build-binaries.yml

name: Build Binaries and Deploy

on:
    workflow_dispatch:
        inputs:
            version:
                description: "Version number"
                required: true
                type: string

defaults:
    run:
        working-directory: ./backend

jobs:
    build-and-deploy:
        runs-on: ubuntu-20.04
        strategy:
            matrix:
                arch: [x64, arm64]
                os: [linux]
                include:
                    - os: linux
                      target: node20-linux
                    - os: win
                      target: node20-win

        steps:
            - name: Checkout code
              uses: actions/checkout@v3

            - name: Set up Node.js
              uses: actions/setup-node@v3
              with:
                  node-version: 20

            - name: Set up QEMU
              if: matrix.arch == 'arm64' && matrix.os == 'linux'
              uses: docker/setup-qemu-action@v2

            - name: Install dependencies and build (x64)
              if: matrix.arch == 'x64'
              run: |
                  npm install
                  npm install --prefix ../frontend
                  npm run binary:build

            - name: Install dependencies and build (arm64)
              if: matrix.arch == 'arm64' && matrix.os == 'linux'
              run: |
                  docker run --rm -v ${{ github.workspace }}:/workspace --platform linux/arm64 node:20 bash -c "
                    cd /workspace/backend && npm install && 
                    cd /workspace/frontend && npm install && npm run build && 
                    cd /workspace/backend && npm run binary:build
                  "

            - name: Install pkg
              run: npm install -g @yao-pkg/pkg

            - name: Package into node binary (x64)
              if: matrix.arch == 'x64'
              run: |
                  if [ "${{ matrix.os }}" != "linux" ]; then
                    pkg --no-bytecode --public-packages "*" --public --target ${{ matrix.target }}-${{ matrix.arch }} --output ./binary/infisical-core-${{ matrix.os }}-${{ matrix.arch }} .
                  else
                    pkg --no-bytecode --public-packages "*" --public --target ${{ matrix.target }}-${{ matrix.arch }} --output ./binary/infisical-core .
                  fi

            - name: Package into node binary (arm64)
              if: matrix.arch == 'arm64' && matrix.os == 'linux'
              run: |
                  docker run --rm -v ${{ github.workspace }}:/workspace --platform linux/arm64 node:20 bash -c "
                    cd /workspace/backend && 
                    npm install -g @yao-pkg/pkg && 
                    pkg --no-bytecode --public-packages '*' --public --target ${{ matrix.target }}-${{ matrix.arch }} --output ./binary/infisical-core .
                  "

            # Set up .deb package structure (Debian/Ubuntu only)
            - name: Set up .deb package structure
              if: matrix.os == 'linux'
              run: |
                  mkdir -p infisical-core/DEBIAN
                  mkdir -p infisical-core/usr/local/bin
                  cp ./binary/infisical-core infisical-core/usr/local/bin/
                  chmod +x infisical-core/usr/local/bin/infisical-core

            - name: Create control file
              if: matrix.os == 'linux'
              run: |
                  cat <<EOF > infisical-core/DEBIAN/control
                  Package: infisical-core
                  Version: ${{ github.event.inputs.version }}
                  Section: base
                  Priority: optional
                  Architecture: ${{ matrix.arch == 'x64' && 'amd64' || matrix.arch }}
                  Maintainer: Infisical <daniel@infisical.com>
                  Description: Infisical Core standalone executable (app.infisical.com)
                  EOF

            # Build .deb file (Debian/Ubunutu only)
            - name: Build .deb package
              if: matrix.os == 'linux'
              run: |
                  dpkg-deb --build infisical-core
                  mv infisical-core.deb ./binary/infisical-core-${{matrix.arch}}.deb

            - uses: actions/setup-python@v4
            - run: pip install --upgrade cloudsmith-cli

            # Publish .deb file to Cloudsmith (Debian/Ubuntu only)
            - name: Publish to Cloudsmith (Debian/Ubuntu)
              if: matrix.os == 'linux' && matrix.arch == 'TEMP_DISABLED'
              working-directory: ./backend
              run: cloudsmith push deb --republish --no-wait-for-sync --api-key=${{ secrets.CLOUDSMITH_API_KEY }} infisical/infisical-core/any-distro/any-version ./binary/infisical-core-${{ matrix.arch }}.deb

            # Publish .exe file to Cloudsmith (Windows only)
            - name: Publish to Cloudsmith (Windows)
              if: matrix.os == 'win' && matrix.arch == 'TEMP_DISABLED'
              working-directory: ./backend
              run: cloudsmith push raw infisical/infisical-core ./binary/infisical-core-${{ matrix.os }}-${{ matrix.arch }}.exe --republish --no-wait-for-sync --version ${{ github.event.inputs.version }} --api-key ${{ secrets.CLOUDSMITH_API_KEY }}

            - name: List files in resources folders
              run: |
                  echo "Listing files in backend:"
                  ls -R ./binary

            - uses: actions/upload-artifact@v4
              if: matrix.os == 'linux' && matrix.arch == 'arm64'
              with:
                  name: test-binary
                  path: backend/binary/infisical-core-${{ matrix.os }}-${{ matrix.arch }}.deb