v0.5.7 #36
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Flowctl release | |
| # Run whenever a github release is published | |
| on: | |
| release: | |
| types: [published] | |
| jobs: | |
| release_binaries: | |
| name: Release binaries | |
| runs-on: ${{ matrix.config.os }} # we run a build per os | |
| env: | |
| ASSET_NAME: ${{ matrix.config.assetName }} | |
| # build.rs reads this env variable and uses to set the value that's printed by flowctl --version | |
| FLOW_VERSION: ${{ github.event.release.tag_name }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| config: | |
| # Use the oldest ubuntu version because it'll have an old glibc. Programs built agains | |
| # an old glibc can link to a newer version, but not the other way around. | |
| - os: ubuntu-20.04 | |
| assetName: flowctl-x86_64-linux | |
| # On mac, it's the opposite. Programs built on the latest macos can run on older versions, | |
| # but not the other way around. | |
| - os: macos-14 | |
| assetName: flowctl-multiarch-macos | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v2 | |
| - uses: dtolnay/rust-toolchain@stable | |
| # Linux build steps: | |
| - name: Build Linux | |
| if: matrix.config.os == 'ubuntu-20.04' | |
| env: | |
| CC: clang | |
| CXX: clang++ | |
| run: |- | |
| cargo build -p flowctl --release && mv target/release/flowctl ${ASSET_NAME} | |
| # Mac build steps: | |
| - name: Setup mac signing certificate | |
| if: matrix.config.os == 'macos-14' | |
| env: | |
| MAC_SIGNING_CERTIFICATE_BASE64: ${{ secrets.MAC_SIGNING_CERTIFICATE_BASE64 }} | |
| MAC_CERTIFICATE_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }} | |
| #BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.BUILD_PROVISION_PROFILE_BASE64 }} | |
| KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }} | |
| run: |- | |
| # create variables | |
| CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12 | |
| KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db | |
| # import certificate from secrets | |
| echo -n "$MAC_SIGNING_CERTIFICATE_BASE64" | base64 --decode --output "$CERTIFICATE_PATH" | |
| # create temporary keychain | |
| security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH" | |
| security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH" | |
| security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH" | |
| # import certificate to keychain | |
| security import "$CERTIFICATE_PATH" -P "$MAC_CERTIFICATE_PASSWORD" -A -t cert -f pkcs12 -k "$KEYCHAIN_PATH" | |
| security find-identity -v | |
| security list-keychain -d user -s "$KEYCHAIN_PATH" | |
| # allow the codesign utility to use this keychain without triggering a prompt. Taken from: | |
| # https://localazy.com/blog/how-to-automatically-sign-macos-apps-using-github-actions | |
| security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH" | |
| # This one mac build runs on both intel and m1 macs | |
| - name: Build Mac | |
| if: matrix.config.os == 'macos-14' | |
| env: | |
| MAC_CERTIFICATE_IDENTITY: ${{ secrets.MAC_CERTIFICATE_IDENTITY }} | |
| # The toolchain action always gives you the default target, but we always need both | |
| # the x86_64 and aarch64 targets. I couldn't find anything in github's docs that actually | |
| # says that macos runners are on intel cpus, so we just always add both targets since it's a | |
| # fast no-op if it's already installed. | |
| # Also note that the Apple docs say that it doesn't matter which architecture we build on, | |
| # as we can cross compile either direction. | |
| run: | | |
| rustup target add aarch64-apple-darwin | |
| rustup target add x86_64-apple-darwin | |
| cargo build -p flowctl --release --target x86_64-apple-darwin | |
| cargo build -p flowctl --release --target aarch64-apple-darwin | |
| lipo -create -output ${ASSET_NAME} target/x86_64-apple-darwin/release/flowctl target/aarch64-apple-darwin/release/flowctl | |
| /usr/bin/codesign --force -s "$MAC_CERTIFICATE_IDENTITY" "$ASSET_NAME" -v | |
| # This step applies to all platforms | |
| - name: Upload release asset | |
| uses: actions/upload-release-asset@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ github.event.release.upload_url }} | |
| asset_name: ${{ matrix.config.assetName }} | |
| asset_path: ./${{ matrix.config.assetName }} | |
| asset_content_type: application/octet-stream |