Open History to see the last commit
1name: Publish AUR package
2
3# See packaging/aur/README.md.
4
5on:
6 workflow_call:
7 inputs:
8 release_tag:
9 required: true
10 type: string
11 pkgrel:
12 required: false
13 default: "1"
14 type: string
15 secrets:
16 AUR_SSH_PRIVATE_KEY:
17 required: true
18 workflow_dispatch:
19 inputs:
20 release_tag:
21 description: "Release tag to publish"
22 required: true
23 type: string
24 pkgrel:
25 description: "Arch package release override"
26 required: false
27 default: "1"
28 type: string
29
30permissions:
31 contents: read
32
33concurrency:
34 group: publish-aur
35 cancel-in-progress: false
36
37jobs:
38 publish:
39 name: Validate and publish
40 if: github.repository == 'pingdotgg/t3code'
41 runs-on: blacksmith-8vcpu-ubuntu-2404
42 timeout-minutes: 30
43 container:
44 image: archlinux:base-devel
45
46 steps:
47 - name: Install Arch packaging tools
48 run: pacman -Syu --noconfirm --needed git github-cli jq namcap openssh sudo
49
50 - name: Checkout packaging sources
51 uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
52
53 - name: Create unprivileged build user
54 run: |
55 useradd --create-home builder
56 install -Dm0440 /dev/stdin /etc/sudoers.d/builder <<'EOF'
57 builder ALL=(root) NOPASSWD: /usr/bin/pacman
58 EOF
59
60 - name: Validate and publish package sources
61 env:
62 GH_TOKEN: ${{ github.token }}
63 RELEASE_TAG: ${{ inputs.release_tag }}
64 PKGREL: ${{ inputs.pkgrel || '1' }}
65 AUR_SSH_PRIVATE_KEY: ${{ secrets.AUR_SSH_PRIVATE_KEY }}
66 run: packaging/aur/scripts/release.sh