332 lines
14 KiB
YAML
332 lines
14 KiB
YAML
name: 📦🚀 Build Installer - Windows 10
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
push:
|
|
branches:
|
|
- 'long_lived/**'
|
|
- main
|
|
- 'release/**'
|
|
release:
|
|
types: [published]
|
|
pull_request:
|
|
branches:
|
|
- '**'
|
|
|
|
concurrency:
|
|
# SHA is added to the end if on `main` to let all main workflows run
|
|
group: ${{ github.ref }}-${{ github.workflow }}-${{ github.event_name }}-${{ (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/release/') || startsWith(github.ref, 'refs/heads/long_lived/')) && github.sha || '' }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
build:
|
|
name: Windows 10 Installer
|
|
runs-on: [windows-2019]
|
|
timeout-minutes: 50
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
python-version: [3.9]
|
|
|
|
steps:
|
|
- name: Checkout Code
|
|
uses: actions/checkout@v3
|
|
with:
|
|
fetch-depth: 0
|
|
submodules: recursive
|
|
|
|
- name: Set Env
|
|
if: github.event_name == 'release' && github.event.action == 'published'
|
|
shell: bash
|
|
run: |
|
|
PRE_RELEASE=$(jq -r '.release.prerelease' "$GITHUB_EVENT_PATH")
|
|
RELEASE_TAG=$(jq -r '.release.tag_name' "$GITHUB_EVENT_PATH")
|
|
echo "RELEASE=true" >>$GITHUB_ENV
|
|
echo "PRE_RELEASE=$PRE_RELEASE" >>$GITHUB_ENV
|
|
echo "RELEASE_TAG=$RELEASE_TAG" >>$GITHUB_ENV
|
|
if [ $PRE_RELEASE = false ]; then
|
|
echo "FULL_RELEASE=true" >>$GITHUB_ENV
|
|
else
|
|
echo "FULL_RELEASE=false" >>$GITHUB_ENV
|
|
fi
|
|
|
|
- name: Set git urls to https instead of ssh
|
|
run: |
|
|
git config --global url."https://github.com/".insteadOf ssh://git@github.com/
|
|
|
|
- name: Get npm cache directory
|
|
id: npm-cache
|
|
shell: bash
|
|
run: |
|
|
echo "dir=$(npm config get cache)" >>$GITHUB_OUTPUT
|
|
|
|
- name: Cache npm
|
|
uses: actions/cache@v3
|
|
with:
|
|
path: ${{ steps.npm-cache.outputs.dir }}
|
|
key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-node-
|
|
|
|
- name: Get pip cache dir
|
|
id: pip-cache
|
|
shell: bash
|
|
run: |
|
|
echo "dir=$(pip cache dir)" >>$GITHUB_OUTPUT
|
|
|
|
- name: Cache pip
|
|
uses: actions/cache@v3
|
|
with:
|
|
path: ${{ steps.pip-cache.outputs.dir }}
|
|
key: ${{ runner.os }}-pip-${{ hashFiles('**/setup.py') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-pip-
|
|
|
|
- uses: Chia-Network/actions/setup-python@main
|
|
name: Install Python ${{ matrix.python-version }}
|
|
with:
|
|
python-version: ${{ matrix.python-version }}
|
|
|
|
- name: Setup Node 16.x
|
|
uses: actions/setup-node@v3
|
|
with:
|
|
node-version: '16.x'
|
|
|
|
- name: Test for secrets access
|
|
id: check_secrets
|
|
shell: bash
|
|
run: |
|
|
unset HAS_SIGNING_SECRET
|
|
unset HAS_AWS_SECRET
|
|
unset HAS_GLUE_SECRET
|
|
|
|
if [ -n "$SIGNING_SECRET" ]; then HAS_SIGNING_SECRET='true' ; fi
|
|
echo "HAS_SIGNING_SECRET=${HAS_SIGNING_SECRET}" >>$GITHUB_OUTPUT
|
|
|
|
if [ -n "$AWS_SECRET" ]; then HAS_AWS_SECRET='true' ; fi
|
|
echo HAS_AWS_SECRET=${HAS_AWS_SECRET} >>$GITHUB_OUTPUT
|
|
|
|
if [ -n "$GLUE_ACCESS_TOKEN" ]; then HAS_GLUE_SECRET='true' ; fi
|
|
echo HAS_GLUE_SECRET=${HAS_GLUE_SECRET} >>$GITHUB_OUTPUT
|
|
env:
|
|
SIGNING_SECRET: "${{ secrets.WIN_CODE_SIGN_CERT }}"
|
|
AWS_SECRET: "${{ secrets.INSTALLER_UPLOAD_KEY }}"
