test-iso-secure-boot.yml

name: Test Generate ISO with Secure Boot

on:
  merge_group:
  pull_request:
    branches:
      - main
    paths-ignore:
      - 'Containerfile'
      - '*.md'
      - 'LICENSE'
      - 'CODEOWNERS'
  workflow_dispatch:

jobs:
  build-and-push-iso:
    name: Build ISO
    runs-on: ubuntu-latest
    container:
      image: fedora:39
      options: "--privileged"
      volumes:
        - "/:/host"
    permissions:
      contents: read
      packages: write
    strategy:
      fail-fast: false
      matrix:
        version:
          - 38
          - 39
        image_tag: [latest,gts]
        exclude:
          - version: 38
            image_tag: latest
          - version: 39
            image_tag: gts


    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Build ISO
        uses: ./
        with:
          ARCH: 'x86_64'
          IMAGE_NAME: 'bluefin'
          IMAGE_REPO: 'ghcr.io/ublue-os'
          VARIANT: 'Kinoite'
          VERSION: ${{ matrix.version }}
          IMAGE_TAG: ${{ matrix.image_tag }}
          ACTION_REPO: ${{ github.repository }}
          ACTION_REF: ${{ github.ref }}
          SECURE_BOOT_KEY_URL: 'https://github.com/ublue-os/akmods/raw/main/certs/public_key.der'
          ENROLLMENT_PASSWORD: 'ublue-os'

  check:
    name: Check build successful
    if: ${{ !cancelled() }}
    runs-on: ubuntu-latest
    needs:
      - build-and-push-iso
    steps:
      - name: Exit on failure for main
        if: ${{ needs.build-and-push-iso.result == 'failure' || needs.build-and-push-iso.result == 'skipped' }}
        shell: bash
        run: exit 1
      - name: Exit
        shell: bash
        run: exit 0