xplr/.github/workflows/cd.yml

name: Continuous Deployment

on:
  push:
    tags:
      - "v*.*.*"
  workflow_dispatch:

jobs:
  publish:
    name: Publishing for ${{ matrix.os }}
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        build:
          - macos
          - macos-aarch64
          - linux
          - linux-musl
          - aarch64-linux
          # - aarch64-linux-musl
          - aarch64-android
          # - armv7-linux
        rust: [stable]
        include:
          # See the list: https://github.com/cross-rs/cross

          - build: macos
            os: macos-latest
            target: x86_64-apple-darwin
            binary_postfix: ""

          - build: macos-aarch64
            os: macos-latest
            target: aarch64-apple-darwin
            binary_postfix: ""

          - build: linux
            os: ubuntu-latest
            target: x86_64-unknown-linux-gnu
            binary_postfix: ""

          - build: linux-musl
            os: ubuntu-latest
            target: x86_64-unknown-linux-musl
            binary_postfix: ""

          - build: aarch64-linux
            os: ubuntu-latest
            target: aarch64-unknown-linux-gnu
            binary_postfix: ""

          # - build: aarch64-linux-musl
          #   os: ubuntu-latest
          #   target: aarch64-unknown-linux-musl
          #   binary_postfix: ""

          - build: aarch64-android
            os: ubuntu-latest
            target: aarch64-linux-android
            binary_postfix: ""

          # - build: armv7-linux
          #   os: ubuntu-latest
          #   target: armv7-unknown-linux-gnueabihf
          #   binary_postfix: ""

    steps:
      - uses: actions/checkout@v3

      - name: Installing Rust toolchain
        uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: ${{ matrix.rust }}
          target: ${{ matrix.target }}

      - name: Installing needed macOS dependencies
        if: matrix.os == 'macos-latest'
        run: brew install openssl@1.1

      - name: Installing needed Ubuntu dependencies
        if: matrix.os == 'ubuntu-latest'
        run: |
          sudo apt-get update --fix-missing
          sudo apt-get install -y --no-install-recommends liblua5.1-0-dev libluajit-5.1-dev          

      - if: matrix.os == 'ubuntu-latest' && contains(matrix.build, 'armv7')
        run: sudo apt-get install -y --no-install-recommends gcc-arm-linux-gnueabihf libc-dev-armhf-cross

      - if: matrix.os == 'ubuntu-latest' && contains(matrix.build, 'aarch64')
        run: sudo apt-get install -y --no-install-recommends gcc-aarch64-linux-gnu libc6-dev-arm64-cross

      - name: Running cargo build
        run: cargo build --locked --release --target ${{ matrix.target }}

      - name: Install gpg secret key
        run: |
          cat <(echo -e "${{ secrets.GPG_SECRET }}") | gpg --batch --import
          gpg --list-secret-keys --keyid-format LONG          

      - name: Packaging final binary
        shell: bash
        run: |
          cd target/${{ matrix.target }}/release
          BINARY_NAME=xplr${{ matrix.binary_postfix }}
          strip $BINARY_NAME
          RELEASE_NAME=xplr-${{ matrix.build }}
          tar czvf $RELEASE_NAME.tar.gz $BINARY_NAME
          shasum -a 256 $RELEASE_NAME.tar.gz > $RELEASE_NAME.sha256
          cat <(echo "${{ secrets.GPG_PASS }}") | gpg --pinentry-mode loopback --passphrase-fd 0 --detach-sign --armor $RELEASE_NAME.tar.gz          

      - name: Releasing assets
        uses: softprops/action-gh-release@v1
        with:
          files: |
            target/${{ matrix.target }}/release/xplr-${{ matrix.build }}.tar.gz
            target/${{ matrix.target }}/release/xplr-${{ matrix.build }}.sha256
            target/${{ matrix.target }}/release/xplr-${{ matrix.build }}.tar.gz.asc            
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  publish-gpg-signature:
    name: Publishing GPG signature
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Install gpg secret key
        run: |
          cat <(echo -e "${{ secrets.GPG_SECRET }}") | gpg --batch --import
          gpg --list-secret-keys --keyid-format LONG          

      - name: Signing archive with GPG
        run: |
          VERSION=${GITHUB_REF##*v}
          git -c tar.tar.gz.command='gzip -cn' archive -o xplr-${VERSION:?}.tar.gz --format tar.gz --prefix "xplr-${VERSION:?}/" "v${VERSION}"
          cat <(echo "${{ secrets.GPG_PASS }}") | gpg --pinentry-mode loopback --passphrase-fd 0 --detach-sign --armor "xplr-${VERSION:?}.tar.gz"
          mv "xplr-${VERSION:?}.tar.gz.asc" "source.tar.gz.asc"          

      - name: Releasing GPG signature
        uses: softprops/action-gh-release@v1
        with:
          files: |
                        source.tar.gz.asc
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  publish-cargo:
    name: Publishing to Cargo
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3

      - uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: stable

      - run: |
          sudo apt-get update --fix-missing
          sudo apt-get install -y -qq pkg-config libssl-dev libxcb1-dev libxcb-render0-dev libxcb-shape0-dev libxcb-xfixes0-dev          

      - run: cargo publish --allow-dirty
        env:
          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_API_KEY }}