mirror of
https://github.com/armbian/build
synced 2025-09-24 19:47:06 +07:00
318 lines
9.9 KiB
YAML
318 lines
9.9 KiB
YAML
name: Build Rootfs Cache
|
|
#
|
|
# Generates rootfs cache and uploads it to https://github.com/armbian/mirror/releases/tag/_rootfs and https://dl.armbian.com/_rootfs/
|
|
#
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "30 0 1 * *"
|
|
push:
|
|
paths:
|
|
- 'config/distributions/**'
|
|
- 'config/cli/**'
|
|
- 'config/desktop/**'
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
|
|
release-start:
|
|
permissions:
|
|
contents: none
|
|
name: Release start
|
|
runs-on: [X64]
|
|
if: ${{ github.repository_owner == 'Armbian' }}
|
|
steps:
|
|
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v3
|
|
with:
|
|
repository: armbian/build
|
|
path: build
|
|
clean: false
|
|
|
|
- name: Updating releases
|
|
uses: ncipollo/release-action@v1
|
|
with:
|
|
repo: "mirror"
|
|
tag: "_rootfs"
|
|
name: "Build in progress"
|
|
bodyFile: "build/.github/Releases-wip.md"
|
|
allowUpdates: true
|
|
removeArtifacts: true
|
|
token: ${{ secrets.CR_PAT }}
|
|
|
|
x86-min:
|
|
needs: [release-start]
|
|
permissions:
|
|
contents: none
|
|
uses: armbian/scripts/.github/workflows/build-cache-v2.yml@master
|
|
|
|
with:
|
|
|
|
variant: 'minimal:uefi-x86'
|
|
|
|
secrets:
|
|
PAT1: ${{ secrets.CR_PAT }}
|
|
GPG_KEY1: ${{ secrets.GPG_KEY1 }}
|
|
GPG_PASSPHRASE1: ${{ secrets.GPG_PASSPHRASE1 }}
|
|
GPG_KEY2: ${{ secrets.GPG_KEY2 }}
|
|
GPG_PASSPHRASE2: ${{ secrets.GPG_PASSPHRASE2 }}
|
|
SCRIPTS_ACCESS_TOKEN: ${{ secrets.SCRIPTS_ACCESS_TOKEN }}
|
|
SSH_KEY_TORRENTS: ${{ secrets.KEY_TORRENTS }}
|
|
KNOWN_HOSTS_UPLOAD: ${{ secrets.KNOWN_HOSTS_UPLOAD }}
|
|
|
|
x86-srv:
|
|
needs: [release-start]
|
|
permissions:
|
|
contents: none
|
|
uses: armbian/scripts/.github/workflows/build-cache-v2.yml@master
|
|
|
|
with:
|
|
|
|
variant: 'server:uefi-x86'
|
|
|
|
secrets:
|
|
PAT1: ${{ secrets.CR_PAT }}
|
|
GPG_KEY1: ${{ secrets.GPG_KEY1 }}
|
|
GPG_PASSPHRASE1: ${{ secrets.GPG_PASSPHRASE1 }}
|
|
GPG_KEY2: ${{ secrets.GPG_KEY2 }}
|
|
GPG_PASSPHRASE2: ${{ secrets.GPG_PASSPHRASE2 }}
|
|
SCRIPTS_ACCESS_TOKEN: ${{ secrets.SCRIPTS_ACCESS_TOKEN }}
|
|
SSH_KEY_TORRENTS: ${{ secrets.KEY_TORRENTS }}
|
|
KNOWN_HOSTS_UPLOAD: ${{ secrets.KNOWN_HOSTS_UPLOAD }}
|
|
|
|
x86-x:
|
|
needs: [release-start]
|
|
permissions:
|
|
contents: none
|
|
uses: armbian/scripts/.github/workflows/build-cache-v2.yml@master
|
|
|
|
with:
|
|
|
|
