ci.yaml

name: Talos Image

on:
  push:
    branches: [ 'release-*' ]
    tags:
      - "v*"

env:
  ORIGIN_REPO: siderolabs/talos
  ORIGIN_TAG: v1.8.3
  KERNEL_TAG: v1.8.3
  SBC_TAG: v1.8.3
  RK3588_TAG: v1.8.3

jobs:
  talos-build:
    #runs-on: buildjet-4vcpu-ubuntu-2204-arm
    runs-on: ubuntu-latest

    permissions:
      actions: read
      contents: write
      issues: read
      packages: write
      pull-requests: read

    steps:
      - uses: docker/setup-buildx-action@v3

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Checkout
        uses: actions/checkout@v4
        with:
          repository: ${{ env.ORIGIN_REPO }}
          ref: ${{ env.ORIGIN_TAG }}
          # need history for `git describe` to work for Talos `Makefile`
          fetch-depth: 0
          fetch-tags: true

      - name: Set Environment Variable
        run: |
          if [[ $GITHUB_REF == refs/tags/* ]]; then
            echo "PUBLISH_TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
          else
            echo "PUBLISH_TAG=${ORIGIN_TAG#*/}-${GITHUB_SHA::10}" >> $GITHUB_ENV
          fi
        shell: bash

      - name: Build and push Talos installer image
        run: make installer
        env:
          PUSH: '1'
          TAG: ${{ env.PUBLISH_TAG }}
          TAG_SUFFIX: "-nosbclayer"
          PKG_KERNEL: ghcr.io/nberlee/kernel:${{ env.KERNEL_TAG }}
          USERNAME: ${{ github.actor }}
          PLATFORM: linux/arm64
          PROGRESS: plain
          CI_ARGS: "--cache-from=ghcr.io/${{ github.actor }}/installer:cache --cache-to=ghcr.io/${{ github.actor }}/installer:cache"

      - name: Build and push Talos imager image
        run: make imager
        env:
          PUSH: '1'
          TAG: ${{ env.PUBLISH_TAG }}
          PKG_KERNEL: ghcr.io/nberlee/kernel:${{ env.KERNEL_TAG }}
          USERNAME: ${{ github.actor }}
          PLATFORM: linux/arm64,linux/amd64
          INSTALLER_ARCH: arm64
          PROGRESS: plain
          CI_ARGS: "--cache-from=ghcr.io/${{ github.actor }}/imager:cache --cache-to=ghcr.io/${{ github.actor }}/imager:cache"

      - name: release-notes
        if: startsWith(github.ref, 'refs/tags/')
        run: |
          mkdir -p _out
          # Hack for ARM64 release tool
          mv hack/release.sh hack/release.sh.old
          curl -sL "https://raw.githubusercontent.com/nberlee/talos/release-1.8-turingrk1/hack/release.sh" -o hack/release.sh
          chmod +x hack/release.sh
          export TAG=${GITHUB_REF#refs/tags/}
          
          make release-notes
          mv hack/release.sh.old hack/release.sh
          
      - name: Build an turing-rk1 flashable image
        run: |
          make image-metal
          sudo zstd -d _out/metal-arm64.raw.zst
          sudo xz _out/metal-arm64.raw
        env:
          USERNAME: ${{ github.actor }}
          TAG: ${{ env.PUBLISH_TAG }}
          PLATFORM: linux/arm64
          PROGRESS: plain
          IMAGER_ARGS: "--base-installer-image ghcr.io/nberlee/installer:${{ env.PUBLISH_TAG }}-nosbclayer --system-extension-image ghcr.io/nberlee/rk3588:${{ env.RK3588_TAG }} --overlay-image ghcr.io/nberlee/sbc-turingrk1:${{ env.SBC_TAG }} --overlay-name=turingrk1"

      - name: Build an turing-rk1 installer
        run: |
          make image-installer
          curl -sL "https://github.com/google/go-containerregistry/releases/download/v0.20.2/go-containerregistry_$(uname -s)_$(uname -m).tar.gz" | tar -zxv -C /usr/local/bin/ crane
          crane push _out/installer-arm64.tar ghcr.io/nberlee/installer:${{ env.PUBLISH_TAG }}-rk3588
        env:
          USERNAME: ${{ github.actor }}
          TAG: ${{ env.PUBLISH_TAG }}
          PLATFORM: linux/arm64
          PROGRESS: plain
          IMAGER_ARGS: "--base-installer-image ghcr.io/nberlee/installer:${{ env.PUBLISH_TAG }}-nosbclayer --system-extension-image ghcr.io/nberlee/rk3588:${{ env.RK3588_TAG }} --overlay-image ghcr.io/nberlee/sbc-turingrk1:${{ env.SBC_TAG }} --overlay-name=turingrk1"

      - uses: actions/upload-artifact@v3
        with:
          name: image-turing-rk1
          path: _out/*.raw.xz
          if-no-files-found: error

      - name: Release
        if: startsWith(github.ref, 'refs/tags/')
        uses: crazy-max/ghaction-github-release@v2
        with:
          body_path: _out/RELEASE_NOTES.md
          draft: "true"
          files: |
            _out/metal-arm64.raw.*