264e30f016
This diff forward ports ea44e99451f345474738b9010ff791759a1f1367. Original commit message: - - - This change allows for producing cloud builds using the psiphon config files. We will add those files as build secrets. Only people in the organization and collaborators with at least "write" access could trigger builds containing such secrets. Before this change, `./mk` unconditionally attempted to clone github.com/ooni/probe-private. Now, it only checks whether we need to clone _if_ files are not already there. This allows us to use GitHub actions and secrets to copy the files in there _without_ needing to clone a private repo. Cloning a private repo would require us to include as repository secret an access token with full `repo` scope, which is a very broad scope. Instead, by using secrets to include psiphon config, we are narrowing down the secrets required to make a release build. See https://github.com/ooni/probe/issues/1878 This diff WILL require forward porting to the master branch.
38 lines
1.1 KiB
YAML
38 lines
1.1 KiB
YAML
# windows builds ooniprobe for Windows
|
|
name: windows
|
|
on:
|
|
push:
|
|
branches:
|
|
- "release/**"
|
|
jobs:
|
|
build:
|
|
runs-on: "ubuntu-20.04"
|
|
steps:
|
|
- uses: actions/setup-go@v1
|
|
with:
|
|
go-version: "1.17.3"
|
|
- uses: actions/checkout@v2
|
|
with:
|
|
fetch-depth: 0
|
|
- run: sudo apt install mingw-w64
|
|
- run: |
|
|
echo -n $PSIPHON_CONFIG_KEY > ./internal/engine/psiphon-config.key
|
|
echo $PSIPHON_CONFIG_JSON_AGE_BASE64 | base64 -d > ./internal/engine/psiphon-config.json.age
|
|
env:
|
|
PSIPHON_CONFIG_KEY: ${{ secrets.PSIPHON_CONFIG_KEY }}
|
|
PSIPHON_CONFIG_JSON_AGE_BASE64: ${{ secrets.PSIPHON_CONFIG_JSON_AGE_BASE64 }}
|
|
- run: ./mk MINGW_W64_VERSION="9.3-win32" ./CLI/windows/amd64/ooniprobe.exe
|
|
- uses: actions/upload-artifact@v2
|
|
with:
|
|
name: ooniprobe.exe
|
|
path: ./CLI/windows/amd64/ooniprobe.exe
|
|
test:
|
|
needs: build
|
|
runs-on: "windows-2019"
|
|
steps:
|
|
- uses: actions/checkout@v2
|
|
- uses: actions/download-artifact@v2
|
|
with:
|
|
name: ooniprobe.exe
|
|
- run: bash.exe ./E2E/ooniprobe.sh ./ooniprobe.exe
|