3851d87534
* Add standalone Linux bootstrap foundation * Record bootstrap foundation progress * Add single-code Node enrollment * Validate bootstrap release payloads * Add managed WireGuard mesh bootstrap * Exercise repeated systemd installation in CI * Expose systemd smoke failure diagnostics * Fix bootstrap os-release variable collision * Create policy helper directory during install * Capture systemd smoke healthcheck errors * Report Control listener diagnostics in CI * Capture stalled Control process diagnostics * Set service working directories * Run protected CA healthcheck as root * Add local Mesh emergency recovery * Add multi-architecture Linux system matrix * Add provisioning job control plane * Stabilize Debian systemd smoke files * Add node-scoped provisioning job channel * Add provisioning progress state machine * Reconcile expired provisioning jobs * Add provisioning rollback workflow * Add redacted provisioning event history * Add restricted provisioning preflight helper * Persist typed provisioning preflight facts * Add preflight desired state drift detection * Define strict base install schema catalog * Add safe base install plan generation * Add pre-confirmation base install plans * Test base install plan API flow * Authorize confirmed provisioning execution --------- Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
153 lines
5.4 KiB
YAML
153 lines
5.4 KiB
YAML
name: Linux platform matrix
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
pull_request:
|
|
paths:
|
|
- '.github/workflows/linux-platform-matrix.yml'
|
|
- 'deploy/**'
|
|
- 'src/ServerMonitorManager.Agent/**'
|
|
- 'src/ServerMonitorManager.Control/**'
|
|
- 'src/ServerMonitorManager.Core/**'
|
|
- 'tests/bootstrap/**'
|
|
push:
|
|
branches: [main]
|
|
paths:
|
|
- '.github/workflows/linux-platform-matrix.yml'
|
|
- 'deploy/**'
|
|
- 'src/ServerMonitorManager.Agent/**'
|
|
- 'src/ServerMonitorManager.Control/**'
|
|
- 'src/ServerMonitorManager.Core/**'
|
|
- 'tests/bootstrap/**'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: linux-platform-matrix-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
release-archive:
|
|
name: Release archive (${{ matrix.runtime }})
|
|
runs-on: ubuntu-24.04
|
|
strategy:
|
|
matrix:
|
|
runtime: [linux-x64, linux-arm64]
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v6
|
|
|
|
- name: Set up .NET 10
|
|
uses: actions/setup-dotnet@v5
|
|
with:
|
|
dotnet-version: 10.0.x
|
|
|
|
- name: Publish compatible release
|
|
run: |
|
|
set -Eeuo pipefail
|
|
dotnet publish src/ServerMonitorManager.Agent/ServerMonitorManager.Agent.csproj \
|
|
--configuration Release --runtime '${{ matrix.runtime }}' --self-contained true \
|
|
-p:PublishSingleFile=true -p:PublishTrimmed=true -o out/agent
|
|
dotnet publish src/ServerMonitorManager.Control/ServerMonitorManager.Control.csproj \
|
|
--configuration Release --runtime '${{ matrix.runtime }}' --self-contained true \
|
|
-p:PublishSingleFile=true -p:PublishTrimmed=true -o out/control
|
|
dotnet publish src/ServerMonitorManager.Provisioning.Helper/ServerMonitorManager.Provisioning.Helper.csproj \
|
|
--configuration Release --runtime '${{ matrix.runtime }}' --self-contained true \
|
|
-p:PublishSingleFile=true -p:PublishTrimmed=true -o out/provisioning-helper
|
|
install -d out/deploy out/bootstrap
|
|
install -m 0644 deploy/ochenstarik-smm-control.service out/deploy/
|
|
install -m 0644 deploy/ochenstarik-smm-agent.service out/deploy/
|
|
install -m 0644 deploy/ochenstarik-smm-provisioning-helper.service out/deploy/
|
|
install -m 0644 deploy/ochenstarik-smm-firewall.service out/deploy/
|
|
install -m 0755 deploy/ochenstarik-smm-policy-apply out/deploy/
|
|
install -m 0755 deploy/ochenstarik-smm-emergency out/deploy/
|
|
install -m 0755 deploy/ochenstarik-server-monitor-manager.sh out/bootstrap/
|
|
archive='server-monitor-manager-${{ matrix.runtime }}.tar.gz'
|
|
tar -C out -czf "$archive" agent control provisioning-helper deploy bootstrap
|
|
sha256sum "$archive" >"$archive.sha256"
|
|
|
|
- name: Upload release archive
|
|
uses: actions/upload-artifact@v6
|
|
with:
|
|
name: server-monitor-manager-${{ matrix.runtime }}-matrix
|
|
path: |
|
|
server-monitor-manager-${{ matrix.runtime }}.tar.gz
|
|
server-monitor-manager-${{ matrix.runtime }}.tar.gz.sha256
|
|
|
|
ubuntu-vm:
|
|
name: ${{ matrix.name }} native VM
|
|
needs: release-archive
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- name: Ubuntu 22.04 x64
|
|
runner: ubuntu-22.04
|
|
runtime: linux-x64
|
|
- name: Ubuntu 24.04 x64
|
|
runner: ubuntu-24.04
|
|
runtime: linux-x64
|
|
- name: Ubuntu 22.04 arm64
|
|
runner: ubuntu-22.04-arm
|
|
runtime: linux-arm64
|
|
- name: Ubuntu 24.04 arm64
|
|
runner: ubuntu-24.04-arm
|
|
runtime: linux-arm64
|
|
runs-on: ${{ matrix.runner }}
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v6
|
|
|
|
- name: Download release archive
|
|
uses: actions/download-artifact@v8
|
|
with:
|
|
name: server-monitor-manager-${{ matrix.runtime }}-matrix
|
|
path: artifacts
|
|
|
|
- name: Install twice and restart services
|
|
run: |
|
|
bash tests/bootstrap/run-native-systemd-smoke.sh \
|
|
'artifacts/server-monitor-manager-${{ matrix.runtime }}.tar.gz' \
|
|
deploy/ochenstarik-server-monitor-manager.sh
|
|
|
|
debian-systemd:
|
|
name: ${{ matrix.name }} systemd restart
|
|
needs: release-archive
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- name: Debian 12 x64
|
|
runner: ubuntu-24.04
|
|
runtime: linux-x64
|
|
image: debian:12
|
|
- name: Debian 13 x64
|
|
runner: ubuntu-24.04
|
|
runtime: linux-x64
|
|
image: debian:13
|
|
- name: Debian 12 arm64
|
|
runner: ubuntu-24.04-arm
|
|
runtime: linux-arm64
|
|
image: debian:12
|
|
- name: Debian 13 arm64
|
|
runner: ubuntu-24.04-arm
|
|
runtime: linux-arm64
|
|
image: debian:13
|
|
runs-on: ${{ matrix.runner }}
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v6
|
|
|
|
- name: Download release archive
|
|
uses: actions/download-artifact@v8
|
|
with:
|
|
name: server-monitor-manager-${{ matrix.runtime }}-matrix
|
|
path: artifacts
|
|
|
|
- name: Install twice and restart systemd container
|
|
run: |
|
|
bash tests/bootstrap/run-systemd-container-smoke.sh \
|
|
'${{ matrix.image }}' \
|
|
'artifacts/server-monitor-manager-${{ matrix.runtime }}.tar.gz' \
|
|
deploy/ochenstarik-server-monitor-manager.sh
|