release.yaml

name: Release

on:
  workflow_dispatch:
    inputs:
      version:
        description: "Release Version"
        required: true

jobs:
  build-windows:
    runs-on: ubuntu-latest
    environment: release
    env:
      PUB_KEY: ${{ secrets.UID_PUBLIC_KEY_PEM }}
      MXE_DIR: /usr/lib/mxe
      MXE_TARGET: x86_64-w64-mingw32.static
      MXE_PACKAGE_PREFIX: mxe-x86-64-w64-mingw32.static

    steps:
      - uses: actions/checkout@v4

      - name: Write PUB key into file
        run: echo "$PUB_KEY" > faf_pub.pem

      - name: Configure MXE
        run: |
          echo "deb https://pkg.mxe.cc/repos/apt focal main" | sudo tee /etc/apt/sources.list.d/mxeapt.list
          wget -qO- https://pkg.mxe.cc/repos/apt/client-conf/mxeapt.gpg | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/mxeapt.gpg
          sudo apt-get update

          # the part without MXE_PACKAGE_PREFIX is from https://mxe.cc/#requirements
          sudo apt-get install \
              autoconf \
              automake \
              autopoint \
              bash \
              bison \
              bzip2 \
              flex \
              g++ \
              g++-multilib \
              gettext \
              git \
              gperf \
              intltool \
              libc6-dev-i386 \
              libgdk-pixbuf2.0-dev \
              libltdl-dev \
              libgl-dev \
              libpcre3-dev \
              libssl-dev \
              libtool-bin \
              libxml-parser-perl \
              lzip \
              make \
              openssl \
              p7zip-full \
              patch \
              perl \
              python3 \
              python3-distutils \
              python3-mako \
              python3-packaging \
              python3-pkg-resources \
              python-is-python3 \
              ruby \
              sed \
              sqlite3 \
              unzip \
              wget \
              xz-utils \
              $MXE_PACKAGE_PREFIX-jsoncpp \
              $MXE_PACKAGE_PREFIX-cryptopp \
              $MXE_PACKAGE_PREFIX-icu4c

      - name: Build
        run: |
          $MXE_DIR/usr/bin/$MXE_TARGET-cmake \
            -DCMAKE_BUILD_TYPE=Release \
            -DCRYPTOPP_LIBRARIES=$MXE_DIR/usr/$MXE_TARGET/lib/libcryptopp.a \
            -DCRYPTOPP_INCLUDE_DIRS=$MXE_DIR/usr/$MXE_TARGET/include \
            -DUID_SKIP_LEGACY=On \
            -DUID_PUBKEY_BYTES=$(./encode_openssl_modulus.py $(openssl rsa -noout -inform PEM -in faf_pub.pem -pubin -modulus)) \
            -B build
          make -C build

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: faf-uid-windows
          path: build/faf-uid.exe

  build-linux:
    runs-on: ubuntu-latest
    environment: release
    env:
      PUB_KEY: ${{ secrets.UID_PUBLIC_KEY_PEM }}
      JSONCPP_VERSION: 1.7.7
      CRYPTOPP_VERSION: 8_9_0

    steps:
      - uses: actions/checkout@v4

      - name: Write PUB key into file
        run: echo "$PUB_KEY" > faf_pub.pem

      - name: Build jsoncpp
        run: |
          wget https://github.com/open-source-parsers/jsoncpp/archive/$JSONCPP_VERSION.tar.gz -O jsoncpp.tar.gz
          tar xfz jsoncpp.tar.gz
          cmake \
            -DCMAKE_BUILD_TYPE=MinSizeRel \
            -DJSONCPP_WITH_POST_BUILD_UNITTEST=OFF \
            -DBUILD_STATIC_LIBS=ON \
            -DBUILD_SHARED_LIBS=OFF \
            -B jsoncpp-build \
            -S jsoncpp-$JSONCPP_VERSION
          make -C jsoncpp-build

      - name: Build cryptopp
        run: |
          wget https://github.com/weidai11/cryptopp/archive/CRYPTOPP_$CRYPTOPP_VERSION.zip -O cryptopp.zip
          unzip ./cryptopp.zip
          mv cryptopp-CRYPTOPP_$CRYPTOPP_VERSION cryptopp
          make -C cryptopp -f GNUmakefile CXXFLAGS='-DNDEBUG -O3' libcryptopp.a

      - name: Build
        run: |
          cmake \
            -DJSONCPP_LIBRARIES=$(pwd)/jsoncpp-build/src/lib_json/libjsoncpp.a \
            -DJSONCPP_INCLUDE_DIRS=$(pwd)/jsoncpp-$JSONCPP_VERSION/include \
            -DCRYPTOPP_LIBRARIES=$(pwd)/cryptopp/libcryptopp.a \
            -DCRYPTOPP_INCLUDE_DIRS=$(pwd)/cryptopp \
            -DCMAKE_BUILD_TYPE=MinSizeRel \
            -DUID_PUBKEY_BYTES=$(./encode_openssl_modulus.py $(openssl rsa -noout -inform PEM -in faf_pub.pem -pubin -modulus)) \
            -B build
          make -C build

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: faf-uid-linux
          path: build/faf-uid

  create-release:
    needs: [build-windows, build-linux]
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Download Windows artifact
        uses: actions/download-artifact@v4
        with:
          name: faf-uid-windows
          path: release-artifacts/

      - name: Download Linux artifact
        uses: actions/download-artifact@v4
        with:
          name: faf-uid-linux
          path: release-artifacts/

      - name: Create release
        id: create_release
        uses: ncipollo/release-action@v1.14.0
        with:
          commit: ${{ github.sha }}
          tag: ${{ github.event.inputs.version }}
          draft: true
          prerelease: true
          artifacts: "release-artifacts/*"