WiP

.github/docker/debian/bullseye/amd64/Dockerfile

@@ -0,0 +1,67 @@
+ARG BUILDER_IMAGE=debian:bullseye
+ARG MAINTAINER="Andrey Volk <andrey@signalwire.com>"
+
+FROM ${BUILDER_IMAGE} AS builder
+
+ARG BUILD_NUMBER=42
+ARG GIT_SHA=0000000000
+
+MAINTAINER ${MAINTAINER}
+
+SHELL ["/bin/bash", "-c"]
+
+RUN apt-get -q update && \
+    DEBIAN_FRONTEND=noninteractive apt-get -yq install \
+        apt-transport-https \
+        build-essential \
+        ca-certificates \
+        cmake \
+        curl \
+        debhelper \
+        devscripts \
+        dh-autoreconf \
+        dos2unix \
+        doxygen \
+        git \
+        graphviz \
+        libglib2.0-dev \
+        libssl-dev \
+        lsb-release \
+        pkg-config \
+        wget
+
+RUN update-ca-certificates --fresh
+
+ENV DATA_DIR=/data
+WORKDIR ${DATA_DIR}
+
+COPY . ${DATA_DIR}
+RUN git reset --hard HEAD && git clean -xfd
+
+RUN echo "export CODENAME=$(lsb_release -sc | tr -d '\n')" | tee ~/.env && \
+    chmod +x ~/.env
+
+RUN git config --global --add safe.directory '*'
+
+# Bootstrap and Build
+RUN echo "export VERSION=$(dpkg-parsechangelog --show-field Version | cut -f1 -d'-')" | tee -a ~/.env
+RUN . ~/.env && dch \
+    --controlmaint \
+    --distribution "${CODENAME}" \
+    --force-bad-version \
+    --force-distribution \
+    --newversion "${VERSION}-${BUILD_NUMBER}-${GIT_SHA}~${CODENAME}" \
+    "Nightly build, ${GIT_SHA}"
+
+RUN apt-get -q update && \
+    mk-build-deps --install --remove debian/control --tool "apt-get -y --no-install-recommends" && \
+    apt-get -y -f install
+
+ENV DEB_BUILD_OPTIONS="parallel=1"
+RUN . ~/.env && dch -b -M -v "${VERSION}-${BUILD_NUMBER}-${GIT_SHA}~${CODENAME}" \
+  --force-distribution -D "${CODENAME}" "Nightly build, ${GIT_SHA}"
+RUN debuild -b -us -uc && mkdir OUT && mv -v ../*.deb OUT/.
+
+# Artifacts image (mandatory part, the resulting image must have a single filesystem layer)
+FROM scratch
+COPY --from=builder /data/OUT/ /

.github/docker/debian/bullseye/arm32v7/Dockerfile

@@ -0,0 +1,67 @@
+ARG BUILDER_IMAGE=arm32v7/debian:bullseye
+ARG MAINTAINER="Andrey Volk <andrey@signalwire.com>"
+
+FROM ${BUILDER_IMAGE} AS builder
+
+ARG BUILD_NUMBER=42
+ARG GIT_SHA=0000000000
+
+MAINTAINER ${MAINTAINER}
+
+SHELL ["/bin/bash", "-c"]
+
+RUN apt-get -q update && \
+    DEBIAN_FRONTEND=noninteractive apt-get -yq install \
+        apt-transport-https \
+        build-essential \
+        ca-certificates \
+        cmake \
+        curl \
+        debhelper \
+        devscripts \
+        dh-autoreconf \
+        dos2unix \
+        doxygen \
+        git \
+        graphviz \
+        libglib2.0-dev \
+        libssl-dev \
+        lsb-release \
+        pkg-config \
+        wget
+
+RUN update-ca-certificates --fresh
+
+ENV DATA_DIR=/data
+WORKDIR ${DATA_DIR}
+
+COPY . ${DATA_DIR}
+RUN git reset --hard HEAD && git clean -xfd
+
+RUN echo "export CODENAME=$(lsb_release -sc | tr -d '\n')" | tee ~/.env && \
+    chmod +x ~/.env
+
+RUN git config --global --add safe.directory '*'
+
+# Bootstrap and Build
+RUN echo "export VERSION=$(dpkg-parsechangelog --show-field Version | cut -f1 -d'-')" | tee -a ~/.env
+RUN . ~/.env && dch \
+    --controlmaint \
+    --distribution "${CODENAME}" \
+    --force-bad-version \
+    --force-distribution \
+    --newversion "${VERSION}-${BUILD_NUMBER}-${GIT_SHA}~${CODENAME}" \
+    "Nightly build, ${GIT_SHA}"
+
+RUN apt-get -q update && \
+    mk-build-deps --install --remove debian/control --tool "apt-get -y --no-install-recommends" && \
+    apt-get -y -f install
+
+ENV DEB_BUILD_OPTIONS="parallel=1"
+RUN . ~/.env && dch -b -M -v "${VERSION}-${BUILD_NUMBER}-${GIT_SHA}~${CODENAME}" \
+  --force-distribution -D "${CODENAME}" "Nightly build, ${GIT_SHA}"
+RUN debuild -b -us -uc && mkdir OUT && mv -v ../*.deb OUT/.
+
+# Artifacts image (mandatory part, the resulting image must have a single filesystem layer)
+FROM scratch
+COPY --from=builder /data/OUT/ /

.github/workflows/cicd.yml

@@ -0,0 +1,49 @@
+name: Build and Distribute
+
+on:
+  pull_request:
+  push:
+    branches:
+      - release
+      - master
+    paths:
+      - "**"
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.head_ref || github.ref }}
+
+jobs:
+  deb:
+    name: 'DEB'
+    permissions:
+      id-token: write
+      contents: read
+    uses: signalwire/actions-template/.github/workflows/cicd-docker-build-and-distribute.yml@s3rj1k
+    strategy:
+      # max-parallel: 1
+      fail-fast: false
+      matrix:
+        os:
+          - debian
+        version:
+          - bullseye
+        platform:
+          - amd64
+          - arm32v7
+    with:
+      ARTIFACTS_PATTERN: '.*\.(deb)$'
+      DOCKERFILE: .github/docker/${{ matrix.os }}/${{ matrix.version }}/${{ matrix.platform }}/Dockerfile
+      MAINTAINER: 'Andrey Volk <andrey@signalwire.com>'
+      META_FILE_PATH_PREFIX: /var/www/libsilk/${{ matrix.os }}-${{ matrix.platform }}/${{ github.run_id }}-${{ github.run_number }}
+      PLATFORM: ${{ matrix.platform }}
+      TARGET_ARTIFACT_NAME: ${{ matrix.os }}-${{ matrix.version }}-${{ matrix.platform }}-artifact
+      UPLOAD_BUILD_ARTIFACTS: ${{ github.event_name != 'pull_request' || contains(github.event.pull_request.title, ':upload-artifacts') }}
+      META_REPO: signalwire/bamboo_gha_trigger
+      META_REPO_BRANCH: libsilk/${{ github.ref_name }}/${{ matrix.os }}/${{ matrix.platform }}
+    secrets:
+      HOSTNAME: ${{ secrets.HOSTNAME }}
+      PROXY_URL: ${{ secrets.PROXY_URL }}
+      USERNAME: ${{ secrets.USERNAME }}
+      TELEPORT_TOKEN: ${{ secrets.TELEPORT_TOKEN }}
+      GH_BOT_DEPLOY_TOKEN: ${{ secrets.PAT }}