ci: add workflow to build all packages

shyim · Mar 25, 2024 · 3877568 · 3877568
1 parent e0b5730
commit 3877568
Showing 1 changed file with 68 additions and 0 deletions.
diff --git a/.github/workflows/build-all.yaml b/.github/workflows/build-all.yaml
@@ -0,0 +1,68 @@
+name: Build All
+
+on:
+    workflow_dispatch:
+    push:
+
+jobs:
+    build:
+        runs-on: ubuntu-latest
+        container:
+            image: ghcr.io/wolfi-dev/sdk:latest
+            options: |
+                --cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined
+        steps:
+            - name: Checkout
+              uses: actions/checkout@v4
+
+            - name: Install rclone
+              run: |
+                cd /tmp
+                curl -o rclone.zip -L https://downloads.rclone.org/rclone-current-linux-amd64.zip
+                unzip rclone.zip
+                cp rclone*/rclone /usr/bin/
+                rm -rf rclone*
+            
+            - name: Rclone Setup
+              run: |
+                mkdir -p $HOME/.config/rclone
+                cat <<EOF > $HOME/.config/rclone/rclone.conf
+                [Packages]
+                type = s3
+                provider = Cloudflare
+                env_auth = true
+                region = auto
+                endpoint = https://963ff7fb9c523564b5f3a398ab39d488.r2.cloudflarestorage.com
+                EOF
+
+            - name: Create packages directory
+              run: mkdir -p packages
+
+            - name: Get signing key
+              run: |
+                echo "${{ secrets.SIGNING_KEY }}" | base64 -d > melange.rsa
+
+            - name: Build packages
+              env:
+                AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+                AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+              run: |
+                rclone mount Packages:wolfi-php packages --allow-other --write-back-cache --vfs-cache-mode full -vvv &
+                pid=$!
+
+                # for file in *.yaml; do
+                #     melange build \
+                #         --arch x86_64 \
+                #         -r https://packages.wolfi.dev/os \
+                #         -k https://packages.wolfi.dev/os/wolfi-signing.rsa.pub \
+                #         --signing-key melange.rsa \
+                #         $file
+                # done
+
+                sleep 5
+
+                melange sign-index \
+                    --signing-key melange.rsa \
+                    packages/x86_64/APKINDEX.tar.gz
+
+                kill $pid