ed7824869c
## Issue Addressed The latest stable version (1.69.0) of Rust was released on 20 April and contains this change: - [Update the minimum external LLVM to 14.](https://github.com/rust-lang/rust/pull/107573/) This impacts some of our CI workflows (build and release-test-windows) that uses LLVM 13.0. This PR updates the workflows to install LLVM 15.0. **UPDATE**: Also updated `h2` to address [this issue](https://github.com/advisories/GHSA-f8vr-r385-rh5r)
299 lines
17 KiB
YAML
299 lines
17 KiB
YAML
name: Release Suite
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- v*
|
|
|
|
env:
|
|
DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
|
|
DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
|
|
REPO_NAME: ${{ github.repository_owner }}/lighthouse
|
|
IMAGE_NAME: ${{ github.repository_owner }}/lighthouse
|
|
|
|
jobs:
|
|
extract-version:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Extract version
|
|
run: echo "VERSION=$(echo ${GITHUB_REF#refs/tags/})" >> $GITHUB_OUTPUT
|
|
id: extract_version
|
|
outputs:
|
|
VERSION: ${{ steps.extract_version.outputs.VERSION }}
|
|
build:
|
|
name: Build Release
|
|
strategy:
|
|
matrix:
|
|
arch: [aarch64-unknown-linux-gnu,
|
|
aarch64-unknown-linux-gnu-portable,
|
|
x86_64-unknown-linux-gnu,
|
|
x86_64-unknown-linux-gnu-portable,
|
|
x86_64-apple-darwin,
|
|
x86_64-apple-darwin-portable,
|
|
x86_64-windows,
|
|
x86_64-windows-portable]
|
|
include:
|
|
- arch: aarch64-unknown-linux-gnu
|
|
platform: ubuntu-latest
|
|
profile: maxperf
|
|
- arch: aarch64-unknown-linux-gnu-portable
|
|
platform: ubuntu-latest
|
|
profile: maxperf
|
|
- arch: x86_64-unknown-linux-gnu
|
|
platform: ubuntu-latest
|
|
profile: maxperf
|
|
- arch: x86_64-unknown-linux-gnu-portable
|
|
platform: ubuntu-latest
|
|
profile: maxperf
|
|
- arch: x86_64-apple-darwin
|
|
platform: macos-latest
|
|
profile: maxperf
|
|
- arch: x86_64-apple-darwin-portable
|
|
platform: macos-latest
|
|
profile: maxperf
|
|
- arch: x86_64-windows
|
|
platform: windows-2019
|
|
profile: maxperf
|
|
- arch: x86_64-windows-portable
|
|
platform: windows-2019
|
|
profile: maxperf
|
|
|
|
runs-on: ${{ matrix.platform }}
|
|
needs: extract-version
|
|
steps:
|
|
- name: Checkout sources
|
|
uses: actions/checkout@v3
|
|
- name: Get latest version of stable Rust
|
|
run: rustup update stable
|
|
|
|
# ==============================
|
|
# Windows dependencies
|
|
# ==============================
|
|
|
|
- uses: KyleMayes/install-llvm-action@v1
|
|
if: startsWith(matrix.arch, 'x86_64-windows')
|
|
with:
|
|
version: "15.0"
|
|
directory: ${{ runner.temp }}/llvm
|
|
- name: Set LIBCLANG_PATH
|
|
if: startsWith(matrix.arch, 'x86_64-windows')
|
|
run: echo "LIBCLANG_PATH=$((gcm clang).source -replace "clang.exe")" >> $env:GITHUB_ENV
|
|
|
|
# ==============================
|
|
# Windows & Mac dependencies
|
|
# ==============================
|
|
- name: Install Protoc
|
|
if: contains(matrix.arch, 'darwin') || contains(matrix.arch, 'windows')
|
|
uses: arduino/setup-protoc@e52d9eb8f7b63115df1ac544a1376fdbf5a39612
|
|
with:
|
|
repo-token: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
