:
          DEBIAN_FRONTEND: noninteractive
        run: |
          sudo swapoff /swapfile || true
          sudo rm -rf /swapfile
          sudo -E apt-get -qq install binutils bzip2 xz-utils unzip git wget rsync
          sudo -E apt-get -qq autoremove --purge
          sudo -E apt-get -qq clean
          sudo timedatectl set-timezone "$TZ"

      - uses: actions/create-github-app-token@v1
        id: app-token
        with:
          app-id: ${{ vars.BOT_APP_ID }}
          private-key: ${{ secrets.BOT_PRIVATE_KEY }}

      - name: Checkout
        uses: actions/checkout@main
        with:
          token: ${{ steps.app-token.outputs.token }}
          fetch-depth: 2

      - name: New Pending
        run: git push -f origin HEAD:pending

      - name: 'Restore SDK from cache'
        id: sdk-cache
        uses: actions/cache@v3
        with:
          path: ${{ github.workspace }}/.sdk
          key: ${{ env.SDK_NAME }}

      - name: Download SDK
        run: |
          [ -d "${{ github.workspace }}/.sdk" ] || mkdir -p "${{ github.workspace }}/.sdk"
          [ -s ${{ github.workspace }}/.sdk/${SDK_NAME}.tar.xz ] || wget -O ${{ github.workspace }}/.sdk/${SDK_NAME}.tar.xz ${SDK_URL}${SDK_NAME}.tar.xz

      - name: Unpack SDK
        run: tar --strip-components=1 -xJf ${{ github.workspace }}/.sdk/${SDK_NAME}.tar.xz

      - name: Write build key
        if: env.BUILD_KEY != ''
        env:
          BUILD_KEY: ${{ secrets.BUILD_KEY }}
        run: |
          echo "untrusted comment: istore key" > key-build
          echo "$BUILD_KEY" >> key-build

      - name: Write apk build key
        if: env.BUILD_KEY_APK != ''
        env:
          BUILD_KEY_APK: ${{ secrets.BUILD_KEY_APK }}
        run: |
          echo "-----BEGIN EC PRIVATE KEY-----" > private-key.pem
          echo "$BUILD_KEY_APK" >> private-key.pem
          echo "-----END EC PRIVATE KEY-----" >> private-key.pem

      - name: Index pkgs
        run: ./repo/Index.sh

      - name: Upload pkgs
        id: upload
        env:
          RSYNC_PASSWORD: ${{ secrets.RSYNC_PASSWORD }}
          REPO_DEST: ${{ secrets.RSYNC_DEST }}
        run: ./repo/Upload.sh