|
|
GLUE_ACCESS_TOKEN: "${{ secrets.GLUE_ACCESS_TOKEN }}"
|
|
|
|
- name: Decode code signing cert into an encrypted file
|
|
if: steps.check_secrets.outputs.HAS_SIGNING_SECRET
|
|
uses: kitek/decode-base64-into-file-action@1.0
|
|
with:
|
|
encoded-value: ${{ secrets.WIN_CODE_SIGN_CERT }}
|
|
destination-file: .\win_code_sign_cert.p12
|
|
|
|
# Create our own venv outside of the git directory JUST for getting the ACTUAL version so that install can't break it
|
|
- name: Get version number
|
|
id: version_number
|
|
shell: bash
|
|
run: |
|
|
python -m venv ../venv
|
|
source ../venv/Scripts/activate
|
|
pip3 install setuptools_scm
|
|
CHIA_INSTALLER_VERSION=$(python ./build_scripts/installer-version.py)
|
|
echo "$CHIA_INSTALLER_VERSION"
|
|
echo "CHIA_INSTALLER_VERSION=$CHIA_INSTALLER_VERSION" >>$GITHUB_OUTPUT
|
|
deactivate
|
|
|
|
# Get the most recent release from chia-plotter-madmax
|
|
- uses: actions/github-script@v6
|
|
id: 'latest-madmax'
|
|
with:
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
result-encoding: string
|
|
script: |
|
|
const release = await github.rest.repos.getLatestRelease({
|
|
owner: 'Chia-Network',
|
|
repo: 'chia-plotter-madmax',
|
|
});
|
|
return release.data.tag_name;
|
|
|
|
- name: Get latest madmax plotter
|
|
run: |
|
|
mkdir "$env:GITHUB_WORKSPACE\madmax"
|
|
Invoke-WebRequest https://github.com/Chia-Network/chia-plotter-madmax/releases/download/${{ steps.latest-madmax.outputs.result }}/chia_plot-${{ steps.latest-madmax.outputs.result }}.exe -OutFile "$env:GITHUB_WORKSPACE\madmax\chia_plot.exe"
|
|
Invoke-WebRequest https://github.com/Chia-Network/chia-plotter-madmax/releases/download/${{ steps.latest-madmax.outputs.result }}/chia_plot_k34-${{ steps.latest-madmax.outputs.result }}.exe -OutFile "$env:GITHUB_WORKSPACE\madmax\chia_plot_k34.exe"
|
|
|
|
# Get the most recent release from bladebit
|
|
- uses: actions/github-script@v6
|
|
if: '!github.event.release.prerelease'
|
|
id: 'latest-bladebit'
|
|
with:
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
result-encoding: string
|
|
script: |
|
|
const release = await github.rest.repos.getLatestRelease({
|
|
owner: 'Chia-Network',
|
|
repo: 'bladebit',
|
|
});
|
|
return release.data.tag_name;
|
|
|
|
- name: Get latest bladebit plotter
|
|
if: '!github.event.release.prerelease'
|
|
run: |
|
|
mkdir "$env:GITHUB_WORKSPACE\bladebit"
|
|
Invoke-WebRequest https://github.com/Chia-Network/bladebit/releases/download/${{ steps.latest-bladebit.outputs.result }}/bladebit-${{ steps.latest-bladebit.outputs.result }}-windows-x86-64.zip -OutFile "$env:GITHUB_WORKSPACE\bladebit\bladebit.zip"
|
|
Expand-Archive -Path "$env:GITHUB_WORKSPACE\bladebit\bladebit.zip" -DestinationPath "$env:GITHUB_WORKSPACE\bladebit\"
|
|
rm "$env:GITHUB_WORKSPACE\bladebit\bladebit.zip"
|
|
|
|
- name: Get latest prerelease bladebit plotter
|
|
if: env.PRE_RELEASE == 'true'
|
|
shell: bash
|
|
run: |
|
|
PRERELEASE_URL=$(curl -Ls -H "Accept: application/vnd.github+json" "https://api.github.com/repos/Chia-Network/bladebit/releases" | jq -r 'map(select(.prerelease)) | first.assets[] | select(.browser_download_url | endswith("windows-x86-64.zip")).browser_download_url')
|
|
mkdir $GITHUB_WORKSPACE\\bladebit
|
|
ls
