1.28.0 #2
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish packages | |
| on: | |
| release: | |
| types: [published] | |
| jobs: | |
| publish-ppa: | |
| name: Publish on PPA | |
| runs-on: ubuntu-latest | |
| if: ${{ !github.event.release.prerelease }} | |
| steps: | |
| - name: Check out Nethermind repository | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ github.event.release.tag_name }} | |
| - name: Set up GPG | |
| env: | |
| GPG_PASSPHRASE: ${{ secrets.PPA_GPG_PASSPHRASE }} | |
| GPG_SECRET_KEY: ${{ secrets.PPA_GPG_SECRET_KEY }} | |
| run: | | |
| echo $GPG_SECRET_KEY > SECRET_KEY | |
| echo $GPG_PASSPHRASE > $GITHUB_WORKSPACE/PASSPHRASE | |
| echo "Import GPG key" | |
| base64 --decode -i SECRET_KEY | gpg --import --no-tty --batch --yes | |
| echo "Import GPG owner trust" | |
| echo ${{ secrets.GPG_OWNERTRUST }} | base64 --decode | gpg --import-ownertrust | |
| - name: Install PPA dependencies | |
| run: sudo apt-get update && sudo apt-get install debhelper devscripts -y | |
| - name: Submit package | |
| env: | |
| PPA_GPG_KEYID: ${{ secrets.PPA_GPG_KEYID }} | |
| working-directory: scripts/deployment/ppa | |
| run: | | |
| version=${{ github.event.release.tag_name }} | |
| json=$(curl -sL ${{ github.event.release.assets_url }}) | |
| arm64_url=$(echo "$json" | jq -r '.[].browser_download_url | select(contains("linux-arm64"))') | |
| arm64_hash=$(curl -sL $arm64_url | sha256sum | awk '{print $1}') | |
| x64_url=$(echo "$json" | jq -r '.[].browser_download_url | select(contains("linux-x64"))') | |
| x64_hash=$(curl -sL $x64_url | sha256sum | awk '{print $1}') | |
| awk -i inplace -v n=1 '/url/ { if (++count == n) sub(/url.*/, "url='$arm64_url'"); } 1' debian/postinst | |
| awk -i inplace -v n=2 '/url/ { if (++count == n) sub(/url.*/, "url='$x64_url'"); } 1' debian/postinst | |
| awk -i inplace -v n=1 '/hash/ { if (++count == n) sub(/hash.*/, "hash='$arm64_hash'"); } 1' debian/postinst | |
| awk -i inplace -v n=2 '/hash/ { if (++count == n) sub(/hash.*/, "hash='$x64_hash'"); } 1' debian/postinst | |
| changelog="nethermind ($version) focal; urgency=high\n" | |
| changelog+=" * Nethermind v$version\n" | |
| changelog+=" -- Nethermind <devops@nethermind.io> $(date -R)" | |
| echo -e "$changelog" > debian/changelog | |
| debuild -S -uc -us | |
| cd .. | |
| debsign -p "gpg --batch --yes --no-tty --pinentry-mode loopback --passphrase-file $GITHUB_WORKSPACE/PASSPHRASE" \ | |
| -S -k$PPA_GPG_KEYID nethermind_${version}_source.changes | |
| dput -f ppa:nethermindeth/nethermind nethermind_${version}_source.changes | |
| copy-ppa: | |
| name: Copy PPA package | |
| runs-on: ubuntu-latest | |
| needs: publish-ppa | |
| steps: | |
| - name: Wait for PPA package to be published | |
| run: sleep 1.5h | |
| - name: Install PPA dependencies | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install debhelper devscripts ubuntu-dev-tools -y | |
| - name: Install launchpadlib | |
| run: pip install launchpadlib --upgrade | |
| - name: Copy to other series | |
| env: | |
| LP_CREDENTIALS_FILE: /tmp/lp_credentials | |
| run: | | |
| echo ${{ secrets.PPA_COPY_TOKEN }} | base64 --decode > /tmp/lp_credentials | |
