build-pro #444
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "build-pro" | |
| on: | |
| workflow_dispatch: | |
| jobs: | |
| build-pro: | |
| name: "Build Pro (${{ matrix.artifact_suffix }})" | |
| runs-on: ubuntu-latest | |
| outputs: | |
| firmware_version: ${{ steps.vars.outputs.firmware_version }} | |
| boot_version: ${{ steps.vars.outputs.boot_version }} | |
| short_hash: ${{ steps.vars.outputs.short_hash }} | |
| build_date: ${{ steps.vars.outputs.build_date }} | |
| artifacts_url: ${{ steps.vars.outputs.artifacts_url }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - production: 1 | |
| bitcoin_only: 0 | |
| secret_key_1_name: "SECRET_KEY_1" | |
| secret_key_2_name: "SECRET_KEY_2" | |
| output_dir: prod | |
| artifact_suffix: "prod" | |
| - production: 1 | |
| bitcoin_only: 1 | |
| secret_key_1_name: "SECRET_KEY_1" | |
| secret_key_2_name: "SECRET_KEY_2" | |
| output_dir: prod-bc-only | |
| artifact_suffix: "prod-bc-only" | |
| - production: 0 | |
| bitcoin_only: 0 | |
| secret_key_1_name: "SECRET_QA_KEY_1" | |
| secret_key_2_name: "SECRET_QA_KEY_2" | |
| output_dir: qa | |
| artifact_suffix: "qa" | |
| - production: 0 | |
| bitcoin_only: 1 | |
| secret_key_1_name: "SECRET_QA_KEY_1" | |
| secret_key_2_name: "SECRET_QA_KEY_2" | |
| output_dir: qa-bc-only | |
| artifact_suffix: "qa-bc-only" | |
| steps: | |
| - name: "Checkout" | |
| uses: actions/checkout@v3 | |
| - name: Populate vars | |
| id: vars | |
| run: | | |
| BOOT_VERSION=$(./tools/version.sh ./core/embed/bootloader/version.h) | |
| FIRMWARE_VERSION=$(grep -E '#define ONEKEY_VERSION_(MAJOR|MINOR|PATCH)' ./core/embed/firmware/version.h | awk '{printf "%s.", $3}' | sed 's/\.$//') | |
| BUILD_DATE=$(date +"%Y%m%d") | |
| SHORT_HASH=$(git rev-parse --short HEAD) | |
| echo "BOOT_VERSION=$BOOT_VERSION" >> $GITHUB_ENV | |
| echo "FIRMWARE_VERSION=$FIRMWARE_VERSION" >> $GITHUB_ENV | |
| echo "BUILD_DATE=$BUILD_DATE" >> $GITHUB_ENV | |
| echo "SHORT_HASH=$SHORT_HASH" >> $GITHUB_ENV | |
| ARTIFACTS_URL="${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}" | |
| echo "ARTIFACTS_URL=${ARTIFACTS_URL}" >> $GITHUB_ENV | |
| echo "firmware_version=$FIRMWARE_VERSION" >> $GITHUB_OUTPUT | |
| echo "boot_version=$BOOT_VERSION" >> $GITHUB_OUTPUT | |
| echo "short_hash=$SHORT_HASH" >> $GITHUB_OUTPUT | |
| echo "build_date=$BUILD_DATE" >> $GITHUB_OUTPUT | |
| echo "artifacts_url=$ARTIFACTS_URL" >> $GITHUB_OUTPUT | |
| - name: "Build firmware" | |
| env: | |
| PRODUCTION: ${{ matrix.production }} | |
| SECRET_1: ${{ secrets[matrix.secret_key_1_name] }} | |
| SECRET_2: ${{ secrets[matrix.secret_key_2_name] }} | |
| run: | | |
| sh <(curl -L https://releases.nixos.org/nix/nix-2.23.3/install) --no-daemon | |
| . $HOME/.nix-profile/etc/profile.d/nix.sh | |
| nix-shell --run "poetry install" | |
| git submodule update --init --recursive | |
| if [ "${{ matrix.bitcoin_only }}" = "1" ]; then | |
| nix-shell --run "poetry run make -C core build_firmware BITCOIN_ONLY=1" | |
