It has happened

.github/workflows/publish.yml

@@ -6,256 +6,22 @@ on:
   push:
     branches:
       - master
+      - its-happening
     tags:
       - 'v[0-9]+.[0-9]+.[0-9]+'
       - 'v[0-9]+.[0-9]+.[0-9]+-**'
 
 concurrency:
   group: ${{ github.workflow }}
+  cancel-in-progress: false
 
 jobs:
-  test:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
-        with:
-          go-version: '1.21'
-      - name: Test
-        uses: ./.github/actions/test
-  docker:
-    runs-on: ubuntu-latest
-    needs: [ test ]
-    permissions:
-      packages: write
-      contents: read
-    steps:
-      - uses: actions/checkout@v4
-      - uses: docker/setup-qemu-action@v3
-      - uses: docker/setup-buildx-action@v3
-      - uses: docker/login-action@v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-      - uses: docker/metadata-action@v5
-        name: generate tags
-        id: meta
-        with:
-          images: ghcr.io/${{ github.repository }}
-          tags: |
-            type=ref,event=branch
-            type=sha,prefix=
-            type=semver,pattern={{version}}
-      - uses: docker/build-push-action@v5
-        with:
-          context: .
-          file: ./docker/Dockerfile
-          platforms: linux/amd64,linux/arm64
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-  build-linux:
-    runs-on: ubuntu-latest
-    needs: [ test ]
-    strategy:
-      matrix:
-        go-arch: [amd64, arm64]
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
-        with:
-          go-version: '1.21'
-      - name: Setup
-        run: |
-          sudo apt update
-          go generate ./...
-          if [ ${{ matrix.go-arch }} == "arm64" ]; then
-            sudo apt install -y gcc-aarch64-linux-gnu
-            echo "CC=aarch64-linux-gnu-gcc" >> $GITHUB_ENV
-          fi
-      - name: Build ${{ matrix.go-arch }}
-        env:
-          CGO_ENABLED: 1
-          GOOS: linux
-          GOARCH: ${{ matrix.go-arch }}
-        run: |
-          mkdir -p release
-          ZIP_OUTPUT=release/hostd_${GOOS}_${GOARCH}.zip
-          go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/hostd
-          cp README.md LICENSE bin/
-          zip -qj $ZIP_OUTPUT bin/*
-      - uses: actions/upload-artifact@v4
-        with:
-          name: hostd_linux_${{ matrix.go-arch }}
-          path: release/*
-  build-mac:
-    runs-on: macos-latest
-    needs: [ test ]
-    strategy:
-      matrix:
-        go-arch: [amd64, arm64]
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
-        with:
-          go-version: '1.21'
-      - name: Setup
-        env:
-          APPLE_CERT_ID: ${{ secrets.APPLE_CERT_ID }}
-          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
-          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
-          APPLE_KEY_B64: ${{ secrets.APPLE_KEY_B64 }}
-          APPLE_CERT_B64: ${{ secrets.APPLE_CERT_B64 }}
-          APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }}
-          APPLE_KEYCHAIN_PASSWORD: ${{ secrets.APPLE_KEYCHAIN_PASSWORD }}
-        run: |
-          # extract apple cert
-          APPLE_CERT_PATH=$RUNNER_TEMP/apple_cert.p12
-          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
-          echo -n "$APPLE_CERT_B64" | base64 --decode --output $APPLE_CERT_PATH
-
-          # extract apple key
-          mkdir -p ~/private_keys
-          APPLE_API_KEY_PATH=~/private_keys/AuthKey_$APPLE_API_KEY.p8
-          echo -n "$APPLE_KEY_B64" | base64 --decode --output $APPLE_API_KEY_PATH
-
-          # create temp keychain
-          security create-keychain -p "$APPLE_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
-          security default-keychain -s $KEYCHAIN_PATH
-          security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
-          security unlock-keychain -p "$APPLE_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
-
-          # import keychain
-          security import $APPLE_CERT_PATH -P $APPLE_CERT_PASSWORD -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
-          security find-identity -v $KEYCHAIN_PATH -p codesigning
-          security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k $APPLE_KEYCHAIN_PASSWORD $KEYCHAIN_PATH
-
-          # generate
-          go generate ./...
-
-          # resync system clock https://github.com/actions/runner/issues/2996#issuecomment-1833103110
-          sudo sntp -sS time.windows.com
-      - name: Build ${{ matrix.go-arch }}
-        env:
-          APPLE_CERT_ID: ${{ secrets.APPLE_CERT_ID }}
-          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
-          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
-          APPLE_KEY_B64: ${{ secrets.APPLE_KEY_B64 }}
-          APPLE_CERT_B64: ${{ secrets.APPLE_CERT_B64 }}