variant: 'desktop:uefi-x86'
|
|
|
|
secrets:
|
|
PAT1: ${{ secrets.CR_PAT }}
|
|
GPG_KEY1: ${{ secrets.GPG_KEY1 }}
|
|
GPG_PASSPHRASE1: ${{ secrets.GPG_PASSPHRASE1 }}
|
|
GPG_KEY2: ${{ secrets.GPG_KEY2 }}
|
|
GPG_PASSPHRASE2: ${{ secrets.GPG_PASSPHRASE2 }}
|
|
SCRIPTS_ACCESS_TOKEN: ${{ secrets.SCRIPTS_ACCESS_TOKEN }}
|
|
SSH_KEY_TORRENTS: ${{ secrets.KEY_TORRENTS }}
|
|
KNOWN_HOSTS_UPLOAD: ${{ secrets.KNOWN_HOSTS_UPLOAD }}
|
|
|
|
armhf-min:
|
|
needs: [release-start]
|
|
permissions:
|
|
contents: none
|
|
uses: armbian/scripts/.github/workflows/build-cache-v2.yml@master
|
|
|
|
with:
|
|
|
|
variant: 'minimal:tinkerboard'
|
|
|
|
secrets:
|
|
PAT1: ${{ secrets.CR_PAT }}
|
|
GPG_KEY1: ${{ secrets.GPG_KEY1 }}
|
|
GPG_PASSPHRASE1: ${{ secrets.GPG_PASSPHRASE1 }}
|
|
GPG_KEY2: ${{ secrets.GPG_KEY2 }}
|
|
GPG_PASSPHRASE2: ${{ secrets.GPG_PASSPHRASE2 }}
|
|
SCRIPTS_ACCESS_TOKEN: ${{ secrets.SCRIPTS_ACCESS_TOKEN }}
|
|
SSH_KEY_TORRENTS: ${{ secrets.KEY_TORRENTS }}
|
|
KNOWN_HOSTS_UPLOAD: ${{ secrets.KNOWN_HOSTS_UPLOAD }}
|
|
|
|
|
|
armhf-srv:
|
|
needs: [release-start]
|
|
permissions:
|
|
contents: none
|
|
uses: armbian/scripts/.github/workflows/build-cache-v2.yml@master
|
|
|
|
with:
|
|
|
|
variant: 'server:tinkerboard'
|
|
|
|
secrets:
|
|
PAT1: ${{ secrets.CR_PAT }}
|
|
GPG_KEY1: ${{ secrets.GPG_KEY1 }}
|
|
GPG_PASSPHRASE1: ${{ secrets.GPG_PASSPHRASE1 }}
|
|
GPG_KEY2: ${{ secrets.GPG_KEY2 }}
|
|
GPG_PASSPHRASE2: ${{ secrets.GPG_PASSPHRASE2 }}
|
|
SCRIPTS_ACCESS_TOKEN: ${{ secrets.SCRIPTS_ACCESS_TOKEN }}
|
|
SSH_KEY_TORRENTS: ${{ secrets.KEY_TORRENTS }}
|
|
KNOWN_HOSTS_UPLOAD: ${{ secrets.KNOWN_HOSTS_UPLOAD }}
|
|
|
|
armhf-x:
|
|
needs: [release-start]
|
|
permissions:
|
|
contents: none
|
|
uses: armbian/scripts/.github/workflows/build-cache-v2.yml@master
|
|
|
|
with:
|
|
variant: 'desktop:tinkerboard'
|
|
|
|
secrets:
|
|
PAT1: ${{ secrets.CR_PAT }}
|
|
GPG_KEY1: ${{ secrets.GPG_KEY1 }}
|
|
GPG_PASSPHRASE1: ${{ secrets.GPG_PASSPHRASE1 }}
|
|
GPG_KEY2: ${{ secrets.GPG_KEY2 }}
|
|
GPG_PASSPHRASE2: ${{ secrets.GPG_PASSPHRASE2 }}
|
|
SCRIPTS_ACCESS_TOKEN: ${{ secrets.SCRIPTS_ACCESS_TOKEN }}
|
|
SSH_KEY_TORRENTS: ${{ secrets.KEY_TORRENTS }}
|
|
KNOWN_HOSTS_UPLOAD: ${{ secrets.KNOWN_HOSTS_UPLOAD }}
|
|
|
|
arm64-min:
|
|
needs: [release-start]
|
|
permissions:
|
|
contents: none
|
|
uses: armbian/scripts/.github/workflows/build-cache-v2.yml@master
|
|
|
|
with:
|
|
|
|
variant: 'minimal:uefi-arm64'
|
|
|
|
secrets:
|
|
PAT1: ${{ secrets.CR_PAT }}