# ==============================
|
|
# Builds
|
|
# ==============================
|
|
|
|
- name: Build Lighthouse for aarch64-unknown-linux-gnu-portable
|
|
if: matrix.arch == 'aarch64-unknown-linux-gnu-portable'
|
|
run: |
|
|
cargo install cross
|
|
env CROSS_PROFILE=${{ matrix.profile }} make build-aarch64-portable
|
|
|
|
- name: Build Lighthouse for aarch64-unknown-linux-gnu
|
|
if: matrix.arch == 'aarch64-unknown-linux-gnu'
|
|
run: |
|
|
cargo install cross
|
|
env CROSS_PROFILE=${{ matrix.profile }} make build-aarch64
|
|
|
|
- name: Build Lighthouse for x86_64-unknown-linux-gnu-portable
|
|
if: matrix.arch == 'x86_64-unknown-linux-gnu-portable'
|
|
run: |
|
|
cargo install cross
|
|
env CROSS_PROFILE=${{ matrix.profile }} make build-x86_64-portable
|
|
|
|
- name: Build Lighthouse for x86_64-unknown-linux-gnu
|
|
if: matrix.arch == 'x86_64-unknown-linux-gnu'
|
|
run: |
|
|
cargo install cross
|
|
env CROSS_PROFILE=${{ matrix.profile }} make build-x86_64
|
|
|
|
- name: Move cross-compiled binary
|
|
if: startsWith(matrix.arch, 'aarch64')
|
|
run: mv target/aarch64-unknown-linux-gnu/${{ matrix.profile }}/lighthouse ~/.cargo/bin/lighthouse
|
|
|
|
- name: Move cross-compiled binary
|
|
if: startsWith(matrix.arch, 'x86_64-unknown-linux-gnu')
|
|
run: mv target/x86_64-unknown-linux-gnu/${{ matrix.profile }}/lighthouse ~/.cargo/bin/lighthouse
|
|
|
|
- name: Build Lighthouse for x86_64-apple-darwin portable
|
|
if: matrix.arch == 'x86_64-apple-darwin-portable'
|
|
run: cargo install --path lighthouse --force --locked --features portable,gnosis --profile ${{ matrix.profile }}
|
|
|
|
- name: Build Lighthouse for x86_64-apple-darwin modern
|
|
if: matrix.arch == 'x86_64-apple-darwin'
|
|
run: cargo install --path lighthouse --force --locked --features modern,gnosis --profile ${{ matrix.profile }}
|
|
|
|
- name: Build Lighthouse for Windows portable
|
|
if: matrix.arch == 'x86_64-windows-portable'
|
|
# NOTE: profile set to release until this rustc issue is fixed:
|
|
#
|
|
# https://github.com/rust-lang/rust/issues/107781
|
|
#
|
|
# tracked at: https://github.com/sigp/lighthouse/issues/3964
|
|
run: cargo install --path lighthouse --force --locked --features portable,gnosis --profile release
|
|
|
|
- name: Build Lighthouse for Windows modern
|
|
if: matrix.arch == 'x86_64-windows'
|
|
# NOTE: profile set to release (see above)
|
|
run: cargo install --path lighthouse --force --locked --features modern,gnosis --profile release
|
|
|
|
- name: Configure GPG and create artifacts
|
|
if: startsWith(matrix.arch, 'x86_64-windows') != true
|
|
env:
|
|
GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}
|
|
GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
|
|
run: |
|
|
export GPG_TTY=$(tty)
|
|
echo "$GPG_SIGNING_KEY" | gpg --batch --import
|
|
mkdir artifacts
|
|
mv ~/.cargo/bin/lighthouse ./artifacts
|
|
cd artifacts
|
|
tar -czf lighthouse-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz lighthouse
|
|
echo "$GPG_PASSPHRASE" | gpg --passphrase-fd 0 --pinentry-mode loopback --batch -ab lighthouse-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz
|
|
mv *tar.gz* ..