-          APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }}
-          APPLE_KEYCHAIN_PASSWORD: ${{ secrets.APPLE_KEYCHAIN_PASSWORD }}
-          CGO_ENABLED: 1
-          GOOS: darwin
-          GOARCH: ${{ matrix.go-arch }}
-        run: |
-          ZIP_OUTPUT=release/hostd_${GOOS}_${GOARCH}.zip
-          mkdir -p release
-          go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w' ./cmd/hostd
-          cp README.md LICENSE bin/
-          /usr/bin/codesign --deep -f -v --timestamp -o runtime,library -s $APPLE_CERT_ID bin/hostd
-          ditto -ck bin $ZIP_OUTPUT
-          xcrun notarytool submit -k ~/private_keys/AuthKey_$APPLE_API_KEY.p8 -d $APPLE_API_KEY -i $APPLE_API_ISSUER --wait --timeout 10m $ZIP_OUTPUT
-      - uses: actions/upload-artifact@v4
-        with:
-          name: hostd_darwin_${{ matrix.go-arch }}
-          path: release/*
-  build-windows:
-    runs-on: windows-latest
-    needs: [ test ]
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
-        with:
-          go-version: '1.21'
-      - name: Setup
-        shell: bash
-        run: |
-          dotnet tool install --global AzureSignTool
-          go generate ./...
-      - name: Build amd64
-        env:
-          CGO_ENABLED: 1
-          GOOS: windows
-          GOARCH: amd64
-        shell: bash
-        run: |
-          mkdir -p release
-          ZIP_OUTPUT=release/hostd_${GOOS}_${GOARCH}.zip
-          go build -tags='netgo' -trimpath -o bin/ -a -ldflags '-s -w -linkmode external -extldflags "-static"' ./cmd/hostd
-          azuresigntool sign -kvu "${{ secrets.AZURE_KEY_VAULT_URI }}" -kvi "${{ secrets.AZURE_CLIENT_ID }}" -kvt "${{ secrets.AZURE_TENANT_ID }}" -kvs "${{ secrets.AZURE_CLIENT_SECRET }}" -kvc ${{ secrets.AZURE_CERT_NAME }} -tr http://timestamp.digicert.com -v bin/hostd.exe
-          cp README.md LICENSE bin/
-          7z a $ZIP_OUTPUT ./bin/*
-      - uses: actions/upload-artifact@v4
-        with:
-          name: hostd_windows_amd64
-          path: release/*
-  combine-release-assets:
-    runs-on: ubuntu-latest
-    needs: [ build-linux, build-mac, build-windows ]
-    steps:
-      - name: Merge Artifacts
-        uses: actions/upload-artifact/merge@v4
-        with:
-          name: hostd
-
-  dispatch-homebrew: # only runs on full releases
-    if: startsWith(github.ref, 'refs/tags/v') && !contains(github.ref, '-')
-    needs: [ build-mac ]
-    runs-on: ubuntu-latest
-    steps:
-      - name: Extract Tag Name
-        id: get_tag
-        run: echo "::set-output name=tag_name::${GITHUB_REF#refs/tags/}"
-
-      - name: Dispatch
-        uses: peter-evans/repository-dispatch@v3
-        with:
-          token: ${{ secrets.PAT_REPOSITORY_DISPATCH }}
-          repository: siafoundation/homebrew-sia
-          event-type: release-tagged
-          client-payload: >
-            {
-              "description": "hostd: The Next-Gen Sia Host",
-              "tag": "${{ steps.get_tag.outputs.tag_name }}",
-              "project": "hostd",
-              "workflow_id": "${{ github.run_id }}"
-            }
-  dispatch-linux: # always runs
-    needs: [ build-linux ]
-    runs-on: ubuntu-latest
-    steps:
-      - name: Build Dispatch Payload
-        id: get_payload
-        uses: actions/github-script@v7
-        with:
-          script: |
-            const isRelease = context.ref.startsWith('refs/tags/v'),
-              isBeta = isRelease && context.ref.includes('-beta'),
-              tag = isRelease ? context.ref.replace('refs/tags/', '') : 'master';
-
-            let component = 'nightly';
-            if (isBeta) {
-              component = 'beta';
-            } else if (isRelease) {
-              component = 'main';
-            }
-
-            return {
-              description: "hostd: The Next-Gen Sia Host",
-              tag: tag,
-              project: "hostd",
-              workflow_id: context.runId,
-              component: component
-            };
-
-      - name: Dispatch
-        uses: peter-evans/repository-dispatch@v3
-        with:
-          token: ${{ secrets.PAT_REPOSITORY_DISPATCH }}
-          repository: siafoundation/linux
-          event-type: release-tagged
-          client-payload: ${{ steps.get_payload.outputs.result }}
+  publish:
+    uses: SiaFoundation/workflows/.github/workflows/go-publish.yml@master
+    secrets: inherit
+    with:
+      linux-build-args: -tags=timetzdata -trimpath -a -ldflags '-s -w -linkmode external -extldflags "-static"'
+      windows-build-args: -tags=timetzdata -trimpath -a -ldflags '-s -w -linkmode external -extldflags "-static"'
+      macos-build-args: -tags=timetzdata -trimpath -a -ldflags '-s -w'
+      cgo-enabled: 1
+      project: hostd