2609f60e6c
- scripts/build-iso-release.sh: single gated command from signed release to tested ISO (preflight version/signature parity, release gate harness, strict catalog drift, full Rust suite, artifact version checks, build, mount smoke, best-effort QEMU boot) - scripts/iso-smoke-test.sh: standalone mount-level ISO verification incl. stale-binary version assertion inside the payload - .gitea/workflows/build-iso.yml: resurrected ISO CI as dispatch-only job calling the gated orchestrator (old one was stranded in _archived/) - tests/release/run.sh: catalog drift now runs --strict (was silently always-pass) - test-iso-qemu.sh: headless mode used -append without -kernel, which QEMU rejects; use -display none so -serial file: capture works Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
63 lines
2.5 KiB
YAML
63 lines
2.5 KiB
YAML
name: Build Archipelago release ISO (gated)
|
|
|
|
# Resurrected from image-recipe/_archived/.gitea-workflows/build-iso-dev.yml.
|
|
# Dispatch-only on purpose: the ISO is cut per release, not per push, and
|
|
# the iso-builder runner is a live node — builds are deliberate events.
|
|
on:
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
build-iso:
|
|
runs-on: iso-builder
|
|
timeout-minutes: 180
|
|
steps:
|
|
- name: Sync source to workspace
|
|
run: |
|
|
# Direct fetch + sync (actions/checkout token is broken on this Gitea)
|
|
REPO_DIR="$HOME/Projects/archy"
|
|
[ -d "$REPO_DIR" ] || REPO_DIR="$HOME/archy"
|
|
cd "$REPO_DIR" && git fetch origin main && git reset --hard origin/main
|
|
echo "=== Source at commit: $(git log --oneline -1) ==="
|
|
|
|
- name: Install ISO build dependencies
|
|
run: |
|
|
if dpkg -s debootstrap squashfs-tools xorriso isolinux syslinux-common mtools \
|
|
grub-efi-amd64-bin grub-pc-bin grub-common >/dev/null 2>&1; then
|
|
echo "ISO build deps already installed, skipping apt"
|
|
else
|
|
sudo apt-get update -qq
|
|
sudo apt-get install -y -qq \
|
|
debootstrap squashfs-tools xorriso \
|
|
isolinux syslinux-common mtools \
|
|
grub-efi-amd64-bin grub-pc-bin grub-common
|
|
fi
|
|
|
|
- name: Build backend + frontend if stale
|
|
run: |
|
|
REPO_DIR="$HOME/Projects/archy"
|
|
[ -d "$REPO_DIR" ] || REPO_DIR="$HOME/archy"
|
|
cd "$REPO_DIR"
|
|
. "$HOME/.cargo/env" 2>/dev/null || true
|
|
VERSION=$(grep -m1 '^version' core/archipelago/Cargo.toml | sed 's/.*"\(.*\)".*/\1/')
|
|
if ! strings core/target/release/archipelago 2>/dev/null | grep -qF "$VERSION"; then
|
|
cargo build --release --manifest-path core/Cargo.toml -p archipelago
|
|
fi
|
|
if ! grep -rqoF "$VERSION" web/dist/neode-ui/assets/*.js 2>/dev/null; then
|
|
(cd neode-ui && npm ci && npm run build)
|
|
fi
|
|
|
|
- name: Gated ISO build (gates + build + smoke + qemu)
|
|
run: |
|
|
REPO_DIR="$HOME/Projects/archy"
|
|
[ -d "$REPO_DIR" ] || REPO_DIR="$HOME/archy"
|
|
cd "$REPO_DIR"
|
|
. "$HOME/.cargo/env" 2>/dev/null || true
|
|
bash scripts/build-iso-release.sh
|
|
|
|
- name: Report artifacts
|
|
if: always()
|
|
run: |
|
|
REPO_DIR="$HOME/Projects/archy"
|
|
[ -d "$REPO_DIR" ] || REPO_DIR="$HOME/archy"
|
|
ls -lh "$REPO_DIR"/image-recipe/results/*.iso 2>/dev/null | tail -3 || echo "no ISO produced"
|