Build and deploy bearssl #4
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and deploy bearssl | |
| on: | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| environment: deploy | |
| steps: | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: '3.x' | |
| - uses: actions/cache@v4 | |
| with: | |
| path: | | |
| esp8266/tools/dist | |
| esp8266/tools/sdk/ssl/bearssl/ | |
| key: ${{ runner.os }}-deploy-${{ hashFiles('.gitmodules', 'esp8266/package/package_esp8266com_index.template.json') }} | |
| - name: Fetch ESP8266 Core | |
| uses: actions/checkout@v4 | |
| with: | |
| path: esp8266 | |
| repository: esp8266/Arduino | |
| fetch-depth: 1 | |
| submodules: false | |
| - name: Initialize deploy tools | |
| run: | | |
| mkdir ${HOME}/.ssh | |
| echo "${{ secrets.SSH_DEPLOY_KEY }}" > ${HOME}/.ssh/deploy_key | |
| chmod 600 ~/.ssh/deploy_key | |
| echo -ne "Host github.com\n\tHostname github.com\n\tIdentityFile ~/.ssh/deploy_key\n" > \ | |
| ${HOME}/.ssh/config | |
| pushd esp8266 | |
| git config user.name "Maxim Prokhorov (CI)" | |
| git config user.email "[email protected]" | |
| popd | |
| - name: Initialize build environment | |
| run: | | |
| pushd esp8266/tools | |
| python get.py -q | |
| popd | |
| - name: Prepare bearssl builder | |
| run: | | |
| pushd esp8266 | |
| git remote add deploy [email protected]:${{ github.repository }}.git | |
| git switch -c bearssl-rebuild | |
| git submodule update --init -- tools/sdk/ssl/bearssl | |
| git submodule update --remote --merge -- tools/sdk/ssl/bearssl | |
| git add -u | |
| git commit -m 'Update bearssl builder' | |
| popd | |
| - name: Build | |
| id: build | |
| run: | | |
| pushd esp8266 | |
| pushd tools/sdk/ssl/ | |
| make install | |
| popd | |
| if [[ -n $(git diff --exit-code -- tools/sdk/) ]]; then | |
| echo "deploy=true" >> "$GITHUB_OUTPUT" | |
| fi | |
| popd | |
| - name: Deploy | |
| if: steps.build.outputs.deploy == 'true' | |
| run: | | |
| pushd esp8266 | |
| git add -u -- tools/sdk/lib/ tools/sdk/include/ | |
| git commit -m 'Rebuild bearssl libs' | |
| branch=$(date -Im | tr '[:punct:]' '_') | |
| git push deploy bearssl-rebuild:bearssl/build-${branch} | |
| popd |