Enable PowerTools repo for libstdc++-static on Rocky Linux 8 #8
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| tags: | |
| - 'v*' | |
| permissions: | |
| contents: write | |
| jobs: | |
| build-linux: | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - goarch: amd64 | |
| runner: ubuntu-latest | |
| go_arch_name: amd64 | |
| - goarch: arm64 | |
| runner: ubuntu-24.04-arm | |
| go_arch_name: arm64 | |
| runs-on: ${{ matrix.runner }} | |
| container: | |
| image: rockylinux:8 | |
| steps: | |
| - name: Install build tools | |
| run: | | |
| dnf install -y dnf-plugins-core | |
| dnf config-manager --set-enabled powertools || dnf config-manager --set-enabled crb || true | |
| dnf install -y gcc gcc-c++ make git tar gzip file libstdc++-static | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - name: Install Go | |
| run: | | |
| GO_VERSION=$(grep '^go ' go.mod | awk '{print $2}') | |
| curl -fsSL "https://go.dev/dl/go${GO_VERSION}.linux-${{ matrix.go_arch_name }}.tar.gz" -o go.tar.gz | |
| tar -C /usr/local -xzf go.tar.gz | |
| rm go.tar.gz | |
| echo "/usr/local/go/bin" >> $GITHUB_PATH | |
| echo "$HOME/go/bin" >> $GITHUB_PATH | |
| - name: Build | |
| env: | |
| GOOS: linux | |
| GOARCH: ${{ matrix.goarch }} | |
| CGO_ENABLED: '1' | |
| CGO_LDFLAGS: '-lstdc++ -lm' | |
| run: | | |
| export PATH="/usr/local/go/bin:$HOME/go/bin:$PATH" | |
| VERSION=${GITHUB_REF#refs/tags/v} | |
| mkdir -p dist | |
| LDFLAGS="-s -w -X github.com/wesm/msgvault/cmd/msgvault/cmd.Version=v${VERSION}" | |
| go build -tags fts5 -trimpath -buildvcs=false -ldflags="$LDFLAGS" -o dist/msgvault ./cmd/msgvault | |
| echo "--- Binary info ---" | |
| file dist/msgvault | |
| ldd dist/msgvault || true | |
| # Verify glibc version requirement is reasonable | |
| echo "--- GLIBC requirement ---" | |
| objdump -T dist/msgvault 2>/dev/null | grep -oP 'GLIBC_\d+\.\d+' | sort -uV | tail -1 || true | |
| # Smoke test | |
| echo "--- Smoke test ---" | |
| SMOKE_OUT=$(dist/msgvault version 2>&1) | |
| echo "$SMOKE_OUT" | |
| echo "$SMOKE_OUT" | grep -q "v${VERSION}" || { echo "FATAL: version output doesn't match tag"; exit 1; } | |
| cd dist | |
| ARCHIVE="msgvault_${VERSION}_linux_${{ matrix.goarch }}.tar.gz" | |
| tar czf "$ARCHIVE" msgvault | |
| rm msgvault | |
| - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 | |
| with: | |
| name: msgvault-linux-${{ matrix.goarch }} | |
| path: dist/*.tar.gz | |
| build-darwin: | |
| strategy: | |
| matrix: | |
| include: | |
| - goarch: amd64 | |
| runner: macos-15 | |
| - goarch: arm64 | |
| runner: macos-15 | |
| runs-on: ${{ matrix.runner }} | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5 | |
| with: | |
| go-version-file: go.mod | |
| - name: Build | |
| env: | |
| GOOS: darwin | |
| GOARCH: ${{ matrix.goarch }} | |
| CGO_ENABLED: 1 | |
| run: | | |
| VERSION=${GITHUB_REF#refs/tags/v} | |
| mkdir -p dist | |
| LDFLAGS="-s -w -X github.com/wesm/msgvault/cmd/msgvault/cmd.Version=v${VERSION}" | |
| go build -tags fts5 -trimpath -ldflags="$LDFLAGS" -o dist/msgvault ./cmd/msgvault | |
| echo "--- Binary info ---" | |
| file dist/msgvault | |
| # Verify no libstdc++ dependency (macOS should only link libc++ and system libs) | |
| echo "--- Dynamic libraries ---" | |
| otool -L dist/msgvault | |
| if otool -L dist/msgvault | grep -q 'libstdc++'; then | |
| echo "FATAL: binary links libstdc++ — this will cause compatibility issues" | |
| exit 1 | |
| fi | |
| # Smoke test — only for native arch (amd64 is cross-compiled from arm64) | |
| NATIVE_ARCH=$(uname -m) | |
| if [ "${{ matrix.goarch }}" = "arm64" ] && [ "$NATIVE_ARCH" = "arm64" ]; then | |
| echo "--- Smoke test ---" | |
| SMOKE_OUT=$(dist/msgvault version 2>&1) | |
| echo "$SMOKE_OUT" | |
| echo "$SMOKE_OUT" | grep -q "v${VERSION}" || { echo "FATAL: version output doesn't match tag"; exit 1; } | |
| else | |
| echo "--- Smoke test skipped (cross-compiled) ---" | |
| fi | |
| cd dist | |
| ARCHIVE="msgvault_${VERSION}_darwin_${{ matrix.goarch }}.tar.gz" | |
| tar czf "$ARCHIVE" msgvault | |
| rm msgvault | |
| - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 | |
| with: | |
| name: msgvault-darwin-${{ matrix.goarch }} | |
| path: dist/*.tar.gz | |
| build-windows: | |
| runs-on: windows-latest | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5 | |
