diff --git a/.github/workflows/publish - zen.yml b/.github/workflows/publish - zen.yml new file mode 100644 index 000000000..ccaa4bb04 --- /dev/null +++ b/.github/workflows/publish - zen.yml @@ -0,0 +1,194 @@ +name: Publish - Zen Testnet + +# Controls when the action will run. +on: + # Triggers the workflow on new SemVer tags + push: + branches: + - master + - stable + tags: + - 'v[0-9]+.[0-9]+.[0-9]+' + - 'v[0-9]+.[0-9]+.[0-9]+-rc[0-9]+' + +concurrency: + group: ${{ github.workflow }} + cancel-in-progress: true + +env: + REGISTRY: ghcr.io + IMAGE_NAME: ${{ github.repository }} + +jobs: + docker: + runs-on: ubuntu-latest + permissions: + packages: write + steps: + - uses: actions/checkout@v3 + - uses: docker/setup-qemu-action@v2 + - uses: docker/setup-buildx-action@v2 + - uses: docker/login-action@v2 + with: + registry: ghcr.io + username: ${{ github.repository_owner }} + password: ${{ secrets.GITHUB_TOKEN }} + - uses: docker/metadata-action@v4 + name: generate tags + id: meta + with: + images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} + flavor: | + suffix=-testnet,onlatest=true + tags: | + type=ref,event=branch + type=sha,prefix= + type=semver,pattern={{version}} + - uses: docker/build-push-action@v4 + with: + context: . + file: ./docker/Dockerfile.testnet + platforms: linux/amd64,linux/arm64 + push: true + tags: ${{ steps.meta.outputs.tags }} + build-linux: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + - uses: actions/setup-go@v3 + with: + go-version: 'stable' + - name: Install dependencies + run: | + sudo apt install -y gcc-aarch64-linux-gnu + - name: Build amd64 + env: + CGO_ENABLED: 1 + GOOS: linux + GOARCH: amd64 + run: | + mkdir -p release + ZIP_OUTPUT=release/renterd_zen_${GOOS}_${GOARCH}.zip + go build -tags='netgo testnet' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd + cp README.md LICENSE bin/ + zip -qj $ZIP_OUTPUT bin/* + - name: Build arm64 + env: + CGO_ENABLED: 1 + GOOS: linux + GOARCH: arm64 + CC: aarch64-linux-gnu-gcc + run: | + mkdir -p release + ZIP_OUTPUT=release/renterd_zen_${GOOS}_${GOARCH}.zip + go build -tags='netgo testnet' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd + cp README.md LICENSE bin/ + zip -qj $ZIP_OUTPUT bin/* + - uses: actions/upload-artifact@v3 + with: + name: renterd-zen + path: release/ + build-mac: + runs-on: macos-latest + steps: + - uses: actions/checkout@v3 + - uses: actions/setup-go@v3 + with: + go-version: 'stable' + - name: Setup Notarization + env: + APPLE_CERT_ID: ${{ secrets.APPLE_CERT_ID }} + APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }} + APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }} + APPLE_KEY_B64: ${{ secrets.APPLE_KEY_B64 }} + APPLE_CERT_B64: ${{ secrets.APPLE_CERT_B64 }} + APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }} + APPLE_KEYCHAIN_PASSWORD: ${{ secrets.APPLE_KEYCHAIN_PASSWORD }} + run: | + # extract apple cert + APPLE_CERT_PATH=$RUNNER_TEMP/apple_cert.p12 + KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db + echo -n "$APPLE_CERT_B64" | base64 --decode --output $APPLE_CERT_PATH + + # extract apple key + mkdir -p ~/private_keys + APPLE_API_KEY_PATH=~/private_keys/AuthKey_$APPLE_API_KEY.p8 + echo -n "$APPLE_KEY_B64" | base64 --decode --output $APPLE_API_KEY_PATH + + # create temp keychain + security create-keychain -p "$APPLE_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH + security default-keychain -s $KEYCHAIN_PATH + security set-keychain-settings -lut 21600 $KEYCHAIN_PATH + security unlock-keychain -p "$APPLE_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH + + # import keychain + security import $APPLE_CERT_PATH -P $APPLE_CERT_PASSWORD -A -t cert -f pkcs12 -k $KEYCHAIN_PATH + security find-identity -v $KEYCHAIN_PATH -p codesigning + security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k $APPLE_KEYCHAIN_PASSWORD $KEYCHAIN_PATH + - name: Build amd64 + env: + APPLE_CERT_ID: ${{ secrets.APPLE_CERT_ID }} + APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }} + APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }} + APPLE_KEY_B64: ${{ secrets.APPLE_KEY_B64 }} + APPLE_CERT_B64: ${{ secrets.APPLE_CERT_B64 }} + APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }} + APPLE_KEYCHAIN_PASSWORD: ${{ secrets.APPLE_KEYCHAIN_PASSWORD }} + CGO_ENABLED: 1 + GOOS: darwin + GOARCH: amd64 + run: | + ZIP_OUTPUT=release/renterd_zen_${GOOS}_${GOARCH}.zip + mkdir -p release + go build -tags='netgo testnet' -trimpath -o bin/ -a -ldflags '-s -w' ./cmd/renterd + cp README.md LICENSE bin/ + /usr/bin/codesign --deep -f -v --timestamp -o runtime,library -s $APPLE_CERT_ID bin/renterd + ditto -ck bin $ZIP_OUTPUT + xcrun notarytool submit -k ~/private_keys/AuthKey_$APPLE_API_KEY.p8 -d $APPLE_API_KEY -i $APPLE_API_ISSUER --wait --timeout 10m $ZIP_OUTPUT + - name: Build arm64 + env: + APPLE_CERT_ID: ${{ secrets.APPLE_CERT_ID }} + APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }} + APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }} + APPLE_KEY_B64: ${{ secrets.APPLE_KEY_B64 }} + APPLE_CERT_B64: ${{ secrets.APPLE_CERT_B64 }} + APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }} + APPLE_KEYCHAIN_PASSWORD: ${{ secrets.APPLE_KEYCHAIN_PASSWORD }} + CGO_ENABLED: 1 + GOOS: darwin + GOARCH: arm64 + run: | + ZIP_OUTPUT=release/renterd_zen_${GOOS}_${GOARCH}.zip + mkdir -p release + go build -tags='netgo testnet' -trimpath -o bin/ -a -ldflags '-s -w' ./cmd/renterd + cp README.md LICENSE bin/ + /usr/bin/codesign --deep -f -v --timestamp -o runtime,library -s $APPLE_CERT_ID bin/renterd + ditto -ck bin $ZIP_OUTPUT + xcrun notarytool submit -k ~/private_keys/AuthKey_$APPLE_API_KEY.p8 -d $APPLE_API_KEY -i $APPLE_API_ISSUER --wait --timeout 10m $ZIP_OUTPUT + - uses: actions/upload-artifact@v3 + with: + name: renterd-zen + path: release/ + build-windows: + runs-on: windows-latest + steps: + - uses: actions/checkout@v3 + - uses: actions/setup-go@v3 + with: + go-version: 'stable' + - name: Build amd64 + env: + CGO_ENABLED: 1 + GOOS: windows + GOARCH: amd64 + shell: bash + run: | + mkdir -p release + ZIP_OUTPUT=release/renterd_zen_${GOOS}_${GOARCH}.zip + go build -tags='netgo testnet' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd + cp README.md LICENSE bin/ + 7z a $ZIP_OUTPUT bin/* + - uses: actions/upload-artifact@v3 + with: + name: renterd-zen + path: release/ \ No newline at end of file diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index dae7a055a..0e3861b46 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -45,6 +45,7 @@ jobs: - uses: docker/build-push-action@v4 with: context: . + file: ./docker/Dockerfile platforms: linux/amd64,linux/arm64 push: true tags: ${{ steps.meta.outputs.tags }} @@ -66,7 +67,7 @@ jobs: run: | mkdir -p release ZIP_OUTPUT=release/renterd_${GOOS}_${GOARCH}.zip - go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w' ./cmd/renterd + go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd cp README.md LICENSE bin/ zip -qj $ZIP_OUTPUT bin/* - name: Build arm64 @@ -78,7 +79,7 @@ jobs: run: | mkdir -p release ZIP_OUTPUT=release/renterd_${GOOS}_${GOARCH}.zip - go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w' ./cmd/renterd + go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd cp README.md LICENSE bin/ zip -qj $ZIP_OUTPUT bin/* - uses: actions/upload-artifact@v3 @@ -182,7 +183,7 @@ jobs: run: | mkdir -p release ZIP_OUTPUT=release/renterd_${GOOS}_${GOARCH}.zip - go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w' ./cmd/renterd + go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/renterd cp README.md LICENSE bin/ 7z a $ZIP_OUTPUT bin/* - uses: actions/upload-artifact@v3 diff --git a/Dockerfile b/docker/Dockerfile similarity index 100% rename from Dockerfile rename to docker/Dockerfile diff --git a/docker/Dockerfile.testnet b/docker/Dockerfile.testnet new file mode 100644 index 000000000..c889fbadc --- /dev/null +++ b/docker/Dockerfile.testnet @@ -0,0 +1,32 @@ +# Helper image to build renterd. +FROM golang:1.19 AS builder +LABEL maintainer="The Sia Foundation " + +WORKDIR /renterd + +# Copy and build binary. +COPY . . +RUN go build -tags=testnet ./cmd/renterd + +# Build image that will be used to run renterd. +FROM debian:bookworm-slim +LABEL maintainer="The Sia Foundation " + +# User to run renterd as. Defaults to root. +ENV PUID=0 +ENV PGID=0 + +# Renterd env args.. +ENV RENTERD_API_PASSWORD= +ENV RENTERD_SEED= + +# Copy binary and prepare data dir. +COPY --from=builder /renterd/renterd /usr/bin/renterd +VOLUME [ "/data" ] + +EXPOSE 9880/tcp +EXPOSE 9881/tcp + +USER ${PUID}:${PGID} + +ENTRYPOINT [ "renterd", "-dir", "./data", "-http", ":9880" ]