Use amazonlinux:2023 + Use arm64 machines for lambdas (#377)

Author: MahdiBM

.github/workflows/deploy-all-lambdas.yml

@@ -7,42 +7,34 @@ on:
 
 jobs:
   deploy-lambdas:
-    runs-on: ubuntu-latest
-    container: swift:6.2-amazonlinux2
+    runs-on: ubuntu-24.04-arm
+    container: amazonlinux:2023
 
     env:
+      AWS_BUCKET_NAME: penny-lambdas-store
       AWS_DEFAULT_REGION: eu-west-1
       AWS_ACCESS_KEY_ID: ${{ secrets.DEPLOYER_ACCESS_KEY_ID }}
       AWS_SECRET_ACCESS_KEY: ${{ secrets.DEPLOYER_ACCESS_SECRET_KEY }}
 
     steps:
-      - name: Install additional dependencies and AWSCLI v2
+      - name: Install AWSCLI v2, Swift, git, jq, zip, tar, zstd, zlib-devel
         run: |
-          yum -y install \
-            {libuuid,libicu,libedit,sqlite,python,ncurses,openssl}-devel \
-            libtool jq zip
-          curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
-          unzip awscliv2.zip
-          ./aws/install
+          dnf install git jq zip tar awscli zstd zlib-devel swiftlang -y
+          swift --version
 
       - name: Check out repository
-        # uses: actions/checkout@v3 ❌ Needs node 20 which amazonlinux2 doesn't have
-        run: |
-          git clone https://github.com/${{ github.repository }}
-          cd ${{ github.event.repository.name }}
-          git checkout ${{ github.sha }}
+        uses: actions/checkout@v6
 
       - name: Restore .build
-        if: false # ❌ Needs node 20 which amazonlinux2 doesn't have
+        if: ${{ runner.debug != '1' }}
         id: "restore-cache"
         uses: actions/cache/restore@v5
         with:
-          path: ${{ github.event.repository.name }}/.build
+          path: .build
           key: "lambdas-build-${{ runner.os }}-${{ github.event.after }}"
           restore-keys: "lambdas-build-${{ runner.os }}-"
 
       - name: Find package names
-        working-directory: ${{ github.event.repository.name }}
         id: find_package_names
         run: |
           echo "names=$(
@@ -56,30 +48,35 @@ jobs:
             tr '\n' ' '
           )" >> $GITHUB_OUTPUT
 
-      - name: Build, package and deploy
-        working-directory: ${{ github.event.repository.name }}
+      - name: Build lambdas
         run: |
-          mkdir zips
+          mkdir ./zips
           for name in ${{ steps.find_package_names.outputs.names }}; do
             swift package \
               --allow-network-connections docker \
               archive \
               --verbose \
               --output-path ./zips \
               --products "${name}"
-            aws s3api put-object \
-              --bucket penny-lambdas-store \
-              --key "${name}.zip" \
-              --body ./zips/${name}/${name}.zip
-            aws lambda update-function-code \
-              --function-name "${name}" \
-              --s3-bucket "penny-lambdas-store" \
-              --s3-key "${name}.zip"
           done
 
       - name: Cache .build
-        if: false # ❌ Needs node 20 which amazonlinux2 doesn't have
+        if: steps.restore-cache.outputs.cache-hit != 'true'
         uses: actions/cache/save@v5
         with:
-          path: ${{ github.event.repository.name }}/.build
+          path: .build
           key: "lambdas-build-${{ runner.os }}-${{ github.event.after }}"
+
+      - name: Package and deploy lambdas
+        run: |
+          for name in ${{ steps.find_package_names.outputs.names }}; do
+            aws s3api put-object \
+              --bucket "${AWS_BUCKET_NAME}" \
+              --key "${name}".zip \
+              --body ./zips/"${name}"/"${name}".zip
+
+            aws lambda update-function-code \
+              --function-name "${name}" \
+              --s3-bucket "${AWS_BUCKET_NAME}" \
+              --s3-key "${name}.zip"
+          done

