DocSpace-client/.github/workflows/build_packages.yml

name: Build packages

on:
  push:
    branches:
      - release/*
      - develop
      - hotfix/*
    paths:
      - build/install/deb**
      - build/install/rpm**
      - build/install/common**
  workflow_dispatch:

concurrency:
  group: ${{ github.ref }}
  cancel-in-progress: true

env:
  PRODUCT: ${{ github.event.repository.name }}
  PRODUCT_LOW: echo ${{ github.event.repository.name }} | tr '[:upper:]' '[:lower:]'
  PRODUCT_VERSION: echo ${{ github.ref }} | grep -oP '\d+\.\d+\.\d+' || echo '1.1.3'
  BUILD_NUMBER: ${{ github.run_number }}
  BRANCH_NAME: echo ${GITHUB_REF#refs/heads/}
  PACKAGE_DIRECTORY: "/home/runner/work/${{ github.event.repository.name }}/${{ github.event.repository.name }}/build/install"

jobs:
  build:
    name: Build Packages
    runs-on: ubuntu-20.04
    permissions:
      contents: write

    strategy:
      matrix:
        packageType: [deb, rpm]

    steps:
      # To avoid mistake "System.IO.IOException: No space left on device"
      - name: Free Disk Space
        run: |
          sudo rm -rf /usr/local/lib/android /opt/ghc
          sudo docker image prune --all --force          

      - name: Import GPG
        uses: crazy-max/ghaction-import-gpg@v5
        id: gpg_step
        with:
          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
          passphrase: ${{ secrets.GPG_PRIVATE_KEY_PASS }}

      - name: Get files from repository
        uses: actions/checkout@v3
        with:
          submodules: 'recursive'

      - name: Prepare build
        run: |
          wget -O - https://dl.yarnpkg.com/debian/pubkey.gpg | \
          sudo gpg --no-default-keyring --keyring gnupg-ring:/usr/share/keyrings/yarnkey.gpg --import
          sudo chmod 644 /usr/share/keyrings/yarnkey.gpg
          echo "deb [signed-by=/usr/share/keyrings/yarnkey.gpg] https://dl.yarnpkg.com/debian/ stable main" | \
          sudo tee /etc/apt/sources.list.d/yarn.list
          wget https://packages.microsoft.com/config/$(lsb_release -is | \
          tr [:upper:] [:lower:])/$(lsb_release -rs)/packages-microsoft-prod.deb -O packages-microsoft-prod.deb
          sudo dpkg -i packages-microsoft-prod.deb
          echo "deb [signed-by=/usr/share/keyrings/nodesource.gpg] https://deb.nodesource.com/node_18.x nodistro main" | \
          sudo tee /etc/apt/sources.list.d/nodesource.list
          wget -O - https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | \
          sudo gpg --no-default-keyring --keyring gnupg-ring:/usr/share/keyrings/nodesource.gpg --import
          sudo chmod 644 /usr/share/keyrings/nodesource.gpg
          sudo apt-get -y update
          sudo apt install -y dotnet-sdk-7.0 yarn nodejs rename
          sudo npm install -g json
          if [[ "${{ matrix.packageType }}" == "rpm" ]]; then
            sudo apt install -y python3-rpm python3-pip
            sudo pip install rpmlint
          else
            sudo apt install -y dpkg-sig lintian dh-make
          fi          

      - name: Build DEB Packages
        if: matrix.packageType == 'deb'
        run: |
          cd build/install/deb/
          rename -f -v "s/product([^\/]*)$/$(${{ env.PRODUCT_LOW }})\$1/g" debian/* ../common/* ../common/logrotate/*
          find ../ -type f -exec sed -i "s/{{product}}/$(${{ env.PRODUCT_LOW }})/g" {} ';'
          sed -i "s/{{package_header_tag_version}}/$(${{ env.PRODUCT_VERSION }}).${{ env.BUILD_NUMBER }}/g" debian/changelog debian/control
          dpkg-buildpackage -uc -k${{ steps.gpg_step.outputs.fingerprint }}          

