-
Notifications
You must be signed in to change notification settings - Fork 747
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'stable2412' into gui-backport-6463-to-stable2412
- Loading branch information
Showing
66 changed files
with
1,600 additions
and
340 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,37 @@ | ||
| #!/usr/bin/env bash | ||
|
|
||
| # This is used to build our binaries: | ||
| # - polkadot | ||
| # - polkadot-parachain | ||
| # - polkadot-omni-node | ||
| # set -e | ||
|
|
||
| BIN=$1 | ||
| PACKAGE=${2:-$BIN} | ||
|
|
||
| PROFILE=${PROFILE:-production} | ||
| # parity-macos runner needs a path where it can | ||
| # write, so make it relative to github workspace. | ||
| ARTIFACTS=$GITHUB_WORKSPACE/artifacts/$BIN | ||
| VERSION=$(git tag -l --contains HEAD | grep -E "^v.*") | ||
|
|
||
| echo "Artifacts will be copied into $ARTIFACTS" | ||
| mkdir -p "$ARTIFACTS" | ||
|
|
||
| git log --pretty=oneline -n 1 | ||
| time cargo build --profile $PROFILE --locked --verbose --bin $BIN --package $PACKAGE | ||
|
|
||
| echo "Artifact target: $ARTIFACTS" | ||
|
|
||
| cp ./target/$PROFILE/$BIN "$ARTIFACTS" | ||
| pushd "$ARTIFACTS" > /dev/null | ||
| sha256sum "$BIN" | tee "$BIN.sha256" | ||
|
|
||
| EXTRATAG="$($ARTIFACTS/$BIN --version | | ||
| sed -n -r 's/^'$BIN' ([0-9.]+.*-[0-9a-f]{7,13})-.*$/\1/p')" | ||
|
|
||
| EXTRATAG="${VERSION}-${EXTRATAG}-$(cut -c 1-8 $ARTIFACTS/$BIN.sha256)" | ||
|
|
||
| echo "$BIN version = ${VERSION} (EXTRATAG = ${EXTRATAG})" | ||
| echo -n ${VERSION} > "$ARTIFACTS/VERSION" | ||
| echo -n ${EXTRATAG} > "$ARTIFACTS/EXTRATAG" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,39 @@ | ||
| Origin: Parity | ||
| Label: Parity | ||
| Codename: release | ||
| Architectures: amd64 | ||
| Components: main | ||
| Description: Apt repository for software made by Parity Technologies Ltd. | ||
| SignWith: 90BD75EBBB8E95CB3DA6078F94A4029AB4B35DAE | ||
|
|
||
| Origin: Parity | ||
| Label: Parity Staging | ||
| Codename: staging | ||
| Architectures: amd64 | ||
| Components: main | ||
| Description: Staging distribution for Parity Technologies Ltd. packages | ||
| SignWith: 90BD75EBBB8E95CB3DA6078F94A4029AB4B35DAE | ||
|
|
||
| Origin: Parity | ||
| Label: Parity stable2407 | ||
| Codename: stable2407 | ||
| Architectures: amd64 | ||
| Components: main | ||
| Description: Apt repository for software made by Parity Technologies Ltd. | ||
| SignWith: 90BD75EBBB8E95CB3DA6078F94A4029AB4B35DAE | ||
|
|
||
| Origin: Parity | ||
| Label: Parity stable2409 | ||
| Codename: stable2409 | ||
| Architectures: amd64 | ||
| Components: main | ||
| Description: Apt repository for software made by Parity Technologies Ltd. | ||
| SignWith: 90BD75EBBB8E95CB3DA6078F94A4029AB4B35DAE | ||
|
|
||
| Origin: Parity | ||
| Label: Parity stable2412 | ||
| Codename: stable2412 | ||
| Architectures: amd64 | ||
| Components: main | ||
| Description: Apt repository for software made by Parity Technologies Ltd. | ||
| SignWith: 90BD75EBBB8E95CB3DA6078F94A4029AB4B35DAE |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,152 @@ | ||
| name: Release - Publish polakdot deb package | ||
|
|
||
| on: | ||
| workflow_dispatch: | ||
| inputs: | ||
| tag: | ||
| description: Current final release tag in the format polakdot-stableYYMM or polkadot-stable-YYMM-X | ||
| default: polkadot-stable2412 | ||
| required: true | ||
| type: string | ||
|
|
||
| distribution: | ||
| description: Distribution where to publish deb package (release, staging, stable2407, etc) | ||
| default: staging | ||
| required: true | ||
| type: string | ||
|
|
||
| jobs: | ||
| check-synchronization: | ||
| uses: paritytech-release/sync-workflows/.github/workflows/check-syncronization.yml@main | ||
|
|
||
| validate-inputs: | ||
| needs: [check-synchronization] | ||
| if: ${{ needs.check-synchronization.outputs.checks_passed }} == 'true' | ||
| runs-on: ubuntu-latest | ||
| outputs: | ||
| release_tag: ${{ steps.validate_inputs.outputs.release_tag }} | ||
|
|
||
| steps: | ||
| - name: Checkout sources | ||
| uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 | ||
|
|
||
| - name: Validate inputs | ||
| id: validate_inputs | ||
| run: | | ||
| . ./.github/scripts/common/lib.sh | ||
| RELEASE_TAG=$(validate_stable_tag ${{ inputs.tag }}) | ||
| echo "release_tag=${RELEASE_TAG}" >> $GITHUB_OUTPUT | ||
