chore(ci): package lua-curl (#1557) (#1562) (#1569)

.github/actions/package/action.yml

@@ -0,0 +1,119 @@
+name: package
+description: Package module using nfpm
+inputs:
+  nfpm_file_pattern:
+    description: The pattern of the nfpm configuration file(s)
+    required: true
+  package_extension:
+    description: The package extension (deb or rpm)
+    required: true
+  distrib:
+    description: The package distrib
+    required: true
+  major_version:
+    description: The major version
+    required: false
+  minor_version:
+    description: The minor version
+    required: false
+  release:
+    description: The package release number
+    required: false
+  arch:
+    description: The package architecture
+    required: false
+  commit_hash:
+    description: The commit hash
+    required: true
+  cache_key:
+    description: The package files cache key
+    required: true
+  rpm_gpg_key:
+    description: The rpm gpg key
+    required: true
+  rpm_gpg_signing_key_id:
+    description: The rpm gpg signing key identifier
+    required: true
+  rpm_gpg_signing_passphrase:
+    description: The rpm gpg signing passphrase
+    required: true
+  stability:
+    description: "branch stability (stable, testing, unstable, canary)"
+    required: true
+
+runs:
+  using: composite
+
+  steps:
+    - name: Import gpg key
+      env:
+        RPM_GPG_SIGNING_KEY: ${{ inputs.rpm_gpg_key }}
+      run: echo -n "$RPM_GPG_SIGNING_KEY" > key.gpg
+      shell: bash
+
+    - name: Build ${{ inputs.package_extension }} files
+      env:
+        RPM_GPG_SIGNING_KEY_ID: ${{ inputs.rpm_gpg_signing_key_id }}
+        RPM_GPG_SIGNING_PASSPHRASE: ${{ inputs.rpm_gpg_signing_passphrase }}
+      run: |
+        export MAJOR_VERSION="${{ inputs.major_version }}"
+        export VERSION="${{ inputs.major_version }}.${{ inputs.minor_version }}"
+        export RELEASE="${{ inputs.release }}"
+        export ARCH="${{ inputs.arch }}"
+
+        if  [ "${{ inputs.package_extension }}" = "rpm" ]; then
+          export DIST=".${{ inputs.distrib }}"
+        else
+          export DIST=""
+          if [ "${{ inputs.stability }}" = "unstable" ] || [ "${{ inputs.stability }}" = "canary" ]; then
+            export RELEASE="$RELEASE~${{ inputs.distrib }}"
+          else
+            export RELEASE="1~${{ inputs.distrib }}"
+          fi
+        fi
+
+        MAJOR_LEFT=$( echo $MAJOR_VERSION | cut -d "." -f1 )
+        MAJOR_RIGHT=$( echo $MAJOR_VERSION | cut -d "-" -f1 | cut -d "." -f2 )
+        BUMP_MAJOR_RIGHT=$(( MAJOR_RIGHT_PART + 1 ))
+        if [ "$MAJOR_RIGHT" = "04" ]; then
+          BUMP_MAJOR_LEFT="$MAJOR_LEFT"
+          BUMP_MAJOR_RIGHT="10"
+        else
+          BUMP_MAJOR_LEFT=$(( $MAJOR_LEFT + 1 ))
+          BUMP_MAJOR_RIGHT="04"
+        fi
+
+        export NEXT_MAJOR_VERSION="$BUMP_MAJOR_LEFT.$BUMP_MAJOR_RIGHT"
+
+        export RPM_SIGNING_KEY_FILE="$(pwd)/key.gpg"
+        export RPM_SIGNING_KEY_ID="$RPM_GPG_SIGNING_KEY_ID"
+        export NFPM_RPM_PASSPHRASE="$RPM_GPG_SIGNING_PASSPHRASE"
+
+        for FILE in ${{ inputs.nfpm_file_pattern }}; do
+          DIRNAME=$(dirname $FILE)
+          BASENAME=$(basename $FILE)
+          if [ -f $DIRNAME/env/.env.${{ inputs.distrib }} ]; then
+            source $DIRNAME/env/.env.${{ inputs.distrib }}
+          fi
+          cd $DIRNAME
+          sed -i "s/@COMMIT_HASH@/${{ inputs.commit_hash }}/g" $BASENAME
+          nfpm package --config $BASENAME --packager ${{ inputs.package_extension }}
+          cd -
+          mv $DIRNAME/*.${{ inputs.package_extension }} ./
+        done
+      shell: bash
+
+    - name: Cache packages
+      uses: actions/cache/save@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
+      with:
+        path: ./*.${{ inputs.package_extension }}
+        key: ${{ inputs.cache_key }}
+
+    # Update if condition to true to get packages as artifacts
+    - if: ${{ false }}
+      name: Upload package artifacts
+      uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
+      with:
+        name: ${{ inputs.arch != '' && format('packages-{0}-{1}', inputs.distrib, inputs.arch) || format('packages-{0}', inputs.distrib) }}
+        path: ./*.${{ inputs.package_extension}}
+        retention-days: 1

.github/actions/promote-to-stable/action.yml

@@ -13,9 +13,6 @@ inputs:
   major_version:
     description: "Centreon packaged major version"
     required: true
-  minor_version:
-    description: "Centreon package minor version"
-    required: true
   stability:
     description: "The package stability (stable, testing, unstable)"
     required: true
@@ -54,7 +51,6 @@ runs:
 
         # DEBUG
         echo "[DEBUG] - Major version: ${{ inputs.major_version }}"
-        echo "[DEBUG] - Minor version: ${{ inputs.minor_version }}"
         echo "[DEBUG] - Distrib: ${{ inputs.distrib }}"
         echo "[DEBUG] - release_cloud: ${{ inputs.release_cloud }}"
         echo "[DEBUG] - release_type: ${{ inputs.release_type }}"
@@ -122,7 +118,6 @@ runs:
         set -eux
 
         echo "[DEBUG] - Major version: ${{ inputs.major_version }}"
-        echo "[DEBUG] - Minor version: ${{ inputs.minor_version }}"
         echo "[DEBUG] - Distrib: ${{ inputs.distrib }}"
         echo "[DEBUG] - Repository name: ${{ inputs.repository_name }}"
 

.github/workflows/centreon-collect.yml

@@ -195,7 +195,6 @@ jobs:
           module_name: collect
           distrib: ${{ matrix.distrib }}
           major_version: ${{ needs.get-version.outputs.major_version }}
-          minor_version: ${{ needs.get-version.outputs.minor_version }}
           stability: ${{ needs.get-version.outputs.stability }}
           repository_name: standard
           github_ref_name: ${{ github.ref_name }}

.github/workflows/get-version.yml

@@ -36,7 +36,7 @@ on:
 
 jobs:
   get-version:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     outputs:
       major_version: ${{ steps.get_version.outputs.major_version }}
       minor_version: ${{ steps.get_version.outputs.minor_version }}

.github/workflows/gorgone.yml

@@ -178,7 +178,6 @@ jobs:
           module_name: gorgone
           distrib: ${{ matrix.distrib }}
           major_version: ${{ needs.get-version.outputs.major_version }}
-          minor_version: ${{ needs.get-version.outputs.minor_version }}
           stability: ${{ needs.get-version.outputs.stability }}
           repository_name: standard
           github_ref_name: ${{ github.ref_name }}

.github/workflows/lua-curl.yml

@@ -0,0 +1,220 @@
+name: lua-curl
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  pull_request:
+    paths:
+      - lua-curl/**
+  push:
+    branches:
+      - develop
+      - dev-[2-9][0-9].[0-9][0-9].x
+      - master
+      - "[2-9][0-9].[0-9][0-9].x"
+    paths:
+      - lua-curl/**
+
+env:
+  major_version: 0.3
+  minor_version: 13
+  release: 10 # 10 for openssl 1.1.1 / 20 for openssl system
+
+jobs:
+  get-version:
+    uses: ./.github/workflows/get-version.yml
+
+  package:
+    needs: [get-version]
+    if: ${{ needs.get-version.outputs.stability != 'stable' }}
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - package_extension: rpm
+            image: packaging-stream-connectors-nfpm-alma8
+            distrib: el8
+            lua_version: 5.3
+            runner: ubuntu-24.04
+            arch: amd64
+          - package_extension: deb
+            image: packaging-stream-connectors-nfpm-bullseye
+            distrib: bullseye
+            lua_version: 5.3
+            runner: ubuntu-24.04
+            arch: amd64
+
+    runs-on: ${{ matrix.runner }}
+
+    container:
+      image: ${{ vars.DOCKER_INTERNAL_REGISTRY_URL }}/${{ matrix.image }}:latest
+      credentials:
+        username: ${{ secrets.DOCKER_REGISTRY_ID }}
+        password: ${{ secrets.DOCKER_REGISTRY_PASSWD }}
+
+    name: package ${{ matrix.distrib }} ${{ matrix.arch }}
+
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+
+      - name: Checkout sources of lua-curl
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        with:
+          repository: Lua-cURL/Lua-cURLv3
+          path: lua-curl-src
+          ref: v${{ env.major_version }}.${{ env.minor_version }}
+
+      - name: Compile lua-curl and prepare packaging
+        run: |
+          if [ "${{ matrix.package_extension }}" == "rpm" ]; then
+            dnf install -y dnf-plugins-core
+            dnf config-manager --set-enabled powertools
+            dnf install -y make cmake gcc openssl openssl-devel libcurl-devel lua lua-devel python3-pip cpanminus
+          else
+            apt-get update
+            apt-get install -y make cmake gcc openssl libssl-dev libcurl4-openssl-dev lua${{ matrix.lua_version }} liblua${{ matrix.lua_version }} liblua${{ matrix.lua_version }}-dev python3-pip cpanminus
+          fi
+
+          cpanm -v \
+            IPC::Cmd \
+            Digest::SHA \
+            Thread::Queue \
+            IO::Socket::SSL \
+            File::Copy \
+            File::Compare
+
+          cd lua-curl-src
+
+          pip3 install conan==2.5.0
+
+          conan profile detect
+
+          cat <<'EOF' >> conanfile.txt
+          [requires]
+          libcurl/8.0.1
+          openssl/1.1.1t
+          zlib/1.2.13
+
+          [generators]
+          CMakeToolchain
+
+          [options]
+          libcurl/*:with_ca_bundle=/etc/ssl/certs/ca-bundle.crt
+          libcurl/*:with_ca_fallback=False
+          libcurl/*:with_ca_path=/etc/ssl/certs/
+          EOF
+
+          conan install . --build=missing --deployer=full_deploy
+
+          if [ "${{ matrix.package_extension }}" == "rpm" ]; then
+            sed -i "s#^CURL_LIBS.*#CURL_LIBS=-Lfull_deploy/host/libcurl/8.0.1/Release/x86_64/lib -l:libcurl.a -Lfull_deploy/host/openssl/1.1.1t/Release/x86_64/lib -l:libssl.a -l:libcrypto.a -Lfull_deploy/host/zlib/1.2.13/Release/x86_64/lib -l:libz.a -lpthread#" Makefile
+          else
+            sed -i "s#^CURL_LIBS.*#CURL_LIBS=-Lfull_deploy/host/libcurl/8.0.1/Release/x86_64/lib -l:libcurl.a -Lfull_deploy/host/openssl/1.1.1t/Release/x86_64/lib -l:libssl.a -l:libcrypto.a -Lfull_deploy/host/zlib/1.2.13/Release/x86_64/lib -l:libz.a -lpthread -I/usr/include/lua5.3#" Makefile
+          fi
+
+          make
+
+          cd ..
+
+          sed -i "s/@luaver@/${{ matrix.lua_version }}/g" lua-curl/packaging/lua-curl.yaml
+        shell: bash
+
+      - name: Package
+        uses: ./.github/actions/package
+        with:
+          nfpm_file_pattern: "lua-curl/packaging/lua-curl.yaml"
+          distrib: ${{ matrix.distrib }}
+          package_extension: ${{ matrix.package_extension }}
+          major_version: ${{ env.major_version }}
+          minor_version: ${{ env.minor_version }}
+          release: ${{ env.release }}
+          arch: ${{ matrix.arch }}
+          commit_hash: ${{ github.sha }}
+          cache_key: ${{ github.sha }}-${{ github.run_id }}-${{ matrix.package_extension }}-lua-curl-${{ matrix.distrib }}-${{ matrix.arch }}
+          rpm_gpg_key: ${{ secrets.RPM_GPG_SIGNING_KEY }}
+          rpm_gpg_signing_key_id: ${{ secrets.RPM_GPG_SIGNING_KEY_ID }}
+          rpm_gpg_signing_passphrase: ${{ secrets.RPM_GPG_SIGNING_PASSPHRASE }}
+          stability: ${{ needs.get-version.outputs.stability }}
+
+  deliver-rpm:
+    if: ${{ contains(fromJson('["testing", "unstable"]'), needs.get-version.outputs.stability) }}
+    needs: [get-version, package]
+    runs-on: ubuntu-22.04
+    strategy:
+      matrix:
+        include:
+          - distrib: el8
+            arch: amd64
+    name: deliver ${{ matrix.distrib }} ${{ matrix.arch }}
+
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+
+      - name: Publish RPM packages
+        uses: ./.github/actions/rpm-delivery
+        with:
+          module_name: lua-curl
+          distrib: ${{ matrix.distrib }}
+          version: ${{ needs.get-version.outputs.major_version }}
+          artifactory_token: ${{ secrets.ARTIFACTORY_ACCESS_TOKEN }}
+          cache_key: ${{ github.sha }}-${{ github.run_id }}-rpm-lua-curl-${{ matrix.distrib }}-${{ matrix.arch }}
+          stability: ${{ needs.get-version.outputs.stability }}
+          release_type: ${{ needs.get-version.outputs.release_type }}
+          release_cloud: ${{ needs.get-version.outputs.release_cloud }}
+
+  deliver-deb:
+    if: ${{ contains(fromJson('["testing", "unstable"]'), needs.get-version.outputs.stability) }}
+    needs: [get-version, package]
+    runs-on: ubuntu-22.04
+    strategy:
+      matrix:
+        include:
+          - distrib: bullseye
+            arch: amd64
+    name: deliver ${{ matrix.distrib }} ${{ matrix.arch }}
+
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+
+      - name: Publish DEB packages
+        uses: ./.github/actions/deb-delivery
+        with:
+          module_name: lua-curl
+          distrib: ${{ matrix.distrib }}
+          version: ${{ needs.get-version.outputs.major_version }}
+          artifactory_token: ${{ secrets.ARTIFACTORY_ACCESS_TOKEN }}
+          cache_key: ${{ github.sha }}-${{ github.run_id }}-deb-lua-curl-${{ matrix.distrib }}-${{ matrix.arch }}
+          stability: ${{ needs.get-version.outputs.stability }}
+          release_type: ${{ needs.get-version.outputs.release_type }}
+          release_cloud: ${{ needs.get-version.outputs.release_cloud }}
+
+  promote:
+    needs: [get-version]
+    if: ${{ contains(fromJson('["stable"]'), needs.get-version.outputs.stability) && github.event_name != 'workflow_dispatch' }}
+    runs-on: [self-hosted, common]
+    strategy:
+      matrix:
+        distrib: [el8, bullseye]
+
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+
+      - name: Promote ${{ matrix.distrib }} to stable
+        uses: ./.github/actions/promote-to-stable
+        with:
+          artifactory_token: ${{ secrets.ARTIFACTORY_ACCESS_TOKEN }}
+          module_name: lua-curl
+          distrib: ${{ matrix.distrib }}
+          major_version: ${{ needs.get-version.outputs.major_version }}
+          stability: ${{ needs.get-version.outputs.stability }}
+          github_ref_name: ${{ github.ref_name }}
+          release_type: ${{ needs.get-version.outputs.release_type }}
+          release_cloud: ${{ needs.get-version.outputs.release_cloud }}