ci: add testnet publish and Dockerfile

SiaFoundation · Apr 2, 2023 · c25f5fd · c25f5fd
1 parent 6076865
commit c25f5fd
Show file tree

Hide file tree

Showing 4 changed files with 230 additions and 3 deletions.
diff --git a/.github/workflows/publish - zen.yml b/.github/workflows/publish - zen.yml
@@ -0,0 +1,194 @@
+name: Publish - Zen Testnet
+
+# Controls when the action will run. 
+on:
+  # Triggers the workflow on new SemVer tags
+  push:
+    branches:
+      - master
+      - stable
+    tags: 
+      - 'v[0-9]+.[0-9]+.[0-9]+'
+      - 'v[0-9]+.[0-9]+.[0-9]+-rc[0-9]+'
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+    steps:
+      - uses: actions/checkout@v3
+      - uses: docker/setup-qemu-action@v2
+      - uses: docker/setup-buildx-action@v2
+      - uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - uses: docker/metadata-action@v4
+        name: generate tags
+        id: meta
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          flavor: |
+            suffix=-testnet,onlatest=true
+          tags: |
+            type=ref,event=branch
+            type=sha,prefix=
+            type=semver,pattern={{version}}
+      - uses: docker/build-push-action@v4
+        with:
+          context: .
+          file: ./docker/Dockerfile.testnet
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+  build-linux:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v3
+        with:
+          go-version: 'stable'
+      - name: Install dependencies
+        run: |
+          sudo apt install -y gcc-aarch64-linux-gnu
+      - name: Build amd64
+        env:
+          CGO_ENABLED: 1
+          GOOS: linux
+          GOARCH: amd64
+        run: |
+          mkdir -p release
+          ZIP_OUTPUT=release/renterd_zen_${GOOS}_${GOARCH}.zip
+          go build -tags='netgo testnet' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd
+          cp README.md LICENSE bin/
+          zip -qj $ZIP_OUTPUT bin/*
+      - name: Build arm64
+        env:
+          CGO_ENABLED: 1
+          GOOS: linux
+          GOARCH: arm64
+          CC: aarch64-linux-gnu-gcc
+        run: |
+          mkdir -p release
+          ZIP_OUTPUT=release/renterd_zen_${GOOS}_${GOARCH}.zip
+          go build -tags='netgo testnet' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd
+          cp README.md LICENSE bin/
+          zip -qj $ZIP_OUTPUT bin/*
+      - uses: actions/upload-artifact@v3
+        with:
+          name: renterd-zen
+          path: release/
+  build-mac: 
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v3
+        with:
+          go-version: 'stable'
+      - name: Setup Notarization
+        env:
+          APPLE_CERT_ID: ${{ secrets.APPLE_CERT_ID }}
+          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
+          APPLE_KEY_B64: ${{ secrets.APPLE_KEY_B64 }}
+          APPLE_CERT_B64: ${{ secrets.APPLE_CERT_B64 }}
+          APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }}
+          APPLE_KEYCHAIN_PASSWORD: ${{ secrets.APPLE_KEYCHAIN_PASSWORD }}
+        run: |
+          # extract apple cert
+          APPLE_CERT_PATH=$RUNNER_TEMP/apple_cert.p12
+          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
+          echo -n "$APPLE_CERT_B64" | base64 --decode --output $APPLE_CERT_PATH
+
+          # extract apple key
+          mkdir -p ~/private_keys
+          APPLE_API_KEY_PATH=~/private_keys/AuthKey_$APPLE_API_KEY.p8
+          echo -n "$APPLE_KEY_B64" | base64 --decode --output $APPLE_API_KEY_PATH
+
+          # create temp keychain
+          security create-keychain -p "$APPLE_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          security default-keychain -s $KEYCHAIN_PATH
+          security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+          security unlock-keychain -p "$APPLE_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+
+          # import keychain
+          security import $APPLE_CERT_PATH -P $APPLE_CERT_PASSWORD -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
+          security find-identity -v $KEYCHAIN_PATH -p codesigning
+          security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k $APPLE_KEYCHAIN_PASSWORD $KEYCHAIN_PATH
+      - name: Build amd64
+        env:
+          APPLE_CERT_ID: ${{ secrets.APPLE_CERT_ID }}
+          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
+          APPLE_KEY_B64: ${{ secrets.APPLE_KEY_B64 }}
+          APPLE_CERT_B64: ${{ secrets.APPLE_CERT_B64 }}
+          APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }}
+          APPLE_KEYCHAIN_PASSWORD: ${{ secrets.APPLE_KEYCHAIN_PASSWORD }}
+          CGO_ENABLED: 1
+          GOOS: darwin
+          GOARCH: amd64
