gov2-as-default.yml

stages:
- build
- build docker
- manifest

variables:
  BUILDER_IMAGE: dock.mau.dev/tulir/gomuks-build-docker
  BINARY_NAME: mautrix-$CI_PROJECT_NAME
  GOTOOLCHAIN: local

.build: &build
  stage: build
  cache:
    paths:
    - .cache
  before_script:
  - mkdir -p .cache
  - export GOPATH="$CI_PROJECT_DIR/.cache"
  - export GOCACHE="$CI_PROJECT_DIR/.cache/build"
  - export MAUTRIX_VERSION=$(cat go.mod | grep 'maunium.net/go/mautrix ' | awk '{ print $2 }')
  - export GO_LDFLAGS="-s -w -linkmode external -extldflags -static -X main.Tag=$CI_COMMIT_TAG -X main.Commit=$CI_COMMIT_SHA -X 'main.BuildTime=`date -Iseconds`' -X 'maunium.net/go/mautrix.GoModVersion=$MAUTRIX_VERSION'"
  script:
  - go build -ldflags "$GO_LDFLAGS" -o $BINARY_NAME ./cmd/$BINARY_NAME
  - sha256sum $BINARY_NAME | tee $BINARY_NAME.sha256sum
  artifacts:
    paths:
    - $BINARY_NAME

.build-docker: &build-docker
  image: ${CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX}/docker:latest
  stage: build docker
  before_script:
  - docker login -u "$CI_DEPENDENCY_PROXY_USER" -p "$CI_DEPENDENCY_PROXY_PASSWORD" "$CI_DEPENDENCY_PROXY_SERVER"
  - docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" "$CI_REGISTRY"
  script:
  - docker pull $CI_REGISTRY_IMAGE:latest || true
  - |
    docker build \
      --pull --cache-from $CI_REGISTRY_IMAGE:latest \
      --tag $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-$DOCKER_ARCH \
      --build-arg DOCKER_HUB=$CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX \
      . --file Dockerfile.ci
  - docker push $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-$DOCKER_ARCH
  after_script:
  - docker rmi $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-$DOCKER_ARCH

.build-macos: &build-macos
  stage: build
  variables:
    MACOSX_DEPLOYMENT_TARGET: "11.0"
  before_script:
  - export CGO_LDFLAGS="-Wl,-headerpad_max_install_names"
  - export PATH=/opt/homebrew/bin:$PATH
  - export MAUTRIX_VERSION=$(cat go.mod | grep 'maunium.net/go/mautrix ' | awk '{ print $2 }')
  - export GO_LDFLAGS="-X main.Tag=$CI_COMMIT_TAG -X main.Commit=$CI_COMMIT_SHA -X 'main.BuildTime=`date -Iseconds`' -X 'maunium.net/go/mautrix.GoModVersion=$MAUTRIX_VERSION'"
  - export LIBRARY_PATH=$(brew --prefix)/lib
  - export CPATH=$(brew --prefix)/include
  script:
  - go build -ldflags "$GO_LDFLAGS" -o $BINARY_NAME ./cmd/$BINARY_NAME
  - install_name_tool -change $(brew --prefix)/opt/libolm/lib/libolm.3.dylib @rpath/libolm.3.dylib $BINARY_NAME
  - install_name_tool -add_rpath @executable_path $BINARY_NAME
  - install_name_tool -add_rpath /opt/homebrew/opt/libolm/lib $BINARY_NAME
  - install_name_tool -add_rpath /usr/local/opt/libolm/lib $BINARY_NAME
  - cp $(brew --prefix)/opt/libolm/lib/libolm.3.dylib .
  artifacts:
    paths:
    - $BINARY_NAME
    - libolm.3.dylib

build amd64:
  <<: *build
  image: $BUILDER_IMAGE:linux-amd64
  tags:
  - linux
  - amd64

