diff --git a/.github/workflows/build-pysequoia.yml b/.github/workflows/build-pysequoia.yml new file mode 100644 index 000000000000..1df7de0016f6 --- /dev/null +++ b/.github/workflows/build-pysequoia.yml @@ -0,0 +1,106 @@ +# SPDX-FileCopyrightText: 2026 The RISE Project +# SPDX-License-Identifier: MIT +--- +# This workflow is based on the `linux` job of +# https://github.com/wiktor-k/pysequoia/blob/v0.1.35/.github/workflows/maturin.yml +name: Build pysequoia wheels (riscv64) + +on: + workflow_dispatch: + inputs: + version: + description: 'Version glob to (re)build; empty builds every version of docs/packages/pysequoia.yaml not released yet' + required: false + default: '' + pull_request: + branches: [main] + paths: + - '.github/workflows/build-pysequoia.yml' + - 'docs/packages/pysequoia.yaml' + push: + branches: [main] + paths: + - '.github/workflows/build-pysequoia.yml' + - 'docs/packages/pysequoia.yaml' + +concurrency: + group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} + cancel-in-progress: true + +permissions: + contents: read # to fetch code (actions/checkout) + +env: + MANYLINUX_RISCV64_IMAGE: quay.io/pypa/manylinux_2_39_riscv64 + +jobs: + setup: + uses: $/.github/workflows/_setup.yml + with: + package: pysequoia + version: ${{ inputs.version }} + + build_wheels: + needs: [setup] + if: needs.setup.outputs.versions != '[]' + name: Build pysequoia ${{ matrix.version }} ${{ matrix.python }}-manylinux_riscv64 + runs-on: ubuntu-24.04-riscv + timeout-minutes: 90 + strategy: + fail-fast: false + matrix: + version: ${{ fromJSON(needs.setup.outputs.versions) }} + python: ["cp312", "cp313", "cp314", "cp314t"] + + env: + PYSEQUOIA_VERSION: ${{ matrix.version }} + + steps: + - name: Checkout pysequoia v${{ env.PYSEQUOIA_VERSION }} + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + repository: wiktor-k/pysequoia + ref: v${{ env.PYSEQUOIA_VERSION }} + persist-credentials: false + + - name: Build wheels + uses: pypa/cibuildwheel@1828c10ab37f080699c7b81cea34097c684a7074 # v4.2.0 + with: + output-dir: wheelhouse/ + # musllinux is dropped: the riscv64 musl-hosted rustc segfaulted (SIGSEGV) in 2 of 2 + # musl legs, on different crates (p521, sequoia-openpgp); the glibc-hosted one is + # reliable (gotcha 639). + only: ${{ matrix.python }}-manylinux_riscv64 + env: + CIBW_MANYLINUX_RISCV64_IMAGE: ${{ env.MANYLINUX_RISCV64_IMAGE }} + CIBW_BEFORE_ALL_LINUX: >- + curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y + CIBW_ENVIRONMENT_LINUX: PATH="$PATH:$HOME/.cargo/bin" + CIBW_TEST_REQUIRES: pytest + CIBW_TEST_SOURCES: tests + CIBW_TEST_COMMAND: >- + python -c "import pysequoia.pysequoia as m; assert m.__file__.endswith('.so'), m.__file__" && + python -m pytest -v tests + + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + with: + name: pysequoia-${{ env.PYSEQUOIA_VERSION }}-${{ matrix.python }}-manylinux_riscv64 + path: wheelhouse/*.whl + if-no-files-found: error + + publish: + name: Publish pysequoia ${{ matrix.version }} + needs: [setup, build_wheels] + if: needs.setup.outputs.versions != '[]' + strategy: + fail-fast: false + matrix: + version: ${{ fromJSON(needs.setup.outputs.versions) }} + permissions: + contents: write + pull-requests: write + uses: $/.github/workflows/_publish-wheel.yml + secrets: + app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }} + with: + artifact-pattern: pysequoia-${{ matrix.version }}-*_riscv64 diff --git a/docs/packages/pysequoia.yaml b/docs/packages/pysequoia.yaml new file mode 100644 index 000000000000..7019e29cd3ba --- /dev/null +++ b/docs/packages/pysequoia.yaml @@ -0,0 +1,5 @@ +package-name: pysequoia +source-code: https://github.com/wiktor-k/pysequoia +license: Apache-2.0 +versions: +- version: 0.1.35