add arm64 builds #5755
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: SimpleLogin actions | ||
| on: | ||
| push: | ||
| branches: | ||
| - master | ||
| tags: | ||
| - v* | ||
| pull_request: | ||
| env: | ||
| DOCKERHUB_REPO: simplelogin/app-ci | ||
| jobs: | ||
| lint: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Check out repo | ||
| uses: actions/checkout@v3 | ||
| - name: Install uv | ||
| uses: astral-sh/setup-uv@v5 | ||
| with: | ||
| # Install a specific version of uv. | ||
| version: "0.5.21" | ||
| enable-cache: true | ||
| - name: Install OS dependencies | ||
| run: | | ||
| sudo apt update | ||
| sudo apt install -y libre2-dev libpq-dev | ||
| - name: "Set up Python" | ||
| uses: actions/setup-python@v5 | ||
| with: | ||
| python-version-file: "pyproject.toml" | ||
| - name: Install dependencies | ||
| if: steps.setup-uv.outputs.cache-hit != 'true' | ||
| run: uv sync --locked --all-extras | ||
| - name: Check formatting & linting | ||
| run: | | ||
| uv run pre-commit run --all-files | ||
| test: | ||
| runs-on: ubuntu-latest | ||
| # service containers to run with `postgres-job` | ||
| services: | ||
| # label used to access the service container | ||
| postgres: | ||
| # Docker Hub image | ||
| image: postgres:13 | ||
| # service environment variables | ||
| # `POSTGRES_HOST` is `postgres` | ||
| env: | ||
| # optional (defaults to `postgres`) | ||
| POSTGRES_DB: test | ||
| # required | ||
| POSTGRES_PASSWORD: test | ||
| # optional (defaults to `5432`) | ||
| POSTGRES_PORT: 5432 | ||
| # optional (defaults to `postgres`) | ||
| POSTGRES_USER: test | ||
| ports: | ||
| - 15432:5432 | ||
| # set health checks to wait until postgres has started | ||
| options: >- | ||
| --health-cmd pg_isready | ||
| --health-interval 10s | ||
| --health-timeout 5s | ||
| --health-retries 5 | ||
| steps: | ||
| - name: Check out repo | ||
| uses: actions/checkout@v3 | ||
| - name: Install uv | ||
| uses: astral-sh/setup-uv@v5 | ||
| with: | ||
| # Install a specific version of uv. | ||
| version: "0.5.21" | ||
| enable-cache: true | ||
| - name: Install OS dependencies | ||
| run: | | ||
| sudo apt update | ||
| sudo apt install -y libre2-dev libpq-dev | ||
| - name: "Set up Python" | ||
| uses: actions/setup-python@v5 | ||
| with: | ||
| python-version-file: "pyproject.toml" | ||
| - name: Install dependencies | ||
| if: steps.setup-uv.outputs.cache-hit != 'true' | ||
| run: uv sync --locked --all-extras | ||
| - name: Start Redis v6 | ||
| uses: superchargejs/redis-github-action@1.1.0 | ||
| with: | ||
| redis-version: 6 | ||
| - name: Run db migration | ||
| run: | | ||
| CONFIG=tests/test.env uv run alembic upgrade head | ||
| - name: Prepare version file | ||
| run: | | ||
| scripts/generate-build-info.sh ${{ github.sha }} | ||
| cat app/build_info.py | ||
| - name: Test with pytest | ||
| run: | | ||
| uv run pytest | ||
| env: | ||
| GITHUB_ACTIONS_TEST: true | ||
| - name: Archive code coverage results | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: code-coverage-report | ||
| path: htmlcov | ||
| build: | ||
| strategy: | ||
| fail-fast: false | ||
| matrix: | ||
| platform: [amd64, arm64] | ||
| include: | ||
| - platform: amd64 | ||
| runs-on: ubuntu-latest | ||
| - platform: arm64 | ||
| runs-on: ubuntu-20.04 | ||
| runs-on: ubuntu-latest | ||
| timeout-minutes: 60 | ||
| needs: ['test', 'lint'] | ||
| if: github.event_name == 'push' && (github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/v')) | ||
| steps: | ||
| - name: Prepare | ||
| run: | | ||
| platform=${{ matrix.platform }} | ||
| echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV | ||
| - name: Docker meta | ||
| id: meta | ||
| uses: docker/metadata-action@v4 | ||
| with: | ||
| images: ${{ env.DOCKERHUB_REPO }} | ||
| - name: Login to Docker Hub | ||
| uses: docker/login-action@v2 | ||
| with: | ||
| username: ${{ secrets.DOCKER_USERNAME }} | ||
| password: ${{ secrets.DOCKER_PASSWORD }} | ||
| # We need to checkout the repository in order for the "Create Sentry release" to work | ||
| - name: Checkout repository | ||
| uses: actions/checkout@v3 | ||
| with: | ||
| fetch-depth: 0 | ||
| - name: Set up QEMU | ||
| uses: docker/setup-qemu-action@v2 | ||
| - name: Set up Docker Buildx | ||
| uses: docker/setup-buildx-action@v2 | ||
| - name: Prepare version file | ||
| run: | | ||
| scripts/generate-build-info.sh ${{ github.sha }} | ||
| cat app/build_info.py | ||
| - name: Build and push by digest | ||
| id: build | ||
| uses: docker/build-push-action@v6 | ||
