feat: increase isolated app balance (#710) #1214
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: HTTP build - Linux and MacOS | |
| on: | |
| push: | |
| branches: | |
| - master | |
| pull_request: | |
| types: [opened, synchronize] | |
| workflow_call: | |
| inputs: | |
| build-release: | |
| description: "Build full-featured http release (codesigning, notarization, etc.)" | |
| type: boolean | |
| secrets: | |
| APPLE_DEVELOPER_CERTIFICATE_P12_BASE64: | |
| required: true | |
| APPLE_DEVELOPER_CERTIFICATE_PASSWORD: | |
| required: true | |
| APPLE_PASSWORD: | |
| required: true | |
| APPLE_TEAM_ID: | |
| required: true | |
| APPLE_USERNAME: | |
| required: true | |
| jobs: | |
| build: | |
| strategy: | |
| matrix: | |
| build: | |
| [ | |
| { | |
| arch: x86_64, | |
| breez_arch: linux-amd64, | |
| alby_arch: x86_64-unknown-linux-gnu, | |
| os: ubuntu-20.04, | |
| }, | |
| { | |
| arch: armv6, | |
| breez_arch: "", | |
| alby_arch: arm-unknown-linux-gnueabihf, | |
| os: ubuntu-20.04, | |
| }, | |
| { | |
| arch: aarch64, | |
| breez_arch: linux-aarch64, | |
| alby_arch: aarch64-unknown-linux-gnu, | |
| os: ubuntu-20.04, | |
| }, | |
| { arch: darwin/universal, os: macos-12 }, | |
| ] | |
| runs-on: ${{ matrix.build.os }} | |
| steps: | |
| - name: Setup | |
| run: | | |
| echo "EXEC_NAME=albyhub" >> $GITHUB_ENV | |
| if [ "${{ runner.os }}" == "macOS" ]; then | |
| echo "PACKAGE_NAME=albyhub-Server-MacOS" >> $GITHUB_ENV | |
| else | |
| echo "PACKAGE_NAME=albyhub-Server-Linux-${{ matrix.build.arch }}" >> $GITHUB_ENV | |
| fi | |
| - uses: actions/checkout@v4 | |
| name: Check out code | |
| with: | |
| submodules: recursive | |
| - name: Install Linux dependencies | |
| if: runner.os == 'Linux' | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y patchelf gcc | |
| - name: Install macOS Wails deps | |
| if: runner.os == 'macOS' | |
| run: | | |
| brew install Bearer/tap/gon | |
| shell: bash | |
| - name: Setup GoLang | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: "./go.mod" | |
| - name: Get dependencies | |
| run: go get -v -t -d ./... | |
| - name: Setup NodeJS | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: "20.x" | |
| - name: Run tests | |
| run: mkdir frontend/dist && touch frontend/dist/tmp && go test ./... | |
| - name: Build frontend | |
| run: | | |
| cd frontend | |
| yarn install | |
| yarn build:http | |
| shell: bash | |
| - name: Create build directory | |
| run: | | |
| mkdir -p ./build/bin/${{ env.PACKAGE_NAME }}/lib | |
| - name: Install ARM6 cross-compiler | |
| if: matrix.build.arch == 'armv6' | |
| run: | | |
| wget -nv https://github.com/getAlby/gcc-arm-linux-gnueabihf/releases/download/v1.0.0/armv6-unknown-linux-gnueabihf.tar.bz2 | |
| tar -xf armv6-unknown-linux-gnueabihf.tar.bz2 | |
| echo "GOOS=linux" >> $GITHUB_ENV | |
| echo "GOARCH=arm" >> $GITHUB_ENV | |
| echo "GOARM=6" >> $GITHUB_ENV | |
| echo "CC=$GITHUB_WORKSPACE/armv6-unknown-linux-gnueabihf/bin/armv6-unknown-linux-gnueabihf-gcc" >> $GITHUB_ENV | |
| echo "GOTAGS=-tags skip_breez,netgo" >> $GITHUB_ENV | |
| - name: Install ARM64 cross-compiler | |
| if: matrix.build.arch == 'aarch64' | |
| run: | | |
| sudo apt-get install -y gcc-aarch64-linux-gnu | |
| echo "GOOS=linux" >> $GITHUB_ENV | |
| echo "GOARCH=arm64" >> $GITHUB_ENV | |
| echo "CC=aarch64-linux-gnu-gcc" >> $GITHUB_ENV | |
| echo "GOTAGS=-tags netgo" >> $GITHUB_ENV | |
| - name: Build Binary for Linux and MacOS | |
| env: | |
| CGO_ENABLED: 1 | |
| TAG: ${{ github.ref_name }} | |
| run: go build ${{ env.GOTAGS }} -o build/bin/${{ env.PACKAGE_NAME }}/bin/${{ env.EXEC_NAME }} -ldflags "-X 'github.com/getAlby/hub/version.Tag=${{ env.TAG }}'" cmd/http/main.go | |
| - name: Import Code-Signing Certificates for macOS | |
| if: runner.os == 'macOS' | |
| uses: Apple-Actions/import-codesign-certs@v3 | |
| with: | |
| # The certificates in a PKCS12 file encoded as a base64 string | |
| p12-file-base64: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }} | |