|
|
echo $PRERELEASE_URL
|
|
curl -L "$PRERELEASE_URL" --output $GITHUB_WORKSPACE\\bladebit\\bladebit.zip
|
|
unzip $GITHUB_WORKSPACE\\bladebit\\bladebit.zip -d $GITHUB_WORKSPACE\\bladebit\\
|
|
rm $GITHUB_WORKSPACE\\bladebit\\bladebit.zip
|
|
|
|
- name: Run install script
|
|
env:
|
|
INSTALL_PYTHON_VERSION: ${{ matrix.python-version }}
|
|
run: |
|
|
.\Install.ps1 -d
|
|
|
|
- uses: chia-network/actions/activate-venv@main
|
|
|
|
- name: Prepare GUI cache
|
|
id: gui-ref
|
|
shell: bash
|
|
run: |
|
|
gui_ref=$(git submodule status chia-blockchain-gui | sed -e 's/^ //g' -e 's/ chia-blockchain-gui.*$//g')
|
|
echo "${gui_ref}"
|
|
echo "GUI_REF=${gui_ref}" >>$GITHUB_OUTPUT
|
|
echo "rm -rf ./chia-blockchain-gui"
|
|
rm -rf ./chia-blockchain-gui
|
|
|
|
- name: Cache GUI
|
|
uses: actions/cache@v3
|
|
id: cache-gui
|
|
with:
|
|
path: .\chia-blockchain-gui
|
|
key: ${{ runner.os }}-chia-blockchain-gui-${{ steps.gui-ref.outputs.GUI_REF }}
|
|
|
|
- if: steps.cache-gui.outputs.cache-hit != 'true'
|
|
name: Build GUI
|
|
continue-on-error: false
|
|
run: |
|
|
cd .\build_scripts
|
|
.\build_windows-1-gui.ps1
|
|
|
|
- name: Build Windows installer
|
|
env:
|
|
CHIA_INSTALLER_VERSION: ${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}
|
|
HAS_SECRET: ${{ steps.check_secrets.outputs.HAS_SIGNING_SECRET }}
|
|
CSC_KEY_PASSWORD: ${{ secrets.WIN_CODE_SIGN_PASS }}
|
|
run: |
|
|
$env:path="C:\Program` Files` (x86)\Microsoft` Visual` Studio\2019\Enterprise\SDK\ScopeCppSDK\vc15\VC\bin\;$env:path"
|
|
$env:path="C:\Program` Files` (x86)\Windows` Kits\10\App` Certification` Kit;$env:path"
|
|
cd .\build_scripts
|
|
.\build_windows-2-installer.ps1
|
|
|
|
- name: Upload Installer to artifacts
|
|
uses: actions/upload-artifact@v3
|
|
with:
|
|
name: chia-installers-windows-exe-intel
|
|
path: ${{ github.workspace }}\chia-blockchain-gui\release-builds\
|
|
|
|
- name: Install AWS CLI
|
|
if: steps.check_secrets.outputs.HAS_AWS_SECRET
|
|
run: |
|
|
msiexec.exe /i https://awscli.amazonaws.com/AWSCLIV2.msi
|
|
|
|
- name: Configure AWS Credentials
|
|
if: steps.check_secrets.outputs.HAS_AWS_SECRET
|
|
uses: aws-actions/configure-aws-credentials@v1
|
|
with:
|
|
aws-access-key-id: ${{ secrets.INSTALLER_UPLOAD_KEY }}
|
|
aws-secret-access-key: ${{ secrets.INSTALLER_UPLOAD_SECRET }}
|
|
aws-region: us-west-2
|
|
|
|
- name: Upload to s3
|
|
if: steps.check_secrets.outputs.HAS_AWS_SECRET
|
|
env:
|
|
CHIA_INSTALLER_VERSION: ${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}
|
|
shell: bash
|
|
run: |
|
|
GIT_SHORT_HASH=$(echo "${GITHUB_SHA}" | cut -c1-8)
|
|
CHIA_DEV_BUILD=${CHIA_INSTALLER_VERSION}-$GIT_SHORT_HASH
|
|
echo CHIA_DEV_BUILD=${CHIA_DEV_BUILD} >>$GITHUB_OUTPUT
|
|
echo ${CHIA_DEV_BUILD}
|
|
pwd
|
|
aws s3 cp chia-blockchain-gui/release-builds/windows-installer/ChiaSetup-${CHIA_INSTALLER_VERSION}.exe s3://download.chia.net/dev/ChiaSetup-${CHIA_DEV_BUILD}.exe
|
|
|
|
- name: Create Checksums
|
|
env:
|
|
CHIA_INSTALLER_VERSION: ${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}
|
|
run: |
|
|
certutil.exe -hashfile ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe SHA256 > ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe.sha256
|
|
ls ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\
