linux/.github/workflows/generate-kernel-patch.yml at master · OpenGamingCollective/linux · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
name: Generate OGC Kernel Patch Release

on:
  workflow_dispatch:
    inputs:
      ogc_tag:
        description: "Enter a tagged OGC kernel version in the format <kernel-version>-ogc<rev>"
        required: true
        type: string

jobs:
  generate-patch-release:
    runs-on: ubuntu-latest

    steps:
      - name: Extract tag names
        id: tag
        run: |
          OGC_TAG="${{ github.event.inputs.ogc_tag }}"

          # Expected format: v<kernel-version>-ogc<rev>
          # Example: v6.6.123-ogc1
          if [[ ! "$OGC_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+-ogc[0-9]+$ ]]; then
            echo "::error::Invalid tag '$OGC_TAG'. Expected format 'v<kernel-version>-ogc<rev>' (example: v6.6.123-ogc1)."
            exit 1
          fi

          UPSTREAM_TAG="${OGC_TAG%-ogc*}"

          echo "ogc_tag=$OGC_TAG" >> "$GITHUB_OUTPUT"
          echo "upstream_tag=$UPSTREAM_TAG" >> "$GITHUB_OUTPUT"

      - name: Checkout our repository at tag
        uses: actions/checkout@v6.0.2
        with:
          fetch-depth: 0
          ref: ${{ steps.tag.outputs.ogc_tag }}

      - name: Add kernel remote
        run: |
          git remote add upstream https://github.com/gregkh/linux.git
          git fetch --depth=1 upstream "refs/tags/${{ steps.tag.outputs.upstream_tag }}:refs/tags/${{ steps.tag.outputs.upstream_tag }}"

      - name: Import signing key
        run: |
          echo "${{ secrets.SIGNING_PRIVATE_KEY }}" | gpg --batch --import
          echo "pinentry-mode loopback" >> ~/.gnupg/gpg.conf

      - name: Generate and sign patches
        run: |
          # Monolithic Patch
          git diff "refs/tags/${{ steps.tag.outputs.upstream_tag }}" \
                   "${{ steps.tag.outputs.ogc_tag }}" > monolithic.patch

          gpg --batch --yes --pinentry-mode loopback \
              --passphrase "${{ secrets.SIGNING_PASSPHRASE }}" \
              --output monolithic.patch.sig \
              --detach-sign monolithic.patch

          # Patch Series
          mkdir -p series
          git format-patch \
           "refs/tags/${{ steps.tag.outputs.upstream_tag }}..refs/tags/${{ steps.tag.outputs.ogc_tag }}" \
            -o series

          for PATCH in series/*.patch; do
            gpg --batch --yes --pinentry-mode loopback \
                --passphrase "${{ secrets.SIGNING_PASSPHRASE }}" \
                --output "${PATCH}.sig" \
                --detach-sign "${PATCH}"
          done

          zip -r series.zip series

      - name: Write public key
        run: |
          echo "${{ vars.SIGNING_PUBLIC_KEY }}" > public.key

      - name: Create GitHub Release
        uses: softprops/action-gh-release@v2.5.0
        with:
          tag_name: ${{ steps.tag.outputs.ogc_tag }}
          name: "OGC Kernel Patch Release – ${{
            steps.tag.outputs.ogc_tag }}"
          files: |
            monolithic.patch
            monolithic.patch.sig
            series.zip
            public.key
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}