ci_host_based_sequential.yml

# One approach to testing changes to the asset upload to release process is to:
# 1. Fork this repo to your personal account
# 2. Go into the repo settings on your fork, go to _Actions_, go to _General_, under _Workflow permissions_, select _Read and Write permissions_, then _Save_
# 3. Add your fork as a new remote and push your branch to it
# 4. Publish a release in your personal fork with the target of the release set to the branch with your changes
# 5. Confirm the workflow completes and that assets are attached to the release as expected

name: Build host for spectre POC

on:
  workflow_dispatch:
  # Build and attach assets to any published releases
  release:
    types:
      - published
  # Test on main
  push:
    branches:
      - main
    paths:
      - "host_based/host/**"


concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true



jobs:

  compile_cli:
    name: compile_cli-${{ matrix.name }}
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        include:
          - name: linux
            os: ubuntu-20.04 # Use oldest supported non-deprecated version so we link against older glibc version which allows running binary on a wider set of Linux systems
            path: host_based/host/target/x86_64-unknown-linux-gnu/release/host
            asset_name: host-x86_64-linux-${{ github.event.release.tag_name }}
            shasum_cmd: sha256sum
            target: x86_64-unknown-linux-gnu
          - name: linux-ubuntu-18.04
            os: ubuntu-18.04 # Use oldest supported non-deprecated version so we link against older glibc version which allows running binary on a wider set of Linux systems
            path: host_based/host/target/x86_64-unknown-linux-gnu/release/host
            asset_name: host-x86_64-linux-16.04-${{ github.event.release.tag_name }}
            shasum_cmd: sha256sum
            target: x86_64-unknown-linux-gnu
              # - name: linux-arm64
              #os: ubuntu-20.04 # Use oldest supported non-deprecated version so we link against older glibc version which allows running binary on a wider set of Linux systems
              # path: target/aarch64-unknown-linux-gnu/release/dtw-tools
              # asset_name: dtw-tools-arm-linux-${{ github.event.release.tag_name }}
              # shasum_cmd: sha256sum
              # target: aarch64-unknown-linux-gnu
          - name: macos
            os: macos-latest
            path: host_based/host/target/x86_64-apple-darwin/release/host
            asset_name: host-x86_64-macos-${{ github.event.release.tag_name }}
            shasum_cmd: shasum -a 256
            target: x86_64-apple-darwin
          
    steps:
      - uses: actions/checkout@v3
        with:
          submodules: 'true'
      - uses: ./.github/actions/install-rust

      # Should no-op except for macos-arm and linux-arm cases where that target won't be installed
      - name: Install target
        run: rustup update && rustup target add wasm32-wasi wasm32-unknown-unknown ${{ matrix.target }}

      # wasmtime-fiber and binaryen fail to compile without this
      - name: Install Aarch64 GCC toolchain
        run: sudo apt-get --assume-yes install gcc-aarch64-linux-gnu g++-aarch64-linux-gnu || true
        if: matrix.target == 'aarch64-unknown-linux-gnu'


      - name: Build CLI ${{ matrix.os }}
        run: cd wasmtime && git submodule update --init && cd ../ && cd host_based/host && cargo build --release --no-default-features --features sequential --target ${{ matrix.target }}
        env:
          CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER: aarch64-linux-gnu-gcc

      - name: Archive assets
        run: gzip -k -f ${{ matrix.path }} && mv ${{ matrix.path }}.gz ${{ matrix.asset_name }}.gz

      - name: Upload assets to artifacts
        uses: actions/upload-artifact@v3
        with:
          name: ${{ matrix.asset_name }}.gz
          path: ${{ matrix.asset_name }}.gz

      - name: Upload assets to release
        if: github.event_name == 'release'
        env:
          GITHUB_TOKEN: ${{ secrets.GH }}
        run: gh release upload ${{ github.event.release.tag_name }} ${{ matrix.asset_name }}.gz

      - name: Upload assets to fixed release
        if: github.event_name == 'workflow_dispatch'
        env:
          GITHUB_TOKEN: ${{ secrets.GH }} 
        run:
          gh release upload 0.2.4 ${{ matrix.asset_name }}.gz
          
      - name: Generate asset hash
        run: ${{ matrix.shasum_cmd }} ${{ matrix.asset_name }}.gz | awk '{ print $1 }' > ${{ matrix.asset_name }}.gz.sha256

      - name: Upload asset hash to artifacts
        uses: actions/upload-artifact@v3
        with:
          name: ${{ matrix.asset_name }}.gz.sha256
          path: ${{ matrix.asset_name }}.gz.sha256

      - name: Upload asset hash to release
        if: github.event_name == 'release'
        env:
          GITHUB_TOKEN: ${{ secrets.GH }}
        run: gh release upload ${{ github.event.release.tag_name }} ${{ matrix.asset_name }}.gz.sha256

      - name: Upload asset hash to fixed release
        if: github.event_name == 'workflow_dispatch'
        env:
          GITHUB_TOKEN: ${{ secrets.GH }}
        run: gh release upload 0.2.4 ${{ matrix.asset_name }}.gz.sha256