|
|
|
|
- name: Configure GPG and create artifacts Windows
|
|
if: startsWith(matrix.arch, 'x86_64-windows')
|
|
env:
|
|
GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}
|
|
GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
|
|
run: |
|
|
echo $env:GPG_SIGNING_KEY | gpg --batch --import
|
|
mkdir artifacts
|
|
move $env:USERPROFILE/.cargo/bin/lighthouse.exe ./artifacts
|
|
cd artifacts
|
|
tar -czf lighthouse-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz lighthouse.exe
|
|
gpg --passphrase "$env:GPG_PASSPHRASE" --batch --pinentry-mode loopback -ab lighthouse-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz
|
|
move *tar.gz* ..
|
|
|
|
# =======================================================================
|
|
# Upload artifacts
|
|
# This is required to share artifacts between different jobs
|
|
# =======================================================================
|
|
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v3
|
|
with:
|
|
name: lighthouse-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz
|
|
path: lighthouse-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz
|
|
|
|
- name: Upload signature
|
|
uses: actions/upload-artifact@v3
|
|
with:
|
|
name: lighthouse-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz.asc
|
|
path: lighthouse-${{ needs.extract-version.outputs.VERSION }}-${{ matrix.arch }}.tar.gz.asc
|
|
|
|
draft-release:
|
|
name: Draft Release
|
|
needs: [build, extract-version]
|
|
runs-on: ubuntu-latest
|
|
env:
|
|
VERSION: ${{ needs.extract-version.outputs.VERSION }}
|
|
steps:
|
|
# This is necessary for generating the changelog. It has to come before "Download Artifacts" or else it deletes the artifacts.
|
|
- name: Checkout sources
|
|
uses: actions/checkout@v3
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
# ==============================
|
|
# Download artifacts
|
|
# ==============================
|
|
|
|
- name: Download artifacts
|
|
uses: actions/download-artifact@v3
|
|
|
|
# ==============================
|
|
# Create release draft
|
|
# ==============================
|
|
|
|
- name: Generate Full Changelog
|
|
id: changelog
|
|
run: |
|
|
echo "CHANGELOG<<EOF" >> $GITHUB_OUTPUT
|
|
echo "$(git log --pretty=format:"- %s" $(git describe --tags --abbrev=0 ${{ env.VERSION }}^)..${{ env.VERSION }})" >> $GITHUB_OUTPUT
|
|
echo "EOF" >> $GITHUB_OUTPUT
|
|
|
|
- name: Create Release Draft
|
|
env:
|
|
GITHUB_USER: ${{ github.repository_owner }}
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
# The formatting here is borrowed from OpenEthereum: https://github.com/openethereum/openethereum/blob/main/.github/workflows/build.yml
|
|
run: |
|
|
body=$(cat <<- "ENDBODY"
|
|
<Rick and Morty character>
|
|
|
|
## Testing Checklist (DELETE ME)
|
|
|
|
- [ ] Run on synced Prater Sigma Prime nodes.
|
|
- [ ] Run on synced Canary (mainnet) Sigma Prime nodes.
|
|
- [ ] Resync a Prater node.
|
|
- [ ] Resync a mainnet node.
|
|
|
|
## Release Checklist (DELETE ME)
|
|
|
|
- [ ] Merge `unstable` -> `stable`.
|
|
- [ ] Ensure docker images are published (check `latest` and the version tag).
|
|
- [ ] Prepare Discord post.
|
|
- [ ] Prepare Twitter post.
|
|
- [ ] Prepare mailing list email.
|
|
|
|
## Summary
|
|
|
|
Add a summary.
|
|
|
|
## Update Priority
|
|
|
|
This table provides priorities for which classes of users should update particular components.