|
|
GPG_KEY1: ${{ secrets.GPG_KEY1 }}
|
|
GPG_PASSPHRASE1: ${{ secrets.GPG_PASSPHRASE1 }}
|
|
GPG_KEY2: ${{ secrets.GPG_KEY2 }}
|
|
GPG_PASSPHRASE2: ${{ secrets.GPG_PASSPHRASE2 }}
|
|
SCRIPTS_ACCESS_TOKEN: ${{ secrets.SCRIPTS_ACCESS_TOKEN }}
|
|
SSH_KEY_TORRENTS: ${{ secrets.KEY_TORRENTS }}
|
|
KNOWN_HOSTS_UPLOAD: ${{ secrets.KNOWN_HOSTS_UPLOAD }}
|
|
|
|
arm64-srv:
|
|
needs: [release-start]
|
|
permissions:
|
|
contents: none
|
|
uses: armbian/scripts/.github/workflows/build-cache-v2.yml@master
|
|
|
|
with:
|
|
|
|
variant: 'server:uefi-arm64'
|
|
|
|
secrets:
|
|
PAT1: ${{ secrets.CR_PAT }}
|
|
GPG_KEY1: ${{ secrets.GPG_KEY1 }}
|
|
GPG_PASSPHRASE1: ${{ secrets.GPG_PASSPHRASE1 }}
|
|
GPG_KEY2: ${{ secrets.GPG_KEY2 }}
|
|
GPG_PASSPHRASE2: ${{ secrets.GPG_PASSPHRASE2 }}
|
|
SCRIPTS_ACCESS_TOKEN: ${{ secrets.SCRIPTS_ACCESS_TOKEN }}
|
|
SSH_KEY_TORRENTS: ${{ secrets.KEY_TORRENTS }}
|
|
KNOWN_HOSTS_UPLOAD: ${{ secrets.KNOWN_HOSTS_UPLOAD }}
|
|
|
|
arm64-x:
|
|
needs: [release-start]
|
|
permissions:
|
|
contents: none
|
|
uses: armbian/scripts/.github/workflows/build-cache-v2.yml@master
|
|
|
|
with:
|
|
variant: 'desktop:uefi-arm64'
|
|
|
|
secrets:
|
|
PAT1: ${{ secrets.CR_PAT }}
|
|
GPG_KEY1: ${{ secrets.GPG_KEY1 }}
|
|
GPG_PASSPHRASE1: ${{ secrets.GPG_PASSPHRASE1 }}
|
|
GPG_KEY2: ${{ secrets.GPG_KEY2 }}
|
|
GPG_PASSPHRASE2: ${{ secrets.GPG_PASSPHRASE2 }}
|
|
SCRIPTS_ACCESS_TOKEN: ${{ secrets.SCRIPTS_ACCESS_TOKEN }}
|
|
SSH_KEY_TORRENTS: ${{ secrets.KEY_TORRENTS }}
|
|
KNOWN_HOSTS_UPLOAD: ${{ secrets.KNOWN_HOSTS_UPLOAD }}
|
|
|
|
jobsend:
|
|
permissions:
|
|
contents: none
|
|
name: finish
|
|
needs: [x86-min,x86-srv,x86-x,armhf-min,armhf-srv,armhf-x,arm64-min,arm64-srv,arm64-x]
|
|
runs-on: [fast]
|
|
if: ${{ github.repository_owner == 'Armbian' }}
|
|
steps:
|
|
|
|
- name: Runner cleanup
|
|
uses: igorpecovnik/freespace@main
|
|
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v3
|
|
with:
|
|
repository: armbian/build
|
|
path: build
|
|
clean: false
|
|
|
|
- name: Checkout tracker lists
|
|
uses: actions/checkout@v3
|
|
with:
|
|
fetch-depth: '1'
|
|
repository: ngosang/trackerslist
|
|
path: trackerslist
|
|
clean: false
|
|
|
|
- name: Import GPG key
|
|
uses: crazy-max/ghaction-import-gpg@v3
|
|
with:
|
|
gpg-private-key: ${{ secrets.GPG_KEY1 }}
|
|
passphrase: ${{ secrets.GPG_PASSPHRASE1 }}
|
|
workdir: build
|
|
git-user-signingkey: true
|
|
|
|
- name: Install SSH key for storage
|
|
uses: shimataro/ssh-key-action@v2
