name: build

on:
  # TODO: Enable once we have conditional build logic built
  # pull_request:
  #   paths:
  #     - 'srcpkgs/**'
  push:
    paths:
      - 'srcpkgs/**'
      - '.github/**' # for easier debugging

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  changedpkgs:
    name: Check package changes
    runs-on: ubuntu-latest
    if: "!contains(github.event.pull_request.title, '[ci skip]') && !contains(github.event.pull_request.body, '[ci skip]')"

    outputs:
      changed: ${{ steps.grabchanged.outputs.changed }}

    steps:
      - name: checkout local templates
        uses: actions/checkout@v4
        with:
          ref: ${{ github.head_ref }}
          fetch-depth: 0

      - id: grabchanged
        run: |
          # write changes to detected_templates
          .github/changed_templates.sh
          # move them to step output
          echo changed="$(cat detected_templates)" >> $GITHUB_OUTPUT
      - run: |
          echo "${{ steps.grabchanged.outputs.changed }}"

  build:
    name: Build packages
    runs-on: ubuntu-latest
    needs: [ changedpkgs ]
    if: "needs.changedpkgs.outputs.changed != '' && !contains(github.event.pull_request.title, '[ci skip]') && !contains(github.event.pull_request.body, '[ci skip]')"

    strategy:
      fail-fast: false
      matrix:
        config:
          - { arch: x86_64,       host: x86_64,      libc: glibc, platform: linux/amd64, test: 1 }
          # - { arch: i686,         host: i686,        libc: glibc, platform: linux/386,   test: 1 }
          # - { arch: aarch64,      host: x86_64,      libc: glibc, platform: linux/amd64, test: 0 }
          # - { arch: armv7l,       host: x86_64,      libc: glibc, platform: linux/amd64, test: 0 }
          # - { arch: x86_64-musl,  host: x86_64-musl, libc: musl,  platform: linux/amd64, test: 1 }
          # - { arch: armv6l-musl,  host: x86_64-musl, libc: musl,  platform: linux/amd64, test: 0 }
          # - { arch: aarch64-musl, host: x86_64-musl, libc: musl,  platform: linux/amd64, test: 0 }

    container:
      image: ghcr.io/void-linux/void-${{ matrix.config.libc }}-full:20250227R1
      options: --platform ${{ matrix.config.platform }} --privileged
      volumes:
        - /dev:/dev
      env:
        ARCH: '${{ matrix.config.arch }}'
        BOOTSTRAP: '${{ matrix.config.host }}'
        TEST: '${{ matrix.config.test }}'

    steps:
      - name: Prepare container
        run: |
          # switch to repo-ci mirror
          mkdir -p /etc/xbps.d && cp /usr/share/xbps.d/*-repository-*.conf /etc/xbps.d/
          sed -i 's|repo-default|repo-ci|g' /etc/xbps.d/*-repository-*.conf
          # install dependencies
          xbps-install -Syu xbps && xbps-install -yu && xbps-install -y sudo bash curl git
          # create non-root user
          useradd -G xbuilder -M builder

      - name: checkout upstream templates
        uses: actions/checkout@v4
        with:
          repository: void-linux/void-packages
          ref: master
          fetch-depth: 1

      - name: checkout local templates
        uses: actions/checkout@v4
        with:
          ref: ${{ github.head_ref }}
          path: added-packages

      - name: copy
        run: cp -rv added-packages/srcpkgs/* srcpkgs

      - name: Prepare masterdir
        run: |
          chown -R builder:builder . &&
          sudo -Eu builder common/travis/set_mirror.sh &&
          sudo -Eu builder common/travis/prepare.sh &&
          common/travis/fetch-xtools.sh

      - name: Find changed templates
        env:
          CHANGED: ${{ needs.changedpkgs.outputs.changed }}
        run: sudo -Eu builder echo "$CHANGED" | sed 's/ /\n/g' > /tmp/templates

      - name: Build and check packages
        run: sudo -Eu builder common/travis/build.sh "$BOOTSTRAP" "$ARCH" "$TEST"

      - name: Show files
        run: sudo -Eu builder common/travis/show_files.sh "$BOOTSTRAP" "$ARCH"

      # - name: Compare to previous
      #   run: sudo -Eu builder common/travis/xpkgdiff.sh "$BOOTSTRAP" "$ARCH"

      # - name: Check file conflicts
      #   if: matrix.config.arch == 'x86_64' # the arch indexed in xlocate
      #   run: |
      #     if [ -s /tmp/templates ]; then
      #         export XDG_CACHE_HOME="$PWD/.cache"
      #         sudo -Eu builder xlocate -S &&
      #         sudo -Eu builder common/scripts/lint-conflicts
      #     fi

      # - name: Verify repository state
      #   run: |
      #     mkdir -p /check-install &&
      #     chown builder:builder /check-install &&
      #     sudo -Eu builder common/travis/check-install.sh "$BOOTSTRAP" "$ARCH"

      - name: sign
        working-directory: hostdir/binpkgs/
        run: |
          xbps-rindex -r $PWD

          echo "${{ secrets.PRIV_KEY }}" > $HOME/privkey
          xbps-rindex -s --signedby "${{ secrets.SIGNER }}" --privkey $HOME/privkey $PWD
          xbps-rindex -S --privkey $HOME/privkey $PWD/*.xbps
          rm $HOME/privkey

          xbps-rindex -c $PWD

      - name: checksum
        working-directory: hostdir/binpkgs/
        run: |
          for pkg in *.xbps; do sha256sum "$pkg" | tee "$pkg".sha256sum; done
          for pkg in *.xbps; do sha512sum "$pkg" | tee "$pkg".sha512sum; done

      - name: publish to pages
        uses: peaceiris/actions-gh-pages@v4
        # If you're changing the branch from main,
        # also change the `main` in `refs/heads/main`
        # below accordingly.
        if: github.ref == 'refs/heads/main'
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          publish_dir: hostdir/binpkgs