on-pr.yaml

# Placeholder for the PR workflow.
name: on-pr

on:
  pull_request: {}

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  pull-requests: write
  contents: read

env:
  ARTIFACT_NAME: placeholder
  CONSENSUS_ENCLAVE_CSS: /tmp/consensus-enclave.css
  GH_SHORT_SHA: placeholder
  INGEST_ENCLAVE_CSS: /tmp/ingest-enclave.css
  RUST_BACKTRACE: full
  RUST_BIN_PATH: placeholder

jobs:
  # move lint actions to gh-actions for centralization
  # lint-actions:
  #   runs-on: mco-dev-small-x64
  #   steps:
  #   - name: Checkout
  #     uses: mobilecoinofficial/gh-actions/checkout@v0

  #   - name: Run actionlint with reviewdog
  #     uses: reviewdog/action-actionlint@v1
  #     with:
  #       level: error
  #       reporter: github-pr-review

  # lint-helm:
  #   runs-on: mco-dev-small-x64
  #   container:
  #     image: mobilecoin/gha-k8s-toolbox:v1
  #   steps:
  #   - name: Checkout
  #     uses: mobilecoinofficial/gh-actions/checkout@v0

  #   - name: Run helm lint
  #     run: |
  #       chart_base=".internal-ci/helm"
  #       chart_files=$(find "${chart_base}" -name Chart.yaml -type f)

  #       # helm lint on directories where there are chart.yaml files
  #       for c in ${chart_files}
  #       do
  #         chart=$(dirname "${c}")
  #         helm lint --quiet "${chart}"  2>&1
  #       done

  # CBB: Need to do refactoring of shell scripts in the repo for this to run cleanly.
  # lint-shell:
  #   runs-on: mco-dev-small-x64
  #   steps:
  #   - name: Checkout
  #     uses: mobilecoinofficial/gh-actions/checkout@v0

  #   - name: Run shellcheck with reviewdog
  #     uses: reviewdog/action-shellcheck@v1
  #     with:
  #       level: error
  #       reporter: github-pr-review

  # lint-docker:
  #   runs-on: mco-dev-small-x64
  #   steps:
  #   - name: Checkout
  #     uses: mobilecoinofficial/gh-actions/checkout@v0

  #   - name: Install wget
  #     run: |
  #       sudo apt-get update
  #       sudo apt-get install -y wget

  #   - name: Run hadolint with reviewdog
  #     uses: reviewdog/action-hadolint@v1
  #     with:
  #       level: error
  #       reporter: github-pr-review
  #       exclude: |
  #         *.dockerignore

  # lint-rust:
  #   runs-on: mco-dev-large-x64
  #   container:
  #     image: mobilecoin/rust-sgx-base:v0.0.36
  #   env:
  #     SGX_MODE: SW
  #   steps:
  #   - name: Checkout
  #     uses: mobilecoinofficial/gh-actions/checkout@v0

  #   - name: Consensus SigStruct
  #     uses: ./.github/actions/download-sigstruct
  #     with:
  #       sigstruct: consensus
  #       network: test
  #       download_path: ${{ env.CONSENSUS_ENCLAVE_CSS }}

  #   - name: Ingest SigStruct
  #     uses: ./.github/actions/download-sigstruct
  #     with:
  #       sigstruct: ingest
  #       network: test
  #       download_path: ${{ env.INGEST_ENCLAVE_CSS }}

  #   - name: Cargo sort
  #     shell: bash
  #     run: |
  #       cargo install cargo-sort --force
  #       cargo sort --workspace --grouped --check

  #   - name: Cargo fmt
  #     shell: bash
  #     run: |
  #       cargo fmt -- --unstable-features --check

  #   - name: Cargo Clippy
  #     shell: bash
  #     run: |
  #       cargo clippy --all --all-features

  # test-rust:
  #   runs-on: mco-dev-large-x64
  #   container:
  #     image: mobilecoin/rust-sgx-base:v0.0.36
  #   env:
  #     SGX_MODE: SW

  #   steps:
  #   - name: Checkout
  #     uses: mobilecoinofficial/gh-actions/checkout@v0

  #   - name: Consensus SigStruct
  #     uses: ./.github/actions/download-sigstruct
  #     with:
  #       sigstruct: consensus
  #       network: test
  #       download_path: ${{ env.CONSENSUS_ENCLAVE_CSS }}

