steve
bd460d7532
scripts/provision-gitea-runner.sh is a one-shot, idempotent host setup for an act_runner LXC. It mounts persistent host volumes for GOMODCACHE / GOCACHE / act-clones, pre-pulls the runner image, pre-clones the common GitHub actions, installs golangci-lint, and sets up a nightly cron to refresh the lot. Generic — no per-project state. With those persistent volumes in place, `cache: true` on actions/setup-go becomes a net negative — the action keeps tar-ing / un-tar-ing GOMODCACHE+GOCACHE through the Gitea cache backend on every job, adding ~10s per job and overwriting the volume contents. Drop it from all three jobs in ci.yml. Add a header comment block explaining the runner-side expectations and the Go version / build matrix / upload-artifact context for anyone reading later.
127 lines
4.5 KiB
YAML
127 lines
4.5 KiB
YAML
# CI workflow — runs on every PR into main.
|
|
#
|
|
# Notes for anyone editing this file:
|
|
#
|
|
# Self-hosted runner expectations
|
|
# The Gitea runners are provisioned via scripts/provision-gitea-runner.sh.
|
|
# That script bind-mounts persistent host volumes for /root/go/pkg/mod
|
|
# (GOMODCACHE), /root/.cache/go-build (GOCACHE), and /root/.cache/act
|
|
# (action clones) into every job container. As a result:
|
|
# * `cache: true` on actions/setup-go is intentionally OMITTED — the
|
|
# action would otherwise tar/untar GOMODCACHE+GOCACHE through the
|
|
# Gitea cache backend on every job, undoing the host-volume cache
|
|
# and adding ~10s of redundant zstd round-trip per job.
|
|
# * Common GitHub actions (actions/checkout, actions/setup-go,
|
|
# actions/upload-artifact, golangci/golangci-lint-action) are
|
|
# pre-cloned into /root/.cache/act on the runner, so the per-job
|
|
# "git clone https://github.com/actions/..." step is a fetch, not
|
|
# a full clone.
|
|
# * golangci-lint is pre-installed at /usr/local/bin/golangci-lint
|
|
# on the runner (latest v2.x). The golangci-lint-action below
|
|
# still pins a specific version and re-downloads — that's fine
|
|
# (deterministic CI > marginal speed) but means the host-installed
|
|
# binary is currently unused. Drop the `version:` arg below to
|
|
# use the host-installed one if you want to trade determinism
|
|
# for speed.
|
|
#
|
|
# Build matrix
|
|
# Linux amd64 + arm64 + Windows amd64. CGO_ENABLED=0 throughout —
|
|
# modernc.org/sqlite is pure-Go so no cross-compile toolchain is
|
|
# needed. -trimpath + -ldflags="-s -w" for reproducible, smaller
|
|
# binaries.
|
|
#
|
|
# Go version
|
|
# The GO_VERSION env var anchors all three jobs. Floor is set by the
|
|
# heaviest dep (modernc.org/sqlite v1.50+ requires Go 1.23+ today;
|
|
# we run 1.25 so golangci-lint's Go-version compatibility check is
|
|
# happy — see the version pin in the lint job).
|
|
#
|
|
# upload-artifact
|
|
# Pinned at v3 historically; v3 was deprecated upstream. v4 should
|
|
# work but hasn't been validated against this runner's act_runner
|
|
# version yet. Bump when convenient.
|
|
|
|
name: CI
|
|
|
|
on:
|
|
pull_request:
|
|
branches: [main]
|
|
|
|
env:
|
|
GO_VERSION: "1.25"
|
|
|
|
jobs:
|
|
test:
|
|
name: Test (linux/amd64)
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.GO_VERSION }}
|
|
# cache: true intentionally omitted — see header notes.
|
|
- name: go vet
|
|
run: go vet ./...
|
|
- name: go test
|
|
run: go test -race -coverprofile=coverage.out ./...
|
|
- name: coverage summary
|
|
run: go tool cover -func=coverage.out | tail -1
|
|
|
|
lint:
|
|
name: Lint
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.GO_VERSION }}
|
|
# cache: true intentionally omitted — see header notes.
|
|
- uses: golangci/golangci-lint-action@v7
|
|
with:
|
|
# Must be built against the same Go release as go.mod targets,
|
|
# otherwise the linter refuses to load with "Go language
|
|
# version used to build golangci-lint is lower than the
|
|
# targeted Go version". v2.5.0 is the first v2.x line built
|
|
# with Go 1.25; bump in lockstep with go.mod.
|
|
version: v2.5.0
|
|
args: --timeout=5m
|
|
|
|
build:
|
|
name: Build (${{ matrix.goos }}/${{ matrix.goarch }})
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- goos: linux
|
|
goarch: amd64
|
|
- goos: linux
|
|
goarch: arm64
|
|
- goos: windows
|
|
goarch: amd64
|
|
ext: ".exe"
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.GO_VERSION }}
|
|
# cache: true intentionally omitted — see header notes.
|
|
- name: build server + agent
|
|
env:
|
|
GOOS: ${{ matrix.goos }}
|
|
GOARCH: ${{ matrix.goarch }}
|
|
CGO_ENABLED: "0"
|
|
run: |
|
|
mkdir -p bin
|
|
go build -trimpath -ldflags="-s -w" \
|
|
-o bin/restic-manager-server-${{ matrix.goos }}-${{ matrix.goarch }}${{ matrix.ext }} \
|
|
./cmd/server
|
|
go build -trimpath -ldflags="-s -w" \
|
|
-o bin/restic-manager-agent-${{ matrix.goos }}-${{ matrix.goarch }}${{ matrix.ext }} \
|
|
./cmd/agent
|
|
- uses: actions/upload-artifact@v3
|
|
with:
|
|
name: binaries-${{ matrix.goos }}-${{ matrix.goarch }}
|
|
path: bin/*
|
|
retention-days: 7
|