release.yml

name: release

on: workflow_dispatch

concurrency:
  group: ${{ github.workflow }}-${{ github.event.after }}
  cancel-in-progress: true

jobs:
  build:
    name: Build static retsnoop binary
    runs-on: ubuntu-22.04
    strategy:
      matrix:
        include:
          - arch: amd64
            file_str: x86-64
            target: x86_64-unknown-linux-gnu

          - arch: arm64
            file_str: aarch64
            target: aarch64-unknown-linux-gnu

    steps:
      # amd64 needs the dependencies to build retsnoop
      - name: (amd64) Install dependencies
        if: matrix.arch == 'amd64'
        run: |
          sudo apt-get update
          sudo apt-get install -y cargo llvm libelf-dev

      - name: Checkout retsnoop code
        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
        with:
          submodules: recursive
          path: 'retsnoop'

      - name: (amd64) Build static retsnoop natively
        if: matrix.arch == 'amd64'
        working-directory: 'retsnoop'
        run: |
          CFLAGS=--static \
              make -j -C src V=1
          strip src/retsnoop

      - name: (arm64) Pre-compile Rust sidecar binary, addr2line
        if: matrix.arch == 'arm64'
        working-directory: 'retsnoop/sidecar'
        run: |
          # It's too expensive to compile addr2line inside of the Docker
          # container, below: Cargo's registry index update gets OOM-killed,
          # and even if we worked around that, the build would take about three
          # times as long as doing it on the host.
          #
          # We need the right toolchain and linker, then we can compile.
          sudo apt-get update
          sudo apt-get install -y gcc-aarch64-linux-gnu
          rustup target add ${{ matrix.target }}
          CARGO_REGISTRIES_CRATES_IO_PROTOCOL=sparse \
              cargo build --release --target ${{ matrix.target }} \
                  --config target.${{ matrix.target }}.linker=\"aarch64-linux-gnu-gcc\"
          # Makefile expects the binary in retsnoop/sidecar/target/release/
          mv target/${{ matrix.target }}/release/addr2line target/release/

      - name: (arm64) Set up QEMU
        uses: docker/setup-qemu-action@e81a89b1732b9c48d79cd809d8d81d79c4647a18 # v2.1.0
        if: matrix.arch == 'arm64'
        with:
          platforms: ${{ matrix.arch }}

      # The emulated build leverages Docker and Ubuntu 22.04 container image
      # distribution to have all the needed arm64 packages.
      - name: (arm64) Build static retsnoop for arm64 with emulation
        if: matrix.arch == 'arm64'
        run: |
          docker run --platform linux/arm64 --rm -v $(pwd):/build ubuntu:22.04 \
              bash -c "apt-get update && \
                       apt-get install -y clang llvm make pkg-config gcc \
                           libelf-dev zlib1g-dev && \
                       cd /build/retsnoop && \
                       CARGO=true \
                       CFLAGS=--static \
                           make -j -C src V=1 && \
                       strip src/retsnoop"

      - name: Test retsnoop binary
        working-directory: 'retsnoop/src'
        run: |
          file ./retsnoop | \
              tee /dev/stderr | \
              grep -q "${{ matrix.file_str }}"
          ./retsnoop --usage | grep -q Usage
          ldd ./retsnoop 2>&1 | \
              tee /dev/stderr | \
              grep -q 'not a dynamic executable'

      - name: Upload Artifact
        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
        with:
          name: ${{ format('retsnoop_{0}', matrix.arch) }}
          path: retsnoop/src/retsnoop

  draft-release:
    name: Create a draft release
    runs-on: ubuntu-22.04
    needs: build
    permissions:
      contents: write
    steps:
      - name: Download artifacts from build
        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2

      - name: Rename binaries and compress
        run: |
          archive_amd64="retsnoop-${{ github.ref_name }}-amd64.tar.gz"
          archive_arm64="retsnoop-${{ github.ref_name }}-arm64.tar.gz"
          tar -C retsnoop_amd64 -I 'gzip -9' -cvf "${archive_amd64}" retsnoop
          tar -C retsnoop_arm64 -I 'gzip -9' -cvf "${archive_arm64}" retsnoop
          sha256sum "${archive_amd64}" > "${archive_amd64}.sha256sum"
          sha256sum "${archive_arm64}" > "${archive_arm64}.sha256sum"

      - name: Checkout retsnoop and submodules code
        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
        with:
          submodules: recursive
          path: 'retsnoop'

      - name: Package source code including submodules
        uses: qmonnet/git-archive-all-action@791fb850881cf58b1d1fcc9b06c01940080bba0a # v1.0.1
        with:
          output-files: >-
            srcs-full-${{ github.ref_name }}.tar.gz
            srcs-full-${{ github.ref_name }}.zip
          base-repo: retsnoop

      - name: Create draft release and add artifacts
        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
        with:
          draft: true
          files: |
            retsnoop*
            srcs-full-*