| # The password used to import the PKCS12 file. | |
| p12-password: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }} | |
| - name: Copy shared libraries to the output directory | |
| if: runner.os == 'Linux' | |
| run: | | |
| mkdir -p ./build/bin/${{ env.PACKAGE_NAME }}/lib | |
| if [ "${{ matrix.build.breez_arch }}" != "" ]; then | |
| cp `go list -m -f "{{.Dir}}" github.com/breez/breez-sdk-go`/breez_sdk/lib/${{ matrix.build.breez_arch }}/libbreez_sdk_bindings.so ./build/bin/${{ env.PACKAGE_NAME }}/lib/ | |
| fi | |
| cp `go list -m -f "{{.Dir}}" github.com/getAlby/glalby-go`/glalby/${{ matrix.build.alby_arch }}/libglalby_bindings.so ./build/bin/${{ env.PACKAGE_NAME }}/lib/ | |
| cp `go list -m -f "{{.Dir}}" github.com/getAlby/ldk-node-go`/ldk_node/${{ matrix.build.alby_arch }}/libldk_node.so ./build/bin/${{ env.PACKAGE_NAME }}/lib/ | |
| shell: bash | |
| - name: Patch executable RPATH | |
| if: runner.os == 'Linux' | |
| run: | | |
| patchelf --force-rpath --set-rpath '$ORIGIN/../lib' ./build/bin/${{ env.PACKAGE_NAME }}/bin/${{ env.EXEC_NAME }} | |
| - name: Copy shared libraries to the output directory | |
| if: runner.os == 'macOS' | |
| run: | | |
| lipo -create -output ./build/bin/${{ env.PACKAGE_NAME }}/lib/libbreez_sdk_bindings.dylib `go list -m -f "{{.Dir}}" github.com/breez/breez-sdk-go`/breez_sdk/lib/darwin-aarch64/libbreez_sdk_bindings.dylib `go list -m -f "{{.Dir}}" github.com/breez/breez-sdk-go`/breez_sdk/lib/darwin-amd64/libbreez_sdk_bindings.dylib | |
| cp `go list -m -f "{{.Dir}}" github.com/getAlby/glalby-go`/glalby/universal-macos/libglalby_bindings.dylib ./build/bin/${{ env.PACKAGE_NAME }}/lib/ | |
| cp `go list -m -f "{{.Dir}}" github.com/getAlby/ldk-node-go`/ldk_node/universal-macos/libldk_node.dylib ./build/bin/${{ env.PACKAGE_NAME }}/lib/ | |
| shell: bash | |
| - name: Patch executable RPATH | |
| if: runner.os == 'macOS' | |
| run: | | |
| install_name_tool -add_rpath @executable_path/../lib ./build/bin/${{ env.PACKAGE_NAME }}/bin/${{ env.EXEC_NAME }} | |
| - name: Add permissions | |
| run: | | |
| chmod +x build/bin/${{ env.PACKAGE_NAME }}/bin/${{ env.EXEC_NAME }} | |
| shell: bash | |
| - name: Sign the MacOS binary and libraries | |
| if: runner.os == 'macOS' | |
| run: | | |
| /usr/bin/codesign -s "Developer ID Application: Alby Inc." -f -v --deep --timestamp --options runtime ./build/bin/${{ env.PACKAGE_NAME }}/bin/${{ env.EXEC_NAME }} | |
| /usr/bin/codesign -s "Developer ID Application: Alby Inc." -f -v --deep --timestamp --options runtime ./build/bin/${{ env.PACKAGE_NAME }}/lib/*.dylib | |
| env: | |
| AC_USERNAME: ${{ secrets.APPLE_USERNAME }} | |
| AC_PASSWORD: ${{ secrets.APPLE_PASSWORD }} | |
| AC_PROVIDER: ${{ secrets.APPLE_TEAM_ID }} | |
| - name: Make output tar archive to keep file permissions | |
| if: runner.os == 'Linux' | |
| run: | | |
| mkdir -p ./build/out | |
| tar -cjf ./build/out/${{ env.PACKAGE_NAME }}.tar.bz2 -C ./build/bin/${{ env.PACKAGE_NAME }} . | |
| - name: Make output zip archive to keep file permissions | |
| if: runner.os == 'macOS' | |
| run: | | |
| mkdir -p ./build/out | |
| cd ./build/bin/${{ env.PACKAGE_NAME }} | |
| zip -r ../../out/${{ env.PACKAGE_NAME }} ./* | |
| cd ../../.. | |
| - name: Notarize the zip file | |
| if: runner.os == 'macOS' && inputs.build-release | |
| run: | | |
| echo "Notarizing Zip Files" | |
| gon -log-level=info -log-json ./build/darwin/http/gon-notarize.json | |
| env: | |
| AC_USERNAME: ${{ secrets.APPLE_USERNAME }} | |
| AC_PASSWORD: ${{ secrets.APPLE_PASSWORD }} | |
| AC_PROVIDER: ${{ secrets.APPLE_TEAM_ID }} | |
| - uses: actions/upload-artifact@v4 | |
| if: runner.os == 'Linux' | |
| with: | |
| name: ${{ env.PACKAGE_NAME }} | |
| path: | | |
| ./build/out/${{ env.PACKAGE_NAME }}.tar.bz2 | |
| if-no-files-found: error | |
| - uses: actions/upload-artifact@v4 | |
| if: runner.os == 'macOS' | |
| with: | |
| name: ${{ env.PACKAGE_NAME }} | |
| path: | | |
| ./build/out/${{ env.PACKAGE_NAME }}.zip | |
| if-no-files-found: error |