deploy config:
  stage: manifest
  needs:
  - build amd64
  dependencies:
  - build amd64
  script:
  - |
    mkdir -p /srv/web/docs.mau.fi/configs/$BINARY_NAME
    if [[ "$CI_COMMIT_BRANCH" == "main" ]]; then
      FILENAME=latest.yaml
      IS_TAG="no"
    else
      IS_TAG="yes"
      YYMM=$(echo "$CI_COMMIT_TAG" | cut -d. -f2)
      PATCH=$(echo "$CI_COMMIT_TAG" | cut -d. -f3)
      YY=${YYMM%??}
      MM=${YYMM#??}
      if [ "$PATCH" = "0" ]; then
        FILENAME=v${YY}.${MM}.yaml
      else
        FILENAME=v${YY}.${MM}.${PATCH}.yaml
      fi
    fi
    ./$BINARY_NAME -ec example-config.yaml
    mv -f example-config.yaml /srv/web/docs.mau.fi/configs/$BINARY_NAME/$FILENAME
    cd /srv/web/docs.mau.fi/configs/
    chmod 644 $BINARY_NAME/$FILENAME
    ./configrender $BINARY_NAME/$FILENAME
    if [[ "$IS_TAG" == "yes" ]]; then
      echo "Re-rendering all version configs to update tag index"
      for f in $BINARY_NAME/*.yaml; do
        ./configrender $f
      done
    fi
  rules:
  - if: '$CI_COMMIT_BRANCH == "main"'
  - if: '$CI_COMMIT_TAG'
  tags:
  - webdeploy-bridgeconfig

build arm64:
  <<: *build
  image: $BUILDER_IMAGE:linux-arm64-native
  tags:
  - linux
  - arm64

build arm:
  <<: *build
  image: $BUILDER_IMAGE:linux-arm
  tags:
  - linux
  - amd64

build macos arm64:
  <<: *build-macos
  tags:
  - macos
  - arm64

build docker amd64:
  <<: *build-docker
  tags:
  - linux
  - amd64
  dependencies:
  - build amd64
  needs:
  - build amd64
  variables:
    DOCKER_ARCH: amd64
  after_script:
  - wget "$BEEPER_CD_TOOL_URL" -O bridge-cd-tool && chmod +x bridge-cd-tool && ./bridge-cd-tool
  - docker rmi $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-$DOCKER_ARCH

build docker arm64:
  <<: *build-docker
  tags:
  - linux
  - arm64
  dependencies:
  - build arm64
  needs:
  - build arm64
  variables:
    DOCKER_ARCH: arm64

manifest:
  image: ${CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX}/docker:latest
  stage: manifest
  variables:
    GIT_STRATEGY: none
  before_script:
  - "mkdir -p $HOME/.docker && echo '{\"experimental\": \"enabled\"}' > $HOME/.docker/config.json"
  - docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" "$CI_REGISTRY"
  needs:
  - build docker amd64
  - build docker arm64
  script:
  - docker pull $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-amd64
  - docker pull $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-arm64
  - |
    if [[ "$CI_COMMIT_BRANCH" == "main" ]]; then
      export MANIFEST_NAME="$CI_REGISTRY_IMAGE:latest"
    else
      export MANIFEST_NAME="$CI_REGISTRY_IMAGE:${CI_COMMIT_REF_NAME//\//_}"
    fi
    docker manifest create $MANIFEST_NAME $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-amd64 $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-arm64
    docker manifest push $MANIFEST_NAME
  - |
    if echo "$CI_COMMIT_TAG" | grep -Eq '^v[0-9]{1}\.[0-9]{4}\.[0-9]+$'; then
      YYMM=$(echo "$CI_COMMIT_TAG" | cut -d. -f2)
      PATCH=$(echo "$CI_COMMIT_TAG" | cut -d. -f3)
      YY=${YYMM%??}
      MM=${YYMM#??}
      if [ "$PATCH" = "0" ]; then
        MANIFEST_NAME="$CI_REGISTRY_IMAGE:v${YY}.${MM}"
      else
        MANIFEST_NAME="$CI_REGISTRY_IMAGE:v${YY}.${MM}.${PATCH}"
      fi
      docker manifest create $MANIFEST_NAME $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-amd64 $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-arm64
      docker manifest push $MANIFEST_NAME
      docker manifest rm $MANIFEST_NAME
    fi
  - docker rmi $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-amd64 $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA-arm64