| else | |
| nix-shell --run "poetry run make -C core build_boardloader" | |
| if [ "$PRODUCTION" = "0" ]; then | |
| nix-shell --run "poetry run make -C core build_boardloader_reflash_dev" | |
| fi | |
| nix-shell --run "poetry run make -C core build_bootloader" | |
| nix-shell --run "poetry run make -C core build_firmware" | |
| fi | |
| if [ "${{ matrix.bitcoin_only }}" = "0" ]; then | |
| nix-shell --run "poetry run core/tools/headertool.py -h core/build/bootloader/pro.bootloader*Stable*.bin \ | |
| -S 1:$SECRET_1 -S 2:$SECRET_2" | |
| fi | |
| nix-shell --run "poetry run core/tools/headertool.py -h core/build/firmware/pro*Stable*.bin \ | |
| -S 1:$SECRET_1 -S 2:$SECRET_2" | |
| if [ "$PRODUCTION" = "0" ] && [ "${{ matrix.bitcoin_only }}" = "0" ]; then | |
| nix-shell --run "poetry run core/tools/headertool.py -h core/build/boardloader_reflash_dev/boardloader_reflash_dev.bin \ | |
| -S 1:$SECRET_1 -S 2:$SECRET_2" | |
| fi | |
| mkdir -p core/build/output/${{ matrix.output_dir }} | |
| if [ "${{ matrix.bitcoin_only }}" = "0" ]; then | |
| cp ./core/build/boardloader/boardloader.bin core/build/output/${{ matrix.output_dir }} | |
| if [ "$PRODUCTION" = "0" ]; then | |
| cp ./core/build/boardloader_reflash_dev/boardloader_reflash_dev.bin core/build/output/${{ matrix.output_dir }} | |
| fi | |
| cp ./core/build/bootloader/pro.bootloader*Stable*.bin core/build/output/${{ matrix.output_dir }} | |
| tools/hash.py -t bootloader -f core/build/bootloader/bootloader.bin > core/build/output/${{ matrix.output_dir }}/bootloader_sha256.txt | |
| fi | |
| cp ./core/build/firmware/pro*Stable*.bin core/build/output/${{ matrix.output_dir }} | |
| tools/hash.py -t firmware -f core/build/firmware/pro.*.bin > core/build/output/${{ matrix.output_dir }}/firmware_sha256.txt | |
| - name: "Upload Artifacts" | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: firmware-${{ matrix.artifact_suffix }}-${{ env.SHORT_HASH }} | |
| path: ./core/build/output/ | |
| notify-slack: | |
| runs-on: ubuntu-latest | |
| needs: build-pro | |
| env: | |
| FIRMWARE_VERSION: ${{ needs.build-pro.outputs.firmware_version }} | |
| BOOT_VERSION: ${{ needs.build-pro.outputs.boot_version }} | |
| SHORT_HASH: ${{ needs.build-pro.outputs.short_hash }} | |
| BUILD_DATE: ${{ needs.build-pro.outputs.build_date }} | |
| steps: | |
| - name: "Send notification" | |
| uses: onekeyhq/actions/notice-slack-app-update@main | |
| with: | |
| web-hook-url: ${{ secrets.SLACK_DEV_RELEASE_WEBHOOK }} | |
| artifact-type: PRO-FIRMWARE | |
| artifact-name: Pro-Hardware-Firmware | |
| artifact-bundle-id: 'so.onekey.firmware.pro' | |
| artifact-version-name: '${{ env.FIRMWARE_VERSION }}' | |
| artifact-version-code: '${{ env.SHORT_HASH }}-${{ env.BUILD_DATE }}' | |
| artifact-download-url: '${{ needs.build-pro.outputs.artifacts_url }}' | |
| change-log: 'firmware@${{ env.FIRMWARE_VERSION }} / boot@${{ env.BOOT_VERSION }}' | |
| custom-issue-url: '' |