signal-cli/.github/workflows/release.yml

name: release

on:
  push:
    tags:
      - v*

permissions: {}

env:
  IMAGE_NAME: signal-cli
  IMAGE_REGISTRY: ghcr.io/asamk
  REGISTRY_USER: ${{ github.actor }}
  REGISTRY_PASSWORD: ${{ github.token }}
  ARCHIVE_JAVA_VERSION: 25

jobs:
  build:
    uses: ./.github/workflows/build.yml

  release:
    needs: build
    runs-on: ubuntu-latest
    permissions:
      contents: write
    outputs:
      version: ${{ steps.version.outputs.version }}
    steps:
      - name: Download signal-cli build from CI workflow
        uses: actions/download-artifact@v8

      - name: Get signal-cli version
        id: version
        run: |
          mv ./signal-cli-archive-${{ env.ARCHIVE_JAVA_VERSION }}/* .
          echo "version=$(cat VERSION)" >> $GITHUB_OUTPUT

      - name: Create draft release and upload assets
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh release create "v${{ steps.version.outputs.version }}" \
            --repo "${{ github.repository }}" \
            --title "v${{ steps.version.outputs.version }}" \
            --draft \
            --verify-tag \
            "signal-cli-${{ steps.version.outputs.version }}.tar.gz" \
            "signal-cli-${{ steps.version.outputs.version }}-Linux-native.tar.gz" \
            "signal-cli-${{ steps.version.outputs.version }}-Linux-client.tar.gz" \
            "signal-cli-${{ steps.version.outputs.version }}-json-schemas.tar.gz"

  build-container:
    needs: release
    runs-on: ubuntu-latest
    permissions:
      packages: write

    steps:
      - uses: actions/checkout@v6
      - name: Download signal-cli build from CI workflow
        uses: actions/download-artifact@v8

      - name: Move archive file
        run: |
          tar xf signal-cli-archive-${{ env.ARCHIVE_JAVA_VERSION }}/signal-cli-${{ needs.release.outputs.version }}.tar.gz
          mkdir -p build/install/
          mv ./signal-cli-"${{ needs.release.outputs.version }}"/ build/install/signal-cli

      - name: Build Image
        id: build_image
        uses: redhat-actions/buildah-build@v3
        with:
          image: ${{ env.IMAGE_NAME }}
          tags: latest ${{ github.sha }} ${{ needs.release.outputs.version }}
          containerfiles: ./Containerfile
          oci: true

      - name: Push To GHCR
        uses: redhat-actions/push-to-registry@v3
        id: push
        with:
          image: ${{ steps.build_image.outputs.image }}
          tags: ${{ steps.build_image.outputs.tags }}
          registry: ${{ env.IMAGE_REGISTRY }}
          username: ${{ env.REGISTRY_USER }}
          password: ${{ env.REGISTRY_PASSWORD }}

      - name: Echo outputs
        run: |
          echo "${{ toJSON(steps.push.outputs) }}"

  build-container-native:
    needs: release
    runs-on: ubuntu-latest
    permissions:
      packages: write

    steps:
      - uses: actions/checkout@v6
      - name: Download signal-cli build from CI workflow
        uses: actions/download-artifact@v8

      - name: Move archive file
        run: |
          tar xf signal-cli-archive-${{ env.ARCHIVE_JAVA_VERSION }}/signal-cli-${{ needs.release.outputs.version }}-Linux-native.tar.gz
          mkdir -p build/native/nativeCompile/
          mv signal-cli build/native/nativeCompile/
          chmod +x build/native/nativeCompile/signal-cli

      - name: Build Image
        id: build_image
        uses: redhat-actions/buildah-build@v3
        with:
          image: ${{ env.IMAGE_NAME }}
          tags: latest-native ${{ github.sha }}-native ${{ needs.release.outputs.version }}-native
          containerfiles: ./native.Containerfile
          oci: true

      - name: Push To GHCR
        uses: redhat-actions/push-to-registry@v3
        id: push
        with:
          image: ${{ steps.build_image.outputs.image }}
          tags: ${{ steps.build_image.outputs.tags }}
          registry: ${{ env.IMAGE_REGISTRY }}
          username: ${{ env.REGISTRY_USER }}
          password: ${{ env.REGISTRY_PASSWORD }}

      - name: Echo outputs
        run: |
          echo "${{ toJSON(steps.push.outputs) }}"

  build-container-client:
    needs: release
    runs-on: ubuntu-latest
    permissions:
      packages: write

    steps:
      - uses: actions/checkout@v6
      - name: Download signal-cli build from CI workflow
        uses: actions/download-artifact@v8

      - name: Move archive file
        run: |
          tar xf signal-cli-archive-${{ env.ARCHIVE_JAVA_VERSION }}/signal-cli-${{ needs.release.outputs.version }}-Linux-client.tar.gz
          mkdir -p client/target/release/
          mv signal-cli-client client/target/release/
          chmod +x client/target/release/signal-cli-client

      - name: Build Image
        id: build_image
        uses: redhat-actions/buildah-build@v3
        with:
          image: ${{ env.IMAGE_NAME }}
          tags: latest-client ${{ github.sha }}-client ${{ needs.release.outputs.version }}-client
          containerfiles: ./client.Containerfile
          oci: true

      - name: Push To GHCR
        uses: redhat-actions/push-to-registry@v3
        id: push
        with:
          image: ${{ steps.build_image.outputs.image }}
          tags: ${{ steps.build_image.outputs.tags }}
          registry: ${{ env.IMAGE_REGISTRY }}
          username: ${{ env.REGISTRY_USER }}
          password: ${{ env.REGISTRY_PASSWORD }}

      - name: Echo outputs
        run: |
          echo "${{ toJSON(steps.push.outputs) }}"