This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build QEMU image | |
| on: | |
| push: | |
| branches: | |
| - develop | |
| - release/* | |
| - da/merging-qemu | |
| paths: | |
| - '.github/workflows/qemu-image-build.yml' | |
| - 'qemu-arm64-nix.pkr.hcl' | |
| - 'common-nix.vars.pkr.hcl' | |
| - 'ansible/vars.yml' | |
| workflow_dispatch: | |
| jobs: | |
| build: | |
| runs-on: arm-native-runner | |
| timeout-minutes: 150 | |
| permissions: | |
| contents: write | |
| packages: write | |
| id-token: write | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v3 | |
| - uses: DeterminateSystems/nix-installer-action@main | |
| - name: enable KVM support | |
| run: | | |
| sudo ls /dev/kvm | |
| sudo chmod 666 /dev/kvm | |
| - name: Install dependencies | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y qemu-efi-aarch64 cloud-image-utils qemu-system-arm qemu-utils | |
| - name: Set PostgreSQL version environment variable | |
| run: echo "POSTGRES_MAJOR_VERSION=${{ matrix.postgres_version }}" >> $GITHUB_ENV | |
| - name: Generate common-nix.vars.pkr.hcl | |
| run: | | |
| PG_VERSION=$(sudo nix run nixpkgs#yq -- '.postgres_release["postgres'${{ matrix.postgres_version }}'"]' ansible/vars.yml) | |
| PG_VERSION=$(echo $PG_VERSION | tr -d '"') # Remove any surrounding quotes | |
| echo 'postgres-version = "'$PG_VERSION'"' > common-nix.vars.pkr.hcl | |
| echo 'postgres-major-version = "'$POSTGRES_MAJOR_VERSION'"' >> common-nix.vars.pkr.hcl | |
| # echo 'postgresql_major = "'$POSTGRES_MAJOR_VERSION'"' >> common-nix.vars.pkr.hcl | |
| # Ensure there's a newline at the end of the file | |
| echo "" >> common-nix.vars.pkr.hcl | |
| - name: Build QEMU artifact | |
| run: | | |
| make init | |
| GIT_SHA=${{github.sha}} | |
| # TODO (darora): possibly need to install qemu deps here | |
| export PACKER_LOG=1 | |
| packer build -var "git_sha=$(UPSTREAM_NIX_GIT_SHA)" -var-file="common-nix.vars.pkr.hcl" qemu-arm64-nix.pkr.hcl | |
| # packer build -var "git-head-version=${GIT_SHA}" -var "packer-execution-id=${GITHUB_RUN_ID}" -var-file="development-arm.vars.pkr.hcl" -var-file="common-nix.vars.pkr.hcl" -var "ansible_arguments=-e postgresql_major=${POSTGRES_MAJOR_VERSION}" amazon-arm64-nix.pkr.hcl | |
| # TODO (darora): publishing things is temporarily disabled | |
| # - name: Grab release version | |
| # id: process_release_version | |
| # run: | | |
| # VERSION=$(cat common-nix.vars.pkr.hcl | sed -e 's/postgres-version = "\(.*\)"/\1/g') | |
| # echo "version=$VERSION" >> $GITHUB_OUTPUT | |
| # - name: Create nix flake revision tarball | |
| # run: | | |
| # GIT_SHA=${{github.sha}} | |
| # MAJOR_VERSION=${{ env.POSTGRES_MAJOR_VERSION }} | |
| # mkdir -p "/tmp/pg_upgrade_bin/${MAJOR_VERSION}" | |
| # echo "$GIT_SHA" >> "/tmp/pg_upgrade_bin/${MAJOR_VERSION}/nix_flake_version" | |
| # tar -czf "/tmp/pg_binaries.tar.gz" -C "/tmp/pg_upgrade_bin" . | |
| # - name: configure aws credentials - staging | |
| # uses: aws-actions/configure-aws-credentials@v4 | |
| # with: | |
| # role-to-assume: ${{ secrets.DEV_AWS_ROLE }} | |
| # aws-region: "us-east-1" | |
| # - name: Upload software manifest to s3 staging | |
| # run: | | |
| # cd ansible | |
| # ansible-playbook -i localhost \ | |
| # -e "ami_release_version=${{ steps.process_release_version.outputs.version }}" \ | |
| # -e "internal_artifacts_bucket=${{ secrets.ARTIFACTS_BUCKET }}" \ | |
| # -e "postgres_major_version=${{ env.POSTGRES_MAJOR_VERSION }}" \ | |
| # manifest-playbook.yml | |
| # - name: Upload nix flake revision to s3 staging | |
| # run: | | |
| # aws s3 cp /tmp/pg_binaries.tar.gz s3://${{ secrets.ARTIFACTS_BUCKET }}/upgrades/postgres/supabase-postgres-${{ steps.process_release_version.outputs.version }}/20.04.tar.gz | |
| # - name: configure aws credentials - prod | |
| # uses: aws-actions/configure-aws-credentials@v4 | |
| # with: | |
| # role-to-assume: ${{ secrets.PROD_AWS_ROLE }} | |
| # aws-region: "us-east-1" | |
| # - name: Upload software manifest to s3 prod | |
| # run: | | |
| # cd ansible | |
| # ansible-playbook -i localhost \ | |
| # -e "ami_release_version=${{ steps.process_release_version.outputs.version }}" \ | |
| # -e "internal_artifacts_bucket=${{ secrets.PROD_ARTIFACTS_BUCKET }}" \ | |
| # -e "postgres_major_version=${{ env.POSTGRES_MAJOR_VERSION }}" \ | |
| # manifest-playbook.yml | |
| # - name: Upload nix flake revision to s3 prod | |
| # run: | | |
| # aws s3 cp /tmp/pg_binaries.tar.gz s3://${{ secrets.PROD_ARTIFACTS_BUCKET }}/upgrades/postgres/supabase-postgres-${{ steps.process_release_version.outputs.version }}/20.04.tar.gz | |
| # - name: Create release | |
| # uses: softprops/action-gh-release@v1 | |
| # with: | |
| # name: ${{ steps.process_release_version.outputs.version }} | |
| # tag_name: ${{ steps.process_release_version.outputs.version }} | |
| # target_commitish: ${{github.sha}} | |
| # - name: Slack Notification on Failure | |
| # if: ${{ failure() }} | |
| # uses: rtCamp/action-slack-notify@v2 | |
| # env: | |
| # SLACK_WEBHOOK: ${{ secrets.SLACK_NOTIFICATIONS_WEBHOOK }} | |
| # SLACK_USERNAME: 'gha-failures-notifier' | |
| # SLACK_COLOR: 'danger' | |
| # SLACK_MESSAGE: 'Building Postgres AMI failed' | |
| # SLACK_FOOTER: '' | |
| - name: Cleanup resources after build | |
| if: ${{ always() }} | |
| run: | | |
| aws ec2 describe-instances --filters "Name=tag:packerExecutionId,Values=${GITHUB_RUN_ID}" --query "Reservations[].Instances[].InstanceId" --output text | xargs -r aws ec2 terminate-instances --instance-ids | |
| - name: Cleanup resources on build cancellation | |
| if: ${{ cancelled() }} | |
| run: | | |
| aws ec2 describe-instances --filters "Name=tag:packerExecutionId,Values=${GITHUB_RUN_ID}" --query "Reservations[].Instances[].InstanceId" --output text | xargs -r aws ec2 terminate-instances --instance-ids |