feat: multi-repo release

sevki · Mar 17, 2024 · 483ded0 · 483ded0
1 parent c9e1dba
commit 483ded0
Show file tree

Hide file tree

Showing 2 changed files with 58 additions and 10 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -14,10 +14,14 @@ name: "CodeQL"
 on:
   push:
     branches: [ "main" ]
-  pull_request:
-    branches: [ "main" ]
+  # pull_request:
+  #   branches: [ "main" ]
   schedule:
     - cron: '44 8 * * 2'
+# also trigger on when commented /scan-codeql  on the pr
+  issue_comment:
+    types: [created]
+    pattern: /scan    
 
 jobs:
   analyze:

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -9,10 +9,15 @@ jobs:
     runs-on: ubuntu-latest
     container:
       image: debian:latest
-
+    env:
+      SHA: ${{ github.event.pull_request.head.sha }}
+      VERSION: ${{ github.event.pull_request.head.ref }}
+    outputs:
+      image_hash: ${{ steps.build_package.outputs.image_hash }}
+      image_name: ${{ steps.build_package.outputs.image_name }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Set up okLinux environment
         run: |
           ./deps
@@ -23,14 +28,53 @@ jobs:
 
       - name: Build kernel image
         run: make -j$(nproc) bzImage
+      - name: Build Artifacts Package
+        id: build_package
+        run: |
+          cp arch/x86_64/boot/bzImage kernel-x86_64-${VERSION}.tar.gz
+          sha256sum kernel-x86_64-${SHA}.tar.gz >> kernel-x86_64-${SHA}.tar.gz.sha256
+          echo "image_name=kernel-x86_64-${SHA}.tar.gz" >> "$GITHUB_OUTPUT"
+          echo "image_hash=$(cat kernel-x86_64-${SHA}.tar.gz.sha256)" >> "$GITHUB_OUTPUT"
       - uses: actions/upload-artifact@v4
         with:
-          name: x86_64
-          path: arch/x86_64        
-      - uses: actions/upload-artifact@v4
+          name: oklinux-kernel-x86_64-${{ github.event.pull_request.head.sha }}
+          path: kernel-x86_64-*
+  propose_release:
+    runs-on: ubuntu-latest
+    needs: build_kernel
+    steps:
+      - env:
+          VERSION: ${{ github.event.pull_request.head.ref }}
+          SHA: ${{ github.event.pull_request.head.sha }}
+          IMAGE_HASH: ${{ needs.build_kernel.outputs.image_hash }}
+          IMAGE_NAME: ${{ needs.build_kernel.outputs.image_name }}
+        uses: actions/checkout@v4
         with:
-          name: bzImage
-          path: arch/x86_64/boot/bzImage
+          repository: "sevki/okLinux"
+      - name: make download-script
+        run: |
+          echo "curl -L https://api.github.com/repos/sevki/kernel/actions/artifacts/1330970479/${IMAGE_NAME} > ${IMAGE_NAME}" > download-kernel.sh
+          echo "sha256sum -c ${IMAGE_NAME}.sha256" >> download-kernel.sh
+          chmod +x download-kernel.sh
+      - name: create pull request 
+        env:
+          VERSION: ${{ github.event.pull_request.head.ref }}
+          SHA: ${{ github.event.pull_request.head.sha }}
+          IMAGE_HASH: ${{ needs.build_kernel.outputs.image_hash }}
+          IMAGE_NAME: ${{ needs.build_kernel.outputs.image_name }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          git config user.name okmachina
+          git config user.email 163742220+okmachina@users.noreply.github.com
+          git remote add okLinux "https://${{ secrets.ROBOT_TOKEN }}@github.com/sevki/okLinux.git"
+          git add download-kernel.sh
+          echo $IMAGE_HASH >> ${IMAGE_NAME}.sha256
+          git add ${IMAGE_NAME}.sha256
+          git commit -m "Update to${SHA}"
+          export COMMIT=$(git rev-parse HEAD)
+          git checkout -b "update-to-${SHA}"
+          git push okLinux "update-to-${SHA}"
+          gh pr create --title "Update to ${SHA}" --body "Update to ${SHA}" --base main --head "update-to-${SHA}"
   build_kernel_docs:
     runs-on: ubuntu-latest
     steps:
@@ -48,4 +92,4 @@ jobs:
       - name: Upload artifact
         uses: actions/upload-pages-artifact@v3
         with:
-          path: './Documentation/output'          
+          path: "./Documentation/output"