Package.resolved

@@ -128,6 +128,8 @@ Resources:
   usersFunction:
     Type: AWS::Lambda::Function
     Properties:
+      Architectures:
+        - arm64
       Code:
         S3Bucket: penny-lambdas-store
         S3Key: !Sub ${UsersFilename}.zip
@@ -139,7 +141,7 @@ Resources:
       MemorySize: 256
       Handler: handler
       Role: !GetAtt lambdaIAMRole.Arn
-      Runtime: provided.al2
+      Runtime: provided.al2023
       Timeout: 20
 
   lambdaUsersRoutePermission:
@@ -180,14 +182,16 @@ Resources:
   sponsorsFunction:
     Type: AWS::Lambda::Function
     Properties:
+      Architectures:
+        - arm64
       Code:
         S3Bucket: penny-lambdas-store
         S3Key: !Sub ${SponsorsFilename}.zip
       FunctionName: !Sub ${SponsorsFilename}
       MemorySize: 256
       Handler: handler
       Role: !GetAtt lambdaIAMRole.Arn
-      Runtime: provided.al2
+      Runtime: provided.al2023
       Timeout: 20
 
   lambdaSponsorsPermission:
@@ -332,14 +336,16 @@ Resources:
   autoPingsFunction:
     Type: AWS::Lambda::Function
     Properties:
+      Architectures:
+        - arm64
       Code:
         S3Bucket: penny-lambdas-store
         S3Key: !Sub ${AutoPingsFilename}.zip
       FunctionName: !Sub ${AutoPingsFilename}
       MemorySize: 256
       Handler: handler
       Role: !GetAtt lambdaIAMRole.Arn
-      Runtime: provided.al2
+      Runtime: provided.al2023
       Timeout: 20
 
   lambdaAutoPingsRoutePermission:
@@ -387,14 +393,16 @@ Resources:
   faqsFunction:
     Type: AWS::Lambda::Function
     Properties:
+      Architectures:
+        - arm64
       Code:
         S3Bucket: penny-lambdas-store
         S3Key: !Sub ${FaqsFilename}.zip
       FunctionName: !Sub ${FaqsFilename}
       MemorySize: 256
       Handler: handler
       Role: !GetAtt lambdaIAMRole.Arn
-      Runtime: provided.al2
+      Runtime: provided.al2023
       Timeout: 20
 
   lambdaFaqsRoutePermission:
@@ -442,14 +450,16 @@ Resources:
   autoFaqsFunction:
     Type: AWS::Lambda::Function
     Properties:
+      Architectures:
+        - arm64
       Code:
         S3Bucket: penny-lambdas-store
         S3Key: !Sub ${AutoFaqsFilename}.zip
       FunctionName: !Sub ${AutoFaqsFilename}
       MemorySize: 256
       Handler: handler
       Role: !GetAtt lambdaIAMRole.Arn
-      Runtime: provided.al2
+      Runtime: provided.al2023
       Timeout: 20
 
   lambdaAutoFaqsRoutePermission:
@@ -497,6 +507,8 @@ Resources:
   ghHooksFunction:
     Type: AWS::Lambda::Function
     Properties:
+      Architectures:
+        - arm64
       Code:
         S3Bucket: penny-lambdas-store
         S3Key: !Sub ${GHHooksFilename}.zip
@@ -511,7 +523,7 @@ Resources:
       MemorySize: 512
       Handler: handler
       Role: !GetAtt lambdaIAMRole.Arn
-      Runtime: provided.al2
+      Runtime: provided.al2023
       Timeout: 30
 
   lambdaGHHooksRoutePermission:
@@ -552,6 +564,8 @@ Resources:
   ghOAuthFunction:
     Type: AWS::Lambda::Function
     Properties:
+      Architectures:
+        - arm64
       Code:
         S3Bucket: penny-lambdas-store
         S3Key: !Sub ${GHOAuthFilename}.zip
@@ -567,7 +581,7 @@ Resources:
       MemorySize: 256
       Handler: handler
       Role: !GetAtt lambdaIAMRole.Arn
-      Runtime: provided.al2
+      Runtime: provided.al2023
       Timeout: 20
 
   lambdaGHOAuthRoutePermission: