build-packages.yaml

name: Build packages.
on:
  push:
    tags:
      - "v*.*.*"
  workflow_dispatch:

permissions:
  contents: read

jobs:

  verify-version:
    name: Verify tag version matches Cargo.toml
    if: startsWith(github.ref, 'refs/tags/')
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4
      - name: Verify version
        run: |
          # Extract version from Cargo.toml
          CARGO_VERSION=$(grep '^version =' Cargo.toml | head -1 | cut -d '"' -f2)
          # Extract version from git tag (remove 'v' prefix)
          TAG_VERSION=${GITHUB_REF_NAME#v}
          
          echo "Cargo.toml version: $CARGO_VERSION"
          echo "Git tag version: $TAG_VERSION"
          
          # Compare versions
          if [ "$CARGO_VERSION" != "$TAG_VERSION" ]; then
            echo "Error: Version mismatch between Cargo.toml ($CARGO_VERSION) and git tag ($TAG_VERSION)"
            exit 1
          else
            echo "Version verification successful: $CARGO_VERSION matches $TAG_VERSION"
          fi

  vendor:
    name: Release vendor.tar.gz.
    needs: [verify-version]
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4
      - name: Create vendor.tar.gz
        run: |
          make vendor.tar.gz && 
          make vendor-licenses.txt &&
          sha256sum vendor.tar.gz > vendor-sha256sum.txt
      - name: Release vendor.tar.gz
        if: startsWith(github.ref, 'refs/tags/')
        run: |
          gh release upload ${{ github.ref_name }} ./vendor.tar.gz &&
          gh release upload ${{ github.ref_name }} ./vendor-sha256sum.txt &&
          gh release upload ${{ github.ref_name }} ./vendor-licenses.txt
        env:
          GITHUB_TOKEN: ${{ github.TOKEN }}

  deb:
    strategy:
      matrix:
        image: ["ubuntu:22.04", "ubuntu:24.04", "debian:12"]
    name: Build deb packages.
    needs: [verify-version]
    runs-on: ubuntu-latest
    container:
      image: ${{ matrix.image }}
      env:
        DEBIAN_FRONTEND: noninteractive
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4
      - name: Install packages
        run: |
          apt-get update && apt-get install git cmake wget build-essential pkg-config libssl-dev clang g++ -y --option=Dpkg::Options::=--force-confdef &&
          wget -q https://static.rust-lang.org/dist/rust-1.87.0-x86_64-unknown-linux-gnu.tar.gz -O /tmp/rust.tar.gz &&
          cd /tmp && tar xf rust.tar.gz && ./rust-*-x86_64-unknown-linux-gnu/install.sh
      - name: Build binaries in release mode
        run: JEMALLOC_SYS_WITH_MALLOC_CONF="dirty_decay_ms:30000,muzzy_decay_ms:30000,background_thread:true,metadata_thp:auto" cargo build --release
      - name: Prepare output dir
        run: mkdir -p ./build_package/usr/bin && install ./target/release/pg_doorman ./build_package/usr/bin && install ./target/release/patroni_proxy ./build_package/usr/bin && mkdir -p ./out/
      - name: Check versions
        run: ./build_package/usr/bin/pg_doorman --version && ./build_package/usr/bin/patroni_proxy --version && cat /etc/debian_version
      - name: Fix package name
        run: |
          export PACKAGE_NAME=pg_doorman-${{ matrix.image }}.deb &&
          export PACKAGE_NAME=$(echo $PACKAGE_NAME | sed 's|:|-|g') &&
          echo PACKAGE_NAME=$PACKAGE_NAME >> $GITHUB_ENV
      - name: Package
        uses: bpicode/github-action-fpm@7502b06a5a58390398d4002bd284f8cb3caae6eb
        with:
          fpm_opts: "--chdir ./build_package/ --deb-no-default-config-files --depends openssl --name pg-doorman --version ${{ github.ref_name }} -t deb -s dir"
      - name: Prepare package
        run: mkdir -p ./package/ && mv *.deb ./package/${{ env.PACKAGE_NAME }} && ls -lah ./package/
      - name: Test package
        run: dpkg -c ./package/${{ env.PACKAGE_NAME }} && dpkg -i ./package/${{ env.PACKAGE_NAME }} && pg_doorman --version
      - name: Upload package
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.PACKAGE_NAME }}
          path: ./package/${{ env.PACKAGE_NAME }}

