hack4

.github/scripts/run-test.sh → .github/scripts/gen-gpg-key.sh

@@ -1,11 +1,8 @@
 #!/bin/bash
 
-set -e
-
-export DEBIAN_FRONTEND=noninteractive
-export DEBPKG_GITHUB_ANONYMOUS=1
+## generate a temporary gpp key for signing apt repo
 
-sudo apt-get install -y debootstrap
+set -e
 
 HOSTNAME=`hostname -f`
 USERNAME=`whoami`
@@ -18,5 +15,3 @@ gpg --full-gen-key --batch <(echo "Key-Type: 1"; \
  echo "Name-Real: Github build user"; \
  echo "Name-Email: $USERNAME@$HOSTNAME"; \
  echo "%no-protection"; )
-
-./build.devuan-chimaera

.github/workflows/test.yml

@@ -19,8 +19,54 @@ jobs:
  name: on ${{ matrix.os }}
  runs-on: ${{ matrix.os }}
  timeout-minutes: 1440
+ env:
+ DEBPKG_GITHUB_ANONYMOUS: 1
+ DEBIAN_FRONTEND: noninteractive
  steps:
- - uses: actions/[email protected]
+ - name: Clone repo
+ uses: actions/checkout@v3
  with:
  fetch-depth: 5
- - run: ./.github/scripts/run-test.sh
+
+ - name: Tool install
+ run: sudo apt-get install -y debootstrap
+
+ # make sure we have *some* GPG key for apt repo signing
+ # doesn't need to be kept secure as nobody really trusts it anyways
+
+ - name: Cache gpg key
+ id: cache-gpg
+ uses: actions/cache@v3
+ with:
+ path: ~/.gnupg
+ key: gnupg
+
+ - if: ${{ steps.cache-gpg.outputs.cache-hit != 'true' }}
+ name: Generate gpg key (if necessary)
+ run: ./.github/scripts/gen-gpg-key.sh
+
+ # cache apt repo and state, so we don't need full rebuild every time
+ # note: for different branches, need different name
+
+ - name: Cache apt repo and state files
+ id: cache-repo
+ uses: actions/cache@v3
+ with:
+ path: |
+ ${{ github.workspace }}/.aptrepo
+ ${{ github.workspace }}/.stat
+ key: repobuild-${{ runner.os }}-${{ runner.arch }}-${{ matrix.os }}+${{ github.ref_name }}@${{ hashFiles('cf/**/*.yml') }}
+ restore-keys: |
+ repobuild-${{ runner.os }}-${{ runner.arch }}-${{ matrix.os }}+${{ github.ref_name }}@${{ hashFiles('cf/**/*.yml') }}
+ repobuild-${{ runner.os }}-${{ runner.arch }}-${{ matrix.os }}+${{ github.ref_name }}@
+
+ # run the actual builders
+
+ - name: Run builders
+ run: |
+ for scr in ./build.* ; do
+ if [ -x $scr ]; then
+ echo "---> Calling builder: $scr"
+ $scr || exit $?
+ fi
+ done