Files
status-app/ci/Jenkinsfile.windows
T

231 lines
7.5 KiB
Groovy

#!/usr/bin/env groovy
library 'status-jenkins-lib@v1.9.42'
QT_VERSION = "6.11.0"
/* Options section can't access functions in objects. */
def isPRBuild = utils.isPRBuild()
pipeline {
agent { label "windows && x86_64 && qt-${QT_VERSION} && go-1.24" }
parameters {
booleanParam(
name: 'RELEASE',
description: 'Decides whether release credentials are used.',
defaultValue: params.RELEASE ?: false
)
booleanParam(
name: 'INCLUDE_DEBUG_SYMBOLS',
description: 'Decides whether binaries are built with debug symbols.',
defaultValue: params.INCLUDE_DEBUG_SYMBOLS ?: false
)
choice(
name: 'VERBOSE',
description: 'Level of verbosity based on nimbus-build-system setup.',
choices: ['0', '1', '2']
)
string(
name: 'NIMFLAGS',
description: 'Extra Nim flags. Examples: --verbosity:2 --passL:"-v" --passC:"-v"',
defaultValue: ''
)
booleanParam(
name: 'USE_MOCKED_KEYCARD_LIB',
description: 'Decides whether the mocked status-keycard-go library is built.',
defaultValue: false
)
choice(
name: 'WINDOWS_CODESIGN_TIMESTAMP_URL',
description: 'Time Stamp Authority (TSA) server for signing binaries.',
choices: [
'http://timestamp.digicert.com', /* Known to cause 0x80096005, 0x800700e1 errors. */
'http://timestamp.apple.com/ts01',
'http://timestamp.sectigo.com?td=sha256',
'http://time.certum.pl',
'https://freetsa.org',
]
)
}
options {
timestamps()
/* Prevent Jenkins jobs from running forever */
timeout(time: 60, unit: 'MINUTES')
/* manage how many builds we keep */
buildDiscarder(logRotator(
numToKeepStr: '10',
daysToKeepStr: '30',
artifactNumToKeepStr: '1',
artifactDaysToKeepStr: '30'
))
/* Allows combined build to copy */
copyArtifactPermission('/status-app/*')
/* Abort old PR builds. */
disableConcurrentBuilds(
abortPrevious: isPRBuild
)
disableRestartFromStage()
}
environment {
PLATFORM = "windows/${getArch()}"
/* Improve make performance */
MAKEFLAGS = "-j${utils.getProcCount()} V=${params.VERBOSE}"
/* Explicitly set the QT version */
QTDIR = "/c/Qt/${QT_VERSION}/msvc2022_64"
GOPATH = "${WORKSPACE_TMP}/go"
GOBIN = "${WORKSPACE_TMP}/go/bin"
GOCACHE = "${WORKSPACE_TMP}/gocache"
GOTMPDIR = "${WORKSPACE_TMP}/gotmp"
PATH = "${assembePath([env.GOBIN,"${env.QTDIR}/bin","${env.HOME}/go/bin"])}"
/* Avoid weird bugs caused by stale cache. */
QML_DISABLE_DISK_CACHE = 1
/* Control output the filename */
VERSION = "${utils.getVersion()}"
STATUS_CLIENT_EXE = "pkg/${utils.pkgFilename(ext: 'exe', arch: getArch(), version: env.VERSION)}"
/* 7zip archive filename */
STATUS_CLIENT_7Z = "pkg/${utils.pkgFilename(ext: '7z', arch: getArch(), version: env.VERSION)}"
/* Hack-fix for params not being set in env on first job run. */
WINDOWS_CODESIGN_TIMESTAMP_URL = "${params.WINDOWS_CODESIGN_TIMESTAMP_URL}"
/* prevent sharing cache dir across different jobs */
GO_GENERATE_FAST_DIR = "${env.WORKSPACE_TMP}/go-generate-fast"
SENTRY_PRODUCTION = "${utils.isReleaseBuild() ? 'true' : 'false'}"
/* Hack fix for params not being set in job on first run */
ENTITLEMENTS = "${params.ENTITLEMENTS}"
RELEASE = "${params.RELEASE}"
INCLUDE_DEBUG_SYMBOLS = "${params.INCLUDE_DEBUG_SYMBOLS}"
VERBOSE = "${params.VERBOSE}"
USE_MOCKED_KEYCARD_LIB = "${params.USE_MOCKED_KEYCARD_LIB}"
/* FIXME: figure out why NIMFLAGS are not respected */
XDG_CACHE_HOME = "${env.WORKSPACE_TMP}/.cache"