  rpm:
    strategy:
      matrix:
        image: ["rockylinux:9", "rockylinux:8", "almalinux:9"]
    name: Build rpm packages.
    needs: [verify-version]
    runs-on: ubuntu-latest
    container:
      image: ${{ matrix.image }}
      env:
        DEBIAN_FRONTEND: noninteractive
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4
      - name: Install packages
        run: |
          yum install -y @"Development Tools" openssl-devel wget &&
          wget -q https://static.rust-lang.org/dist/rust-1.87.0-x86_64-unknown-linux-gnu.tar.gz -O /tmp/rust.tar.gz &&
          cd /tmp && tar xf rust.tar.gz && ./rust-*-x86_64-unknown-linux-gnu/install.sh
      - name: Build binaries in release mode
        run: JEMALLOC_SYS_WITH_MALLOC_CONF="dirty_decay_ms:30000,muzzy_decay_ms:30000,background_thread:true,metadata_thp:auto" cargo build --release
      - name: Prepare output dir
        run: mkdir -p ./build_package/usr/bin && install ./target/release/pg_doorman ./build_package/usr/bin && install ./target/release/patroni_proxy ./build_package/usr/bin && mkdir -p ./out/
      - name: Check versions
        run: ./build_package/usr/bin/pg_doorman --version && ./build_package/usr/bin/patroni_proxy --version && cat /etc/system-release
      - name: Fix package name
        run: |
          export PACKAGE_NAME=pg_doorman-${{ matrix.image }}.rpm &&
          export PACKAGE_NAME=$(echo $PACKAGE_NAME | sed 's|:|-|g') &&
          echo PACKAGE_NAME=$PACKAGE_NAME >> $GITHUB_ENV
      - name: Package
        uses: bpicode/github-action-fpm@7502b06a5a58390398d4002bd284f8cb3caae6eb
        with:
          fpm_opts: "--chdir ./build_package/ --depends openssl --name pg-doorman --version ${{ github.ref_name }} -t rpm -s dir"
      - name: Prepare package
        run: mkdir -p ./package/ && mv *.rpm ./package/${{ env.PACKAGE_NAME }} && ls -lah ./package/
      - name: Test package
        run: rpm -qlp ./package/${{ env.PACKAGE_NAME }} && rpm -i ./package/${{ env.PACKAGE_NAME }} && pg_doorman --version
      - name: Upload package
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.PACKAGE_NAME }}
          path: ./package/${{ env.PACKAGE_NAME }}

  static-binary:
    name: Build static musl binary.
    needs: [verify-version]
    runs-on: ubuntu-latest
    container:
      image: rust:1.87.0-alpine
      env:
        JEMALLOC_SYS_WITH_MALLOC_CONF: "dirty_decay_ms:30000,muzzy_decay_ms:30000,background_thread:true,metadata_thp:auto"
        OPENSSL_STATIC: "1"
        PKG_CONFIG_ALL_STATIC: "1"
    steps:
      - name: Install dependencies
        run: apk add --no-cache musl-dev openssl-dev openssl-libs-static pkgconfig perl make git file
      - name: Checkout Repository
        uses: actions/checkout@v4
      - name: Build static binary
        run: cargo build --release --target x86_64-unknown-linux-musl
      - name: Verify static linking
        run: |
          file target/x86_64-unknown-linux-musl/release/pg_doorman
          file target/x86_64-unknown-linux-musl/release/patroni_proxy
          file target/x86_64-unknown-linux-musl/release/pg_doorman | grep -E "static(-pie)? linked"
          file target/x86_64-unknown-linux-musl/release/patroni_proxy | grep -E "static(-pie)? linked"
      - name: Check versions
        run: |
          target/x86_64-unknown-linux-musl/release/pg_doorman --version
          target/x86_64-unknown-linux-musl/release/patroni_proxy --version
      - name: Prepare artifacts
        run: |
          mkdir -p ./artifacts
          cp target/x86_64-unknown-linux-musl/release/pg_doorman ./artifacts/pg_doorman-linux-amd64-static
          cp target/x86_64-unknown-linux-musl/release/patroni_proxy ./artifacts/patroni_proxy-linux-amd64-static
      - name: Upload pg_doorman static binary
        uses: actions/upload-artifact@v4
        with:
          name: pg_doorman-linux-amd64-static
          path: ./artifacts/pg_doorman-linux-amd64-static
      - name: Upload patroni_proxy static binary
        uses: actions/upload-artifact@v4
        with:
          name: patroni_proxy-linux-amd64-static
          path: ./artifacts/patroni_proxy-linux-amd64-static

  release-packages:
    name: Release packages.
    needs: ['deb', 'rpm']
    runs-on: ubuntu-latest
    permissions:
      contents: write
    strategy:
      matrix:
        package:
          - "pg_doorman-rockylinux-9.rpm"
          - "pg_doorman-rockylinux-8.rpm"
          - "pg_doorman-almalinux-9.rpm"
          - "pg_doorman-ubuntu-22.04.deb"
          - "pg_doorman-ubuntu-24.04.deb"
          - "pg_doorman-debian-12.deb"
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4
      - name: Download package
        uses: actions/download-artifact@v4
        with:
          name: "${{ matrix.package }}"
          path: "./packages/"
      - name: Release package
        if: startsWith(github.ref, 'refs/tags/')
        run: gh release upload ${{ github.ref_name }} ./packages/${{ matrix.package }}
        env:
          GITHUB_TOKEN: ${{ github.TOKEN }}

  release-static-binaries:
    name: Release static binaries.
    needs: ['static-binary']
    runs-on: ubuntu-latest
    permissions:
      contents: write
    strategy:
      matrix:
        package:
          - "pg_doorman-linux-amd64-static"
          - "patroni_proxy-linux-amd64-static"
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4
      - name: Download package
        uses: actions/download-artifact@v4
        with:
          name: "${{ matrix.package }}"
          path: "./packages/"
      - name: Release package
        if: startsWith(github.ref, 'refs/tags/')
        run: gh release upload ${{ github.ref_name }} ./packages/${{ matrix.package }}
        env:
          GITHUB_TOKEN: ${{ github.TOKEN }}

  docker-image:
    name: Build docker image and push to registry
    needs: [verify-version]
    runs-on: ubuntu-latest
    permissions:
      packages: write
      contents: read
    strategy:
      fail-fast: false

    steps:
      - uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ github.TOKEN }}

      - name: Build and push
        id: docker-build
        uses: docker/build-push-action@v6
        with:
          push: true
          file: ./Dockerfile
          platforms: linux/amd64,linux/arm64
          tags: | 
            ghcr.io/${{ github.repository_owner }}/${{ github.event.repository.name }}:latest
            ghcr.io/${{ github.repository_owner }}/${{ github.event.repository.name }}:${{ github.ref_name }}