🔨 Feature/sha256 (#240) #313
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: napi | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| env: | |
| DEBUG: napi:* | |
| APP_NAME: three_em_node | |
| MACOSX_DEPLOYMENT_TARGET: '10.13' | |
| jobs: | |
| build: | |
| name: build / ${{ matrix.target }} / node ${{ matrix.node }} | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ubuntu-20.04, windows-latest, macos-latest] | |
| node: [14, 16] | |
| include: | |
| - os: macos-latest | |
| target: x86_64-apple-darwin | |
| arch: x64 | |
| build: yarn build-release; strip -x *.node | |
| use_sysroot: false | |
| - os: windows-latest | |
| target: x86_64-pc-windows-msvc | |
| arch: x64 | |
| build: yarn build-release | |
| use_sysroot: false | |
| - os: ubuntu-20.04 | |
| target: x86_64-unknown-linux-gnu | |
| arch: x64 | |
| build: yarn build --release | |
| use_sysroot: true | |
| steps: | |
| - name: Checkout repo | |
| uses: actions/checkout@v2 | |
| - name: Setup node | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| architecture: ${{ matrix.arch }} | |
| cache: 'yarn' | |
| cache-dependency-path: js/napi/yarn.lock | |
| - uses: dtolnay/rust-toolchain@stable | |
| - name: Use Rust Cache | |
| uses: Swatinem/rust-cache@v1 | |
| - name: Set up incremental LTO and sysroot build | |
| if: matrix.use_sysroot || startsWith(matrix.os, 'ubuntu') | |
| run: | | |
| # Avoid running man-db triggers, which sometimes takes several minutes | |
| # to complete. | |
| sudo apt-get remove --purge -y man-db | |
| # Install clang-14, lld-14, and debootstrap. | |
| echo "deb http://apt.llvm.org/focal/ llvm-toolchain-focal-14 main" | | |
| sudo dd of=/etc/apt/sources.list.d/llvm-toolchain-focal-14.list | |
| curl https://apt.llvm.org/llvm-snapshot.gpg.key | | |
| gpg --dearmor | | |
| sudo dd of=/etc/apt/trusted.gpg.d/llvm-snapshot.gpg | |
| sudo apt-get update | |
| sudo apt-get install --no-install-recommends debootstrap \ | |
| clang-14 lld-14 | |
| # Create ubuntu-16.04 sysroot environment, which is used to avoid | |
| # depending on a very recent version of glibc. | |
| # `libc6-dev` is required for building any C source files. | |
| # `file` and `make` are needed to build libffi-sys. | |
| # `curl` is needed to build rusty_v8. | |
| sudo debootstrap \ | |
| --include=ca-certificates,curl,file,libc6-dev,make \ | |
| --no-merged-usr --variant=minbase xenial /sysroot \ | |
| http://azure.archive.ubuntu.com/ubuntu | |
| sudo mount --rbind /dev /sysroot/dev | |
| sudo mount --rbind /sys /sysroot/sys | |
| sudo mount --rbind /home /sysroot/home | |
| sudo mount -t proc /proc /sysroot/proc | |
| # Configure the build environment. Both Rust and Clang will produce | |
| # llvm bitcode only, so we can use lld's incremental LTO support. | |
| cat >> $GITHUB_ENV << __0 | |
| CARGO_PROFILE_BENCH_INCREMENTAL=false | |
| CARGO_PROFILE_BENCH_LTO=false | |
| CARGO_PROFILE_RELEASE_INCREMENTAL=false | |
| CARGO_PROFILE_RELEASE_LTO=false | |
| RUSTFLAGS<<__1 | |
| -C linker-plugin-lto=true | |
| -C linker=clang-14 | |
| -C link-arg=-fuse-ld=lld-14 | |
| -C link-arg=--sysroot=/sysroot | |
| -C link-arg=-Wl,--allow-shlib-undefined | |
| -C link-arg=-Wl,--thinlto-cache-dir=$(pwd)/target/release/lto-cache | |
| -C link-arg=-Wl,--thinlto-cache-policy,cache_size_bytes=700m | |
| ${{ env.RUSTFLAGS }} | |
| __1 | |
| RUSTDOCFLAGS<<__1 | |
