This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI build and push | |
| concurrency: | |
| group: ci-${{ github.run_id }} | |
| cancel-in-progress: true | |
| on: | |
| issue_comment: | |
| types: | |
| - created | |
| env: | |
| OPENSUSE_UNOFFICIAL_LIBCONTAINERS_KEY_URL: "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/unstable/xUbuntu_22.04/Release.key" | |
| OPENSUSE_UNOFFICIAL_LIBCONTAINERS_SOURCE_URL: "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/unstable/xUbuntu_22.04" | |
| jobs: | |
| check-before-build: | |
| runs-on: ubuntu-latest | |
| if: github.event.issue.pull_request && startsWith(github.event.comment.body, '/build_test') | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| - name: Fail if needs-triage label applied | |
| if: ${{ contains(github.event.issue.labels.*.name, 'needs-triage') }} | |
| run: exit 1 | |
| - name: Show warning if permission is denied | |
| if: | | |
| !(github.event.comment.author_association == 'MEMBER' || github.event.comment.author_association == 'OWNER') | |
| && (!contains(github.event.issue.labels.*.name, 'safe-to-test') || github.event.issue.user.name != github.event.comment.user.name) | |
| uses: thollander/actions-comment-pull-request@v2 | |
| with: | |
| message: |- | |
| You do not have permission to run the /build_test command. Please ask @cryostatio/reviewers | |
| to resolve the issue. | |
| - name: Fail if command permission is denied | |
| if: | | |
| !(github.event.comment.author_association == 'MEMBER' || github.event.comment.author_association == 'OWNER') | |
| && (!contains(github.event.issue.labels.*.name, 'safe-to-test') || github.event.issue.user.name != github.event.comment.user.name) | |
| run: exit 1 | |
| - name: React to comment | |
| uses: actions/github-script@v4 | |
| with: | |
| script: | | |
| const {owner, repo} = context.issue | |
| github.reactions.createForIssueComment({ | |
| owner, | |
| repo, | |
| comment_id: context.payload.comment.id, | |
| content: "+1", | |
| }); | |
| checkout-branch: | |
| runs-on: ubuntu-latest | |
| needs: [check-before-build] | |
| outputs: | |
| PR_head_ref: ${{ fromJSON(steps.comment-branch.outputs.result).ref }} | |
| PR_head_sha: ${{ fromJSON(steps.comment-branch.outputs.result).sha }} | |
| PR_num: ${{ fromJSON(steps.comment-branch.outputs.result).num }} | |
| PR_repo: ${{ fromJSON(steps.comment-branch.outputs.result).repo }} | |
| permissions: | |
| pull-requests: read | |
| steps: | |
| - uses: actions/github-script@v4 | |
| id: comment-branch | |
| with: | |
| script: | | |
| const result = await github.pulls.get ({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| pull_number: context.issue.number | |
| }) | |
| return { repo: result.data.head.repo.full_name, num: result.data.number, sha: result.data.head.sha, ref: result.data.head.ref } | |
| start-comment: | |
| runs-on: ubuntu-latest | |
| needs: [check-before-build] | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| - name: Leave Actions Run Comment | |
| uses: actions/github-script@v6 | |
| with: | |
| script: | | |
| const runURL = `https://github.com/${context.repo.owner}/${context.repo.repo}/actions/runs/${{ github.run_id }}`; | |
| const currentTime = new Date().toLocaleString('en-US', { timeZone: 'America/Toronto' }); | |
| const commentBody = `Workflow started at ${currentTime}. [View Actions Run](${runURL}).`; | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: commentBody | |
| }); | |
| build-and-test: | |
| needs: [checkout-branch] | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| java: [ '17', '21' ] | |
| env: | |
| TESTCONTAINERS_RYUK_DISABLED: true | |
| cache-name: cache-yarn | |
| name: Build and test Java ${{ matrix.java }} | |
| permissions: | |
| packages: write | |
| contents: read | |
| pull-requests: write | |
| statuses: write | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| repository: ${{ needs.checkout-branch.outputs.PR_repo }} | |
| ref: ${{ needs.checkout-branch.outputs.PR_head_ref }} | |
| submodules: true | |
| fetch-depth: 0 | |
| - uses: actions/setup-java@v3 | |
| with: | |
| java-version: ${{ matrix.java }} | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| - name: maven-settings | |
| uses: s4u/maven-settings-action@v2 | |
| with: | |
| servers: '[{"id": "github", "username": "dummy", "password": "${{ secrets.GITHUB_TOKEN }}"}]' | |
| githubServer: false | |
| - run: git submodule init && git submodule update | |
| - name: Cache yarn packages | |
| uses: actions/cache@v3 | |
| with: | |
| path: "./src/main/webui/.yarn/cache" | |
| key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/yarn.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-build-${{ env.cache-name }}- | |
| ${{ runner.os }}-build- | |
| ${{ runner.os }}- | |
| - name: Initialize web assets | |
| run: | | |
| cd src/main/webui | |
| yarn install && yarn yarn:frzinstall | |
| cd - | |
| - name: Install podman v4 | |
| run: | | |
| sudo apt -y remove docker-ce-cli | |
| sudo apt -y install podman-docker | |
| - name: Emulate docker with podman | |
| run: | | |
| mkdir -p $HOME/.bin | |
| cat <(echo '#!/usr/bin/env bash') <(echo 'exec podman "$@"') > $HOME/.bin/docker | |
| chmod +x $HOME/.bin/docker | |
| echo "PATH=$HOME/.bin:$PATH" >> "$GITHUB_ENV" | |
| - name: Set up testcontainers for podman | |
| run: echo ryuk.container.privileged=true > ~/.testcontainers.properties | |
| - name: Start Podman API | |
| run: systemctl --user enable --now podman.socket | |
| - name: Set DOCKER_HOST environment variable | |
| run: echo "DOCKER_HOST=unix:///run/user/$(id -u)/podman/podman.sock" >> "$GITHUB_ENV" | |
| - name: Build application | |
| run: ./mvnw -B -U -Dquarkus.container-image.build=false clean verify | |
| continue-on-error: ${{ matrix.java != '17' }} | |
| - name: Add workflow result as comment on PR | |
| uses: actions/github-script@v6 | |
| if: always() | |
| with: | |
| script: | | |
| const name = '${{github.workflow}}'; | |
| const url = '${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}'; | |
| const success = '${{ job.status }}' === 'success'; | |
| const body = `${name}: ${success ? 'All tests pass ✅' : 'At least one test failed ❌'}\n${url}`; | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: body | |
| }) | |
| - name: Set latest commit status as ${{ job.status }} | |
| uses: myrotvorets/set-commit-status-action@master | |
| if: always() | |
| with: | |
| sha: ${{ needs.checkout-branch.outputs.PR_head_sha}} | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| status: ${{ job.status }} | |