# The Steamify ISO, built and released on the Gitea mirror (git.upriser.nl) by its own runner: the same
# build as by hand (the wsl-build-host skill in steamify-cachyos-dev), then a Gitea release with the ISO,
# its checksums and package list, notes from CHANGELOG.md's Steamify section. The ISO's version is the
# Steamify version on it plus the build date and time (UTC): master releases v<steamify>-<date>-<HHMM>,
# feat/steamify a pre-release v<steamify>-dev.<date>-<HHMM>. Never overwritten. GitHub skips it (one file
# for both servers; GitHub releases take at most 2 GB per file, the ISO is bigger).
# The runner needs privileged containers (archiso mounts loop devices) and ~20 GB of disk; Gitea's
# [attachment] MAX_SIZE must allow the ISO (default 2 GB).
name: Steamify ISO (Gitea release)

on:
  push:
    branches: [master, feat/steamify]
  workflow_dispatch:

concurrency:
  group: steamify-iso
  cancel-in-progress: true

jobs:
  iso:
    if: github.server_url != 'https://github.com'
    runs-on: ubuntu-latest
    container:
      image: docker.io/cachyos/cachyos:latest
      options: --privileged
    defaults:
      run:
        shell: bash
    steps:
      - name: Tools
        run: |
          pacman-key --init && pacman-key --populate
          # nodejs: the actions below run in this container
          pacman -Syu --noconfirm --needed archiso mkinitcpio-archiso git squashfs-tools grub sudo nodejs curl jq

      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Steamify on the ISO (its newest release)
        run: |
          ./steamify-prepare.sh
          # One moment for the ISO's label (profiledef.sh) and the release's name.
          echo "STEAMIFY_BUILD_STAMP=$(date -u +%Y%m%d_%H%M)" >> "$GITHUB_ENV"

      - name: Build
        run: |
          ./build-live-modules.sh
          ./build-calamares-modules.sh
          ./buildiso.sh -p desktop -w || ./buildiso.sh -p desktop -c -w

      - name: Release name and notes
        id: rel
        env:
          TOKEN: ${{ github.token }}
        run: |
          iso="$(ls out/desktop/*.iso | head -n 1)"
          [ -f "$iso" ] || { echo "::error::no ISO in out/desktop"; exit 1; }
          steamify="$(sed -n 's/^VERSION=//p' archiso/airootfs/usr/local/share/steamify/steamify.sh | head -n 1)"
          [ -n "$steamify" ] || { echo "::error::no Steamify version on the ISO"; exit 1; }
          api="${{ github.server_url }}/api/v1/repos/${{ github.repository }}"
          exists() { curl -fsS -o /dev/null -H "Authorization: token $TOKEN" "$api/releases/tags/$1"; }
          b="$STEAMIFY_BUILD_STAMP"   # YYYYMMDD_HHMM (UTC), the same moment as the ISO's label
          stamp="${b:0:4}.${b:4:2}.${b:6:2}-${b:9:4}"   # every build its own name
          if [ "${{ github.ref }}" = refs/heads/master ]; then
            tag="v$steamify-$stamp" prerelease=false name="CachyOS with Steamify Live ISO $steamify ($stamp UTC)"
          else
            tag="v$steamify-dev.$stamp" prerelease=true name="CachyOS with Steamify Live ISO $steamify (test build $stamp UTC)"
          fi
          # Never overwritten (a rerun in the same minute would find its tag taken).
          if exists "$tag"; then
            echo "::warning::$tag is already released and won't be overwritten."
            echo "publish=false" >> "$GITHUB_OUTPUT"; exit 0
          fi
          { echo "publish=true"; echo "tag=$tag"; echo "prerelease=$prerelease"; echo "name=$name"; } >> "$GITHUB_OUTPUT"
          # The Steamify section of CHANGELOG.md ("## CachyOS with Steamify Live ISO"), without its heading.
          section="$(awk '/^## CachyOS with Steamify Live ISO/ {found = 1; next} found && /^#/ {exit} found' CHANGELOG.md)"
          {
            echo "Built $(date -u '+%F %H:%M UTC') from \`$(git rev-parse --short HEAD)\` (${{ github.ref_name }}), with Steamify $steamify."
            echo
            echo "SHA-256: \`$(cut -d' ' -f1 "$iso.sha256")\`, label \`STEAMIFY_${steamify//./_}_$b\`"
            echo
            echo "$section"
          } > release-notes.md
          cat release-notes.md

      - name: Publish ${{ steps.rel.outputs.tag }}
        if: steps.rel.outputs.publish == 'true'
        uses: akkuman/gitea-release-action@v1.3.7
        with:
          token: ${{ github.token }}
          tag_name: ${{ steps.rel.outputs.tag }}
          target_commitish: ${{ github.sha }}
          name: ${{ steps.rel.outputs.name }}
          body_path: release-notes.md
          prerelease: ${{ steps.rel.outputs.prerelease }}
          files: |
            out/desktop/*.iso
            out/desktop/*.iso.sha256
            out/desktop/*.iso.sha1
            out/desktop/*.pkgs.txt