Merge pull request #5856 from jsoref/integration-tests-in-forks

Integration tests in forks

Author: mpilgrem

.github/workflows/integration-tests.yml

@@ -95,14 +95,45 @@ jobs:
         name: ${{ runner.os }}
         path: _release/stack-*
 
+  configuration:
+    name: Check for self-hosted runners
+    runs-on: ubuntu-latest
+    env:
+      CAN_SIGN: ${{ secrets.RELEASE_SIGNING_KEY != '' }}
+    outputs:
+      arm64: ${{ steps.runners.outputs.arm64 }}
+      can-sign: ${{ env.CAN_SIGN }}
+    steps:
+    - name: Check for hosted runners
+      id: runners
+      shell: bash
+      env:
+        SELF_HOSTED_RUNNERS: ${{ secrets.SELF_HOSTED_RUNNERS || (github.repository_owner == 'commercialhaskell' && 'arm64') }}
+      run: |
+        echo "::set-output name=runners::$SELF_HOSTED_RUNNERS"
+        if echo "$SELF_HOSTED_RUNNERS" | grep -q 'arm64'; then
+          echo "::set-output name=arm64::['self-hosted', 'linux', 'ARM64']"
+        else
+          echo '::set-output name=arm64::"ubuntu-latest"'
+        fi
+
   linux-arm64:
     name: Linux ARM64
-    runs-on: [self-hosted, linux, ARM64]
+    runs-on: ${{ fromJSON(needs.configuration.outputs.arm64) }}
+    needs: configuration
     steps:
+    - name: Skipping ARM64
+      if: needs.configuration.outputs.arm64 == 'ubuntu-latest'
+      shell: bash
+      run: |
+        echo '::notice title=ARM64 skipped::To build ARM64, a self-hosted runner needs to be configured and the SELF_HOSTED_RUNNERS secret must contain arm64'
+
     - name: Clone project
+      if: needs.configuration.outputs.arm64 != 'ubuntu-latest'
       uses: actions/checkout@v3
 
     - name: Build bindist
+      if: needs.configuration.outputs.arm64 != 'ubuntu-latest'
       shell: bash
       run: |
         set -ex
@@ -112,13 +143,16 @@ jobs:
         docker run --rm -v $(pwd):/src -w /src stack bash -c "/home/stack/release build"
 
     - name: Upload bindist
+      if: needs.configuration.outputs.arm64 != 'ubuntu-latest'
       uses: actions/upload-artifact@v3
       with:
         name: Linux-ARM64
         path: _release/stack-*
 
   github-release:
     name: Create GitHub release
+    permissions:
+      contents: write
     needs:
     - integration-tests
     - linux-arm64
@@ -141,11 +175,13 @@ jobs:
         name: Windows
         path: _release
     - name: Download Linux-ARM64 artifact
+      if: contains(needs.configuration.outputs.runners, 'arm64')
       uses: actions/download-artifact@v3
       with:
         name: Linux-ARM64
         path: _release
     - name: Hash and sign assets
+      if: needs.configuration.outputs.can-sign
       shell: bash
       env:
         RELEASE_SIGNING_KEY: ${{ secrets.RELEASE_SIGNING_KEY }}
@@ -163,11 +199,11 @@ jobs:
         echo ::set-output name=SOURCE_TAG::${GITHUB_REF#refs/tags/}
     - name: Create GitHub release (final)
       if: "!startsWith(github.ref, 'refs/tags/rc/')"
-      uses: actions/create-release@v1
+      uses: ncipollo/release-action@v1.10.0
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
-        tag_name: ${{ github.ref }}
+        tag: ${{ github.ref }}
         body: |
           See https://haskellstack.org/ for installation and upgrade instructions.
 
@@ -182,11 +218,11 @@ jobs:
         prerelease: false
     - name: Create GitHub release (release candidate)
       if: "startsWith(github.ref, 'refs/tags/rc/')"
-      uses: actions/create-release@v1
+      uses: ncipollo/release-action@v1.10.0
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
-        tag_name: ${{ github.ref }}
+        tag: ${{ github.ref }}
         body: |
           **Changes since v[INSERT PREVIOUS VERSION]:**