mrambossekandClaude Opus 5
33db502a76
The job log showed uploads 404ing: sed's greedy .* matched the LAST "id" in the release JSON (a nested user id), not the release's. First-match grep now. Release creation falls back to GET-by-tag on re-runs, and the image job strips any scheme from the internal server URL (http://app:3000) with an ECHOLOT_REGISTRY_HOST override for the public registry host. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
88 lines
3.9 KiB
YAML
88 lines
3.9 KiB
YAML
# Server RELEASE: on server-v* tags, builds static binaries and attaches them
|
|
# to a Gitea release (the artifact --self-update consumes), and separately
|
|
# builds + pushes the container image to the Gitea registry.
|
|
#
|
|
# Two independent jobs on purpose: the release job needs only Go + curl and
|
|
# must succeed on any runner; the image job needs a Docker-capable runner and
|
|
# may fail without taking the release down with it.
|
|
#
|
|
# Tags are namespaced (server-v1.2.3) so app releases (v*) and server
|
|
# releases don't trigger each other's pipelines.
|
|
#
|
|
# Required secrets: none beyond the built-in GITHUB_TOKEN — it can push to
|
|
# the registry of its own repo and create releases.
|
|
|
|
name: server-release
|
|
on:
|
|
push:
|
|
tags: ["server-v*.*.*"]
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with: { go-version: "1.26", cache-dependency-path: server/go.mod }
|
|
|
|
- name: Derive version
|
|
id: meta
|
|
run: echo "version=${GITHUB_REF_NAME#server-}" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Build static binaries (linux amd64+arm64)
|
|
working-directory: server
|
|
run: |
|
|
for arch in amd64 arm64; do
|
|
CGO_ENABLED=0 GOOS=linux GOARCH=$arch go build -trimpath \
|
|
-ldflags "-s -w -X main.Version=${{ steps.meta.outputs.version }}" \
|
|
-o "../dist/echolot-server_linux_${arch}" ./cmd/echolot-server
|
|
done
|
|
(cd ../dist && sha256sum * > SHA256SUMS)
|
|
|
|
- name: Create release + attach binaries
|
|
env:
|
|
TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
API: ${{ github.server_url }}/api/v1/repos/${{ github.repository }}
|
|
run: |
|
|
# Create the release; if it already exists (re-run), fetch it by tag.
|
|
if ! REL=$(curl -sf -X POST "$API/releases" \
|
|
-H "Authorization: token $TOKEN" -H "Content-Type: application/json" \
|
|
-d "{\"tag_name\":\"$GITHUB_REF_NAME\",\"name\":\"$GITHUB_REF_NAME\"}"); then
|
|
REL=$(curl -sf "$API/releases/tags/$GITHUB_REF_NAME" -H "Authorization: token $TOKEN")
|
|
fi
|
|
# jq-free id extraction. grep -o, NOT greedy sed: a greedy leading .*
|
|
# matches the LAST "id" in the payload (a nested user/repo id) and
|
|
# the uploads 404 — that broke the first v0.1.0 release run.
|
|
ID=$(echo "$REL" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
|
|
for f in dist/*; do
|
|
curl -sf -X POST "$API/releases/$ID/assets?name=$(basename "$f")" \
|
|
-H "Authorization: token $TOKEN" -F "attachment=@$f"
|
|
done
|
|
|
|
image:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Derive version + registry coords
|
|
id: meta
|
|
run: |
|
|
echo "version=${GITHUB_REF_NAME#server-}" >> "$GITHUB_OUTPUT"
|
|
# GITHUB_SERVER_URL inside the runner is the INTERNAL url
|
|
# (http://app:3000) — strip any scheme, and prefer the public host
|
|
# for the registry so pulled image references work outside.
|
|
HOST="${ECHOLOT_REGISTRY_HOST:-${GITHUB_SERVER_URL#*://}}"
|
|
echo "host=$HOST" >> "$GITHUB_OUTPUT"
|
|
echo "image=$HOST/${GITHUB_REPOSITORY,,}-server" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Build + push image (needs a Docker-capable runner)
|
|
run: |
|
|
command -v docker >/dev/null || { echo "::error::no docker on this runner — image skipped; binaries/release are unaffected"; exit 1; }
|
|
echo "${{ secrets.GITHUB_TOKEN }}" | docker login "${{ steps.meta.outputs.host }}" -u "$GITHUB_ACTOR" --password-stdin
|
|
docker build server \
|
|
--build-arg VERSION=${{ steps.meta.outputs.version }} \
|
|
-t "${{ steps.meta.outputs.image }}:${{ steps.meta.outputs.version }}" \
|
|
-t "${{ steps.meta.outputs.image }}:latest"
|
|
docker push "${{ steps.meta.outputs.image }}:${{ steps.meta.outputs.version }}"
|
|
docker push "${{ steps.meta.outputs.image }}:latest"
|