|
|
|
|
- name: Create torrent
|
|
if: env.FULL_RELEASE == 'true'
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
py3createtorrent -f -t udp://tracker.opentrackr.org:1337/announce ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe -o ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe.torrent --webseed https://download.chia.net/install/ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe
|
|
ls
|
|
gh release upload $env:RELEASE_TAG ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe.torrent
|
|
|
|
- name: Upload Dev Installer
|
|
if: steps.check_secrets.outputs.HAS_AWS_SECRET && github.ref == 'refs/heads/main'
|
|
env:
|
|
CHIA_INSTALLER_VERSION: ${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}
|
|
run: |
|
|
aws s3 cp ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe s3://download.chia.net/latest-dev/ChiaSetup-latest-dev.exe
|
|
aws s3 cp ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe.sha256 s3://download.chia.net/latest-dev/ChiaSetup-latest-dev.exe.sha256
|
|
|
|
- name: Upload Release Files
|
|
if: steps.check_secrets.outputs.HAS_AWS_SECRET && env.FULL_RELEASE == 'true'
|
|
env:
|
|
AWS_ACCESS_KEY_ID: ${{ secrets.INSTALLER_UPLOAD_KEY }}
|
|
AWS_SECRET_ACCESS_KEY: ${{ secrets.INSTALLER_UPLOAD_SECRET }}
|
|
run: |
|
|
aws s3 cp ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe s3://download.chia.net/install/
|
|
aws s3 cp ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe.sha256 s3://download.chia.net/install/
|
|
aws s3 cp ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe.torrent s3://download.chia.net/torrents/
|
|
|
|
- name: Get tag name
|
|
if: startsWith(github.ref, 'refs/tags/')
|
|
id: tag-name
|
|
shell: bash
|
|
run: |
|
|
echo "TAG_NAME=$(echo ${{ github.ref }} | cut -d'/' -f 3)" >>$GITHUB_OUTPUT
|
|
echo "REPO_NAME=$(echo ${{ github.repository }} | cut -d'/' -f 2)" >>$GITHUB_OUTPUT
|
|
|
|
- name: Upload release artifacts
|
|
if: env.RELEASE == 'true'
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
CHIA_INSTALLER_VERSION: ${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}
|
|
run: |
|
|
gh release upload $env:RELEASE_TAG ${{ github.workspace }}\chia-blockchain-gui\release-builds\windows-installer\ChiaSetup-${{ steps.version_number.outputs.CHIA_INSTALLER_VERSION }}.exe
|
|
|
|
- name: Mark installer complete
|
|
if: steps.check_secrets.outputs.HAS_GLUE_SECRET && env.FULL_RELEASE == 'true'
|
|
run: |
|
|
$headers = @{
|
|
Authorization="Bearer ${{ secrets.GLUE_ACCESS_TOKEN }}"
|
|
}
|
|
$data = @{
|
|
chia_ref='${{ steps.tag-name.outputs.TAG_NAME }}'
|
|
}
|
|
$json = $data | ConvertTo-Json
|
|
$response = Invoke-RestMethod '${{ secrets.GLUE_API_URL }}/api/v1/${{ steps.tag-name.outputs.REPO_NAME }}/${{ steps.tag-name.outputs.TAG_NAME }}/success/build-windows' -Method Post -Body $json -ContentType 'application/json' -Headers $headers
|
|
|
|
- name: Remove Windows exe and installer to exclude from cache
|
|
run: |
|
|
Remove-Item .\chia-blockchain-gui\packages\gui\dist -Recurse -Force
|
|
Remove-Item .\chia-blockchain-gui\packages\gui\daemon -Recurse -Force
|
|
Remove-Item .\chia-blockchain-gui\Chia-win32-x64 -Recurse -Force
|
|
Remove-Item .\chia-blockchain-gui\release-builds -Recurse -Force
|