+        run: |
+          ZIP_OUTPUT=release/renterd_zen_${GOOS}_${GOARCH}.zip
+          mkdir -p release
+          go build -tags='netgo testnet' -trimpath -o bin/ -a -ldflags '-s -w' ./cmd/renterd
+          cp README.md LICENSE bin/
+          /usr/bin/codesign --deep -f -v --timestamp -o runtime,library -s $APPLE_CERT_ID bin/renterd
+          ditto -ck bin $ZIP_OUTPUT
+          xcrun notarytool submit -k ~/private_keys/AuthKey_$APPLE_API_KEY.p8 -d $APPLE_API_KEY -i $APPLE_API_ISSUER --wait --timeout 10m $ZIP_OUTPUT
+      - name: Build arm64
+        env:
+          APPLE_CERT_ID: ${{ secrets.APPLE_CERT_ID }}
+          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
+          APPLE_KEY_B64: ${{ secrets.APPLE_KEY_B64 }}
+          APPLE_CERT_B64: ${{ secrets.APPLE_CERT_B64 }}
+          APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }}
+          APPLE_KEYCHAIN_PASSWORD: ${{ secrets.APPLE_KEYCHAIN_PASSWORD }}
+          CGO_ENABLED: 1
+          GOOS: darwin
+          GOARCH: arm64
+        run: |
+          ZIP_OUTPUT=release/renterd_zen_${GOOS}_${GOARCH}.zip
+          mkdir -p release
+          go build -tags='netgo testnet' -trimpath -o bin/ -a -ldflags '-s -w' ./cmd/renterd
+          cp README.md LICENSE bin/
+          /usr/bin/codesign --deep -f -v --timestamp -o runtime,library -s $APPLE_CERT_ID bin/renterd
+          ditto -ck bin $ZIP_OUTPUT
+          xcrun notarytool submit -k ~/private_keys/AuthKey_$APPLE_API_KEY.p8 -d $APPLE_API_KEY -i $APPLE_API_ISSUER --wait --timeout 10m $ZIP_OUTPUT
+      - uses: actions/upload-artifact@v3
+        with:
+          name: renterd-zen
+          path: release/
+  build-windows: 
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v3
+        with:
+          go-version: 'stable'
+      - name: Build amd64
+        env:
+          CGO_ENABLED: 1
+          GOOS: windows
+          GOARCH: amd64
+        shell: bash
+        run: |
+          mkdir -p release
+          ZIP_OUTPUT=release/renterd_zen_${GOOS}_${GOARCH}.zip
+          go build -tags='netgo testnet' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd
+          cp README.md LICENSE bin/
+          7z a $ZIP_OUTPUT bin/*
+      - uses: actions/upload-artifact@v3
+        with:
+          name: renterd-zen
+          path: release/
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -45,6 +45,7 @@ jobs:
       - uses: docker/build-push-action@v4
         with:
           context: .
+          file: ./docker/Dockerfile
           platforms: linux/amd64,linux/arm64
           push: true
           tags: ${{ steps.meta.outputs.tags }}
@@ -66,7 +67,7 @@ jobs:
         run: |
           mkdir -p release
           ZIP_OUTPUT=release/renterd_${GOOS}_${GOARCH}.zip
-          go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w' ./cmd/renterd
+          go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd
           cp README.md LICENSE bin/
           zip -qj $ZIP_OUTPUT bin/*
       - name: Build arm64
@@ -78,7 +79,7 @@ jobs:
         run: |
           mkdir -p release
           ZIP_OUTPUT=release/renterd_${GOOS}_${GOARCH}.zip
-          go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w' ./cmd/renterd
+          go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd
           cp README.md LICENSE bin/
           zip -qj $ZIP_OUTPUT bin/*
       - uses: actions/upload-artifact@v3
@@ -182,7 +183,7 @@ jobs:
         run: |
           mkdir -p release
           ZIP_OUTPUT=release/renterd_${GOOS}_${GOARCH}.zip
-          go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w' ./cmd/renterd
+          go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd
           cp README.md LICENSE bin/
           7z a $ZIP_OUTPUT bin/*
       - uses: actions/upload-artifact@v3

diff --git a/Dockerfile → docker/Dockerfile b/Dockerfile → docker/Dockerfile
diff --git a/docker/Dockerfile.testnet b/docker/Dockerfile.testnet
@@ -0,0 +1,32 @@
+# Helper image to build renterd.
+FROM golang:1.19 AS builder
+LABEL maintainer="The Sia Foundation <[email protected]>"
+
+WORKDIR /renterd
+
+# Copy and build binary.
+COPY . .
+RUN go build -tags=testnet ./cmd/renterd
+
+# Build image that will be used to run renterd.
+FROM debian:bookworm-slim
+LABEL maintainer="The Sia Foundation <[email protected]>"
+
+# User to run renterd as. Defaults to root.
+ENV PUID=0
+ENV PGID=0
+
+# Renterd env args..
+ENV RENTERD_API_PASSWORD= 
+ENV RENTERD_SEED=
+
+# Copy binary and prepare data dir.
+COPY --from=builder /renterd/renterd /usr/bin/renterd
+VOLUME [ "/data" ]
+
+EXPOSE 9880/tcp
+EXPOSE 9881/tcp
+
+USER ${PUID}:${PGID}
+
+ENTRYPOINT [ "renterd", "-dir", "./data", "-http", ":9880" ]