build.yml

name: build_accessmod

on:
  push:
    branches:
      - staging
      - release

env:
  DOCKER_REPO: "fredmoser"
  DOCKER_NAME: "accessmod"
  DOCKER_TAG_TEST: "test"
  DOCKER_TAG_LATEST: "latest"
  PACKER_VERSION: "1.10.1"

jobs:
  #      _             _
  #     | |           | |
  #   __| | ___   ____| |  _ _____  ____
  #  / _  |/ _ \ / ___) |_/ ) ___ |/ ___)
  # ( (_| | |_| ( (___|  _ (| ____| |
  #  \____|\___/ \____)_| \_)_____)_|
  #
  docker:
    runs-on: ubuntu-latest
    name: Test and build docker images
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Get version
        id: get_version
        run: echo "AM_VERSION=$(cat version.txt)" >> $GITHUB_ENV

      - name: Build test version
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ./docker/Dockerfile
          load: true
          tags: ${{ env.DOCKER_REPO }}/${{ env.DOCKER_NAME }}:${{ env.DOCKER_TAG_TEST }}

      - name: Run tests
        env:
          DOCKER_TAG: "${{ env.DOCKER_TAG_TEST }}"
        run: ./test.sh

      - name: Build and push
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ./docker/Dockerfile
          platforms: linux/amd64,linux/arm64
          push: true
          tags: |
            ${{ env.DOCKER_REPO }}/${{ env.DOCKER_NAME }}:${{ env.AM_VERSION }}
            ${{ env.DOCKER_REPO }}/${{ env.DOCKER_NAME }}:${{ env.DOCKER_TAG_LATEST }}

  #                    _
  #                   | |
  #  ____  _____  ____| |  _ _____  ____
  # |  _ \(____ |/ ___) |_/ ) ___ |/ ___)
  # | |_| / ___ ( (___|  _ (| ____| |
  # |  __/\_____|\____)_| \_)_____)_|
  # |_|
  packer:
    runs-on: ubuntu-22.04
    needs: docker
    if: ${{ github.ref_name == 'release' }}
    name: Build VirtualBox ova
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install dependencies for VirtualBox 7.0.14
        run: |
          sudo apt-get update
          sudo apt-get install -y libc6 libqt5core5a libqt5dbus5 libqt5gui5 libqt5help5 libqt5opengl5 libqt5printsupport5 libqt5widgets5 libqt5x11extras5 libqt5xml5 libssl3 libstdc++6 libvpx7

      - name: Install VirtualBox 7.0.14
        run: |
          wget https://download.virtualbox.org/virtualbox/7.0.14/virtualbox-7.0_7.0.14-161095~Ubuntu~jammy_amd64.deb
          sudo dpkg -i virtualbox-7.0_7.0.14-161095~Ubuntu~jammy_amd64.deb
          sudo apt-get install -f -y

      - name: Setup Packer
        uses: hashicorp/setup-packer@main
        with:
          version: ${{ env.PACKER_VERSION }}

      - name: Initialize Packer Configuration
        working-directory: ./packer
        run: packer init alpine.pkr.hcl
        env:
          PACKER_GITHUB_API_TOKEN: ${{ secrets.github_token }}

      - name: Validate Packer Template
        working-directory: ./packer
        run: packer validate alpine.pkr.hcl

      - name: Build with Packer
        working-directory: ./packer
        run: packer build -debug -force alpine.pkr.hcl

      - name: Upload OVA
        uses: actions/upload-artifact@v4
        with:
          name: accessmod-virtualbox
          path: packer/_build
  #        _
  #       | |               _
  #  _____| | _____  ____ _| |_  ____ ___  ____
  # | ___ | || ___ |/ ___|_   _)/ ___) _ \|  _ \
  # | ____| || ____( (___  | |_| |  | |_| | | | |
  # |_____)\_)_____)\____)  \__)_|   \___/|_| |_|
  update_image:
    runs-on: ubuntu-latest
    needs: docker
    if: ${{ github.ref_name == 'release' }}
    strategy:
      matrix:
        include:
          - os: ubuntu-latest
            arch: amd64
          - os: macos-14
            arch: arm64
    steps:
      - uses: actions/checkout@v4
      - name: Use docker
        uses: actions-hub/docker/cli@master
        env:
          SKIP_LOGIN: true
      - name: Update image
        working-directory: ./electron
        run: ./update_image.sh ${{ matrix.arch }}
        shell: bash
      - name: Upload image artifact
        uses: actions/upload-artifact@v4
        with:
          name: accessmod-docker-archive-${{ matrix.arch }}
          path: ./electron/resources/docker/accessmod-docker-${{ matrix.arch }}.tar.gz

  electron:
    runs-on: ${{ matrix.os }}
    needs: update_image
    if: ${{ github.ref_name == 'release' }}
    strategy:
      matrix:
        include:
          - os: macos-14
            platform: mac
            arch: arm64
          - os: ubuntu-22.04
            platform: linux
            arch: amd64
          - os: macos-12
            platform: mac
            arch: amd64
          - os: windows-2022
            platform: win
            arch: amd64
    steps:
      - uses: actions/checkout@v4

      - uses: actions/download-artifact@v4
        with:
          name: accessmod-docker-archive-${{ matrix.arch }}
          path: ./electron/resources/docker/

      - name: Use Node.js 18.x
        uses: actions/setup-node@v4
        with:
          node-version: 18.x

      - name: Install Dependencies
        working-directory: ./electron
        run: yarn install

      - name: Prepare for app notarization
        if: startsWith(matrix.os, 'macos')
        run: |
          mkdir -p ~/private_keys/
          echo '${{ secrets.mac_api_key }}' > ~/private_keys/AuthKey_${{ secrets.mac_api_key_id }}.p8

      - name: Build
        uses: samuelmeuli/action-electron-builder@v1
        with:
          release: false
          build_script_name: build
          package_root: ./electron
          github_token: ${{ secrets.github_token }}
          mac_certs: ${{ secrets.mac_certs }}
          mac_certs_password: ${{ secrets.mac_certs_password }}
        env:
          APPLE_API_KEY: ~/private_keys/AuthKey_${{ secrets.mac_api_key_id }}.p8
          APPLE_API_KEY_ID: ${{ secrets.mac_api_key_id }}
          APPLE_API_ISSUER: ${{ secrets.mac_api_key_issuer_id }}

      - name: Upload Artifacts
        uses: actions/upload-artifact@v4
        with:
          name: accessmod-desktop-${{ matrix.platform }}-${{ matrix.arch }}
          path: |
            ./electron/dist/*.dmg
            ./electron/dist/*.deb
            ./electron/dist/*-setup.exe
  # ______     _
  # | ___ \   | |
  # | |_/ /___| | ___  __ _ ___  ___
  # |    // _ \ |/ _ \/ _` / __|/ _ \
  # | |\ \  __/ |  __/ (_| \__ \  __/
  # \_| \_\___|_|\___|\__,_|___/\___|
  release:
    runs-on: ubuntu-latest
    needs: [docker, packer, electron]
    if: ${{ github.ref_name == 'release' }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Get version
        id: get_version
        run: echo "AM_VERSION=$(cat version.txt)" >> $GITHUB_ENV

      - name: Download All Artifacts
        uses: actions/download-artifact@v4
        with:
          path: accessmod
          pattern: accessmod-*

      - name: Create GitHub Release
        id: create_release
        uses: softprops/action-gh-release@v1
        with:
          tag_name: ${{ env.AM_VERSION }} 
          files: accessmod/**
          body_path: ./release_notes.md
          token: ${{ secrets.github_token }}