xxxigcc/.gitea/workflows/ci.yaml

# .gitea/workflows/ci.yaml
name: Build and Release

on:
  push:
    branches: [main, develop]
    tags: ['*']

env:
  DOCKER_BUILDKIT: "1"
  PRODUCT_NAME: "xxxigcc"
  PACKAGE_VERSION: "3.4.6-xg1"
  BUILDX_NO_DEFAULT_ATTESTATIONS: "1"

jobs:
  build-and-test:
    runs-on: ${{ matrix.arch == 'amd64' && 'ubuntu-latest-amd64' || 'ubuntu-latest-arm64' }}
    strategy:
      matrix:
        arch: [amd64, arm64]
        distro: [ubuntu, alpine]
    steps:
      - uses: actions/checkout@v4

      - name: Setup Docker Buildx
        run: |
          # 创建 buildx builder（原生构建不需要 QEMU）
          docker buildx create --use --name native-builder \
            --driver docker-container \
            --driver-opt network=host \
            --driver-opt env.BUILDKIT_STEP_LOG_MAX_SIZE=50000000 \
            --driver-opt env.BUILDKIT_STEP_LOG_MAX_SPEED=10000000 \
            || true
          docker buildx inspect --bootstrap

      - name: Build binaries
        run: |
          XMRIGCC_VERSION=${PACKAGE_VERSION%-*}
          PLATFORM="linux/${{ matrix.arch }}"

          echo "🏗️ Building ${PLATFORM} on native ${{ matrix.arch }} runner"
          echo "📦 Distribution: ${{ matrix.distro }}"

          # 设置 BuildKit 优化参数
          export BUILDKIT_PROGRESS=plain

          docker buildx build --pull \
            --platform ${PLATFORM} \
            --build-arg XMRIGCC_VERSION=${XMRIGCC_VERSION} \
            --output type=local,dest=./output \
            -f docker/Dockerfile.${{ matrix.distro }} .

      - name: Package and test
        run: |
          DIR="./output/linux_${{ matrix.arch }}"

          if [ ! -d "$DIR" ]; then
            echo "❌ 构建输出目录不存在: $DIR"
            exit 1
          fi

          TARGZ="${PRODUCT_NAME}-${{ matrix.arch }}-${{ matrix.distro }}-${PACKAGE_VERSION}.tar.gz"
          tar -czf "${TARGZ}" -C "$DIR" .

          echo "📦 Created package: ${TARGZ}"
          ls -lh "${TARGZ}"

          # 快速验证
          mkdir -p test && tar -xzf "${TARGZ}" -C test
          test/xxxigDaemon --version 2>/dev/null || echo "⚠️ 跳过版本检查"
          rm -rf test

      - uses: https://github.com/ChristopherHX/gitea-upload-artifact@v4
        with:
          name: binaries-${{ matrix.arch }}-${{ matrix.distro }}
          path: "*.tar.gz"
          retention-days: 1

  docker-images:
    runs-on: ubuntu-latest-amd64
    needs: build-and-test
    if: github.ref_name == 'main' || github.ref_name == 'develop' || startsWith(github.ref, 'refs/tags/')
    steps:
      - uses: actions/checkout@v4

      - name: Debug branch info
        run: |
          echo "📋 Branch Information:"
          echo "  github.ref: ${{ github.ref }}"
          echo "  github.ref_name: ${{ github.ref_name }}"
          echo "  github.event_name: ${{ github.event_name }}"

      - uses: https://github.com/ChristopherHX/gitea-download-artifact@v4
        with:
          pattern: binaries-*
          path: ./app
          merge-multiple: true

      - name: Setup Docker and Login
        run: |
          # 尝试设置 QEMU，忽略错误
          docker run --rm --privileged multiarch/qemu-user-static --reset -p yes 2>/dev/null || true

          # 创建 buildx builder，增加资源限制和优化参数
          docker buildx create --use --name multiarch-builder \
            --driver docker-container \
            --driver-opt network=host \
            --driver-opt env.BUILDKIT_STEP_LOG_MAX_SIZE=50000000 \
            --driver-opt env.BUILDKIT_STEP_LOG_MAX_SPEED=10000000 \
            --buildkitd-flags '--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host' \
            || true
          docker buildx inspect --bootstrap

