workflows: Add Linux deb build

Signed-off-by: Loïc Minier <[email protected]>

Author: lool

.github/workflows/linux.yml

@@ -0,0 +1,88 @@
+name: Build Linux deb for Qualcomm hardware
+
+on:
+  # run on pull requests to the main branch
+  pull_request:
+    branches: [main]
+  # run on pushes to the main branch
+  push:
+    branches: [main]
+  # run weekly on Monday at 8:30am
+  schedule:
+    - cron: '30 8 * * 1'
+  # allow manual runs
+  workflow_dispatch:
+
+# only need permission to read repository; implicitely set all other
+# permissions to none
+permissions:
+  contents: read
+
+env:
+  # where results will be posted/hosted
+  FILESERVER_URL: https://quic-yocto-fileserver-1029608027416.us-central1.run.app
+  # github runs are only unique per repository and may also be re-run; create a
+  # build id for the current run
+  BUILD_ID: ${{ github.repository }}-${{ github.run_id }}-${{ github.run_attempt }}
+
+# cancel in progress builds for this workflow triggered by the same ref
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build-linux-deb:
+    # TODO test whether this builds on x86 too
+    # XXX currently missing docker
+    #runs-on: [self-hosted, x86]
+    runs-on: [self-hosted, arm64, debbuilder]
+    container:
+      image: debian:trixie
+      volumes:
+        - /srv/gh-runners/quic-yocto/builds:/fileserver-builds
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      # make sure we have latest packages first, to get latest fixes, to avoid
+      # an automated update while we're building, and to prevent version skews
+      - name: Update OS packages
+        run: |
+          set -ux
+          apt update
+          apt -y upgrade
+          apt -y full-upgrade
+
+      - name: Build Linux kernel deb for Qualcomm hardware
+        run: |
+            set -ux
+            # install build-dependencies
+            apt -y install git crossbuild-essential-arm64 make flex bison bc \
+                libelf-dev libssl-dev coreutils
+            scripts/build-linux-deb.sh
+
+      - name: Upload results to fileserver
+        run: |
+          set -ux
+          # curl will be used to talk to fileserver; should be installed by
+          # default
+          apt -y install curl
+          # create directory for results on fileserver
+          dir="/fileserver-builds/${BUILD_ID}"
+          mkdir -vp "${dir}"
+          # copy output files
+          cp -av *.deb "${dir}"
+          # instruct fileserver to publish this directory
+          url="${FILESERVER_URL}/${BUILD_ID}/"
+          curl -X POST -H 'Accept: text/event-stream' "${url}"
+          # create files with directory and URL of these results
+          echo "${dir}" >linux-deb.dir
+          echo "${url}" >linux-deb.url
+
+      - name: Save URL of build results as an artifact
+        uses: actions/upload-artifact@v4
+        with:
+          path: linux-deb.dir
+          path: linux-deb.url
+

scripts/build-linux-deb.sh

@@ -0,0 +1,76 @@
+#!/bin/sh
+
+set -eu
+
+GIT_REPO="https://github.com/torvalds/linux"
+GIT_BRANCH="master"
+CONFIG="defconfig"
+EXTRA_CONFIGS="CONFIG_EFI_ZBOOT=y"
+
+log_i() {
+    echo "I: $*" >&2
+}
+
+fatal() {
+    echo "F: $*" >&2
+    exit 1
+}
+
+# needed to clone repository
+packages="git"
+# will pull gcc-aarch64-linux-gnu; should pull a native compiler on arm64 and
+# a cross-compiler on other architectures
+packages="${packages} crossbuild-essential-arm64"
+# linux build-dependencies
+packages="${packages} make flex bison bc libelf-dev libssl-dev"
+# for nproc
+packages="${packages} coreutils"
+
+log_i "Checking build-dependencies ($packages)"
+missing=""
+for pkg in ${packages}; do
+    # check if package with this name is installed
+    if dpkg -l "${pkg}" 2>&1 | grep -q "^ii  ${pkg}"; then
+        continue
+    fi
+    # otherwise, check if it's a virtual package and if some package providing
+    # it is installed
+    providers="$(apt-cache showpkg "${pkg}" |
+                     sed -e '1,/^Reverse Provides: *$/ d' -e 's/ .*$//' |
+                     sort -u)"
+    provider_found="no"
+    for provider in ${providers}; do
+        if dpkg -l "${provider}" 2>&1 | grep -q "^ii  ${provider}"; then
+            provider_found="yes"
+            break
+        fi
+    done
+    if [ "${provider_found}" = yes ]; then
+        continue
+    fi
+    missing="${missing} ${pkg}"
+done
+if [ -n "${missing}" ]; then
+    fatal "Missing build-dependencies: ${missing}"
+fi
+
+log_i "Cloning Linux (${GIT_REPO}:${GIT_BRANCH})"
+git clone --depth=1 --branch "${GIT_BRANCH}" "${GIT_REPO}" linux
+
+cd linux
+
+log_i "Configuring Linux (${CONFIG}, ${EXTRA_CONFIGS})"
+rm -vf kernel/configs/local.config
+touch kernel/configs/local.config
+for c in ${EXTRA_CONFIGS}; do
+    echo "${c}" >>kernel/configs/local.config
+done
+make "${CONFIG}" local.config
+
+log_i "Building Linux deb"
+# TODO: build other packages?
+make -j$(nproc) bindeb-pkg
+
+ls
+ls ..
+