vieter/.woodpecker/.build.yml

matrix:
  PLATFORM:
    - linux/amd64
    - linux/arm64
    - linux/arm/v7

# These checks already get performed on the feature branches
branches:
  exclude: [ main, dev ]
platform: ${PLATFORM}

pipeline:
  # The default build isn't needed, as alpine switches to gcc for the compiler anyways
  debug:
    image: 'chewingbever/vlang:latest'
    group: 'build'
    commands:
      - make debug

  prod:
    image: 'chewingbever/vlang:latest'
    environment:
      - LDFLAGS=-lz -lbz2 -llzma -lexpat -lzstd -llz4 -static
    group: 'build'
    commands:
      - make prod
      # Make sure the binary is actually statically built
      - readelf -d pvieter
      - du -h pvieter
      - '[ "$(readelf -d pvieter | grep NEEDED | wc -l)" = 0 ]'
      # This removes so much, it's amazing
      - strip -s pvieter
      - du -h pvieter

  upload:
    image: 'alpine:latest'
    secrets: [ s3_username, s3_password ]
    commands:
      # We should just add this to the builder image instead
      - apk add curl openssl

      # https://gist.github.com/JustinTimperio/7c7115f87b775618637d67ac911e595f
      - export URL=s3.rustybever.be
      - export OBJ_PATH="/vieter/commits/$CI_COMMIT_SHA/vieter-$(echo '${PLATFORM}' | sed 's:/:-:g')"
      - export DATE="$(date -R --utc)"
      - export CONTENT_TYPE='application/zstd'
      - export SIG_STRING="PUT\n\n$CONTENT_TYPE\n$DATE\n$OBJ_PATH"
      - export SIGNATURE=`echo -en $SIG_STRING | openssl sha1 -hmac $S3_PASSWORD -binary | base64`

      - >
        curl 
        --silent
        -XPUT
        -T pvieter
        -H "Host: $URL"
        -H "Date: $DATE"
        -H "Content-Type: $CONTENT_TYPE"
        -H "Authorization: AWS $S3_USERNAME:$SIGNATURE"
        https://$URL$OBJ_PATH