sync.yml

name: sync

on:
  schedule:
    - cron: "57 2 * * *"
  workflow_dispatch:
    inputs:
      debug_with_ssh_key:
        description: 'Public SSH key to use to debug failures'
        required: false

env:
  GIT_CONFIG_PARAMETERS: "'user.name=Git for Windows Build Agent' 'user.email=ci@git-for-windows.build' 'windows.sdk64.path=${{ github.workspace }}' 'windows.sdk32.path=' 'http.sslbackend=schannel' 'core.autocrlf=false' 'checkout.workers=16'"
  HOME: "${{ github.workspace }}\\home\\git-ci"
  MSYSTEM: MSYS

jobs:
  sync:
    if: github.repository_owner == 'git-for-windows' || github.event.inputs.debug_with_ssh_key != ''
    runs-on: [Windows, ARM64]
    environment: sync
    steps:
      - name: clone git-sdk-arm64
        uses: actions/checkout@v4
        with:
          persist-credentials: true
          token: ${{ secrets.PUSH_TOKEN }}
      - name: Update all Pacman packages
        shell: pwsh
        run: |
          & .\update-via-pacman.ps1
      - name: use git-sdk-arm64's Bash and Git for Windows' git.exe
        run: "usr\\bin\\bash.exe -lc 'cygpath -aw /usr/bin >>$GITHUB_PATH && cygpath -aw /c/Program\ Files/Git/cmd/ >>$GITHUB_PATH'"
      - name: deal with large DLL files
        shell: bash
        run: |
          set -ex
          large_dlls=$(find clangarm64/bin -size +100M)
          test -n "$large_dlls" || exit 0

          # Okay, we have a problem. GitHub does not like to host files >100MB.
          # But libLLVM-<version>.dll easily blasts through that limit.
          #
          # Ideally, we would use UPX to compress that `.dll`, but there is no
          # support for compressing Windows/ARM64 files using UPX (yet).
          #
          # So let's do the next best thing and `strip` the file. Sadly, we need
          # to download the entire (also *large*) `mingw-w64-x86_64-llvm` to get
          # `llvm-strip.exe` to perform this job because the already-installed
          # `/usr/bin/strip.exe` does not know what to do with Windows/ARM64 files,
          # either.

          pacman -S --noconfirm mingw-w64-x86_64-llvm
          ret=0
          for dll in $large_dlls
          do
            /mingw64/bin/llvm-strip.exe $dll || ret=1
          done
          test 0 = $ret || exit $ret

          # Clean up; We do *not* want the x86_64 LLVM packages in git-sdk-arm64!
          pacman -R --noconfirm $(pacman -Q | grep mingw-w64-x86_64 | cut -f 1 -d ' ')
      - name: commit & push ARM64 SDK
        shell: bash
        run: |
          set -x &&
          PATH=/c/Program\ Files/Git/cmd:/usr/bin:$PATH &&
          sh -x .github/commit-sdk.sh commit &&
          git push origin ${{ github.ref }}
      - name: use MSYS2 for tmate
        if: failure() && github.event.inputs.debug_with_ssh_key != ''
        run: "usr\\bin\\bash.exe -lc 'cygpath -aw /c/msys64/usr/bin >>$GITHUB_PATH'"
      - name: Debug using tmate
        if: failure() && github.event.inputs.debug_with_ssh_key != ''
        shell: bash
        run: |
          # Install tmate
          pacman -Sy --noconfirm tmate openssh &&

          # Restrict SSH access to the "actor", i.e. the GitHub user who triggered this workflow
          mkdir -p ~/.ssh &&
          echo '${{github.event.inputs.debug_with_ssh_key}}' >~/.ssh/authorized_keys &&

          # Generate an SSH key (needed for tmate)
          echo -e 'y\n' | ssh-keygen -q -t rsa -N '' -f ~/.ssh/id_rsa &&

          # Start tmate session
          export CHERE_INVOKING=1 &&
          tmate -S /tmp/tmate.sock -a ~/.ssh/authorized_keys new-session -d &&
          tmate -S /tmp/tmate.sock wait tmate-ready &&

          # Print SSH invocation every 5 seconds, until tmate session has terminated
          while test -e /tmp/tmate.sock
          do
            tmate -S /tmp/tmate.sock display -p '#{tmate_ssh}'
            sleep 5
          done