Merge pull request #5 from firehol/test

Replace Travis with Github actions

Author: philwhineray

.github/workflows/deploy-website.sh

@@ -0,0 +1,27 @@
+#!/bin/sh
+
+set -e
+set -x
+
+if [ "$SSH_AGENT_PID" ]
+then
+   if [ ! -d $HOME/.ssh ]
+   then
+      mkdir -p $HOME/.ssh
+      chmod 700 $HOME/.ssh
+      touch $HOME/.ssh/config
+      chmod 644 $HOME/.ssh/config
+   fi
+   echo PasswordAuthentication=no >> $HOME/.ssh/config
+else
+   echo "No authentication agent; skipping deployment"
+fi
+
+test -d output && mv output "$1"
+sed -e "s/NAME/website/" nginx.conf > "$1".conf
+
+ssh-keyscan -H firehol.org >> ~/.ssh/known_hosts
+
+ssh [email protected] mkdir -p "website/$1/"
+rsync -a "$1" "$1.conf" [email protected]:"website/$1/"
+ssh [email protected] touch "website/$1/complete.txt"

.github/workflows/publish.yml

@@ -0,0 +1,56 @@
+on: [ push, pull_request, workflow_dispatch ]
+
+jobs:
+   publish:
+      runs-on: ubuntu-latest
+      name: Publish Website
+      steps:
+      - name: Extract tag/branch variables
+        shell: bash
+        run: >
+           echo "##[set-output name=tag;]$(echo ${GITHUB_REF#refs/tags/}|grep -v '/')";
+           echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/}|grep -v '/')";
+        id: extract
+      - name: Write secret keys
+        run: >
+           echo "$FIREHOL_ORG_PUBLISH_SSH" > firehol_org_publish_key;
+           chmod 600 firehol_org_publish_key;
+           if [ -s firehol_org_publish_key ];
+           then
+             eval "$(ssh-agent)";
+             ssh-add firehol_org_publish_key;
+             echo "##[set-output name=has_ssh_key;]true";
+             echo "##[set-output name=ssh_agent_pid;]$SSH_AGENT_PID";
+             echo "##[set-output name=ssh_auth_sock;]$SSH_AUTH_SOCK";
+           fi;
+           rm -f firehol_org_publish_key
+        env:
+           FIREHOL_ORG_PUBLISH_SSH: ${{secrets.FIREHOL_ORG_PUBLISH_SSH}}
+        id: secret_keys
+      - name: Skip branches which use a name reserved for use on the server
+        if: >-
+           ${{ steps.extract.outputs.branch == ''
+            || steps.extract.outputs.branch == 'www'
+            || steps.extract.outputs.branch == 'download'
+            || steps.extract.outputs.branch == 'static'
+            || steps.extract.outputs.branch == 'ssl'
+            || steps.extract.outputs.branch == 'webalizer'
+            || steps.extract.outputs.branch == 'tmp' }}
+        run: >
+           echo "Not publishing '${{steps.extract.outputs.branch}}'";
+           echo "##[set-output name=skip;]true"
+        id: check
+      - uses: actions/checkout@v2
+      - run: ./.github/workflows/setup.sh
+      - run: make
+      - name: Deploy website ${{steps.extract.outputs.branch}}
+        if: ${{ steps.secret_keys.outputs.has_ssh_key && ! steps.check.outputs.skip }}
+        run: ./.github/workflows/deploy-website.sh ${{steps.extract.outputs.branch}}
+        env:
+           SSH_AGENT_PID: ${{ steps.secret_keys.outputs.ssh_agent_pid }}
+           SSH_AUTH_SOCK: ${{ steps.secret_keys.outputs.ssh_auth_sock }}
+      - name: Check deployment
+        if: ${{ steps.secret_keys.outputs.has_ssh_key && ! steps.check.outputs.skip }}
+        run: >
+           sleep 300;
+           curl -q -o- https://firehol.org/travis-website.log

.github/workflows/setup.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+set -e
+set -x
+
+sudo apt install ruby pandoc
+sudo gem install cri -v 2.10.1
+sudo gem install nanoc --version 3.8.0
+sudo gem install pandoc-ruby nokogiri