image: alpine/latest
packages:
- coreutils
- procps
- py3-requests
- xz
sources:
- "https://gitlab.com/postmarketOS/pmaports.git/"
- "https://gitlab.com/postmarketOS/pmbootstrap.git/"
- "https://gitlab.com/postmarketOS/build.postmarketos.org.git/"
environment:
  BPO_TOKEN_FILE: "/home/build/.token"
  BPO_API_HOST: https://build.postmarketos.org
  BPO_JOB_NAME: sign_index
  BPO_WIP_REPO_URL: https://build.postmarketos.org/wip/master/
  BPO_WIP_REPO_ARG: '-mp http://build.postmarketos.org/wip/'
secrets:
- 482975ec-22f7-49fd-9b54-486b0b1947c3
- 18f0a302-e8ac-4cc6-80ec-479d5e8e0bee

triggers:
- action: webhook
  condition: failure
  url: https://build.postmarketos.org/api/public/update-job-status
tasks:
- bpo_setup: |
   export BPO_JOB_ID="$JOB_ID"

   # Switch branch and release channel
   mkdir -p ~/.config
   ( echo "[pmbootstrap]"
     echo "is_default_channel = False" ) > ~/.config/pmbootstrap.cfg
   git -C pmaports checkout master

   sudo ln -s "$PWD"/pmbootstrap/pmbootstrap.py /usr/bin/pmbootstrap
   yes "" | pmbootstrap --aports=$PWD/pmaports -q init
   sudo modprobe binfmt_misc
   sudo mount -t binfmt_misc none /proc/sys/fs/binfmt_misc

   branch="$(git -C pmaports rev-parse --abbrev-ref HEAD)"
   if [ "$branch" != master ]; then
       echo "ERROR: pmbootstrap switched to the wrong branch: $branch"
       exit 1
   fi

   # Put apk cache into tmpfs to use less disk space (pma#1623)
   sudo mkdir -p /mnt/tmpfs-for-apks
   sudo mount -t tmpfs -o size=1500M tmpfs /mnt/tmpfs-for-apks
   WORK="$(pmbootstrap config work)"
   for arch in x86_64 aarch64 armv7 armhf x86 riscv64; do
       mkdir -p /mnt/tmpfs-for-apks/cache_apk_"$arch"
       rm -rf "$WORK"/cache_apk_"$arch"
       ln -s /mnt/tmpfs-for-apks/cache_apk_"$arch" "$WORK"
   done
    
- download_unsigned_index: |
   export BPO_JOB_ID="$JOB_ID"
   if [ -n "$BPO_WIP_REPO_PATH" ]; then
       cp "$BPO_WIP_REPO_PATH"/x86_64/APKINDEX-symlink-repo.tar.gz \
           APKINDEX.tar.gz
   else
       wget "$BPO_WIP_REPO_URL"/x86_64/APKINDEX-symlink-repo.tar.gz \
           -O APKINDEX.tar.gz
   fi
- sign: |
   export BPO_JOB_ID="$JOB_ID"
   pmbootstrap \
       --aports=$PWD/pmaports \
       --no-ccache \
       build_init
   work_dir="$(pmbootstrap -q config work)"
   chroot_target="$work_dir/chroot_native/home/pmos/"
   sudo cp APKINDEX.tar.gz "$chroot_target"
   sudo cp .final.rsa "$chroot_target"/build.postmarketos.org.rsa
   sudo chown -R 12345 "$chroot_target"
   pmbootstrap \
       --aports=$PWD/pmaports \
       --details-to-stdout \
       chroot --user -- \
           abuild-sign \
               -k /home/pmos/build.postmarketos.org.rsa \
               /home/pmos/APKINDEX.tar.gz
   sudo mv "$chroot_target/APKINDEX.tar.gz" .
           
- upload: |
   export BPO_JOB_ID="$JOB_ID"
   export BPO_API_ENDPOINT="sign-index"
   export BPO_ARCH=x86_64
   export BPO_BRANCH=master
   export BPO_DEVICE=""
   export BPO_PAYLOAD_FILES="APKINDEX.tar.gz"
   export BPO_PAYLOAD_FILES_PREVIOUS=""
   export BPO_PAYLOAD_IS_JSON="0"
   export BPO_PKGNAME=""
   export BPO_UI=""
   export BPO_VERSION=""
   
   exec build.postmarketos.org/helpers/submit.py