  #   - name: Ingest SigStruct
  #     uses: ./.github/actions/download-sigstruct
  #     with:
  #       sigstruct: ingest
  #       network: test
  #       download_path: ${{ env.INGEST_ENCLAVE_CSS }}

  #   - name: Cargo Test
  #     shell: bash
  #     env:
  #       CARGO_INCREMENTAL: "0"
  #       RUSTFLAGS: "-Zprofile -Ccodegen-units=1 -Cinline-threshold=0 -Clink-dead-code -Coverflow-checks=off -Cpanic=abort -Zpanic_abort_tests"
  #       RUSTDOCFLAGS: "-Zprofile -Ccodegen-units=1 -Cinline-threshold=0 -Clink-dead-code -Coverflow-checks=off -Cpanic=abort -Zpanic_abort_tests"
  #     run: |
  #       cargo test

    # skip coverage for now, old actions-rs/grcov is deprecated
    # need to learn how to generate .xml reports for codecov below
    # - name: grcov
    #   shell: bash
    #   run: |
    #     cargo install grcov

    # - name: Codecov
    #     uses: codecov/codecov-action@v3.1.4
    #     with:
    #       files: ${{ steps.coverage.outputs.report }}
    #       verbose: true
    #       fail_ci_if_error: true
    #     env:
    #       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

  build-rust-linux:
    strategy:
      matrix:
        runner:
        - mco-dev-large-x64
        network:
        - main
        - test
    runs-on: ${{ matrix.runner }}
    container:
      image: mobilecoin/rust-sgx-base:v0.0.36
    steps:
    - name: Checkout
      uses: mobilecoinofficial/gh-actions/checkout@v0

    - name: Build Rust
      uses: ./.github/actions/build-rust
      with:
        network: ${{ matrix.network }}

  # build-rust-macos:
  #   strategy:
  #     fail-fast: false
  #     matrix:
  #       runner:
  #       - [self-hosted, macOS, X64]
  #       - [self-hosted, macOS, ARM64]
  #       network:
  #       - main
  #       - test
  #   runs-on: ${{ matrix.runner }}
  #   steps:
  #   - name: Checkout
  #     uses: mobilecoinofficial/gh-actions/checkout@v0

  #   - name: Bootstrap macOS
  #     shell: bash
  #     run: |
  #       echo "-- install brew dependencies"
  #       rm -rf "$(brew --prefix)/var/homebrew/locks"
  #       brew bundle --quiet

  #       echo "-- install rust toolchain"
  #       rm -rf /Users/runner/.cargo
  #       rm -rf /Users/runner/.rustup
  #       rustup toolchain install "$(cat rust-toolchain)"

  #       echo "-- add cargo to path"
  #       rustup_cargo=$(rustup which cargo)
  #       echo "CARGO_HOME=${HOME}/.cargo" >> "${GITHUB_ENV}"
  #       echo "RUSTUP_HOME=${HOME}/.rustup" >> "${GITHUB_ENV}"
  #       echo "${HOME}/.cargo/bin" >> "${GITHUB_PATH}"
  #       echo "$(dirname "${rustup_cargo}")" >> "${GITHUB_PATH}"

  #   - name: Build Rust
  #     uses: ./.github/actions/build-rust
  #     with:
  #       network: ${{ matrix.network }}

  build-publish-containers:
    needs:
    - build-rust-linux
    strategy:
      matrix:
        runner:
        - mco-dev-small-x64
        network:
        - chain_id: main
          peer: mc://node1.prod.mobilecoinww.com/,mc://node2.prod.mobilecoinww.com/
          tx_source_url: https://ledger.mobilecoinww.com/node1.prod.mobilecoinww.com/,https://ledger.mobilecoinww.com/node2.prod.mobilecoinww.com
        - chain_id: test
          peer: mc://node1.test.mobilecoin.com/,mc://node2.test.mobilecoin.com/
          tx_source_url: https://s3-us-west-1.amazonaws.com/mobilecoin.chain/node1.test.mobilecoin.com/,https://s3-us-west-1.amazonaws.com/mobilecoin.chain/node2.test.mobilecoin.com/
    runs-on: ${{ matrix.runner }}
    steps:
    - name: Checkout
      uses: mobilecoinofficial/gh-actions/checkout@v0

    - name: Setup Env
      shell: bash
      run: |
        set -e -o pipefail

        # Set vars so we can use them in this step
        GH_SHORT_SHA="sha-$(echo "${GITHUB_SHA}" | cut -c1-7)"
        ARTIFACT_NAME="full-service-${{ matrix.network.chain_id }}net-${{ runner.os }}-${{ runner.arch }}-${GH_SHORT_SHA}"

        echo "GH_SHORT_SHA=${GH_SHORT_SHA}" >> "${GITHUB_ENV}"
        echo "ARTIFACT_NAME=${ARTIFACT_NAME}" >> "${GITHUB_ENV}"
        echo "RUST_BIN_PATH=build-artifacts/${ARTIFACT_NAME}" >> "${GITHUB_ENV}"

    # CBB: Move this to gh-actions
    - name: Restore Artifacts
      uses: actions/download-artifact@v4
      with:
        name: ${{ env.ARTIFACT_NAME }}
        path: build-artifacts

    - name: check artifacts
      shell: bash
      run: |
        ls -alR build-artifacts

    - name: Docker - build and publish full-service
      uses: mobilecoinofficial/gh-actions/docker@v0
      with:
        dockerfile: .internal-ci/docker/Dockerfile.full-service
        images: mobilecoin/full-service
        build_args: |
          RUST_BIN_PATH=${{ env.RUST_BIN_PATH }}
          MC_CHAIN_ID=${{ matrix.network.chain_id }}
          MC_PEER=${{ matrix.network.peer }}
          MC_TX_SOURCE_URL=${{ matrix.network.tx_source_url }}
        flavor: |
          latest=false
        tags: |
          v0-${{ env.GH_SHORT_SHA }}.${{ matrix.network.chain_id }}net
        password: ${{ secrets.DOCKERHUB_TOKEN }}
        username: ${{ secrets.DOCKERHUB_USERNAME }}

  # build-publish-charts:
  #   needs:
  #   - build-rust-linux
  #   strategy:
  #     matrix:
  #       network:
  #       - chain_id: main
  #       - chain_id: test
  #   runs-on: mco-dev-small-x64
  #   env:
  #     CHART_REPO: https://harbor.mobilecoin.com/chartrepo/mobilecoinofficial-public
  #   steps:
  #   - name: Checkout
  #     uses: mobilecoinofficial/gh-actions/checkout@v0

  #   - name: Setup Env
  #     shell: bash
  #     run: |
  #       set -e -o pipefail
  #       echo "GH_SHORT_SHA=sha-$(echo "${GITHUB_SHA}" | cut -c1-7)" >> "${GITHUB_ENV}"

  #   - name: Publish helm chart full-service
  #     uses: mobilecoinofficial/gha-k8s-toolbox@v1
  #     with:
  #       action: helm-publish
  #       chart_app_version: v0-${{ env.GH_SHORT_SHA }}.${{ matrix.network.chain_id }}net
  #       chart_path: .internal-ci/helm/full-service
  #       chart_repo: ${{ env.CHART_REPO }}
  #       chart_repo_password: ${{ secrets.HARBOR_PASSWORD }}
  #       chart_repo_username: ${{ secrets.HARBOR_USERNAME }}
  #       chart_version: v0-${{ env.GH_SHORT_SHA }}.${{ matrix.network.chain_id }}net

  #   - name: Publish helm chart full-service-mirror
  #     uses: mobilecoinofficial/gha-k8s-toolbox@v1
  #     with:
  #       action: helm-publish
  #       chart_app_version: v0-${{ env.GH_SHORT_SHA }}.${{ matrix.network.chain_id }}net
  #       chart_path: .internal-ci/helm/full-service-mirror
  #       chart_repo: ${{ env.CHART_REPO }}
  #       chart_repo_password: ${{ secrets.HARBOR_PASSWORD }}
  #       chart_repo_username: ${{ secrets.HARBOR_USERNAME }}
  #       chart_version: v0-${{ env.GH_SHORT_SHA }}.${{ matrix.network.chain_id }}net

# build binaries:
# testnet, mainnet
#   linux amd64 arm64
#   macos intel, apple

# containers:
#   linux arm64, amd64

# test:
# lint
#   docker (hadolint)
#   shellcheck
#   actionlint
#   helm lint
#   rust/cargo fmt
#   rust/cargo clippy
#   rust/cargo sort
# unit
# integration - testnet, mainnet