HudBox/.github/workflows/release.yml at b40acbbb8390db6dcb2703e5119a3dd4cdf8f1dd · swstegall/HudBox · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
name: Release

on:
  push:
    tags:
      - '*'

jobs:
  package:
    runs-on: ubuntu-latest
    env:
      UBUNTU_DIST: noble

    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Install Dependencies (Ubuntu)
        run: |
          sudo apt-get update
          sudo apt-get install -y \
            build-essential cmake ninja-build pkg-config \
            gcc g++ clang \
            libgtk-4-dev libwebkitgtk-6.0-dev libjson-glib-dev \
            dpkg-dev fakeroot debhelper devscripts \
            dput gnupg lintian

      - name: Set reusable strings
        id: strings
        shell: bash
        run: |
          echo "build-output-dir=${GITHUB_WORKSPACE}/build" >> "$GITHUB_OUTPUT"
          TAG="${GITHUB_REF_NAME}"
          VERSION="${TAG#v}"
          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"

      - name: Configure CMake (Release)
        run: >
          cmake -B ${{ steps.strings.outputs.build-output-dir }}
          -DCMAKE_C_COMPILER=gcc
          -DCMAKE_CXX_COMPILER=g++
          -DCMAKE_BUILD_TYPE=Release
          -S ${{ github.workspace }}

      - name: Build
        run: cmake --build ${{ steps.strings.outputs.build-output-dir }} --config Release --parallel

      - name: Make DEB with CPack
        working-directory: ${{ steps.strings.outputs.build-output-dir }}
        run: cpack -G DEB

      - name: Upload DEB artifact
        uses: actions/upload-artifact@v4
        with:
          name: hudbox-deb
          path: ${{ steps.strings.outputs.build-output-dir }}/*.deb

      - name: Create GitHub Release and upload .deb
        uses: softprops/action-gh-release@v2
        with:
          files: ${{ steps.strings.outputs.build-output-dir }}/*.deb
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      #
      # === PPA SECTION: only runs if a GPG key is present ===
      #

      - name: Import GPG key for PPA signing
        if: ${{ secrets.GPG_PRIVATE_KEY }}
        env:
          HAS_GPG_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
        run: |
          mkdir -p ~/.gnupg
          chmod 700 ~/.gnupg
          echo 'use-agent' >> ~/.gnupg/gpg.conf
          echo 'pinentry-mode loopback' >> ~/.gnupg/gpg.conf
          echo "$GPG_PRIVATE_KEY" | gpg --batch --yes --import
          gpg --list-secret-keys --keyid-format LONG

      - name: Prepare debian/changelog from tag
        if: ${{ secrets.GPG_PRIVATE_KEY }}
        env:
          HAS_GPG_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
          DEBEMAIL: ${{ secrets.LAUNCHPAD_EMAIL }}
          DEBFULLNAME: ${{ secrets.GPG_FULL_NAME }}
        run: |
          VERSION="${{ steps.strings.outputs.version }}"
          DEBVER="${VERSION}-0ppa1~${UBUNTU_DIST}"
          dch --package hudbox --newversion "$DEBVER" \
              --distribution "$UBUNTU_DIST" \
              --force-distribution \
              "Release $VERSION for PPA ($UBUNTU_DIST)"

      - name: Build signed source package for PPA
        if: ${{ secrets.GPG_PRIVATE_KEY }}
        env:
          HAS_GPG_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
          DEBEMAIL: ${{ secrets.LAUNCHPAD_EMAIL }}
          DEBFULLNAME: ${{ secrets.GPG_FULL_NAME }}
          DEBSIGN_KEYID: ${{ secrets.GPG_KEY_ID }}
          DEBSIGN_GPGOPTS: "--batch --yes --pinentry-mode loopback --passphrase=${{ secrets.PPA_GPG_PASSPHRASE }}"
        run: |
          debuild -S -sa
          ls -l ../*.changes

      - name: Upload to Launchpad PPA
        if: ${{ secrets.GPG_PRIVATE_KEY }}
        env:
          HAS_GPG_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
          DPUT_HOST: ppa:swstegall/hudbox
        run: |
          CHANGES_FILE=$(ls -1 ../*.changes | head -n1)
          dput "$DPUT_HOST" "$CHANGES_FILE"