| with: | ||
| platforms: ${{ matrix.platform }} | ||
| labels: ${{ steps.meta.outputs.labels }} | ||
| outputs: type=image,"name=${{ env.DOCKERHUB_REPO }}",push-by-digest=true,name-canonical=true,push=true | ||
| - name: Export digest | ||
| run: | | ||
| mkdir -p ${{ runner.temp }}/digests | ||
| digest="${{ steps.build.outputs.digest }}" | ||
| touch "${{ runner.temp }}/digests/${digest#sha256:}" | ||
| - name: Upload digest | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: digests-${{ env.PLATFORM_PAIR }} | ||
| path: ${{ runner.temp }}/digests/* | ||
| if-no-files-found: error | ||
| retention-days: 1 | ||
| merge: | ||
| runs-on: ubuntu-latest | ||
| needs: | ||
| - build | ||
| steps: | ||
| - name: Download digests | ||
| uses: actions/download-artifact@v4 | ||
| with: | ||
| path: ${{ runner.temp }}/digests | ||
| pattern: digests-* | ||
| merge-multiple: true | ||
| - name: Login to Docker Hub | ||
| uses: docker/login-action@v3 | ||
| with: | ||
| username: ${{ secrets.DOCKER_USERNAME }} | ||
| password: ${{ secrets.DOCKER_PASSWORD }} | ||
| - name: Set up Docker Buildx | ||
| uses: docker/setup-buildx-action@v3 | ||
| - name: Create Sentry release | ||
| uses: getsentry/action-release@v1 | ||
| env: | ||
| SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} | ||
| SENTRY_ORG: ${{ secrets.SENTRY_ORG }} | ||
| SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }} | ||
| with: | ||
| ignore_missing: true | ||
| ignore_empty: true | ||
| - name: Docker meta | ||
| id: meta | ||
| uses: docker/metadata-action@v5 | ||
| with: | ||
| images: | | ||
| ${{ env.DOCKERHUB_REPO }} | ||
| tags: | | ||
| type=ref,event=branch | ||
| type=ref,event=pr | ||
| type=semver,pattern={{version}} | ||
| type=semver,pattern={{major}}.{{minor}} | ||
| - name: Create manifest list and push | ||
| working-directory: ${{ runner.temp }}/digests | ||
| run: | | ||
| docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \ | ||
| $(printf '${{ env.DOCKERHUB_REPO }}@sha256:%s ' *) | ||
| - name: Inspect image | ||
| run: | | ||
| docker buildx imagetools inspect ${{ env.DOCKERHUB_REPO }}:${{ steps.meta.outputs.version }} | ||
| release: | ||
| runs-on: ubuntu-latest | ||
| needs: | ||
| - merge | ||
| steps: | ||
| #- name: Send Telegram message | ||
| # uses: appleboy/telegram-action@master | ||
| # with: | ||
| # to: ${{ secrets.TELEGRAM_TO }} | ||
| # token: ${{ secrets.TELEGRAM_TOKEN }} | ||
| # args: Docker image pushed on ${{ github.ref }} | ||
| # If we have generated a tag, generate the changelog, send a notification to slack and create the GitHub release | ||
| - name: Build Changelog | ||
| id: build_changelog | ||
| if: startsWith(github.ref, 'refs/tags/v') | ||
| uses: mikepenz/release-changelog-builder-action@v3 | ||
| with: | ||
| configuration: ".github/changelog_configuration.json" | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| - name: Prepare Slack notification contents | ||
| if: startsWith(github.ref, 'refs/tags/v') | ||
| run: | | ||
| changelog=$(cat << EOH | ||
| ${{ steps.build_changelog.outputs.changelog }} | ||
| EOH | ||
| ) | ||
| messageWithoutNewlines=$(echo "${changelog}" | awk '{printf "%s\\n", $0}') | ||
| messageWithoutDoubleQuotes=$(echo "${messageWithoutNewlines}" | sed "s/\"/'/g") | ||
| echo "${messageWithoutDoubleQuotes}" | ||
| echo "SLACK_CHANGELOG=${messageWithoutDoubleQuotes}" >> $GITHUB_ENV | ||
| - name: Post notification to Slack | ||
| uses: slackapi/slack-github-action@v1.19.0 | ||
| if: startsWith(github.ref, 'refs/tags/v') | ||
| with: | ||
| channel-id: ${{ secrets.SLACK_CHANNEL_ID }} | ||
| payload: | | ||
| { | ||
| "blocks": [ | ||
| { | ||
| "type": "header", | ||
| "text": { | ||
| "type": "plain_text", | ||
| "text": "New tag created", | ||
| "emoji": true | ||
| } | ||
| }, | ||
| { | ||
| "type": "section", | ||
| "text": { | ||
| "type": "mrkdwn", | ||
| "text": "*Tag: ${{ github.ref_name }}* (${{ github.sha }})" | ||
| } | ||
| }, | ||
| { | ||
| "type": "section", | ||
| "text": { | ||
| "type": "mrkdwn", | ||
| "text": "*Changelog:*\n${{ env.SLACK_CHANGELOG }}" | ||
| } | ||
| } | ||
| ] | ||
| } | ||
| env: | ||
| SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }} | ||
| - name: Create GitHub Release | ||
| if: startsWith(github.ref, 'refs/tags/v') | ||
| uses: actions/create-release@v1 | ||
| with: | ||
| tag_name: ${{ github.ref }} | ||
| release_name: ${{ github.ref }} | ||
| body: ${{ steps.build_changelog.outputs.changelog }} | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
