@@ -1,0 +1,173 @@
---
name: CI-Alpine
permissions: {}
on:
workflow_call:
inputs:
release_commit:
required: true
type: string
release_version:
required: true
type: string
jobs:
build_alpine:
name: ${{ matrix.arch }}
env:
ALPINE_PACKAGE_DIR: cmake-build-alpine-package
BRANCH: ${{ github.head_ref || github.ref_name }}
BUILD_VERSION: ${{ inputs.release_version }}
CLONE_URL: >-
${{
github.event_name == 'pull_request' &&
github.event.pull_request.head.repo.clone_url ||
github.event.repository.clone_url
}}
COMMIT: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || inputs.release_commit }}
permissions:
contents: read
runs-on: ${{ matrix.runner }}
container:
image: alpine:${{ matrix.alpine_version }}
strategy:
fail-fast: false
matrix:
alpine_version:
- '3.24'
arch:
- x86_64
- aarch64
include:
- arch: x86_64
runner: ubuntu-latest
- arch: aarch64
runner: ubuntu-24.04-arm
steps:
- name: Fix arm64 Alpine container
if: runner.arch == 'ARM64'
uses: laverdet/alpine-arm64@7f0f72ee2f71eb2324e5888e8b6e42b1b53e6160 # v1.0.0
- name: Install packaging tools
run: |
set -eux
apk add --no-cache \
alpine-sdk \
atools \
bash \
cmake \
file \
git \
libcap-utils \
pax-utils \
sudo
apk update
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
submodules: recursive
- name: Setup builder user
run: |
set -eux
adduser -D builder
addgroup builder abuild
mkdir -p /etc/sudoers.d
echo 'builder ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/builder
chmod 440 /etc/sudoers.d/builder
chown -R builder:abuild "${GITHUB_WORKSPACE}"
sudo -u builder abuild-keygen -a -i -n
- name: Configure APKBUILD
run: |
set -eux
sub_version=""
if [ "${BRANCH}" != "master" ]; then
# Alpine development-version suffixes accept a numeric component,
# while hexadecimal commit IDs are rejected by abuild.
sub_version="_git${GITHUB_RUN_NUMBER}"
fi
cmake -S . -B "${ALPINE_PACKAGE_DIR}" \
-DSUNSHINE_CONFIGURE_ONLY=ON \
-DSUNSHINE_CONFIGURE_APKBUILD=ON \
-DSUNSHINE_SUB_VERSION="${sub_version}"
mkdir -p apk
mv "${ALPINE_PACKAGE_DIR}/APKBUILD" apk/
mv "${ALPINE_PACKAGE_DIR}/sunshine.post-install" apk/
mv "${ALPINE_PACKAGE_DIR}/sunshine.post-upgrade" apk/
chown -R builder:abuild apk
cd apk
sh -n sunshine.post-install
sh -n sunshine.post-upgrade
sudo -u builder apkbuild-lint APKBUILD
- name: Build Alpine package
id: build
working-directory: apk
run: |
set -eux
echo "::add-matcher::.github/matchers/gcc.json"
sudo -u builder env \
_coverage_dir="${GITHUB_WORKSPACE}/coverage" \
_run_unit_tests=true \
_source_dir="${GITHUB_WORKSPACE}" \
abuild -r
echo "::remove-matcher owner=gcc::"
- name: Install and verify package
id: package
run: |
set -eux
package_file="$(find /home/builder/packages -type f -name 'sunshine-*.apk' -print -quit)"
test -n "${package_file}"
apk add --allow-untrusted "${package_file}"
file /usr/bin/sunshine | tee sunshine-file.txt
grep -Fq 'dynamically linked' sunshine-file.txt
ldd /usr/bin/sunshine | tee sunshine-ldd.txt
grep -Eq 'libc\.musl|ld-musl' sunshine-ldd.txt
scanelf -n /usr/bin/sunshine
/usr/bin/sunshine --version
rule_file="$(find /lib /usr/lib -path '*/udev/rules.d/60-sunshine.rules' -print -quit)"
test -n "${rule_file}"
grep -Fq 'IMPORT{parent}="HID_*"' "${rule_file}"
grep -Fq 'ENV{HID_PHYS}=="libvirtualhid/uhid/*"' "${rule_file}"
test -e /sys/class/mem/null
if ! udevadm test --action=add /sys/class/mem/null > udevadm-test.txt 2>&1; then
cat udevadm-test.txt
exit 1
fi
test -f /etc/modules-load.d/60-sunshine.conf
grep -Fxq 'uhid' /etc/modules-load.d/60-sunshine.conf
getcap /usr/bin/sunshine | grep -Eq 'cap_sys_admin,cap_sys_nice[=+]p'
mkdir -p artifacts
cp "${package_file}" \
"artifacts/sunshine_${BUILD_VERSION}_alpine${{ matrix.alpine_version }}_${{ matrix.arch }}.apk"
- name: Upload coverage artifact
if: >-
always() &&
(steps.build.outcome == 'success' || steps.build.outcome == 'failure')
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: coverage-Alpine-${{ matrix.arch }}
path: |
coverage/coverage.xml
coverage/tests/test_results.xml
if-no-files-found: error
- name: Upload artifacts
if: steps.package.outcome == 'success'
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: build-Alpine-${{ matrix.arch }}
path: artifacts/
if-no-files-found: error