Release v0.6.13 (#64) #27
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Binaries | |
| on: | |
| push: | |
| tags: | |
| - 'v[0-9]+.[0-9]+.[0-9]+*' | |
| jobs: | |
| draft-release: | |
| name: Draft release | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 0 | |
| - | |
| name: Extract tag name | |
| run: echo "X_TAG=${GITHUB_REF#refs/*/v}" >> $GITHUB_ENV | |
| - | |
| name: Fill release body | |
| run: |- | |
| set -e | |
| cat <<EOF | tee RELEASE.md | |
| $(git log --pretty="- %s" $(git tag --sort=-creatordate | sed -n 2p)..${{ github.ref }} | egrep -v "^.{1,7}$") | |
| Other upgraded assets: | |
| - https://hub.docker.com/r/wallarm/api-firewall | |
| - https://charts.wallarm.com | |
| EOF | |
| - | |
| name: Draft Release | |
| id: draft_release | |
| uses: actions/create-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| tag_name: ${{ github.ref }} | |
| release_name: v${{ env.X_TAG }} | |
| body_path: RELEASE.md | |
| draft: true | |
| prerelease: false | |
| outputs: | |
| upload_url: ${{ steps.draft_release.outputs.upload_url }} | |
| release_id: ${{ steps.draft_release.outputs.id }} | |
| build-x86: | |
| name: Build ${{ matrix.artifact }} binary | |
| runs-on: ubuntu-latest | |
| needs: | |
| - draft-release | |
| env: | |
| X_GO_DISTRIBUTION: "https://go.dev/dl/go1.20.7.linux-amd64.tar.gz" | |
| strategy: | |
| matrix: | |
| include: | |
| - arch: amd64 | |
| distro: debian | |
| artifact: amd64-libc | |
| - arch: "386" | |
| distro: debian | |
| artifact: 386-libc | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - | |
| name: Extract tag name | |
| run: echo "X_TAG=${GITHUB_REF#refs/*/v}" >> $GITHUB_ENV | |
| - | |
| uses: addnab/docker-run-action@v3 | |
| with: | |
| image: debian:bullseye | |
| options: > | |
| --volume ${{ github.workspace }}:/build | |
| --workdir /build | |
| run: |- | |
| set -e | |
| apt-get update -y && \ | |
| apt-get install --no-install-recommends -y \ | |
| build-essential \ | |
| binutils \ | |
| ca-certificates \ | |
| curl \ | |
| gcc \ | |
| git \ | |
| gzip \ | |
| make && \ | |
| curl -sLo go.tar.gz ${{ env.X_GO_DISTRIBUTION }} && \ | |
| mkdir -p /usr/local/go && \ | |
| tar -x -C /usr/local -f go.tar.gz && \ | |
| rm go.tar.gz && \ | |
| export PATH=${PATH}:/usr/local/go/bin | |
| go version | |
| case "${{ matrix.arch }}" in | |
| "386") | |
| export GOARCH=386 | |
| export GOOS=linux | |
| ;; | |
| esac | |
| mkdir -p /tmp/api-firewall-${{ matrix.artifact }} && \ | |
| go mod download -x && \ | |
| go build \ | |
| -ldflags="-X main.build=${{ env.X_TAG }} -extldflags=-static -s -w" \ | |
| -o /tmp/api-firewall-${{ matrix.artifact }}/api-firewall \ | |
| -buildvcs=false ./cmd/api-firewall && \ | |
| /tmp/api-firewall-${{ matrix.artifact }}/api-firewall -v && \ | |
| readelf -h /tmp/api-firewall-${{ matrix.artifact }}/api-firewall && \ | |
| cp LICENSE /tmp/api-firewall-${{ matrix.artifact }}/ && \ | |
| mkdir -p ./artifacts && \ | |
