Test with determinate #329
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release PR | |
| on: | |
| pull_request: | |
| types: | |
| - opened | |
| - reopened | |
| - synchronize | |
| - labeled | |
| jobs: | |
| build: | |
| # We want to build artifacts only if the `upload to s3` label is applied | |
| # Only intra-repo PRs are allowed to have PR artifacts uploaded | |
| # We only want to trigger once the upload once in the case the upload label is added, not when any label is added | |
| if: | | |
| github.event.pull_request.head.repo.full_name == 'DeterminateSystems/magic-nix-cache' | |
| && ( | |
| (github.event.action == 'labeled' && github.event.label.name == 'upload to s3') | |
| || (github.event.action != 'labeled' && contains(github.event.pull_request.labels.*.name, 'upload to s3')) | |
| ) | |
| uses: ./.github/workflows/build.yaml | |
| secrets: inherit | |
| release: | |
| needs: build | |
| concurrency: release | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write # In order to request a JWT for AWS auth | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Create the artifacts directory | |
| run: rm -rf ./artifacts && mkdir ./artifacts | |
| - uses: actions/download-artifact@v3 | |
| with: | |
| name: magic-nix-cache-ARM64-macOS | |
| path: cache-binary-ARM64-macOS | |
| - name: Persist the cache binary | |
| run: cp ./cache-binary-ARM64-macOS/magic-nix-cache.closure.xz ./artifacts/magic-nix-cache-ARM64-macOS | |
| - uses: actions/download-artifact@v3 | |
| with: | |
| name: magic-nix-cache-X64-macOS | |
| path: cache-binary-X64-macOS | |
| - name: Persist the cache binary | |
| run: cp ./cache-binary-X64-macOS/magic-nix-cache.closure.xz ./artifacts/magic-nix-cache-X64-macOS | |
| - uses: actions/download-artifact@v3 | |
| with: | |
| name: magic-nix-cache-X64-Linux | |
| path: cache-binary-X64-Linux | |
| - name: Persist the cache binary | |
| run: cp ./cache-binary-X64-Linux/magic-nix-cache.closure.xz ./artifacts/magic-nix-cache-X64-Linux | |
| - uses: actions/download-artifact@v3 | |
| with: | |
| name: magic-nix-cache-ARM64-Linux | |
| path: cache-binary-ARM64-Linux | |
| - name: Persist the cache binary | |
| run: cp ./cache-binary-ARM64-Linux/magic-nix-cache.closure.xz ./artifacts/magic-nix-cache-ARM64-Linux | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v2 | |
| with: | |
| role-to-assume: ${{ secrets.AWS_S3_UPLOAD_ROLE }} | |
| aws-region: us-east-2 | |
| - name: Publish Release (PR) | |
| env: | |
| AWS_BUCKET: ${{ secrets.AWS_S3_UPLOAD_BUCKET }} | |
| run: | | |
| .github/workflows/upload_s3.sh pr "${{ github.event.pull_request.number }}" "${{ github.event.pull_request.head.sha }}" |