Provide build binaries via GitHub actions

We now provide the pre-built nix binaries for every commit via GitHub actions. Signed-off-by: Sascha Grunert <[email protected]>
kubernetes-sigs · Mar 13, 2023 · f64eaae · f64eaae
1 parent 492c72d
commit f64eaae
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 4 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -33,7 +33,11 @@ jobs:
           name: security-profiles-operator
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
           pushFilter: security-profiles-operator
-      - run: make nix nix-arm64
+      - run: make nix
+      - uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
+        with:
+          name: build
+          path: build.tar.gz
 
   bpf:
     runs-on: ubuntu-22.04

diff --git a/.gitignore b/.gitignore
@@ -4,5 +4,6 @@
 .vagrant
 Vagrantfile
 build
+build.tar.gz
 image.tar
 result
diff --git a/Makefile b/Makefile
@@ -197,13 +197,23 @@ image-arm64: ## Build the container image for arm64
 image-cross: ## Build and push the container image manifest
 	hack/image-cross.sh
 
+define nix-build-to
+	nix-build nix/default-$(1).nix
+	mkdir -p $(BUILD_DIR)/$(1)
+	cp -f result/* $(BUILD_DIR)/$(1)
+endef
+
 .PHONY: nix
-nix: ## Build the binary via nix for the current system
-	nix-build nix
+nix: nix-amd64 nix-arm64 ## Build all binaries via nix and create a build.tar.gz
+	tar cvfz build.tar.gz -C $(BUILD_DIR) amd64 arm64
+
+.PHONY: nix-amd64
+nix-amd64: ## Build the binary via nix for amd64
+	$(call nix-build-to,amd64)
 
 .PHONY: nix-arm64
 nix-arm64: ## Build the binary via nix for arm64
-	nix-build nix/default-arm64.nix
+	$(call nix-build-to,arm64)
 
 .PHONY: update-nixpkgs
 update-nixpkgs: ## Update the pinned nixpkgs to the latest master