| fetch-artifacts-from-s3: | ||
| runs-on: ubuntu-latest | ||
| needs: [validate-inputs] | ||
| env: | ||
| REPO: ${{ github.repository }} | ||
| RELEASE_TAG: ${{ needs.validate-inputs.outputs.release_tag }} | ||
| outputs: | ||
| VERSION: ${{ steps.fetch_artifacts_from_s3.outputs.VERSION }} | ||
|
|
||
| steps: | ||
| - name: Checkout sources | ||
| uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 | ||
|
|
||
| - name: Fetch rc artifacts or release artifacts from s3 based on version | ||
| id: fetch_artifacts_from_s3 | ||
| run: | | ||
| . ./.github/scripts/common/lib.sh | ||
| VERSION="$(get_polkadot_node_version_from_code)" | ||
| echo "VERSION=${VERSION}" >> $GITHUB_OUTPUT | ||
| fetch_debian_package_from_s3 polkadot | ||
| - name: Upload artifacts | ||
| uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 | ||
| with: | ||
| name: release-artifacts | ||
| path: release-artifacts/polkadot/*.deb | ||
|
|
||
| publish-deb-package: | ||
| runs-on: ubuntu-latest | ||
| needs: [fetch-artifacts-from-s3] | ||
| environment: release | ||
| env: | ||
| AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} | ||
| AWS_DEB_PATH: "s3://releases-package-repos/deb" | ||
| LOCAL_DEB_REPO_PATH: ${{ github.workspace }}/deb | ||
| VERSION: ${{ needs.fetch-artifacts-from-s3.outputs.VERSION }} | ||
|
|
||
| steps: | ||
| - name: Install pgpkkms | ||
| run: | | ||
| # Install pgpkms that is used to sign built artifacts | ||
| python3 -m pip install "pgpkms @ git+https://github.com/paritytech-release/pgpkms.git@1f8555426662ac93a3849480a35449f683b1c89f" | ||
| echo "PGPKMS_REPREPRO_PATH=$(which pgpkms-reprepro)" >> $GITHUB_ENV | ||
| - name: Install awscli | ||
| run: | | ||
| python3 -m pip install awscli | ||
| which aws | ||
| - name: Checkout sources | ||
| uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 | ||
|
|
||
| - name: Import gpg keys | ||
| shell: bash | ||
| run: | | ||
| . ./.github/scripts/common/lib.sh | ||
| import_gpg_keys | ||
| - name: Download artifacts | ||
| uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 | ||
| with: | ||
| name: release-artifacts | ||
| path: release-artifacts | ||
|
|
||
| - name: Setup local deb repo | ||
| run: | | ||
| sudo apt-get install -y reprepro | ||
| which reprepro | ||
| sed -i "s|^SignWith:.*|SignWith: ! ${PGPKMS_REPREPRO_PATH}|" ${{ github.workspace }}/.github/scripts/release/distributions | ||
| mkdir -p ${{ github.workspace }}/deb/conf | ||
| cp ${{ github.workspace }}/.github/scripts/release/distributions ${{ github.workspace }}/deb/conf/distributions | ||
| cat ${{ github.workspace }}/deb/conf/distributions | ||
| - name: Sync local deb repo | ||
| env: | ||
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_RELEASE_ACCESS_KEY_ID }} | ||
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_RELEASE_SECRET_ACCESS_KEY }} | ||
| run: | | ||
| # Download the current state of the deb repo | ||
| aws s3 sync "$AWS_DEB_PATH/db" "$LOCAL_DEB_REPO_PATH/db" | ||
| aws s3 sync "$AWS_DEB_PATH/pool" "$LOCAL_DEB_REPO_PATH/pool" | ||
| aws s3 sync "$AWS_DEB_PATH/dists" "$LOCAL_DEB_REPO_PATH/dists" | ||
| - name: Add deb package to local repo | ||
| env: | ||
| PGP_KMS_KEY: ${{ secrets.PGP_KMS_KEY }} | ||
| PGP_KMS_HASH: ${{ secrets.PGP_KMS_HASH }} | ||
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} | ||
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | ||
| run: | | ||
| # Add the new deb to the repo | ||
| reprepro -b "$LOCAL_DEB_REPO_PATH" includedeb "${{ inputs.distribution }}" "release-artifacts/polkadot_${VERSION}_amd64.deb" | ||
| - name: Upload updated deb repo | ||
| env: | ||
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_RELEASE_ACCESS_KEY_ID }} | ||
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_RELEASE_SECRET_ACCESS_KEY }} | ||
| run: | | ||
| # Upload the updated repo - dists and pool should be publicly readable | ||
| aws s3 sync "$LOCAL_DEB_REPO_PATH/pool" "$AWS_DEB_PATH/pool" --acl public-read | ||
| aws s3 sync "$LOCAL_DEB_REPO_PATH/dists" "$AWS_DEB_PATH/dists" --acl public-read | ||
| aws s3 sync "$LOCAL_DEB_REPO_PATH/db" "$AWS_DEB_PATH/db" | ||
| aws s3 sync "$LOCAL_DEB_REPO_PATH/conf" "$AWS_DEB_PATH/conf" | ||
| # Invalidate caches to make sure latest files are served | ||
| aws cloudfront create-invalidation --distribution-id E36FKEYWDXAZYJ --paths '/deb/*' |
Oops, something went wrong.