feat: multi-repo release

sevki · Mar 18, 2024 · 8468abf · 8468abf
1 parent 085d024
commit 8468abf
Show file tree

Hide file tree

Showing 3 changed files with 38 additions and 41 deletions.
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -14,14 +14,10 @@ name: "CodeQL"
 on:
   push:
     branches: [ "main" ]
-  # pull_request:
-  #   branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
   schedule:
     - cron: '44 8 * * 2'
-# also trigger on when commented /scan-codeql  on the pr
-  issue_comment:
-    types: [created]
-    pattern: /scan    
 
 jobs:
   analyze:

diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml
@@ -36,7 +36,7 @@ jobs:
       - name: Build Artifacts Package
         id: build_package
         run: |
-          cp arch/x86_64/boot/bzImage kernel-x86_64-${VERSION}.tar.gz
+          cp arch/x86_64/boot/bzImage kernel-x86_64-${SHA}.tar.gz
           sha256sum kernel-x86_64-${SHA}.tar.gz >> kernel-x86_64-${SHA}.tar.gz.sha256
           echo "image_name=kernel-x86_64-${SHA}.tar.gz" >> "$GITHUB_OUTPUT"
           echo "image_hash=$(cat kernel-x86_64-${SHA}.tar.gz.sha256)" >> "$GITHUB_OUTPUT"
@@ -67,7 +67,7 @@ jobs:
           SHA: ${{ github.event.pull_request.head.sha }}
           IMAGE_HASH: ${{ needs.build_kernel.outputs.image_hash }}
           IMAGE_NAME: ${{ needs.build_kernel.outputs.image_name }}
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.ROBOT_TOKEN }}
         run: |
           git config user.name okmachina
           git config user.email 163742220+okmachina@users.noreply.github.com

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -15,6 +15,9 @@ jobs:
     outputs:
       image_hash: ${{ steps.build_package.outputs.image_hash }}
       image_name: ${{ steps.build_package.outputs.image_name }}
+      kernel_release: ${{ steps.build_package.outputs.kernel_release }}
+      artifact_url: ${{ steps.upload-artifact.outputs.artifact-url }}
+      arrifact_id: ${{ steps.upload-artifact.outputs.artifact-id }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -25,56 +28,54 @@ jobs:
           export CHROMEOS_KERNEL_FAMILY=termina
       - name: Prepare kernel configuration
         run: make olddefconfig
-
       - name: Build kernel image
         run: make -j$(nproc) bzImage
       - name: Build Artifacts Package
         id: build_package
         run: |
-          cp arch/x86_64/boot/bzImage kernel-x86_64-${VERSION}.tar.gz
-          sha256sum kernel-x86_64-${SHA}.tar.gz >> kernel-x86_64-${SHA}.tar.gz.sha256
-          echo "image_name=kernel-x86_64-${SHA}.tar.gz" >> "$GITHUB_OUTPUT"
-          echo "image_hash=$(cat kernel-x86_64-${SHA}.tar.gz.sha256)" >> "$GITHUB_OUTPUT"
+          export KERNEL_RELEASE=${SHA}
+          cp arch/x86_64/boot/bzImage kernel-x86_64-${KERNEL_RELEASE}.tar.gz
+          sha256sum kernel-x86_64-${KERNEL_RELEASE}.tar.gz >> kernel-x86_64-${KERNEL_RELEASE}.tar.gz.sha256
+          echo "image_name=kernel-x86_64-${KERNEL_RELEASE}.tar.gz" >> "$GITHUB_OUTPUT"
+          echo "image_hash=$(cat kernel-x86_64-${KERNEL_RELEASE}.tar.gz.sha256)" >> "$GITHUB_OUTPUT"
+          echo "kernel_release=${KERNEL_RELEASE}" >> "$GITHUB_OUTPUT"
       - uses: actions/upload-artifact@v4
+        id: upload-artifact
         with:
           name: oklinux-kernel-x86_64-${{ github.event.pull_request.head.sha }}
           path: kernel-x86_64-*
+
   propose_release:
     runs-on: ubuntu-latest
     needs: build_kernel
     steps:
-      - env:
-          VERSION: ${{ github.event.pull_request.head.ref }}
-          SHA: ${{ github.event.pull_request.head.sha }}
-          IMAGE_HASH: ${{ needs.build_kernel.outputs.image_hash }}
-          IMAGE_NAME: ${{ needs.build_kernel.outputs.image_name }}
-        uses: actions/checkout@v4
-        with:
-          repository: "sevki/okLinux"
-      - name: make download-script
-        run: |
-          echo "curl -L https://api.github.com/repos/sevki/kernel/actions/artifacts/1330970479/${IMAGE_NAME} > ${IMAGE_NAME}" > download-kernel.sh
-          echo "sha256sum -c ${IMAGE_NAME}.sha256" >> download-kernel.sh
-          chmod +x download-kernel.sh
       - name: create pull request 
         env:
-          VERSION: ${{ github.event.pull_request.head.ref }}
-          SHA: ${{ github.event.pull_request.head.sha }}
+          KERNEL_RELEASE: ${{ needs.build_kernel.outputs.kernel_release }}
           IMAGE_HASH: ${{ needs.build_kernel.outputs.image_hash }}
           IMAGE_NAME: ${{ needs.build_kernel.outputs.image_name }}
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          git config user.name okmachina
-          git config user.email 163742220+okmachina@users.noreply.github.com
-          git remote add okLinux "https://${{ secrets.ROBOT_TOKEN }}@github.com/sevki/okLinux.git"
-          git add download-kernel.sh
-          echo $IMAGE_HASH >> ${IMAGE_NAME}.sha256
-          git add ${IMAGE_NAME}.sha256
-          git commit -m "Update to${SHA}"
-          export COMMIT=$(git rev-parse HEAD)
-          git checkout -b "update-to-${SHA}"
-          git push okLinux "update-to-${SHA}"
-          gh pr create --title "Update to ${SHA}" --body "Update to ${SHA}" --base main --head "update-to-${SHA}"
+          GH_TOKEN: ${{ secrets.ROBOT_TOKEN }}
+          ARTIFACT_URL: ${{ steps.upload-artifact.outputs.artifact_url }}
+          ARTIFACT_ID: ${{ steps.upload-artifact.outputs.artifact_id }}
+        uses: actions/github-script@v7
+        with:
+          script: |
+                github.rest.repos.createDeployment({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  ref: context.sha,
+                  environment: `oklinux-${process.env.KERNEL_RELEASE}`,
+                  required_contexts: [],
+                  transient_environment: true,
+                  payload: {
+                    kernel_release: process.env.KERNEL_RELEASE,
+                    image_hash: process.env.IMAGE_HASH,
+                    image_name: process.env.IMAGE_NAME,
+                    artifact_url: process.env.ARTIFACT_URL
+                    artifact_id: process.env.ARTIFACT_ID
+                  }
+                });
+
   build_kernel_docs:
     runs-on: ubuntu-latest
     steps: