This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and test rpm package for linupdate | |
| on: | |
| push: | |
| branches: [ python ] | |
| pull_request: | |
| push: | |
| branches: [ main ] | |
| jobs: | |
| build-rpm: | |
| name: Build rpm package | |
| runs-on: ubuntu-latest | |
| env: | |
| # Force to use node16 (for actions/checkout@v3) | |
| ACTIONS_RUNNER_FORCE_ACTIONS_NODE_VERSION: node16 | |
| ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true | |
| container: | |
| image: centos:7 | |
| options: --user root | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Get linupdate version | |
| run: echo "VERSION=$(cat ${GITHUB_WORKSPACE}/version)" >> $GITHUB_ENV | |
| - name: Install CentOS7 archive repositories | |
| run: | | |
| rm /etc/yum.repos.d/* -f | |
| echo "[os] | |
| name=os repo | |
| baseurl=https://vault.centos.org/7.9.2009/os/x86_64/ | |
| enabled=1 | |
| gpgkey=https://vault.centos.org/RPM-GPG-KEY-CentOS-7 | |
| gpgcheck=1" > /etc/yum.repos.d/os.repo | |
| echo "[extras] | |
| name=extras repo | |
| baseurl=https://vault.centos.org/7.9.2009/extras/x86_64/ | |
| enabled=1 | |
| gpgkey=https://vault.centos.org/RPM-GPG-KEY-CentOS-7 | |
| gpgcheck=1" > /etc/yum.repos.d/extras.repo | |
| echo "[updates] | |
| name=updates repo | |
| baseurl=https://vault.centos.org/7.9.2009/updates/x86_64/ | |
| enabled=1 | |
| gpgkey=https://vault.centos.org/RPM-GPG-KEY-CentOS-7 | |
| gpgcheck=1" > /etc/yum.repos.d/updates.repo | |
| yum clean all | |
| - name: Install dependencies packages | |
| run: yum install rpmdevtools rpmlint -y | |
| - name: Create build environment | |
| run: | | |
| mkdir -p $HOME/rpmbuild/BUILD | |
| mkdir -p $HOME/rpmbuild/BUILDROOT | |
| mkdir -p $HOME/rpmbuild/RPMS | |
| mkdir -p $HOME/rpmbuild/SOURCES | |
| mkdir -p $HOME/rpmbuild/SPECS | |
| mkdir -p /etc/linupdate/modules | |
| mkdir -p /opt/linupdate | |
| mkdir -p /opt/linupdate/.src/ | |
| mkdir -p /opt/linupdate/mods-available/ | |
| mkdir -p /opt/linupdate/mods-enabled/ | |
| mkdir -p /opt/linupdate/agents-available/ | |
| mkdir -p /opt/linupdate/agents-enabled/ | |
| mkdir -p /opt/linupdate/service/ | |
| mkdir -p /lib/systemd/system/ | |
| - name: Copy files to include in the build | |
| run: | | |
| cp -r ${GITHUB_WORKSPACE}/src/* /opt/linupdate/.src/ | |
| cp -r ${GITHUB_WORKSPACE}/mods-available/* /opt/linupdate/mods-available/ | |
| cp -r ${GITHUB_WORKSPACE}/service/* /opt/linupdate/service/ | |
| cp ${GITHUB_WORKSPACE}/linupdate /opt/linupdate/linupdate | |
| cp ${GITHUB_WORKSPACE}/version /opt/linupdate/version | |
| cp -r ${GITHUB_WORKSPACE}/service/linupdate.systemd.template /lib/systemd/system/linupdate.service | |
| - name: Copy spec file | |
| run: | | |
| cp ${GITHUB_WORKSPACE}/.github/workflows/packaging/rpm/spec $HOME/rpmbuild/SPECS/linupdate.spec | |
| sed -i "s/__VERSION__/${{ env.VERSION }}/g" $HOME/rpmbuild/SPECS/linupdate.spec | |
| - name: Build package | |
| run: | | |
| cd $HOME/rpmbuild/SPECS | |
| rpmbuild --target noarch -bb --quiet linupdate.spec | |
| mv $HOME/rpmbuild/RPMS/noarch/linupdate-${{ env.VERSION }}-stable.noarch.rpm /tmp/linupdate-test-build-${{ env.VERSION }}.noarch.rpm | |
| - name: Upload artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: linupdate-test-build-${{ env.VERSION }}.noarch.rpm | |
| path: /tmp/linupdate-test-build-${{ env.VERSION }}.noarch.rpm | |
| retention-days: 1 | |
| # Try to install package on latest Fedora | |
| install-fedora: | |
| name: Install on latest Fedora | |
| needs: | |
| build-rpm | |
| runs-on: ubuntu-latest | |
| container: | |
| image: fedora:37 | |
| options: --user root | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Get linupdate version | |
| run: echo "VERSION=$(cat ${GITHUB_WORKSPACE}/version)" >> $GITHUB_ENV | |
| # Download builded deb package artifact | |
| - name: Download artifact | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: linupdate-test-build-${{ env.VERSION }}.noarch.rpm | |
| - name: Install package | |
| run: | | |
| dnf update -y | |
| dnf clean all | |
| dnf --nogpgcheck localinstall -y ./linupdate-test-build-${{ env.VERSION }}.noarch.rpm | |
| - name: Launch linupdate | |
| run: python3 /opt/linupdate/linupdate.py --check-updates |