| git clone https://git.launchpad.net/ubuntu-archive-tools | |
| cd ubuntu-archive-tools | |
| for release in "jammy" "noble"; do | |
| python3 copy-package -y -b -p nethermindeth --ppa-name=nethermind -s focal --to-suite=$release nethermind | |
| done | |
| rm -f /tmp/lp_credentials | |
| publish-winget: | |
| name: Publish on Windows Package Manager | |
| runs-on: windows-latest | |
| if: ${{ !github.event.release.prerelease }} | |
| steps: | |
| - name: Submit package | |
| run: | | |
| $releaseInfo = curl -sL ${{ github.event.release.assets_url }} | ConvertFrom-Json | |
| $releaseUrl = $releaseInfo | Where-Object -Property name -match 'windows' | Select -ExpandProperty browser_download_url | |
| curl -sL https://aka.ms/wingetcreate/latest -o wingetcreate.exe | |
| ./wingetcreate update Nethermind.Nethermind -s -v ${{ github.event.release.tag_name }} -u $releaseUrl -t ${{ secrets.WINGET_TOKEN }} | |
| publish-homebrew: | |
| name: Publish on Homebrew | |
| runs-on: ubuntu-latest | |
| if: ${{ !github.event.release.prerelease }} | |
| env: | |
| FORMULA: nethermind.rb | |
| steps: | |
| - name: Authenticate App | |
| id: gh-app | |
| uses: actions/create-github-app-token@v1 | |
| with: | |
| app-id: ${{ vars.APP_ID }} | |
| private-key: ${{ secrets.APP_PRIVATE_KEY }} | |
| repositories: "homebrew-nethermind" | |
| - name: Check out homebrew-nethermind repository | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: NethermindEth/homebrew-nethermind | |
| token: ${{ steps.gh-app.outputs.token }} | |
| - name: Update formula file | |
| run: | | |
| json=$(curl -sL ${{ github.event.release.assets_url }}) | |
| x64_url=$(echo "$json" | jq -r '.[].browser_download_url | select(contains("macos-x64"))') | |
| x64_hash=$(curl -sL $x64_url | shasum -a 256 | awk '{print $1}') | |
| arm64_url=$(echo "$json" | jq -r '.[].browser_download_url | select(contains("macos-arm64"))') | |
| arm64_hash=$(curl -sL $arm64_url | shasum -a 256 | awk '{print $1}') | |
| sed -i "s/version .*/version \"${{ github.event.release.tag_name }}\"/" $FORMULA | |
| awk -i inplace -v n=1 '/url/ { if (++count == n) sub(/url.*/, "url \"'$x64_url'\""); } 1' $FORMULA | |
| awk -i inplace -v n=2 '/url/ { if (++count == n) sub(/url.*/, "url \"'$arm64_url'\""); } 1' $FORMULA | |
| awk -i inplace -v n=1 '/sha256/ { if (++count == n) sub(/sha256.*/, "sha256 \"'$x64_hash'\""); } 1' $FORMULA | |
| awk -i inplace -v n=2 '/sha256/ { if (++count == n) sub(/sha256.*/, "sha256 \"'$arm64_hash'\""); } 1' $FORMULA | |
| - name: Submit package | |
| env: | |
| GH_TOKEN: ${{ steps.gh-app.outputs.token }} | |
| run: | | |
| head_branch=feature/v${{ github.event.release.tag_name }}-${{ github.run_number }}-${{ github.run_attempt }} | |
| message="Update for v${{ github.event.release.tag_name }}" | |
| git config user.name "${{ github.actor }}" | |
| git config user.email "${{ github.actor }}@users.noreply.github.com" | |
| git checkout -b $head_branch | |
| git add $FORMULA | |
| git commit -am "$message" | |
| git push origin $head_branch | |
| gh pr create -B main -H $head_branch -t "$message" -b "Auto-updated Homebrew formula for Nethermind v${{ github.event.release.tag_name }}" |