|
|
|
|
|User Class |Beacon Node | Validator Client|
|
|
--- | --- | ---
|
|
|Staking Users| <TODO> | <TODO> |
|
|
|Non-Staking Users| <TODO>|---|
|
|
|
|
*See [Update
|
|
Priorities](https://lighthouse-book.sigmaprime.io/installation-priorities.html)
|
|
more information about this table.*
|
|
|
|
## All Changes
|
|
|
|
${{ steps.changelog.outputs.CHANGELOG }}
|
|
|
|
## Binaries
|
|
|
|
[See pre-built binaries documentation.](https://lighthouse-book.sigmaprime.io/installation-binaries.html)
|
|
|
|
The binaries are signed with Sigma Prime's PGP key: `15E66D941F697E28F49381F426416DC3F30674B0`
|
|
|
|
| System | Architecture | Binary | PGP Signature |
|
|
|:---:|:---:|:---:|:---|
|
|
| <img src="https://simpleicons.org/icons/apple.svg" style="width: 32px;"/> | x86_64 | [lighthouse-${{ env.VERSION }}-x86_64-apple-darwin.tar.gz](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-apple-darwin.tar.gz) | [PGP Signature](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-apple-darwin.tar.gz.asc) |
|
|
| <img src="https://simpleicons.org/icons/apple.svg" style="width: 32px;"/> | x86_64 | [lighthouse-${{ env.VERSION }}-x86_64-apple-darwin-portable.tar.gz](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-apple-darwin-portable.tar.gz) | [PGP Signature](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-apple-darwin-portable.tar.gz.asc) |
|
|
| <img src="https://simpleicons.org/icons/linux.svg" style="width: 32px;"/> | x86_64 | [lighthouse-${{ env.VERSION }}-x86_64-unknown-linux-gnu.tar.gz](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-unknown-linux-gnu.tar.gz) | [PGP Signature](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-unknown-linux-gnu.tar.gz.asc) |
|
|
| <img src="https://simpleicons.org/icons/linux.svg" style="width: 32px;"/> | x86_64 | [lighthouse-${{ env.VERSION }}-x86_64-unknown-linux-gnu-portable.tar.gz](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-unknown-linux-gnu-portable.tar.gz) | [PGP Signature](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-unknown-linux-gnu-portable.tar.gz.asc) |
|
|
| <img src="https://simpleicons.org/icons/raspberrypi.svg" style="width: 32px;"/> | aarch64 | [lighthouse-${{ env.VERSION }}-aarch64-unknown-linux-gnu.tar.gz](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-aarch64-unknown-linux-gnu.tar.gz) | [PGP Signature](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-aarch64-unknown-linux-gnu.tar.gz.asc) |
|
|
| <img src="https://simpleicons.org/icons/raspberrypi.svg" style="width: 32px;"/> | aarch64 | [lighthouse-${{ env.VERSION }}-aarch64-unknown-linux-gnu-portable.tar.gz](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-aarch64-unknown-linux-gnu-portable.tar.gz) | [PGP Signature](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-aarch64-unknown-linux-gnu-portable.tar.gz.asc) |
|
|
| <img src="https://simpleicons.org/icons/windows.svg" style="width: 32px;"/> | x86_64 | [lighthouse-${{ env.VERSION }}-x86_64-windows.tar.gz](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-windows.tar.gz) | [PGP Signature](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-windows.tar.gz.asc) |
|
|
| <img src="https://simpleicons.org/icons/windows.svg" style="width: 32px;"/> | x86_64 | [lighthouse-${{ env.VERSION }}-x86_64-windows-portable.tar.gz](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-windows-portable.tar.gz) | [PGP Signature](https://github.com/${{ env.REPO_NAME }}/releases/download/${{ env.VERSION }}/lighthouse-${{ env.VERSION }}-x86_64-windows-portable.tar.gz.asc) |
|
|
| | | | |
|
|
| **System** | **Option** | - | **Resource** |
|
|
| <img src="https://simpleicons.org/icons/docker.svg" style="width: 32px;"/> | Docker | [${{ env.VERSION }}](https://hub.docker.com/r/${{ env.IMAGE_NAME }}/tags?page=1&ordering=last_updated&name=${{ env.VERSION }}) | [${{ env.IMAGE_NAME }}](https://hub.docker.com/r/${{ env.IMAGE_NAME }}) |
|
|
ENDBODY
|
|
)
|
|
assets=()
|
|
for asset in ./lighthouse-*.tar.gz*; do
|
|
assets+=("-a" "$asset/$asset")
|
|
done
|
|
tag_name="${{ env.VERSION }}"
|
|
echo "$body" | hub release create --draft "${assets[@]}" -F "-" "$tag_name"
|