|
| 1 | +name: Flatpak |
| 2 | +on: |
| 3 | + workflow_call: |
| 4 | + inputs: |
| 5 | + update_repo: |
| 6 | + type: boolean |
| 7 | + default: false |
| 8 | + run_id: |
| 9 | + type: string |
| 10 | + required: true |
| 11 | + ref: |
| 12 | + type: string |
| 13 | + required: true |
| 14 | + secrets: |
| 15 | + DOWNLOADS_HOSTGATOR_DOT_MIXXX_DOT_ORG_KEY: |
| 16 | + required: false |
| 17 | + RRYAN_AT_MIXXX_DOT_ORG_GPG_PRIVATE_KEY: |
| 18 | + required: false |
| 19 | + |
| 20 | +jobs: |
| 21 | + publish-flatpak: |
| 22 | + name: Publish Flatpak |
| 23 | + runs-on: ubuntu-latest |
| 24 | + steps: |
| 25 | + - name: "Set up SSH Agent" |
| 26 | + shell: bash |
| 27 | + env: |
| 28 | + SSH_AUTH_SOCK: /tmp/ssh_agent.sock |
| 29 | + SSH_PRIVATE_KEY: ${{ secrets.DOWNLOADS_HOSTGATOR_DOT_MIXXX_DOT_ORG_KEY }} |
| 30 | + SSH_HOST: downloads-hostgator.mixxx.org |
| 31 | + run: | |
| 32 | + ssh-agent -a $SSH_AUTH_SOCK > /dev/null |
| 33 | + ssh-add - <<< "${SSH_PRIVATE_KEY}" |
| 34 | + mkdir -p "${HOME}/.ssh" |
| 35 | + ssh-keyscan "${SSH_HOST}" >> "${HOME}/.ssh/known_hosts" |
| 36 | + echo "SSH_AUTH_SOCK=${SSH_AUTH_SOCK}" >> "${GITHUB_ENV}" |
| 37 | +
|
| 38 | + - name: Check out repository |
| 39 | + if: ${{ inputs.update_repo }} |
| 40 | + uses: actions/checkout@v6 |
| 41 | + |
| 42 | + - name: "Prepare" |
| 43 | + id: prepare |
| 44 | + shell: bash |
| 45 | + env: |
| 46 | + REF: ${{ inputs.ref }} |
| 47 | + run: | |
| 48 | + sudo apt-get update |
| 49 | + sudo apt-get install -y flatpak ostree |
| 50 | + # Download rsync wrapper to safely update ostree |
| 51 | + wget https://raw.githubusercontent.com/ostreedev/ostree-releng-scripts/621f7637ba6b8e0a8b761ce643c16a1511d04f6b/rsync-repos |
| 52 | + chmod +x rsync-repos |
| 53 | +
|
| 54 | + if [[ "$REF" =~ ^refs/tags/[0-9]+\.[0-9]+\.[0-9]+$ ]]; then |
| 55 | + echo "commit_summary=Stable build for 2.5" >> $GITHUB_OUTPUT |
| 56 | + echo "branch=stable" >> $GITHUB_OUTPUT |
| 57 | + elif [ "$REF" = "refs/heads/2.6" ]; then |
| 58 | + echo "commit_summary=Beta build for 2.6" >> $GITHUB_OUTPUT |
| 59 | + echo "branch=beta" >> $GITHUB_OUTPUT |
| 60 | + echo "expiry=30 days" >> $GITHUB_OUTPUT |
| 61 | + elif [ "$REF" = "refs/heads/main" ]; then |
| 62 | + echo "commit_summary=Nightly build for 2.7" >> $GITHUB_OUTPUT |
| 63 | + echo "branch=nightly" >> $GITHUB_OUTPUT |
| 64 | + echo "expiry=14 days" >> $GITHUB_OUTPUT |
| 65 | + else |
| 66 | + echo "::error:: The git reference is unsupported for publication to the Flatpak repo." |
| 67 | + exit 1 |
| 68 | + fi |
| 69 | +
|
| 70 | + - name: "Download bundles" |
| 71 | + env: |
| 72 | + GH_TOKEN: ${{ github.token }} |
| 73 | + RUN_ID: ${{ inputs.run_id }} |
| 74 | + shell: bash |
| 75 | + run: | |
| 76 | + gh --repo mixxxdj/mixxx run download $RUN_ID --pattern 'Flatpak *' -D bundles |
| 77 | + find bundles/ -name *.flatpak -exec mv {} bundles/ \; |
| 78 | + find bundles/ -mindepth 1 -type d -delete |
| 79 | + if [ ! `find bundles/ -name '*x86_64.flatpak' | wc -l` -eq 1 ]; then |
| 80 | + echo "At least a x86_64 build is expected. Current bundles:" |
| 81 | + find bundles/ -type f |
| 82 | + exit 1 |
| 83 | + fi |
| 84 | + version=$(find bundles/ -name '*x86_64.flatpak' | cut -d- -f 2- | rev | cut -d- -f 2- | rev) |
| 85 | + echo "VERSION=${version}" >> $GITHUB_ENV |
| 86 | +
|
| 87 | + - name: "[Ubuntu] Import PPA GPG key" |
| 88 | + run: gpg --import <(echo "${RRYAN_AT_MIXXX_DOT_ORG_GPG_PRIVATE_KEY}") |
| 89 | + env: |
| 90 | + RRYAN_AT_MIXXX_DOT_ORG_GPG_PRIVATE_KEY: ${{ secrets.RRYAN_AT_MIXXX_DOT_ORG_GPG_PRIVATE_KEY }} |