|
|
with:
|
|
|
|
key: ${{ secrets.KEY_TORRENTS }}
|
|
known_hosts: ${{ secrets.KNOWN_HOSTS_UPLOAD }}
|
|
if_key_exists: replace
|
|
|
|
- name: Mount upload folders
|
|
run: |
|
|
|
|
sudo mountpoint -q build/cache/rootfs.upload && sudo fusermount -u build/cache/rootfs.upload || true
|
|
sudo apt-get -y -qq install sshfs
|
|
sudo mkdir -p build/cache/rootfs.upload || true
|
|
if [[ $(curl -s http://ifconfig.me) == "93.103.15.56" ]]; then
|
|
sudo mount nas:/tank/armbian/users.armbian.com/upload/rootfs build/cache/rootfs.upload
|
|
else
|
|
sudo sshfs upload@users.armbian.com:/rootfs build/cache/rootfs.upload -o IdentityFile=~/.ssh/id_rsa -o reconnect -o allow_other || true
|
|
fi
|
|
# remove true in sshfs when all runners are on jammy
|
|
sudo df
|
|
|
|
- name: Signing
|
|
run: |
|
|
|
|
sudo apt-get -y -qq install parallel buildtorrent
|
|
|
|
ANNOUNCE=$(cat trackerslist/trackers_best_ip.txt | head -1)ANNOUNCE=$(cat trackerslist/trackers_best_ip.txt | sed '/^$/d' | shuf -n 1)
|
|
TRACKERS=$(cat trackerslist/trackers_all.txt | sed '/^\s*$/d' | while read line; do printf ",""${line}"; done | cut -c 2-)
|
|
WEBSEEDS="--webseeds=https://github.com/armbian/mirror/releases/download/_rootfs/$FILE,https://imola.armbian.com/dl/_rootfs/_rootfs/$FILE,https://stpete-mirror.armbian.com/dl/_rootfs/$FILE"
|
|
cd build/cache/rootfs.upload
|
|
FILES=$(ls -1 *.lz4)
|
|
for FILE in ${FILES[@]}
|
|
do
|
|
if [[ ! -f $FILE.asc ]]; then
|
|
echo "$FILE"
|
|
fi
|
|
done | sudo --preserve-env parallel --jobs 18 '
|
|
echo "Signing {} "; echo ${{ secrets.GPG_PASSPHRASE1 }} | gpg --quiet --armor --batch --yes --passphrase-fd 0 --detach-sign --pinentry-mode loopback {};
|
|
echo "Generating {}.torrent "; buildtorrent -q -s -m '$WEBSEEDS' --announce="'$ANNOUNCE'" --announcelist="'$TRACKERS'" {} -c "Armbian rootfs cache" {}.torrent >/dev/null
|
|
'
|
|
|
|
- name: Upload
|
|
uses: ncipollo/release-action@v1
|
|
if: ${{ github.repository_owner == 'Armbian' }}
|
|
with:
|
|
repo: "mirror"
|
|
artifacts: "build/cache/rootfs/*.torrent,build/cache/rootfs/*.asc"
|
|
tag: "_rootfs"
|
|
bodyFile: "build/.github/Releases.md"
|
|
name: "Rootfs cache"
|
|
allowUpdates: true
|
|
token: ${{ secrets.PAT }}
|
|
|
|
- name: Unmount folders
|
|
|
|
run: |
|
|
|
|
sudo mountpoint -q build/cache/rootfs && sudo fusermount -u build/cache/rootfs || true
|
|
sudo mountpoint -q build/cache/rootfs.upload && sudo fusermount -u build/cache/rootfs.upload || true
|