      - name: Build RPM Packages
        if: matrix.packageType == 'rpm'
        run: |
          cd build/install/rpm/SPECS
          mv ./SOURCES/product.rpmlintrc ./SOURCES/$(${{ env.PRODUCT_LOW }}).rpmlintrc
          wget https://github.com/ONLYOFFICE/${{ env.PRODUCT }}/archive/$(${{ env.BRANCH_NAME }}).tar.gz \
            -O ./SOURCES/${{ env.PRODUCT }}-$(${{ env.BRANCH_NAME }} | tr '/' '-').tar.gz
          wget https://github.com/ONLYOFFICE/document-templates/archive/main/community-server.tar.gz \
            -O ./SOURCES/document-templates-main-community-server.tar.gz
          wget https://github.com/ONLYOFFICE/dictionaries/archive/master.tar.gz \
            -O ./SOURCES/dictionaries-master.tar.gz
          sed -i -e '/BuildRequires/d' product.spec
          rpmbuild -D "packager Ascensio System SIA <support@onlyoffice.com>" \
                   -D "GIT_BRANCH $(${{ env.BRANCH_NAME }}| tr '/' '-')" -D "_topdir $(pwd)" \
                   -D "version $(${{ env.PRODUCT_VERSION }})" \
                   -D "release ${{ env.BUILD_NUMBER }}" -ba product.spec          

      - name: Sign RPM Packages
        if: matrix.packageType == 'rpm'
        run: |
          cat << EOF >> $HOME/.rpmmacros
          %_signature gpg
          %_gpg_name ${{ secrets.GPG_KEY_NAME }}
          %_gpg_path $HOME/.gnupg
          %__gpg /usr/bin/gpg
          EOF
          gpg --export --armor --output onlyoffice-gpgkey.pub
          rpm --import onlyoffice-gpgkey.pub
          rpm --addsign ${{ env.PACKAGE_DIRECTORY }}/rpm/SPECS/RPMS/noarch/*.rpm          

      - name: Upload DEB Packages
        if: matrix.packageType == 'deb'
        run: |
          for deb_package in ${{ env.PACKAGE_DIRECTORY }}/*.deb; do
            echo $deb_package
            curl --verbose \
                  --user ${{ secrets.REPO_LOGIN }}:${{ secrets.REPO_PASS }} \
                  -H "Content-Type: multipart/form-data" \
                  --data-binary "@$deb_package" ${{ secrets.REPO_URL_4TESTING_DEB }}
          done          

      - name: Upload RPM Packages
        if: matrix.packageType == 'rpm'
        run: |
          for rpm_package in ${{ env.PACKAGE_DIRECTORY }}/rpm/SPECS/RPMS/noarch/*.rpm; do
            curl --verbose \
                  --user ${{ secrets.REPO_LOGIN }}:${{ secrets.REPO_PASS }} \
                  --upload-file "$rpm_package" ${{ secrets.REPO_URL_4TESTING_RPM }}
          done          

      - name: Checking the DEB package for errors
        if: matrix.packageType == 'deb'
        run: |
          lintian --profile debian ${{ env.PACKAGE_DIRECTORY }}/*.deb | tee -a LINTIAN
          if grep -qE '^(W:|E:)' LINTIAN; then
            echo "::warning Noticedeb=lintian::$(cat LINTIAN | awk '/^W:/ { ws += 1 } /^E:/ { es += 1 } END { print "Warnings:", ws, "Errors:", es }')"
          fi          

      - name: Checking the RPM package for errors
        if: matrix.packageType == 'rpm'
        run: |
          for rpm_package in ${{ env.PACKAGE_DIRECTORY }}/rpm/SPECS/RPMS/noarch/*.rpm; do
            rpmlint --ignore-unused-rpmlintrc --rpmlintrc ${{ env.PACKAGE_DIRECTORY }}/rpm/SPECS/SOURCES/$(${{ env.PRODUCT_LOW }}).rpmlintrc $rpm_package | tee -a RPM_LINT
          done
          if grep -qE '(W:|E:)' RPM_LINT; then
            echo "::warning Noticerpm=rpmlint::$(cat RPM_LINT | awk '/W:/ { ws += 1 } /E:/ { es += 1 } END { print "Warnings:", ws, "Errors:", es }')"
          fi