| 91 | + |
| 92 | + - name: "Import bundle to repo" |
| 93 | + env: |
| 94 | + GPG_KEY_ID: rryan@mixxx.org |
| 95 | + COMMIT_SUMMARY: ${{ steps.prepare.outputs.commit_summary }} |
| 96 | + BRANCH: ${{ steps.prepare.outputs.branch }} |
| 97 | + shell: bash |
| 98 | + run: | |
| 99 | + set -x |
| 100 | +
|
| 101 | + function import_to_repo { |
| 102 | + file=$1 |
| 103 | + id=$2 |
| 104 | + arch=$3 |
| 105 | + type=$4 |
| 106 | +
|
| 107 | + flatpak build-import-bundle -v --gpg-sign=$GPG_KEY_ID repo.tmp "$file" |
| 108 | + checksum=$(ostree --repo=repo.tmp rev-parse "${type}/${id}/${arch}/master") |
| 109 | + metadata=$(ostree --repo=repo.tmp show --print-metadata-key=xa.metadata "${type}/${id}/${arch}/master") |
| 110 | + ostree --repo=repo pull --depth=-1 --mirror "upstream:${type}/${id}/${arch}/${BRANCH}" || true |
| 111 | + ostree --repo=repo pull-local repo.tmp "${checksum}" |
| 112 | + ostree --repo=repo commit \ |
| 113 | + --gpg-sign=$GPG_KEY_ID \ |
| 114 | + -b "${type}/${id}/${arch}/${BRANCH}" \ |
| 115 | + -s "$COMMIT_SUMMARY" \ |
| 116 | + "--add-metadata-string=version=$VERSION" \ |
| 117 | + "--add-metadata-string=xa.metadata=$(printf "%b" "${metadata:1:-1}")" \ |
| 118 | + "--tree=ref=${checksum}" |
| 119 | + ostree --repo=repo show --print-metadata-key=xa.metadata "${type}/${id}/${arch}/${BRANCH}" |
| 120 | + } |
| 121 | +
|
| 122 | + # Prepare local repos |
| 123 | + ostree --repo=repo.tmp init --mode=archive-z2 |
| 124 | + ostree --repo=repo init --mode=archive-z2 |
| 125 | +
|
| 126 | + # Hook publish repo to the remote |
| 127 | + ostree --repo=repo remote add upstream https://downloads.mixxx.org/flatpak/ |
| 128 | +
|
| 129 | + for arch in "x86_64" "aarch64"; do |
| 130 | + import_to_repo "bundles/Mixxx-${VERSION}-${arch}.flatpak" org.mixxx.Mixxx ${arch} app |
| 131 | + if [ -f "bundles/Mixxx-${VERSION}-${arch}.Debug.flatpak" ]; then |
| 132 | + import_to_repo "bundles/Mixxx-${VERSION}-${arch}.Debug.flatpak" org.mixxx.Mixxx.Debug ${arch} runtime |
| 133 | + else |
| 134 | + echo "No debug extension for ${arch}" |
| 135 | + fi |
| 136 | + done |
| 137 | +
|
| 138 | + - name: "Cleanup old builds" |
| 139 | + if: ${{ steps.prepare.outputs.expiry != null }} |
| 140 | + shell: bash |
| 141 | + env: |
| 142 | + EXPIRY: ${{ steps.prepare.outputs.expiry }} |
| 143 | + run: | |
| 144 | + ostree --repo=repo prune --refs-only --keep-younger-than="$EXPIRY ago" |
| 145 | + - name: "Push the updated repo" |
| 146 | + env: |
| 147 | + SSH_HOST: downloads-hostgator.mixxx.org |
| 148 | + SSH_USER: mixxx |
| 149 | + GPG_KEY_ID: rryan@mixxx.org |
| 150 | + shell: bash |
| 151 | + run: | |
| 152 | + ostree --repo=repo summary -u --gpg-sign=$GPG_KEY_ID |
| 153 | + flatpak build-update-repo --gpg-sign=$GPG_KEY_ID repo |
| 154 | + ./rsync-repos --src "repo/" --dest "${SSH_USER}@${SSH_HOST}:public_html/downloads/flatpak" --rsync-opts "--verbose --recursive --checksum --times --delay-updates" |
| 155 | +
|
| 156 | + - name: "Update the repo manifest" |
| 157 | + if: ${{ inputs.update_repo }} |
| 158 | + env: |
| 159 | + SSH_HOST: downloads-hostgator.mixxx.org |
| 160 | + SSH_USER: mixxx |
| 161 | + shell: bash |
| 162 | + run: | |
| 163 | + rsync --verbose "packaging/flatpak/repo.flatpakrepo" "${SSH_USER}@${SSH_HOST}:public_html/downloads/flatpak/repo.flatpakrepo" |
| 164 | +
|
| 165 | + # TODO we could also publish a .flatpakref file to allow one-click install a version and publish this as a comment to the PR. |
0 commit comments