Build on el8/el9, sign rpm, deploy to pkg_01 (#28)

* Build on el8 and el9, run ci for both of them as well

* Rename ci to ci_container_matrix

Author: StrongestNumber9

.github/workflows/ci_container_matrix.yaml

@@ -0,0 +1,24 @@
+name: CI
+
+on: [ push ]
+
+jobs:
+  upload:
+    name: CI
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        os: [ "el8", "el9" ]
+    permissions:
+      contents: write
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Build container
+        run: docker build . --tag builder -f "Dockerfile.${{ matrix.os }}"
+
+      - name: Build project
+        run: docker run -v "${{ github.workspace }}:/code:Z" builder

.github/workflows/maven-publish.yml

@@ -0,0 +1,75 @@
+name: Upload Artifact as GitHub Release Attachment
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  upload:
+    name: Build and upload release
+    runs-on: ubuntu-latest
+    strategy:
+      max-parallel: 1
+      matrix:
+        os: [ "el8", "el9" ]
+    permissions:
+      contents: write
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Cache Local Maven Repository
+        uses: actions/cache@v4
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          java-version: 8.0.292+10
+          distribution: 'adopt'
+
+      - name: Build container
+        run: docker build . --tag builder -f "Dockerfile.${{ matrix.os }}"
+
+      - name: Build project
+        run: docker run -v "${{ github.workspace }}:/code:Z" builder
+
+      - name: Prepare RPM GPG signing
+        run: |
+          sudo apt-get install expect pinentry-tty;
+          printf "RPM_SIGNING_KEYNAME=%q\n" "$(echo "${{ secrets.RPM_SIGNING_PUBLIC_KEY }}" | gpg --show-keys --with-colons | awk -F':' '/uid/{print $10}')" >> $GITHUB_ENV;
+          echo "${{ secrets.RPM_SIGNING_PRIVATE_KEY }}" | gpg --batch --import;
+          echo "%_gpg_sign_cmd_extra_args --pinentry-mode loopback --passphrase \"%{getenv:RPM_SIGNING_PASSPHRASE}\"" >> "${HOME}/.rpmmacros";
+
+      - name: Build and sign the rpm
+        run: mvn --batch-mode -Drevision=${{ github.event.release.tag_name }} -Dsha1= -Dchangelist= -Ppublish-github-packages -f rpm.pom.xml package
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          OS_VERSION: ${{ matrix.os }}
+          RPM_SIGNING_KEYNAME: ${{ env.RPM_SIGNING_KEYNAME }}
+          RPM_SIGNING_PASSPHRASE: ${{ secrets.RPM_SIGNING_PASSPHRASE }}
+
+      - name: Attach rpm to release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: target/rpm/com.teragrep-blf_02/RPMS/x86_64/com.teragrep-blf_02-*.rpm
+
+      - name: Update pkg_01 releases repository
+        uses: teragrep/[email protected]
+        with:
+          from_repository: "${{ github.repository }}"
+          from_version: "${{ github.event.release.tag_name }}"
+          to_repository: "${{ github.repository_owner }}/pkg_01"
+          to_path: "linux/${{ matrix.os }}"
+          deploy_key: ${{ secrets.PKG_01_DEPLOY_KEY }}
+          files: target/rpm/com.teragrep-blf_02/RPMS/x86_64/com.teragrep-blf_02-*.rpm
+          gpg_public_key: "${{ secrets.RPM_SIGNING_PUBLIC_KEY }}"
+          repo_baseurl: "${{ vars.PKG_01_CENTRAL_BASEURL }}"
+          repo_name: "teragrep-${{ matrix.os }}-releases"
+        env:
+          has_deploy_key: ${{ secrets.PKG_01_DEPLOY_KEY != '' }}
+        if: ${{ env.has_deploy_key == 'true' }}

.github/workflows/upload_release_github_attachment_container_matrix.yaml

@@ -0,0 +1,5 @@
+FROM rockylinux:9
+RUN dnf -y --enablerepo=devel install make automake autoconf libtool mariadb-devel
+WORKDIR /code
+COPY docker-entrypoint.sh /docker-entrypoint.sh
+ENTRYPOINT [ "/docker-entrypoint.sh" ]

Dockerfile Dockerfile.el8Dockerfile renamed to Dockerfile.el8

@@ -5,7 +5,7 @@
   <packaging>rpm</packaging>
   <modelVersion>4.0.0</modelVersion>
   <artifactId>blf_02</artifactId>
-  <version>${revision}${sha1}${changelist}.el8</version>
+  <version>${revision}${sha1}${changelist}.${env.OS_VERSION}</version>
   <name>blf_02</name>
   <description>Teragrep Bloom Filter Plugin for MariaDB</description>
   <groupId>com.teragrep</groupId>
@@ -57,6 +57,10 @@
           <defaultGroupname>root</defaultGroupname>
           <defaultFilemode>0644</defaultFilemode>
           <defaultDirmode>0755</defaultDirmode>
+          <keyname>${env.RPM_SIGNING_KEYNAME}</keyname>
+          <keyPassphrase>
+            <passphrase>${env.RPM_SIGNING_PASSPHRASE}</passphrase>
+          </keyPassphrase>
           <defineStatements>
             <!-- _python_bytecompile_extra 0 doesn't work so we take the original script and just replace what we do not want -->
             <defineStatement>__os_install_post %(echo '%{__os_install_post}' | sed -e 's!/usr/lib[^[:space:]]*/brp-python-bytecompile[[:space:]].*$!!g')</defineStatement>