/* Nim build on Windows puts nimcache in user HOME. */
USERPROFILE = "${env.WORKSPACE_TMP}"
/* Ensure nimcache is not shared between builds. */
NIMFLAGS = "${params.NIMFLAGS} --colors:off --nimcache:${env.WORKSPACE_TMP}/nimcache"
NIM_SDS_SOURCE_DIR = "${env.WORKSPACE_TMP}/nim-sds".replace('\\', '/')
}
stages {
stage('Cleanup Workspace') {
steps {
sh './scripts/clean-git.sh'
sh "mkdir -p '${env.GOTMPDIR}'"
}
}
stage('Fetch submodules') {
steps {
sh 'git submodule update --init --recursive'
}
}
stage('Deps') {
steps {
sh 'make update'
sh 'make deps'
}
}
stage('status-go') {
steps {
sh 'make status-go'
}
}
stage('Package') {
steps { script {
status.buildSigned(platform='windows', target="${env.STATUS_CLIENT_EXE} ${env.STATUS_CLIENT_7Z}")
} }
}
stage('Parallel Upload') {
/* Uploads on Windows are slow. */
parallel {
stage('Upload 7Z') {
steps { script {
zip_url = s5cmd.upload(env.STATUS_CLIENT_7Z)
} }
}
stage('Upload EXE') {
steps { script {
exe_url = s5cmd.upload(env.STATUS_CLIENT_EXE)
} }
}
}
}
stage('Archive') {
steps { script {
archiveArtifacts(env.STATUS_CLIENT_EXE)
archiveArtifacts(env.STATUS_CLIENT_7Z)
env.PKG_URL = exe_url
jenkins.setBuildDesc(Zip: zip_url, Exe: exe_url)
} }
}
stage('E2E') {
when { expression { utils.isPRBuild() } }
steps { script {
build(
job: 'status-app/e2e/prs-windows',
wait: false,
parameters: jenkins.mapToParams([
GIT_REF: env.CHANGE_BRANCH ?: env.BRANCH_NAME,
BUILD_SOURCE: env.JOB_NAME,
]),
)
} }
}
}
post {
success { script { github.notifyPR(true) } }
failure { script { github.notifyPR(false) } }
// Windows workspace often becomes broken if stoped during checkout.
// Post cleanup will fail too.
// Use 'Wipe out repository and force clone' manual UI option to prevent it.
cleanup {
cleanWs(disableDeferredWipeout: true)
powershell "Remove-Item -Path '${env.WORKSPACE_TMP}' -Recurse -Force"
}
}
}
/* Windows cannot be trusted to set PATH with correct order. */
def assembePath(List<String> extraPaths) {
if (isUnix()) {
return "${env.PATH}:${extraPaths.join(':')}"
} else {
/* WARNING: Remember to update versions in scripts/windows_build_setup.ps1 */
def binPaths = [
'C:/Windows/system32/WindowsPowerShell/v1.0',
'C:/Windows/system32',
'C:/Windows',
'C:/ProgramData/scoop/apps/go/1.24.7/bin',
'C:/ProgramData/scoop/apps/nim/2.2.6/bin',
'C:/ProgramData/scoop/apps/cmake/3.31.6/bin',
'C:/ProgramData/scoop/apps/python/3.13.5',
'C:/ProgramData/scoop/apps/python/3.13.5/Scripts',
'C:/ProgramData/scoop/apps/mingw-winlibs/15.2.0-13.0.0-r5/bin',
'C:/ProgramData/scoop/apps/vcredist2022/14.44.35211.0',
'C:/ProgramData/scoop/apps/openssl-lts/3.0.19/bin',
'C:/ProgramData/scoop/apps/protobuf/3.20.1/bin',
'C:/ProgramData/scoop/apps/inno-setup/6.7.0',
'C:/ProgramData/scoop/apps/git/current/bin',
'C:/ProgramData/scoop/shims',
'C:/BuildTools/MSBuild/Current/Bin',
'C:/BuildTools/VC/Auxiliary/Build',
'C:/Program Files/DigiCert/DigiCert One Signing Manager Tools',
]
binPaths.each { dir -> if (!fileExists(dir)) { error("Missing PATH directory: '${dir}'") } }
/* These Git Bash paths can't be checked with fileExists(). */
return (['/mingw64/bin', '/usr/bin', '/bin'] + binPaths + extraPaths).join(';')
}
}
def getArch() {
def tokens = Thread.currentThread().getName().split('/')
for (def arch in ['x86_64', 'aarch64']) {
if (tokens.contains(arch)) { return arch }
}
}