| tar -c \ | |
| -C /tmp/api-firewall-${{ matrix.artifact }} . \ | |
| | gzip -9 \ | |
| > ./artifacts/api-firewall-${{ matrix.artifact }}.tar.gz | |
| - | |
| name: Show the artifact | |
| id: artifact | |
| run: |- | |
| export FILENAME=$(realpath --relative-to=. ${PWD}/artifacts/*) | |
| export O_ARTIFACT="$(basename ${FILENAME})" | |
| export O_MD5="$(md5sum ${FILENAME} | awk '{print $1}')" | |
| export O_SHA1="$(sha1sum ${FILENAME} | awk '{print $1}')" | |
| export O_SHA256="$(sha256sum ${FILENAME} | awk '{print $1}')" | |
| echo "::set-output name=filepath::${FILENAME}" | |
| echo "::set-output name=filename::${O_ARTIFACT}" | |
| echo "::set-output name=md5::${O_MD5}" | |
| echo "::set-output name=sha1::${O_SHA1}" | |
| echo "::set-output name=sha256::${O_SHA256}" | |
| cat <<EOF | |
| ARTIFACT: ${O_ARTIFACT} | |
| MD5: ${O_MD5} | |
| SHA1: ${O_SHA1} | |
| SHA256: ${O_SHA256} | |
| EOF | |
| - | |
| name: Upload Release Asset | |
| uses: actions/upload-release-asset@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ needs.draft-release.outputs.upload_url }} | |
| asset_path: ${{ steps.artifact.outputs.filepath }} | |
| asset_name: ${{ steps.artifact.outputs.filename }} | |
| asset_content_type: application/gzip | |
| outputs: | |
| filepath: ${{ steps.artifact.outputs.filepath }} | |
| filename: ${{ steps.artifact.outputs.filename }} | |
| md5: ${{ steps.artifact.outputs.md5 }} | |
| sha1: ${{ steps.artifact.outputs.sha1 }} | |
| sha256: ${{ steps.artifact.outputs.sha256 }} | |
| build-x86-alpine: | |
| name: Build ${{ matrix.artifact }} binary | |
| runs-on: ubuntu-latest | |
| needs: | |
| - draft-release | |
| env: | |
| X_GO_VERSION: "1.20.7-r0" | |
| strategy: | |
| matrix: | |
| include: | |
| - arch: amd64 | |
| distro: alpine | |
| artifact: amd64-musl | |
| - arch: "386" | |
| distro: alpine | |
| artifact: 386-musl | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - | |
| name: Extract tag name | |
| run: echo "X_TAG=${GITHUB_REF#refs/*/v}" >> $GITHUB_ENV | |
| - | |
| uses: addnab/docker-run-action@v3 | |
| with: | |
| image: alpine:3.18 | |
| options: > | |
| --volume ${{ github.workspace }}:/build | |
| --workdir /build | |
| run: |- | |
| set -e | |
| apk add --no-cache \ | |
| binutils \ | |
| ca-certificates \ | |
| curl \ | |
| gcc \ | |
| git \ | |
| gzip \ | |
| make \ | |
| go=${{ env.X_GO_VERSION }} | |
| go version | |
| case "${{ matrix.arch }}" in | |
| "386") | |
| export GOARCH=386 | |
| export GOOS=linux | |
| ;; | |
| esac | |
| mkdir -p /tmp/api-firewall-${{ matrix.artifact }} && \ | |
| go mod download -x && \ | |
| go build \ | |
| -ldflags="-X main.build=${{ env.X_TAG }} -extldflags=-static -s -w" \ | |
| -o /tmp/api-firewall-${{ matrix.artifact }}/api-firewall \ | |
| -buildvcs=false ./cmd/api-firewall && \ | |
| /tmp/api-firewall-${{ matrix.artifact }}/api-firewall -v && \ | |
| readelf -h /tmp/api-firewall-${{ matrix.artifact }}/api-firewall && \ | |
