signald-go/.gitlab-ci.yml

stages:
  - build
  - test
  - publish

lint:
  image: golang:1.17
  stage: test
  before_script:
    - apt-get update
    - apt-get install -y wget golang-go
    - wget https://github.com/golangci/golangci-lint/releases/download/v1.44.2/golangci-lint-1.44.2-linux-amd64.deb
    - apt-get install -y ./golangci-lint-1.44.2-linux-amd64.deb
  script:
    - golangci-lint --timeout 59m run
    - go mod tidy
    - diff --color=always go.mod "${CI_PROJECT_DIR}/go.mod"
    - diff --color=always go.sum "${CI_PROJECT_DIR}/go.sum"
  rules:
    - when: on_success
  needs: []

test sqlite to postgres:
  image:
    name: registry.gitlab.com/signald/signald:unstable
    entrypoint: [""]
  stage: test
  needs:
    - "build:x86"
  before_script:
    - apt-get update && apt-get install -y postgresql-client
  script:
    - cd /
    - signald --migrate-data
    - echo 'CREATE DATABASE signald' | psql -h postgres -U postgres -a
    - "${CI_PROJECT_DIR}/signaldctl db-move postgresql://postgres@postgres/signald?sslmode=disable"
    - SIGNALD_DATABASE=postgresql://postgres@postgres/signald?sslmode=disable signald --migrate-data
  variables:
    SIGNALD_VERBOSE_LOGGING: "true"
  services:
    - name: postgres:latest
      alias: postgres
      variables:
        POSTGRES_HOST_AUTH_METHOD: trust

.build:
  stage: build
  image: golang:latest
  before_script:
    - mkdir -p /go/src/gitlab.com/signald/signald-go
    - cp -r * /go/src/gitlab.com/signald/signald-go
  script:
    - VERSION="$(./version.sh)"
    - echo "building ${VERSION}"
    - cd /go/src/gitlab.com/signald/signald-go
    - go build -o "${CI_PROJECT_DIR}/signaldctl" --ldflags "-X gitlab.com/signald/signald-go/cmd/signaldctl/common.Version=${VERSION} -X gitlab.com/signald/signald-go/cmd/signaldctl/common.Branch=${CI_COMMIT_BRANCH} -X gitlab.com/signald/signald-go/cmd/signaldctl/common.Commit=${CI_COMMIT_SHA}" ./cmd/signaldctl
  artifacts:
    paths:
      - signaldctl
    expire_in: 1 month

.build-deb:
  stage: build
  image: debian:buster
  before_script:
    - echo deb http://deb.debian.org/debian buster-backports main > /etc/apt/sources.list.d/backports.list
    - apt-get update
    - apt-get install -y -t buster-backports git-buildpackage dh-golang bash-completion golang-any golang-github-spf13-cobra-dev golang-github-spf13-viper-dev golang-github-google-uuid-dev golang-github-mattn-go-sqlite3-dev golang-github-lib-pq-dev golang-github-satori-go.uuid-dev wget unzip
    - wget -O golang-github-mdp-qrterminal.zip --quiet "https://gitlab.com/api/v4/projects/signald%2Flibraries%2Fgolang-github-mdp-qrterminal/jobs/artifacts/master/download?job=build"
    - wget -O golang-github-jedib0t-go-pretty.zip --quiet "https://gitlab.com/api/v4/projects/signald%2Flibraries%2Fgolang-github-jedib0t-go-pretty/jobs/artifacts/master/download?job=build"
    - for z in *.zip; do unzip $z; done
    - apt-get install -y ./*.deb && rm -vf *.deb
  script:
    - 'sed -i "s/^Architecture:.*/Architecture: ${ARCH}/g" debian/control'
    - go run ./cmd/signaldctl doc -o man
    - go run ./cmd/signaldctl completion bash > debian/package.bash-completion
    - ls *.1 > debian/manpages
    - gbp dch --ignore-branch --debian-tag="%(version)s" --git-author --new-version="$(./version.sh | cut -c2-)"
    - dpkg-buildpackage -us -uc -b
    - mv ../*.deb .
  variables:
    SIGNALDCTL_PUBLIC_DOC_MODE: "on"
  artifacts:
    paths:
      - "*.deb"
      - "*.1"
    expire_in: 1 month
  rules:
    - if: '$CI_PROJECT_NAMESPACE == "signald" && $CI_COMMIT_REF_PROTECTED == "true"'
      when: on_success
    - when: manual
      allow_failure: true

