feat: Add CI/CD configuration with SSH key configuration for binary b…

…uilds

.github/workflows/hydrun.yaml

@@ -0,0 +1,158 @@
+name: hydrun CI
+
+on:
+  push:
+  pull_request:
+  schedule:
+    - cron: "0 0 * * 0"
+
+permissions:
+  contents: write
+
+jobs:
+  build-linux:
+    runs-on: ${{ matrix.target.runner }}
+    strategy:
+      matrix:
+        target:
+          - id: test
+            src: .
+            os: golang:bookworm
+            flags: -e '-v /tmp/ssh-key:/tmp/ssh-key'
+            cmd: GOFLAGS="-short" ./Hydrunfile test
+            dst: out/nonexistent
+            runner: depot-ubuntu-22.04-32
+          - id: go.drafter-nat
+            src: .
+            os: golang:bookworm
+            flags: -e '-v /tmp/ssh-key:/tmp/ssh-key'
+            cmd: ./Hydrunfile go drafter-nat
+            dst: out/*
+            runner: depot-ubuntu-22.04-32
+          - id: go.drafter-forwarder
+            src: .
+            os: golang:bookworm
+            flags: -e '-v /tmp/ssh-key:/tmp/ssh-key'
+            cmd: ./Hydrunfile go drafter-forwarder
+            dst: out/*
+            runner: depot-ubuntu-22.04-32
+          - id: go.drafter-agent
+            src: .
+            os: golang:bookworm
+            flags: -e '-v /tmp/ssh-key:/tmp/ssh-key'
+            cmd: ./Hydrunfile go drafter-agent
+            dst: out/*
+            runner: depot-ubuntu-22.04-32
+          - id: go.drafter-liveness
+            src: .
+            os: golang:bookworm
+            flags: -e '-v /tmp/ssh-key:/tmp/ssh-key'
+            cmd: ./Hydrunfile go drafter-liveness
+            dst: out/*
+            runner: depot-ubuntu-22.04-32
+          - id: go.drafter-snapshotter
+            src: .
+            os: golang:bookworm
+            flags: -e '-v /tmp/ssh-key:/tmp/ssh-key'
+            cmd: ./Hydrunfile go drafter-snapshotter
+            dst: out/*
+            runner: depot-ubuntu-22.04-32
+          - id: go.drafter-packager
+            src: .
+            os: golang:bookworm
+            flags: -e '-v /tmp/ssh-key:/tmp/ssh-key'
+            cmd: ./Hydrunfile go drafter-packager
+            dst: out/*
+            runner: depot-ubuntu-22.04-32
+          - id: go.drafter-runner
+            src: .
+            os: golang:bookworm
+            flags: -e '-v /tmp/ssh-key:/tmp/ssh-key'
+            cmd: ./Hydrunfile go drafter-runner
+            dst: out/*
+            runner: depot-ubuntu-22.04-32
+          - id: go.drafter-registry
+            src: .
+            os: golang:bookworm
+            flags: -e '-v /tmp/ssh-key:/tmp/ssh-key'
+            cmd: ./Hydrunfile go drafter-registry
+            dst: out/*
+            runner: depot-ubuntu-22.04-32
+          - id: go.drafter-peer
+            src: .
+            os: golang:bookworm
+            flags: -e '-v /tmp/ssh-key:/tmp/ssh-key'
+            cmd: ./Hydrunfile go drafter-peer
+            dst: out/*
+            runner: depot-ubuntu-22.04-32
+          - id: go.drafter-terminator
+            src: .
+            os: golang:bookworm
+            flags: -e '-v /tmp/ssh-key:/tmp/ssh-key'
+            cmd: ./Hydrunfile go drafter-terminator
+            dst: out/*
+            runner: depot-ubuntu-22.04-32
+
+    steps:
+      - name: Maximize build space
+        run: |
+          sudo rm -rf /usr/share/dotnet
+          sudo rm -rf /usr/local/lib/android
+          sudo rm -rf /opt/ghc
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Set up hydrun
+        run: |
+          curl -L -o /tmp/hydrun "https://github.com/pojntfx/hydrun/releases/latest/download/hydrun.linux-$(uname -m)"
+          sudo install /tmp/hydrun /usr/local/bin
+      - name: Setup SSH key
+        working-directory: .
+        env:
+          SSH_KEY: ${{ secrets.SSH_KEY }}
+        run: echo "${SSH_KEY}" | base64 -d >'/tmp/ssh-key'
+      - name: Build with hydrun
+        working-directory: ${{ matrix.target.src }}
+        run: hydrun -o ${{ matrix.target.os }} ${{ matrix.target.flags }} "${{ matrix.target.cmd }}"
+      - name: Fix permissions for output
+        run: sudo chown -R $USER .
+      - name: Upload output
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ matrix.target.id }}
+          path: ${{ matrix.target.dst }}
+
+  publish-linux:
+    runs-on: ubuntu-latest
+    needs: build-linux
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Download output
+        uses: actions/download-artifact@v4
+        with:
+          path: /tmp/out
+      - name: Extract branch name
+        id: extract_branch
+        run: echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})"
+      - name: Publish pre-release to GitHub releases
+        if: ${{ github.ref == 'refs/heads/main' }}
+        uses: marvinpinto/action-automatic-releases@latest
+        with:
+          repo_token: "${{ secrets.GITHUB_TOKEN }}"
+          automatic_release_tag: release-${{ steps.extract_branch.outputs.branch }}
+          prerelease: true
+          files: |
+            /tmp/out/*/*
+      - name: Publish release to GitHub releases
+        if: startsWith(github.ref, 'refs/tags/v')
+        uses: marvinpinto/action-automatic-releases@latest
+        with:
+          repo_token: "${{ secrets.GITHUB_TOKEN }}"
+          prerelease: false
+          files: |
+            /tmp/out/*/*

Hydrunfile

@@ -0,0 +1,47 @@
+#!/bin/bash
+
+set -e
+
+# Test
+if [ "$1" = "test" ]; then
+    # Configure SSH access
+    eval "$(ssh-agent -s)"
+    ssh-add /tmp/ssh-key
+
+    # Configure Git
+    git config --global --add safe.directory '*'
+
+    # Generate dependencies
+    make depend
+
+    # Run tests
+    make test
+
+    exit 0
+fi
+
+# Go
+if [ "$1" = "go" ]; then
+    # Configure SSH access
+    eval "$(ssh-agent -s)"
+    ssh-add /tmp/ssh-key
+
+    # Install native dependencies
+    apt update
+    apt install -y curl make
+
+    # Install bagop
+    curl -L -o /tmp/bagop "https://github.com/pojntfx/bagop/releases/latest/download/bagop.linux-$(uname -m)"
+    install /tmp/bagop /usr/local/bin
+
+    # Configure Git
+    git config --global --add safe.directory '*'
+
+    # Generate dependencies
+    make depend
+
+    # Build
+    CGO_ENABLED=0 bagop -j "$(nproc)" -b "$2" -x '(android/*|ios/*|plan9/*|aix/*|linux/loong64|freebsd/riscv64|wasip1/wasm|js/wasm)' -p "make build/$2 DST=\$DST" -d out
+
+    exit 0
+fi