| cp LICENSE /tmp/api-firewall-${{ matrix.artifact }}/ && \ | |
| mkdir -p ./artifacts && \ | |
| tar -c \ | |
| -C /tmp/api-firewall-${{ matrix.artifact }} . \ | |
| | gzip -9 \ | |
| > ./artifacts/api-firewall-${{ matrix.artifact }}.tar.gz | |
| - | |
| name: Show the artifact | |
| id: artifact | |
| run: |- | |
| export FILENAME=$(realpath --relative-to=. ${PWD}/artifacts/*) | |
| export O_ARTIFACT="$(basename ${FILENAME})" | |
| export O_MD5="$(md5sum ${FILENAME} | awk '{print $1}')" | |
| export O_SHA1="$(sha1sum ${FILENAME} | awk '{print $1}')" | |
| export O_SHA256="$(sha256sum ${FILENAME} | awk '{print $1}')" | |
| echo "::set-output name=filepath::${FILENAME}" | |
| echo "::set-output name=filename::${O_ARTIFACT}" | |
| echo "::set-output name=md5::${O_MD5}" | |
| echo "::set-output name=sha1::${O_SHA1}" | |
| echo "::set-output name=sha256::${O_SHA256}" | |
| cat <<EOF | |
| ARTIFACT: ${O_ARTIFACT} | |
| MD5: ${O_MD5} | |
| SHA1: ${O_SHA1} | |
| SHA256: ${O_SHA256} | |
| EOF | |
| - | |
| name: Upload Release Asset | |
| uses: actions/upload-release-asset@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ needs.draft-release.outputs.upload_url }} | |
| asset_path: ${{ steps.artifact.outputs.filepath }} | |
| asset_name: ${{ steps.artifact.outputs.filename }} | |
| asset_content_type: application/gzip | |
| outputs: | |
| filepath: ${{ steps.artifact.outputs.filepath }} | |
| filename: ${{ steps.artifact.outputs.filename }} | |
| md5: ${{ steps.artifact.outputs.md5 }} | |
| sha1: ${{ steps.artifact.outputs.sha1 }} | |
| sha256: ${{ steps.artifact.outputs.sha256 }} | |
| build-arm: | |
| name: Build ${{ matrix.artifact }} binary | |
| runs-on: ubuntu-latest | |
| needs: | |
| - draft-release | |
| strategy: | |
| matrix: | |
| include: | |
| - arch: armv6 | |
| distro: bullseye | |
| go_distribution: https://go.dev/dl/go1.20.7.linux-armv6l.tar.gz | |
| artifact: armv6-libc | |
| - arch: aarch64 | |
| distro: bullseye | |
| go_distribution: https://go.dev/dl/go1.20.7.linux-arm64.tar.gz | |
| artifact: arm64-libc | |
| - arch: armv6 | |
| distro: alpine_latest | |
| artifact: armv6-musl | |
| - arch: aarch64 | |
| distro: alpine_latest | |
| artifact: arm64-musl | |
| steps: | |
| - uses: actions/[email protected] | |
| - | |
| name: Extract tag name | |
| run: echo "X_TAG=${GITHUB_REF#refs/*/v}" >> $GITHUB_ENV | |
| - | |
| uses: uraimo/[email protected] | |
| name: Build artifact | |
| id: build | |
| with: | |
| arch: ${{ matrix.arch }} | |
| distro: ${{ matrix.distro }} | |
| githubToken: ${{ github.token }} | |
| setup: |- | |
| mkdir -p "${PWD}/artifacts" | |
| dockerRunArgs: |- | |
| --volume "${PWD}/artifacts:/artifacts" | |
| shell: /bin/sh | |
| install: |- | |
| set -e | |
| case "${{ matrix.distro }}" in | |
| bullseye) | |
| apt-get update -y && \ | |
| apt-get install --no-install-recommends -y \ | |
| binutils \ | |
| ca-certificates \ | |
| curl \ | |