build:x86:
  extends: .build
  rules:
    - when: on_success

build:aarch64:
  tags: [arm-builder]
  extends: .build
  rules:
    - if: '$CI_PROJECT_NAMESPACE == "signald" && $CI_COMMIT_REF_PROTECTED == "true"'
      when: on_success
    - when: manual
      allow_failure: true

build:cross-compile:
  stage: build
  image: golang:latest
  before_script:
    - mkdir -p /go/src/gitlab.com/signald/signald-go
    - cp -r * /go/src/gitlab.com/signald/signald-go
  script:
    - VERSION="$(./version.sh)"
    - echo "building ${VERSION}"
    - cd /go/src/gitlab.com/signald/signald-go
    - go build -o "${CI_PROJECT_DIR}/signaldctl-${GOOS}-${GOARCH}" --ldflags "-X gitlab.com/signald/signald-go/cmd/signaldctl/common.Version=${VERSION} -X gitlab.com/signald/signald-go/cmd/signaldctl/common.Branch=${CI_COMMIT_BRANCH} -X gitlab.com/signald/signald-go/cmd/signaldctl/common.Commit=${CI_COMMIT_SHA}" ./cmd/signaldctl
  artifacts:
    paths:
      - signaldctl-*
    expire_in: 1 month
  parallel:
    matrix:
      - GOOS: linux
        GOARCH:
          - arm
          - arm64
          - amd64
      - GOOS: darwin
        GOARCH: amd64
  rules:
    - when: on_success


build:x86:deb:
  extends: .build-deb
  rules:
    - when: on_success
  variables:
    ARCH: amd64

build:aarch64:deb:
  extends: .build-deb
  tags: [arm-builder]
  variables:
    ARCH: arm64

build:armhf:deb:
  extends: .build-deb
  image: arm32v7/debian:buster
  tags: [arm-builder]
  variables:
    ARCH: armhf

publish deb:
  image: registry.gitlab.com/signald/infrastructure/signald-builder-x86:d5e68709
  stage: publish
  tags: [deb-signer]
  needs: ["build:x86:deb", "build:aarch64:deb", "build:armhf:deb"]
  script:
    - aptly repo create signald
    - aptly mirror create -ignore-signatures backfill-mirror https://updates.signald.org "${DISTRIBUTION}" main
    - aptly mirror update -ignore-signatures backfill-mirror
    - aptly repo import backfill-mirror signald signald 'signaldctl (>= 0.3.0)'
    - aptly repo add signald *.deb
    - gpg1 --import "${SIGNING_KEY_PATH}"
    - gpg1 --list-secret-keys
    - aptly publish repo -config=.aptly.conf -batch -gpg-key="${SIGNING_KEY_ID}" -distribution="${DISTRIBUTION}" "signald" "s3:updates.signald.org:"
  variables:
    DISTRIBUTION: unstable
  rules:
    - if: '$CI_PROJECT_NAMESPACE == "signald" && $CI_COMMIT_REF_PROTECTED == "true"'
      when: on_success
    - when: manual
      allow_failure: true


signald.org:
  stage: publish
  needs: ["build:x86"]
  trigger: signald/signald.org
  rules:
    - if: '$CI_PROJECT_NAMESPACE == "signald" && $CI_COMMIT_REF_PROTECTED == "true"'
      when: on_success