Merge pull request #38 from danut13/PAN-1994-adapt-ABI-versioning #8
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| jobs: | |
| shared: | |
| uses: pantos-io/ci-workflows/.github/workflows/python-ci.yml@v1 | |
| secrets: inherit | |
| docker-build: | |
| name: Build Docker images | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: step-security/harden-runner@v2 | |
| with: | |
| disable-sudo: false | |
| egress-policy: audit | |
| - uses: actions/checkout@v4 | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v3 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| id: buildx | |
| - name: Cache Docker layers | |
| uses: actions/cache@v3 | |
| with: | |
| path: /tmp/.buildx-cache | |
| key: ${{ runner.os }}-buildx-v1.0-service-node-${{ github.sha }} | |
| restore-keys: | | |
| ${{ runner.os }}-buildx-v1.0-service-node- | |
| - name: Build and load | |
| run: | | |
| docker buildx bake \ | |
| --set "*.cache-from=type=local,src=/tmp/.buildx-cache" \ | |
| --set "*.cache-to=type=local,dest=/tmp/.buildx-cache-new" \ | |
| --set "*.platform=linux/amd64" \ | |
| --builder ${{ steps.buildx.outputs.name }} \ | |
| -f docker-compose.yml \ | |
| --load | |
| - name: Create local keystore | |
| run: | | |
| echo "1234" >> password.keystore | |
| mkdir keystore_folder | |
| docker run --rm -v=.:/local ethereum/client-go account new --keystore /local/keystore_folder --password /local/password.keystore | |
| sudo chmod -R 777 keystore_folder | |
| mv keystore_folder/UTC* ./keystore | |
| - name: Create local signer_key | |
| run: | | |
| echo "1234" >> password.key | |
| python3 -m venv .venv | |
| source .venv/bin/activate | |
| pip3 install pycryptodome==3.18.0 | |
| chmod +x ./.github/workflows/scripts/generate-signer-key.py | |
| cat password.key | ./.github/workflows/scripts/generate-signer-key.py | |
| mv signer-key*.pem signer_key.pem | |
| # - name: Test image | |
| # run: | | |
| # docker compose up -d | |
| - name: Move cache | |
| run: | | |
| rm -rf /tmp/.buildx-cache | |
| mv /tmp/.buildx-cache-new /tmp/.buildx-cache | |
| build: | |
| uses: ./.github/workflows/build.yml | |
| with: | |
| architecture: amd64 | |
| install: | |
| needs: [build] | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| os: | |
| - ubuntu-20.04 | |
| - ubuntu-22.04 | |
| - ubuntu-24.04 | |
| fail-fast: false | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Download artifact | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: build-amd64 | |
| path: build | |
| - name: Preconfigure package | |
| run: | | |
| echo 'pantos-service-node-full pantos/service-node/create_signer_key boolean true' | sudo debconf-set-selections; | |
| echo 'pantos-service-node-full pantos/service-node/signer_key_password string 1234' | sudo debconf-set-selections; | |
| echo 'pantos-service-node-full pantos/common/configure_postgresql boolean true' | sudo debconf-set-selections; | |
| echo 'pantos-service-node-full pantos/common/configure_rabbitmq boolean true' | sudo debconf-set-selections; | |
| echo 'pantos-service-node-full pantos/common/reset_users boolean true' | sudo debconf-set-selections; | |
| echo 'pantos-service-node-full pantos/common/start_services boolean false' | sudo debconf-set-selections; | |
| - name: Install Debian package | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y ./build/*.deb | |
| # Check service is running | |
| - name: Check service is running | |
| run: | | |
| sudo systemctl status pantos-service-node-server || true | |
| sudo systemctl status pantos-service-node-celery || true | |
| sudo journalctl -u pantos-service-node-server || true | |
| sudo journalctl -u pantos-service-node-celery || true | |
| - name: Upload logs | |
| if: always() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: install-logs-${{ matrix.os }} | |
| path: /var/log/pantos |