| gcc \ | |
| git \ | |
| gzip \ | |
| libc6-dev \ | |
| make && \ | |
| curl -sLo go.tar.gz ${{ matrix.go_distribution }} && \ | |
| mkdir -p /usr/local/go && \ | |
| tar -x -C /usr/local -f go.tar.gz && \ | |
| rm go.tar.gz && \ | |
| export PATH=${PATH}:/usr/local/go/bin | |
| ;; | |
| alpine*) | |
| apk add --no-cache \ | |
| binutils \ | |
| ca-certificates \ | |
| curl \ | |
| gcc \ | |
| git \ | |
| gzip \ | |
| make \ | |
| musl-dev \ | |
| go | |
| ;; | |
| esac | |
| go version | |
| run: |- | |
| export PATH=${PATH}:/usr/local/go/bin && \ | |
| mkdir -p /tmp/api-firewall-${{ matrix.artifact }} && \ | |
| go mod download -x && \ | |
| go build \ | |
| -ldflags="-X main.build=${{ env.X_TAG }} -extldflags=-static -s -w" \ | |
| -o /tmp/api-firewall-${{ matrix.artifact }}/api-firewall \ | |
| -buildvcs=false ./cmd/api-firewall && \ | |
| /tmp/api-firewall-${{ matrix.artifact }}/api-firewall -v && \ | |
| readelf -h /tmp/api-firewall-${{ matrix.artifact }}/api-firewall && \ | |
| cp LICENSE /tmp/api-firewall-${{ matrix.artifact }}/ && \ | |
| tar -c \ | |
| -C /tmp/api-firewall-${{ matrix.artifact }} . \ | |
| | gzip -9 \ | |
| > /artifacts/api-firewall-${{ matrix.artifact }}.tar.gz | |
| - | |
| name: Show the artifact | |
| id: artifact | |
| run: |- | |
| export FILENAME=$(realpath --relative-to=. ${PWD}/artifacts/*) | |
| export O_ARTIFACT="$(basename ${FILENAME})" | |
| export O_MD5="$(md5sum ${FILENAME} | awk '{print $1}')" | |
| export O_SHA1="$(sha1sum ${FILENAME} | awk '{print $1}')" | |
| export O_SHA256="$(sha256sum ${FILENAME} | awk '{print $1}')" | |
| echo "::set-output name=filepath::${FILENAME}" | |
| echo "::set-output name=filename::${O_ARTIFACT}" | |
| echo "::set-output name=md5::${O_MD5}" | |
| echo "::set-output name=sha1::${O_SHA1}" | |
| echo "::set-output name=sha256::${O_SHA256}" | |
| cat <<EOF | |
| ARTIFACT: ${O_ARTIFACT} | |
| MD5: ${O_MD5} | |
| SHA1: ${O_SHA1} | |
| SHA256: ${O_SHA256} | |
| EOF | |
| - | |
| name: Upload Release Asset | |
| uses: actions/upload-release-asset@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ needs.draft-release.outputs.upload_url }} | |
| asset_path: ${{ steps.artifact.outputs.filepath }} | |
| asset_name: ${{ steps.artifact.outputs.filename }} | |
| asset_content_type: application/gzip | |
| outputs: | |
| filepath: ${{ steps.artifact.outputs.filepath }} | |
| filename: ${{ steps.artifact.outputs.filename }} | |
| md5: ${{ steps.artifact.outputs.md5 }} | |
| sha1: ${{ steps.artifact.outputs.sha1 }} | |
| sha256: ${{ steps.artifact.outputs.sha256 }} | |
| commit-release: | |
| name: Commit release | |
| runs-on: ubuntu-latest | |
| needs: | |
| - draft-release | |
| - build-x86 | |
| - build-x86-alpine | |
| - build-arm | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - | |
| uses: eregon/publish-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| release_id: ${{ needs.draft-release.outputs.release_id }} |