publish-nym-vpn-core.yml

name: publish-nym-vpn-core.yml
on:
  schedule:
    - cron: "4 3 * * *"
  workflow_dispatch:
    inputs:
      tag_name:
        description: "Tag name for release"
        required: false
        default: nightly
  push:
    tags:
      - nym-vpn-core-v[0-9]+.[0-9]+.[0-9]+*

env:
  CARGO_TERM_COLOR: always
  UPLOAD_DIR_LINUX: linux_artifacts
  UPLOAD_DIR_MAC: mac_artifacts
  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

jobs:
  build-nym-vpn-core-linux:
    uses: ./.github/workflows/build-nym-vpn-core-linux.yml
  build-nym-vpn-core-mac:
    uses: ./.github/workflows/build-nym-vpn-core-mac.yml

  generate-build-info-core:
    uses: ./.github/workflows/generate-build-info-core.yml
    needs: build-nym-vpn-core-linux
    with:
      build-profile: release
      rust-version: ${{ needs.build-nym-vpn-core-linux.outputs.RUST_VERSION }}

  publish:
    needs:
      - build-nym-vpn-core-linux
      - build-nym-vpn-core-mac
      - generate-build-info-core
    runs-on: ubuntu-22.04-arc
    permissions:
      contents: write
    outputs:
      tag: ${{ steps.set_tag.outputs.tag }}

    steps:
      - name: Checkout repo
        uses: actions/checkout@v4

      # Adding envsubst, gh cli
      - name: Install system dependencies
        run: |
          sudo apt update && sudo apt install -y gettext-base gh

      - name: Install rust toolchain
        uses: brndnmtthws/rust-action-rustup@v1
        with:
          toolchain: stable
          components: rustfmt, clippy

      - name: Get package version cli
        id: package-version-cli
        uses: nicolaiunrein/cargo-get@master
        with:
          subcommand: package.version --entry nym-vpn-cli

      - name: Get package version vpnc
        id: package-version-vpnc
        uses: nicolaiunrein/cargo-get@master
        with:
          subcommand: package.version --entry nym-vpnc

      - name: Get package version vpnd
        id: package-version-vpnd
        uses: nicolaiunrein/cargo-get@master
        with:
          subcommand: package.version --entry nym-vpnd

      - name: Get package version lib
        id: package-version-lib
        uses: nicolaiunrein/cargo-get@master
        with:
          subcommand: package.version --entry nym-vpn-lib

      - name: Check tag name consistency
        if: github.event_name == 'push'
        shell: bash
        run: |
          if [[ "${{ steps.package-version-cli.outputs.metadata }}" == "${{ steps.package-version-vpnc.outputs.metadata }}" && "${{ steps.package-version-cli.outputs.metadata }}" == "${{ steps.package-version-vpnd.outputs.metadata }}" && "${{ steps.package-version-cli.outputs.metadata }}" == "${{ steps.package-version-lib.outputs.metadata }}" ]]; then
            if [[ nym-vpn-core-v${{ steps.package-version-cli.outputs.metadata }}  != ${{ github.ref_name }} ]]; then
            exit 1
            fi
            else exit 1
          fi

      - name: Download artifacts
        uses: actions/download-artifact@v4

      # Setup TAG_NAME, which is used as a general "name"
      - if: github.event_name == 'workflow_dispatch'
        run: echo "TAG_NAME=${{ github.event.inputs.tag_name }}" >> $GITHUB_ENV
      - if: github.event_name == 'schedule'
        run: echo 'TAG_NAME=nightly' >> $GITHUB_ENV
      - if: github.event_name == 'push'
        run: echo "TAG_NAME=${{ github.ref_name }}" >> $GITHUB_ENV

      - name: Generate checksum and tar folder per platform
        run: |
          ARCHIVE_LINUX=nym-vpn-core-v${{ steps.package-version-lib.outputs.metadata }}_linux_x86_64
          ARCHIVE_MAC=nym-vpn-core-v${{ steps.package-version-lib.outputs.metadata }}_macos_aarch64
          echo "ARCHIVE_LINUX=${ARCHIVE_LINUX}" >> $GITHUB_ENV
          echo "ARCHIVE_MAC=${ARCHIVE_MAC}" >> $GITHUB_ENV

          mv ${{ env.UPLOAD_DIR_LINUX }} ${ARCHIVE_LINUX}
          mv ${{ env.UPLOAD_DIR_MAC }} ${ARCHIVE_MAC}

          tar cvzf ${ARCHIVE_LINUX}.tar.gz ${ARCHIVE_LINUX}
          tar cvzf ${ARCHIVE_MAC}.tar.gz ${ARCHIVE_MAC}

          sha256sum ${ARCHIVE_LINUX}.tar.gz > "${ARCHIVE_LINUX}.tar.gz.sha256sum"
          sha256sum ${ARCHIVE_MAC}.tar.gz > "${ARCHIVE_MAC}.tar.gz.sha256sum"
          echo 'SHA256_CHECKSUMS<<EOF' >> $GITHUB_ENV
          cat "${ARCHIVE_LINUX}*.sha256sum" >> $GITHUB_ENV
          cat "${ARCHIVE_MAC}*.sha256sum" >> $GITHUB_ENV
          echo 'EOF' >> $GITHUB_ENV

      - name: Setting subject, prerelease and notes files
        if: ${{ contains(env.TAG_NAME, 'nightly') }}
        run: |
          (echo "SUBJECT=nym-vpn-core-v${{ steps.package-version-lib.outputs.metadata }} nightly prerelease build";
           echo 'PRERELEASE=--prerelease';
           echo 'NOTES_FILE=release-notes/nym-vpn-core.md') >> $GITHUB_ENV
          gh release delete nightly --yes || true
          git push origin :nightly || true

      # Once we consider these actually release builds, remove --prerelease
      # from PRERELEASE here
      - name: Removing --prerelease if needed
        if: ${{ !contains(env.TAG_NAME, 'nightly') }}
        run: |
          (echo "SUBJECT=$TAG_NAME"
           echo 'PRERELEASE='
           echo 'NOTES_FILE=release-notes/nym-vpn-core.md') >> $GITHUB_ENV

      - name: Build info
        run: |
          echo 'BUILD_INFO<<EOF' >> $GITHUB_ENV
          cat build-info/build-info.txt >> $GITHUB_ENV
          echo 'EOF' >> $GITHUB_ENV

      - name: Publish release
        run: |
          envsubst < "$GITHUB_WORKSPACE/.github/workflows/$NOTES_FILE" > "$RUNNER_TEMP/release-notes.md"
          gh release create $TAG_NAME ${{ env.PRERELEASE }} --notes-file "$RUNNER_TEMP/release-notes.md" --title "$SUBJECT" --target $GITHUB_SHA ${{ env.ARCHIVE_LINUX }}.tar.gz ${{ env.ARCHIVE_LINUX }}.tar.gz.sha256sum ${{ env.ARCHIVE_MAC }}.tar.gz ${{ env.ARCHIVE_MAC }}.tar.gz.sha256sum

  gen-hashes:
    uses: ./.github/workflows/gen-hashes-json.yml
    needs: publish
    with:
      release_tag: ${{ needs.publish.outputs.tag }}
    secrets: inherit