| -C linker-plugin-lto=true | |
| -C linker=clang-14 | |
| -C link-arg=-fuse-ld=lld-14 | |
| -C link-arg=--sysroot=/sysroot | |
| -C link-arg=-Wl,--allow-shlib-undefined | |
| -C link-arg=-Wl,--thinlto-cache-dir=$(pwd)/target/release/lto-cache | |
| -C link-arg=-Wl,--thinlto-cache-policy,cache_size_bytes=700m | |
| ${{ env.RUSTFLAGS }} | |
| __1 | |
| CC=clang-14 | |
| CFLAGS=-flto=thin --sysroot=/sysroot | |
| __0 | |
| - name: Install Node Dependencies | |
| uses: bahmutov/npm-install@v1 | |
| with: | |
| working-directory: ./js/napi | |
| useLockFile: false | |
| - name: Build | |
| working-directory: ./js/napi | |
| run: ${{ matrix.build }} | |
| - name: Upload artifact | |
| uses: actions/upload-artifact@v2 | |
| with: | |
| name: bindings-${{ matrix.target }} | |
| path: ./js/napi/${{ env.APP_NAME }}.*.node | |
| if-no-files-found: error | |
| test: | |
| name: test / ${{ matrix.target }} / node ${{ matrix.node }} | |
| needs: [build] | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ubuntu-latest, windows-latest, macos-latest] | |
| node: [14, 16] | |
| include: | |
| - os: windows-latest | |
| target: x86_64-pc-windows-msvc | |
| - os: macos-latest | |
| target: x86_64-apple-darwin | |
| - os: ubuntu-latest | |
| target: x86_64-unknown-linux-gnu | |
| steps: | |
| - name: Checkout repo | |
| uses: actions/checkout@v2 | |
| - name: Setup node | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| cache: yarn | |
| cache-dependency-path: js/napi/yarn.lock | |
| - name: Install Node Dependencies | |
| uses: bahmutov/npm-install@v1 | |
| with: | |
| working-directory: ./js/napi | |
| useLockFile: false | |
| - name: Download artifacts | |
| uses: actions/download-artifact@v2 | |
| with: | |
| name: bindings-${{ matrix.target }} | |
| path: ./js/napi | |
| - name: List packages | |
| working-directory: ./js/napi | |
| run: ls -R . | |
| - name: Test bindings | |
| working-directory: ./js/napi | |
| run: yarn test | |
| publish: | |
| name: publish | |
| needs: test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repo | |
| uses: actions/checkout@v2 | |
| - name: Setup node | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: 16 | |
| cache: yarn | |
| cache-dependency-path: js/napi/yarn.lock | |
| - name: Install Node Dependencies | |
| uses: bahmutov/npm-install@v1 | |
| with: | |
| working-directory: ./js/napi | |
| useLockFile: false | |
| - name: Download all artifacts | |
| uses: actions/download-artifact@v2 | |
| with: | |
| path: ./js/napi/artifacts | |
| - name: Move artifacts | |
| working-directory: ./js/napi | |
| run: yarn artifacts | |
| - name: List packages | |
| working-directory: ./js/napi | |
| run: ls -R ./npm | |
| shell: bash | |
| - name: Publish | |
| working-directory: ./js/napi | |
| run: | | |
| if git log -1 --pretty=%B | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+$"; | |
| then | |
| echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc | |
| npm publish --access public | |
| elif git log -1 --pretty=%B | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+"; | |
| then | |
| echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc | |
| npm publish --tag next --access public | |
| else | |
| echo "Not a release, skipping publish" | |
| fi | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| NPM_TOKEN: ${{ secrets.NPM_TOKEN }} |