| with: | |
| go-version-file: go.mod | |
| - name: Set up MinGW | |
| id: msys2 | |
| uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda # v2.30.0 | |
| with: | |
| msystem: MINGW64 | |
| install: mingw-w64-x86_64-gcc | |
| - name: Build | |
| shell: pwsh | |
| env: | |
| GOOS: windows | |
| GOARCH: amd64 | |
| CGO_ENABLED: '1' | |
| CC: ${{ steps.msys2.outputs.msys2-location }}\mingw64\bin\gcc.exe | |
| run: | | |
| $VERSION = "${{ github.ref_name }}".TrimStart("v") | |
| New-Item -ItemType Directory -Force -Path dist | Out-Null | |
| $LDFLAGS = "-s -w -X github.com/wesm/msgvault/cmd/msgvault/cmd.Version=v${VERSION}" | |
| go build -tags fts5 -trimpath -ldflags="$LDFLAGS" -o dist/msgvault.exe ./cmd/msgvault | |
| if ($LASTEXITCODE -ne 0) { throw "Build failed" } | |
| # Smoke test — check exit code explicitly, then verify version string | |
| Write-Host "--- Smoke test ---" | |
| & dist/msgvault.exe version 2>&1 | Tee-Object -Variable SMOKE_OUT | Out-Null | |
| if ($LASTEXITCODE -ne 0) { throw "FATAL: msgvault.exe version exited with code $LASTEXITCODE" } | |
| $SMOKE_OUT = $SMOKE_OUT | Out-String | |
| Write-Host $SMOKE_OUT | |
| if ($SMOKE_OUT -notmatch "v${VERSION}") { throw "FATAL: version output doesn't match tag" } | |
| # Package as zip | |
| $ARCHIVE = "msgvault_${VERSION}_windows_amd64.zip" | |
| Compress-Archive -Path dist/msgvault.exe -DestinationPath "dist/$ARCHIVE" | |
| Remove-Item dist/msgvault.exe | |
| - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 | |
| with: | |
| name: msgvault-windows-amd64 | |
| path: dist/*.zip | |
| release: | |
| needs: [build-linux, build-darwin, build-windows] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 | |
| with: | |
| path: artifacts | |
| merge-multiple: true | |
| - name: Validate artifacts | |
| run: | | |
| echo "--- Validating all archives ---" | |
| for archive in artifacts/*.tar.gz; do | |
| echo "Checking $archive..." | |
| tmpdir=$(mktemp -d) | |
| tar -xzf "$archive" -C "$tmpdir" | |
| test -f "$tmpdir/msgvault" || { echo "FATAL: msgvault binary missing from $archive"; exit 1; } | |
| test -x "$tmpdir/msgvault" || { echo "FATAL: msgvault binary not executable in $archive"; exit 1; } | |
| # Smoke test linux amd64 artifact (runs natively on ubuntu runner) | |
| if echo "$archive" | grep -q "linux_amd64"; then | |
| "$tmpdir/msgvault" version > /tmp/smoke_out.txt 2>&1 | |
| cat /tmp/smoke_out.txt | |
| VERSION="${GITHUB_REF#refs/tags/v}" | |
| grep -q "v${VERSION}" /tmp/smoke_out.txt || { echo "FATAL: extracted linux_amd64 binary version mismatch"; exit 1; } | |
| echo " linux_amd64 smoke: OK" | |
| fi | |
| file "$tmpdir/msgvault" | |
| rm -rf "$tmpdir" | |
| echo " OK" | |
| done | |
| for archive in artifacts/*.zip; do | |
| [ -e "$archive" ] || continue | |
| echo "Checking $archive..." | |
| tmpdir=$(mktemp -d) | |
| unzip -q "$archive" -d "$tmpdir" | |
| test -f "$tmpdir/msgvault.exe" || { echo "FATAL: msgvault.exe missing from $archive"; exit 1; } | |
| file "$tmpdir/msgvault.exe" | |
| rm -rf "$tmpdir" | |
| echo " OK" | |
| done | |
| - name: Generate checksums | |
| run: | | |
| cd artifacts | |
| sha256sum *.tar.gz *.zip > SHA256SUMS | |
| cat SHA256SUMS | |
| - name: Get tag message | |
| id: tag_message | |
| run: | | |
| TAG_NAME="${GITHUB_REF#refs/tags/}" | |
| TAG_TYPE=$(git cat-file -t "$TAG_NAME") | |
| if [ "$TAG_TYPE" != "tag" ]; then | |
| echo "Warning: $TAG_NAME is a lightweight tag, using auto-generated notes" | |
| echo "has_body=false" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| TAG_MSG=$(git tag -l --format='%(contents:body)' "$TAG_NAME") | |
| if [ -n "$TAG_MSG" ]; then | |
| DELIM="TAGMSG_$(date +%s%N)" | |
| echo "body<<$DELIM" >> $GITHUB_OUTPUT | |
| echo "$TAG_MSG" >> $GITHUB_OUTPUT | |
| echo "$DELIM" >> $GITHUB_OUTPUT | |
| echo "has_body=true" >> $GITHUB_OUTPUT | |
| else | |
| echo "has_body=false" >> $GITHUB_OUTPUT | |
| fi | |
| - name: Create Release | |
| uses: softprops/action-gh-release@26994186c0ac3ef5cae75ac16aa32e8153525f77 # v1 | |
| with: | |
| files: | | |
| artifacts/*.tar.gz | |
| artifacts/*.zip | |
| artifacts/SHA256SUMS | |
| body: ${{ steps.tag_message.outputs.has_body == 'true' && steps.tag_message.outputs.body || '' }} | |
| generate_release_notes: ${{ steps.tag_message.outputs.has_body != 'true' }} |