          # 登录
          echo "${{ secrets.BUILD_TOKEN }}" | docker login ${{ gitea.server_url }} -u ${{ gitea.actor }} --password-stdin

      - name: Determine Docker tag
        id: tag
        run: |
          if [ "${{ github.ref_name }}" = "main" ]; then
            TAG="latest"
          elif [ "${{ github.ref_name }}" = "develop" ]; then
            TAG="develop"
          elif [[ "${{ github.ref }}" == refs/tags/* ]]; then
            TAG="${{ github.ref_name }}"
          else
            TAG="${{ github.ref_name }}"
          fi
          echo "tag=${TAG}" >> $GITHUB_OUTPUT
          echo "📦 Docker tag: ${TAG}"

      - name: Build and push Docker images
        run: |
          # 移除 URL 中的 https:// 前缀
          REGISTRY=$(echo "${{ gitea.server_url }}" | sed 's|https\?://||')/${{ gitea.repository }}
          TAG="${{ steps.tag.outputs.tag }}"

          echo "📦 Docker Registry: ${REGISTRY}"
          echo "📦 Docker Tag: ${TAG}"

          BUILD_ARGS="--pull --push --platform linux/amd64,linux/arm64 \
            --build-arg TARGZ_FILE_AMD64=${PRODUCT_NAME}-amd64-alpine-${PACKAGE_VERSION}.tar.gz \
            --build-arg TARGZ_FILE_ARM64=${PRODUCT_NAME}-arm64-alpine-${PACKAGE_VERSION}.tar.gz \
            --provenance=false --sbom=false"

          echo "🐳 Building server image..."
          docker buildx build $BUILD_ARGS -t "${REGISTRY}/server:${TAG}" -f docker/Dockerfile.Server .

          echo "🐳 Building daemon image..."
          docker buildx build $BUILD_ARGS -t "${REGISTRY}/daemon:${TAG}" -f docker/Dockerfile.Daemon .

  release:
    runs-on: ubuntu-latest-amd64
    needs: build-and-test
    if: startsWith(github.ref, 'refs/tags/')
    steps:
      - uses: https://github.com/ChristopherHX/gitea-download-artifact@v4
        with:
          pattern: binaries-*
          path: ./packages
          merge-multiple: true

      - name: Upload packages and create release
        env:
          TOKEN: ${{ secrets.BUILD_TOKEN }}
          TAG: ${{ github.ref_name }}
          REGISTRY: ${{ gitea.server_url }}
          OWNER: ${{ gitea.repository_owner }}
          REPO: ${{ gitea.repository }}
        run: |
          cd packages
          
          # 上传所有包
          echo "📦 上传包到 Generic Package Registry..."
          for file in *.tar.gz; do
            [ ! -f "$file" ] && continue
            echo "  ⬆️  $file"
            curl -fsSL -X POST \
              -H "Authorization: token ${TOKEN}" \
              -F "file=@$file" \
              "${REGISTRY}/api/packages/${OWNER}/generic/${PRODUCT_NAME}/${TAG}/$file" || {
              echo "❌ 上传失败: $file"
              exit 1
            }
          done
          
          # 生成 Release 描述
          echo "📝 生成 Release 描述..."
          BODY="## Release ${TAG}\n\n### 📥 下载链接\n"
          for file in *.tar.gz; do
            [ -f "$file" ] && BODY="${BODY}- [${file}](${REGISTRY}/api/packages/${OWNER}/generic/${PRODUCT_NAME}/${TAG}/${file})\n"
          done
          
          # 创建 Release
          echo "🎉 创建 Release..."
          curl -fsSL -X POST \
            -H "Authorization: token ${TOKEN}" \
            -H "Content-Type: application/json" \
            "${REGISTRY}/api/v1/repos/${REPO}/releases" \
            -d @- << EOF || echo "⚠️ Release 可能已存在"
          {
            "tag_name": "${TAG}",
            "name": "Release ${TAG}",
            "body": "${BODY}",
            "draft": false,
            "prerelease": false
          }
          EOF

          echo "✅ Release 创建完成！"