tmp

Author: doanac

.github/workflows/build-on-pr.yml

@@ -6,6 +6,7 @@ on:
 permissions:
   contents: read
   id-token: write  # Required by upload-private-artifact-action
+  security-events: read
 
 jobs:
   build-pr:

.github/workflows/debos.yml

@@ -12,6 +12,7 @@ on:
 permissions:
   contents: read
   id-token: write  # Required by upload-private-artifact-action
+  security-events: read
 
 # cancel in progress builds for this workflow triggered by the same ref
 concurrency:
@@ -22,94 +23,35 @@ jobs:
   build-debos:
     outputs:
       url: ${{ steps.upload_artifacts.outputs.url }}
-    runs-on: [self-hosted, qcom-u2404, arm64]
+    #runs-on: [self-hosted, qcom-u2404, arm64]
+    runs-on: ubuntu-latest
     container:
       image: debian:trixie
       volumes:
         - /efs/qli/metaqcom/gh-runners/quic-yocto/downloads:/fileserver-downloads
       options: --privileged
     steps:
-      # make sure we have latest packages first, to get latest fixes and to
-      # avoid an automated update while we're building
-      - name: Update OS packages
+      - name: Create artifacts
         run: |
-          set -ux
-          apt update
-          apt -y upgrade
-          apt -y full-upgrade
+          set -eux
 
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Copy Linux deb and U-Boot for RB1 from fileserver space for downloads
-        run: |
-          set -ux
-          mkdir -v debos-recipes/local-debs
-          dir="/fileserver-downloads/qcom-deb-images"
-          # copy linux-image but not the -dbg e.g.
-          # linux-image-6.15.0-..._6.15.0...-1_arm64.deb but not
-          # linux-image-6.15.0-...-dbg_6.15.0...-1_arm64.deb
-          find "${dir}/linux-deb-latest/" \
-              -name linux-image\*.deb \
-              -not -name linux-image\*-dbg_\*.deb \
-              -exec cp -av '{}' debos-recipes/local-debs/ \;
-          # copy U-Boot RB1 binary
-          cp -av "${dir}/u-boot-rb1-latest/rb1-boot.img" .
-
-      # mtools is needed for the flash recipe
-      - name: Install debos and dependencies of the recipes
-        run: apt -y install debos mtools
-
-      - name: Build rootfs with debos
-        run: |
-          set -ux
-          debos -t xfcedesktop:true -t localdebs:local-debs/ \
-              debos-recipes/qualcomm-linux-debian-rootfs.yaml
+          mkdir build
+          echo 8675309 > build/test-artifact.txt
 
-      - name: Build UFS and SD card images with debos
-        run: |
-          set -ux
-          # debos tries KVM and UML as backends, and falls back to
-          # building directly on the host, but that requires loop
-          # devices; use qemu backend explicitly even if it's slower;
-          # qemu backend also requires to set scratchsize, otherwise the
-          # whole build is done from memory and the out of memory killer
-          # gets triggered
-          debos -b qemu --scratchsize 4GiB -t imagetype:ufs \
-              debos-recipes/qualcomm-linux-debian-image.yaml
-          debos -b qemu --scratchsize 4GiB -t imagetype:sdcard \
-              debos-recipes/qualcomm-linux-debian-image.yaml
+      - name: Debug OIDC Claims
+        uses: github/actions-oidc-debugger@main
+        with:
+          audience: '${{ github.server_url }}/${{ github.repository_owner }}'
 
-      - name: Build flashable files with debos
-        run: |
-          set -ux
-          debos -t u_boot_rb1:rb1-boot.img \
-                 debos-recipes/qualcomm-linux-debian-flash.yaml
+      - name: Upload artifacts
+        id: upload
+        uses: qualcomm-linux/upload-private-artifact-action@main
+        with:
+          path: ./build
 
-      - name: Stage build artifacts for publishing
+      - name: Print URL
+        env:
+          URL: ${{ steps.upload.outputs.url }}
         run: |
-          set -ux
-          # create a directory for the current run
-          BUILD_DIR="./uploads"
-          mkdir -vp "${BUILD_DIR}"
-          # copy output files
-          cp -av rootfs.tar.gz "${BUILD_DIR}"
-          cp -av dtbs.tar.gz "${BUILD_DIR}"
-          cp -av disk-ufs.img.gz "${BUILD_DIR}"
-          cp -av disk-sdcard.img.gz "${BUILD_DIR}"
-          # TODO: separate flash_* directories between UFS and eMMC
-          tar -cvf "${BUILD_DIR}"/flash-ufs.tar.gz \
-              disk-ufs.img1 \
-              disk-ufs.img2 \
-              flash_rb3*
-          tar -cvf "${BUILD_DIR}"/flash-emmc.tar.gz \
-              disk-sdcard.img1 \
-              disk-sdcard.img2 \
-              flash_rb1*
-
-      - name: Upload private artifacts
-        uses: qualcomm-linux/upload-private-artifact-action@v1
-        id: upload_artifacts
-        with:
-          path: ./uploads
+          set -eu
+          echo "URL is ${URL}"