...

Author: sedmicha

.github/workflows/packages.yml

@@ -94,7 +94,7 @@ jobs:
         curl -sL "$(curl -sL "https://api.github.com/repos/cli/cli/releases" | grep _linux_amd64.tar.gz | grep https | head -n1 | cut -d'"' -f4)" -o gh.tar.gz \
           && tar xzf gh.tar.gz \
           && find gh*/ -name gh -exec mv {} /usr/local/bin/ \;
-        git config --global --add safe.directory "$PWD" \
+        git config --global --add safe.directory "$(pwd)" \
           && git tag -f ci-latest HEAD \
           && git push -f origin tag ci-latest
         find build/ -iname '*.deb' | while read -r f; do
@@ -170,6 +170,24 @@ jobs:
     # Checkout repository --------------------------------------------------------------------
     - uses: actions/checkout@v2
 
+    # Checkout release tag (if on release branch)
+    - name: Checkout release tag (if on release branch)
+      if: github.ref == 'refs/heads/ci-release'
+      env:
+        GH_TOKEN: ${{ github.token }}
+        IMAGE_NAME: ${{ matrix.image }}
+      run: |
+        set -x
+        git config --global --add safe.directory "$(pwd)"
+        git fetch --tags
+        git tag
+        latest_tag="$(git tag | grep 'v[0-9]*\.[0-9]*\.[0-9]*' | sort -rn | head -n1)"
+        if [ -z "$latest_tag" ]; then
+          echo "could not find latest tag"
+          exit 1
+        fi
+        git checkout "$latest_tag"
+
     # Build LIBFDS RPM package ---------------------------------------------------------------
     - name: Checkout libfds library - master branch
       if: github.ref == 'refs/heads/master'
@@ -199,7 +217,6 @@ jobs:
         ipfixcol2 -L -v
     - name: Build IPFIXcol2 ClickHouse Output RPMs
       run: |
-        set -xe
         rpmdev-setuptree
         cp -r ./extra_plugins/output/clickhouse/ ./ipfixcol2-clickhouse-output-1.0.0/
         tar -czvf ~/rpmbuild/SOURCES/ipfixcol2-clickhouse-output-1.0.0.tar.gz ./ipfixcol2-clickhouse-output-1.0.0
@@ -217,7 +234,8 @@ jobs:
         path: |
           build/pkg/rpm/rpmbuild/RPMS/
           build/pkg/rpm/rpmbuild/SRPMS/
-    - name: Publish RPM packages to GitHub releases
+
+    - name: Publish RPM packages to GitHub releases (latest)
       if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/ci-publish-packages-to-releases'
       env:
         GH_TOKEN: ${{ github.token }}
@@ -226,11 +244,33 @@ jobs:
         curl -sL "$(curl -sL "https://api.github.com/repos/cli/cli/releases" | grep _linux_amd64.tar.gz | grep https | head -n1 | cut -d'"' -f4)" -o gh.tar.gz \
           && tar xzf gh.tar.gz \
           && find gh*/ -name gh -exec mv {} /usr/local/bin/ \;
-        git config --global --add safe.directory "$PWD" \
+        git config --global --add safe.directory "$(pwd)" \
           && git tag -f ci-latest HEAD \
           && git push -f origin tag ci-latest
         find build/ -iname '*.rpm' | while read -r f; do
           newf="$IMAGE_NAME-$(basename "$f")"
           mv "$f" "$newf"
           gh release upload --clobber ci-latest "$newf"
         done
+
+    - name: Publish RPM packages to GitHub releases (stable)
+      if: github.ref == 'refs/heads/ci-release'
+      env:
+        GH_TOKEN: ${{ github.token }}
+        IMAGE_NAME: ${{ matrix.image }}
+      run: |
+        curl -sL "$(curl -sL "https://api.github.com/repos/cli/cli/releases" | grep _linux_amd64.tar.gz | grep https | head -n1 | cut -d'"' -f4)" -o gh.tar.gz \
+          && tar xzf gh.tar.gz \
+          && find gh*/ -name gh -exec mv {} /usr/local/bin/ \;
+
+        latest_tag="$(git describe --exact-match --tags)"
+        if ! gh release view "$latest_tag"; then
+          echo "could not find release for tag $latest_tag"
+          exit 1
+        fi
+
+        find build/ -iname '*.rpm' | while read -r f; do
+          newf="$IMAGE_NAME-$(basename "$f")"
+          mv "$f" "$newf"
+          gh release upload --clobber "$latest_tag" "$newf"
+        done