xxxigcc-proxy/.gitea/workflows/ci.yaml

# .gitea/workflows/ci.yaml
name: Build and Release

on:
  push:
    branches: [main, develop]
    tags: ['*']

env:
  DOCKER_BUILDKIT: "1"
  PRODUCT_NAME: "xxxigcc-proxy"
  PACKAGE_VERSION: "3.4.6-xg1"
  BUILDX_NO_DEFAULT_ATTESTATIONS: "1"

jobs:
  build-and-test:
    runs-on: ${{ matrix.arch == 'amd64' && 'ubuntu-latest-amd64' || 'ubuntu-latest-arm64' }}
    strategy:
      matrix:
        arch: [amd64, arm64]
        distro: [ubuntu, alpine]
    steps:
      - uses: actions/checkout@v4

      - name: Setup Docker Buildx
        run: |
          # 创建 buildx builder（原生构建不需要 QEMU）
          docker buildx create --use --name native-builder \
            --driver docker-container \
            --driver-opt network=host \
            --driver-opt env.BUILDKIT_STEP_LOG_MAX_SIZE=50000000 \
            --driver-opt env.BUILDKIT_STEP_LOG_MAX_SPEED=10000000 \
            || true
          docker buildx inspect --bootstrap

      - name: Build binaries
        run: |
          XMRIGCC_PROXY_VERSION=v.${PACKAGE_VERSION%-*}
          PLATFORM="linux/${{ matrix.arch }}"

          echo "🏗️ Building ${PLATFORM} on native ${{ matrix.arch }} runner"
          echo "📦 Distribution: ${{ matrix.distro }}"

          # 设置 BuildKit 优化参数
          export BUILDKIT_PROGRESS=plain

          docker buildx build --pull \
            --platform ${PLATFORM} \
            --build-arg XMRIGCC_PROXY_VERSION=${XMRIGCC_PROXY_VERSION} \
            --output type=local,dest=./output \
            -f docker/Dockerfile.${{ matrix.distro }} .

      - name: Package and test
        run: |
          DIR="./output/linux_${{ matrix.arch }}"

          if [ ! -d "$DIR" ]; then
            echo "❌ 构建输出目录不存在: $DIR"
            exit 1
          fi

          TARGZ="${PRODUCT_NAME}-${{ matrix.arch }}-${{ matrix.distro }}-${PACKAGE_VERSION}.tar.gz"
          tar -czf "${TARGZ}" -C "$DIR" .

          echo "📦 Created package: ${TARGZ}"
          ls -lh "${TARGZ}"

          # 快速验证
          mkdir -p test && tar -xzf "${TARGZ}" -C test
          test/xxxigcc-proxy --version 2>/dev/null || echo "⚠️ 跳过版本检查"
          rm -rf test

      - name: Build Debian package
        if: matrix.distro == 'ubuntu'
        run: |
          # 安装 dpkg-deb（如果需要）
          sudo apt-get update && sudo apt-get install -y dpkg-dev

          TARGZ="${PRODUCT_NAME}-${{ matrix.arch }}-${{ matrix.distro }}-${PACKAGE_VERSION}.tar.gz"

          echo "📦 Building Debian package for ${{ matrix.arch }}..."
          chmod +x debian/build-deb.sh
          ./debian/build-deb.sh ${{ matrix.arch }} ${PACKAGE_VERSION} "${TARGZ}"

          ls -lh *.deb

      - uses: https://github.com/ChristopherHX/gitea-upload-artifact@v4
        with:
          name: binaries-${{ matrix.arch }}-${{ matrix.distro }}
          path: |
            *.tar.gz
            *.deb
          retention-days: 1

  release:
    runs-on: ubuntu-latest-amd64
    needs: build-and-test
    if: startsWith(github.ref, 'refs/tags/')
    steps:
      - uses: https://github.com/ChristopherHX/gitea-download-artifact@v4
        with:
          pattern: binaries-*
          path: ./packages
          merge-multiple: true

      - name: Upload packages and create release
        env:
          TOKEN: ${{ secrets.BUILD_TOKEN }}
          TAG: ${{ github.ref_name }}
        run: |
          cd packages

          # 提取仓库信息（移除 https:// 前缀和仓库路径）
          REGISTRY=$(echo "${{ gitea.server_url }}" | sed 's|https\?://||')
          OWNER="${{ gitea.repository_owner }}"
          REPO_NAME=$(echo "${{ gitea.repository }}" | cut -d'/' -f2)

          echo "📦 上传包到 Generic Package Registry..."
          echo "  Registry: ${REGISTRY}"
          echo "  Owner: ${OWNER}"
          echo "  Package: ${PRODUCT_NAME}"
          echo "  Version: ${TAG}"

          # 上传所有 tar.gz 包到 Generic Package Registry
          for file in *.tar.gz; do
            [ ! -f "$file" ] && continue
            echo "  ⬆️  $file"
            curl -fsSL -X PUT \
              -H "Authorization: token ${TOKEN}" \
              --upload-file "$file" \
              "https://${REGISTRY}/api/packages/${OWNER}/generic/${PRODUCT_NAME}/${TAG}/$file" || {
              echo "❌ 上传失败: $file"
              exit 1
            }
          done

          # 上传 Debian 包到 Debian Package Registry
          echo ""
          echo "📦 上传 Debian 包到 Debian Package Registry..."
          for file in *.deb; do
            [ ! -f "$file" ] && continue
            echo "  ⬆️  $file"
            curl -fsSL -X PUT \
              -H "Authorization: token ${TOKEN}" \
              --upload-file "$file" \
              "https://${REGISTRY}/api/packages/${OWNER}/debian/pool/bookworm/main/upload" || {
              echo "❌ Debian 包上传失败: $file"
              exit 1
            }
          done

          # 生成 Release JSON payload
          echo ""
          echo "📝 生成 Release..."

          RELEASE_DATA=$(python3 -c 'import json,glob,os;r=os.environ["REGISTRY"];o=os.environ["OWNER"];p=os.environ["PRODUCT_NAME"];t=os.environ["TAG"];b=["## Release "+t,"","### 📥 下载方式","","#### 方式 1: 直接下载（推荐）","","点击下面 **Assets** 部分的文件名直接下载。","","#### 方式 2: Generic Package Registry",""]+[f"- [`{f}`](https://{r}/api/packages/{o}/generic/{p}/{t}/{f})" for f in sorted(glob.glob("*.tar.gz"))]+["","#### 方式 3: Debian Repository","","```bash","# Add repository",f"echo \"deb https://{r}/api/packages/{o}/debian bookworm main\" | sudo tee /etc/apt/sources.list.d/xxxigcc-proxy.list","","# Update and install","sudo apt-get update","sudo apt-get install xxxigcc-proxy","```"];print(json.dumps({"tag_name":t,"name":f"Release {t}","body":"\n".join(b),"draft":False,"prerelease":False}))')

          # 创建 Release
          echo ""
          echo "🎉 创建 Release..."
          RESPONSE=$(curl -fsSL -w "\n%{http_code}" -X POST \
            -H "Authorization: token ${TOKEN}" \
            -H "Content-Type: application/json" \
            "https://${REGISTRY}/api/v1/repos/${{ gitea.repository }}/releases" \
            -d "${RELEASE_DATA}")

          HTTP_CODE=$(echo "$RESPONSE" | tail -n1)
          RESPONSE_BODY=$(echo "$RESPONSE" | head -n-1)

          if [ "$HTTP_CODE" = "201" ]; then
            echo "✅ Release 创建成功"
            RELEASE_ID=$(echo "$RESPONSE_BODY" | grep -o '"id":[0-9]*' | head -1 | cut -d':' -f2)
            echo "  Release ID: ${RELEASE_ID}"
          elif [ "$HTTP_CODE" = "409" ]; then
            echo "⚠️  Release 已存在，获取现有 Release ID..."
            RELEASE_ID=$(curl -fsSL \
              -H "Authorization: token ${TOKEN}" \
              "https://${REGISTRY}/api/v1/repos/${{ gitea.repository }}/releases/tags/${TAG}" | \
              grep -o '"id":[0-9]*' | head -1 | cut -d':' -f2)
            echo "  Release ID: ${RELEASE_ID}"
          else
            echo "❌ 创建 Release 失败 (HTTP ${HTTP_CODE})"
            echo "$RESPONSE_BODY"
            exit 1
          fi

          # 上传文件作为 Release 附件
          echo ""
          echo "📎 上传文件作为 Release 附件..."
          for file in *.tar.gz *.deb; do
            [ ! -f "$file" ] && continue
            echo "  ⬆️  $file"

            # 使用 multipart/form-data 上传附件
            curl -fsSL -X POST \
              -H "Authorization: token ${TOKEN}" \
              -F "attachment=@${file}" \
              "https://${REGISTRY}/api/v1/repos/${{ gitea.repository }}/releases/${RELEASE_ID}/assets?name=${file}" || {
              echo "  ⚠️  附件上传失败: $file（可能已存在）"
            }
          done

          echo ""
          echo "✅ Release 创建完成！"
          echo "🔗 访问: https://${REGISTRY}/${{ gitea.repository }}/releases/tag/${TAG}"

          # 清理临时文件
          rm -f release_body.md