a4e934a4e9
Some checks failed
Build Talos CM5 Image / build (push) Failing after 28s
The hardcoded job-level PATH env wiped out nvm/node, breaking actions/checkout. Use GITHUB_PATH to prepend GNU sed's gnubin directory while preserving the runner's inherited PATH. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
118 lines
4.5 KiB
YAML
118 lines
4.5 KiB
YAML
# Daily upstream update check with auto-build
|
|
#
|
|
# Detects new Talos OS and RPi kernel versions, applies updates,
|
|
# smoke-tests patches, and pushes a release tag (which triggers build.yaml).
|
|
# Falls back to creating a Gitea issue if patches fail to apply.
|
|
|
|
name: Check Upstream Updates
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '0 8 * * *' # Daily at 08:00 UTC
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
check-and-build:
|
|
runs-on: [self-hosted, macos]
|
|
timeout-minutes: 15
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0 # Need full history for tag-based build numbering
|
|
|
|
- name: Install dependencies
|
|
run: |
|
|
for pkg in make gnu-sed crane jq; do
|
|
brew list --formula "$pkg" &>/dev/null || brew install "$pkg"
|
|
done
|
|
echo "/opt/homebrew/opt/gnu-sed/libexec/gnubin" >> "$GITHUB_PATH"
|
|
|
|
- name: Check for upstream updates
|
|
id: check
|
|
run: |
|
|
chmod +x scripts/check-upstream.sh
|
|
scripts/check-upstream.sh >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Run auto-update
|
|
if: steps.check.outputs.talos_update == 'true' || steps.check.outputs.rpi_update == 'true'
|
|
id: update
|
|
env:
|
|
TALOS_UPDATE: ${{ steps.check.outputs.talos_update }}
|
|
RPI_UPDATE: ${{ steps.check.outputs.rpi_update }}
|
|
LATEST_TALOS: ${{ steps.check.outputs.talos_latest }}
|
|
LATEST_RPI_TAG: ${{ steps.check.outputs.rpi_latest }}
|
|
run: |
|
|
chmod +x scripts/auto-update.sh
|
|
scripts/auto-update.sh >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Commit and tag
|
|
if: steps.update.outputs.patch_failed != 'true' && steps.update.outputs.new_tag != ''
|
|
env:
|
|
NEW_TAG: ${{ steps.update.outputs.new_tag }}
|
|
run: |
|
|
git config user.name "Gitea Actions"
|
|
git config user.email "actions@openharbor.io"
|
|
git add -A
|
|
git commit -m "Bump upstream: ${NEW_TAG}"
|
|
git tag "$NEW_TAG"
|
|
git push origin main --tags
|
|
|
|
- name: Create issue on patch failure
|
|
if: steps.update.outputs.patch_failed == 'true'
|
|
env:
|
|
GITEA_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
TALOS_CURRENT: ${{ steps.check.outputs.talos_current }}
|
|
TALOS_LATEST: ${{ steps.check.outputs.talos_latest }}
|
|
TALOS_UPDATE: ${{ steps.check.outputs.talos_update }}
|
|
RPI_CURRENT: ${{ steps.check.outputs.rpi_current }}
|
|
RPI_LATEST: ${{ steps.check.outputs.rpi_latest }}
|
|
RPI_UPDATE: ${{ steps.check.outputs.rpi_update }}
|
|
run: |
|
|
GITEA_URL="${GITHUB_SERVER_URL}"
|
|
REPO="${GITHUB_REPOSITORY}"
|
|
API="${GITEA_URL}/api/v1"
|
|
|
|
BODY="## Upstream update requires manual patch porting
|
|
|
|
Automated patch application failed. Manual intervention needed.
|
|
|
|
| Component | Current | Latest | Update? |
|
|
|-----------|---------|--------|---------|
|
|
| Talos | \`${TALOS_CURRENT}\` | \`${TALOS_LATEST}\` | ${TALOS_UPDATE} |
|
|
| RPi kernel | \`${RPI_CURRENT}\` | \`${RPI_LATEST}\` | ${RPI_UPDATE} |
|
|
|
|
### Steps
|
|
1. Check out this repo and run \`scripts/auto-update.sh\` to see what fails
|
|
2. Port patches to the new upstream version
|
|
3. Verify: \`gmake checkouts patches && gmake checkouts-clean\`
|
|
4. Push changes — the next scheduled run will pick them up
|
|
|
|
### Links
|
|
- [Talos Releases](https://github.com/siderolabs/talos/releases)
|
|
- [RPi Linux Tags](https://github.com/raspberrypi/linux/tags)"
|
|
|
|
# Strip leading whitespace from heredoc-style indentation
|
|
BODY=$(echo "$BODY" | sed 's/^ //')
|
|
BODY_JSON=$(jq -Rs '.' <<< "$BODY")
|
|
|
|
# Check for existing open issue to avoid duplicates
|
|
EXISTING=$(curl -sf \
|
|
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
"${API}/repos/${REPO}/issues?state=open&type=issues&labels=upstream-update" \
|
|
| jq -r '[.[] | select(.title | contains("manual patch"))][0].id // empty')
|
|
|
|
if [ -n "$EXISTING" ]; then
|
|
echo "Issue already exists (id: $EXISTING), skipping creation"
|
|
exit 0
|
|
fi
|
|
|
|
curl -sf -X POST \
|
|
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
-d "{\"title\":\"Upstream update requires manual patch porting\",\"body\":${BODY_JSON},\"labels\":[\"upstream-update\"]}" \
|
|
"${API}/repos/${REPO}/issues"
|
|
|
|
echo "Created issue for manual patch porting"
|