ci.yml

---
name: ci

"on":
  pull_request:
    branches:
      - master
      - main
      - develop
    paths:
      - '**/Brewfile**'
      - 'Cheffile**'
      - 'Gemfile**'
      - 'Makefile'
      - '**.mk'
      - 'bootstrap-scripts/**'
      - 'bin/convert_soloistrc_to_brewfile.rb'
      - 'test/fixtures/soloistrc'
      - 'test/fixtures/Gemfile**'
      - 'test/fixtures/Brewfile**'
  push:
    branches:
      - master
      - main
      - develop
    paths:
      - '**/Brewfile**'
      - 'Cheffile**'
      - 'Gemfile**'
      - 'Makefile'
      - '**.mk'
      - 'bootstrap-scripts/**'
      - 'bin/convert_soloistrc_to_brewfile.rb'
      - 'test/fixtures/soloistrc'
      - 'test/fixtures/Gemfile**'
      - 'test/fixtures/Brewfile**'

env:
  debug_ci: false

jobs:
  bootstrap:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [macos-13, macos-14]
    steps:
      - name: DEBUG What is GitHub Actions IP?
        run: |
          curl -Lvs ifconfig.co
      - name: DEBUG the failing 502 URL
        run: |
          curl -v 'https://supermarket.getchef.com/api/v1/cookbooks/dmg/versions/4.1.1'
      - name: Check out code
        uses: actions/checkout@v4
      - name: Add --no-document to .gemrc
        run: |
          tee -a $HOME/.gemrc <<EOGEMRC
          install: --no-document
          update: --no-document
          EOGEMRC
      - uses: webfactory/ssh-agent@v0.9.0
        with:
          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
      - name: Add SSH_AUTH_SOCK to root shell .profile
        run: |
          sudo tee -a ~root/.profile <<EOPROFILE
          SSH_AUTH_SOCK=${{ env.SSH_AUTH_SOCK }}
          EOPROFILE
      # - uses: ruby/setup-ruby@v1
      #   with:
      #     bundler-cache: true
      #     cache-version: 1
      # - name: Set BREWFILE_PATH env var
      #   run: |
      #     echo "BREWFILE_PATH=${GITHUB_WORKSPACE}/test/fixtures/tmp/Brewfile.ci" >> $GITHUB_ENV
      # - name: DEBUG - GitHub Cache Paths BREWFILE_PATH
      #   run: |
      #     echo BREWFILE_PATH=$BREWFILE_PATH
      #     echo GITHUB_WORKSPACE=$GITHUB_WORKSPACE
      #   if: ${{ env.debug_ci == 'true' || runner.debug == '1' }}
      - name: DEBUG - Print all shell env exports
        run: export -p
        if: ${{ env.debug_ci == 'true' || runner.debug == '1' }}
      - name: DEBUG - List workspace and Homebrew contents
        run: |
          ls -lAR ${GITHUB_WORKSPACE}
          ls -lR /usr/local/Homebrew
        if: ${{ env.debug_ci == 'true' || runner.debug == '1' }}
      # - name: Generate Brewfile from soloistrc test fixture
      #   run: make brewfile
      - name: DEBUG - Where are Brewfiles?
        run: |
          find ${GITHUB_WORKSPACE} -iname 'Brewfile*'
        if: ${{ env.debug_ci == 'true' || runner.debug == '1' }}
      - name: Configure Homebrew cache
        uses: actions/cache@v4
        with:
          path: |
            ~/Library/Caches/Homebrew/*--*
            ~/Library/Caches/Homebrew/downloads/*--*
            ~/Library/Caches/Homebrew/Cask/*--*
            /usr/local/Homebrew/Library/Taps/**
            /opt/Homebrew/Library/Taps/**
            ./Brewfile.lock.json
          key: brew-${{ matrix.os }}-${{ runner.arch }}-${{ hashFiles('.github/clear_github_actions_cache') }}-${{ hashFiles( env.BREWFILE_PATH, '**/Brewfile.lock.json') }}
          restore-keys: |
            brew-${{ matrix.os }}-${{ runner.arch }}-${{ hashFiles('.github/clear_github_actions_cache') }}-${{ hashFiles( env.BREWFILE_PATH, '**/Brewfile.lock.json') }}
            brew-${{ matrix.os }}-${{ runner.arch }}-${{ hashFiles('.github/clear_github_actions_cache') }}
      - name: Re-enable checksum offloading
        # See: https://github.com/actions/virtual-environments/issues/1187#issuecomment-696195756
        run: |
          sudo sysctl -w net.link.generic.system.hwcksum_tx=1
          sudo sysctl -w net.link.generic.system.hwcksum_rx=1
      - name: Disable sprout-osx-settings::updates
        run: |
          sudo mkdir -p /var/chef/cache/
          sudo touch /var/chef/cache/last_software_update
      - name: Disable Homebrew Analytics
        run: brew analytics off
      - name: Run bootstrap.sh + soloist with test fixtures
        run: |
          make bootstrap
      - name: Change ownership of root-owned files generated by chef-solo
        run: |
          sudo chown -R $(id -u):$(id -g) ${GITHUB_WORKSPACE}/test/fixtures/nodes
      - name: DEBUG - Where are Brewfiles? (exclude nodes and vendor dirs)
        run: |
          find ${GITHUB_WORKSPACE} \( -type d -a \( -name '*/nodes' -o -name '*/vendor' \) -prune \) -o -iname 'Brewfile*'
        if: ${{ env.debug_ci == 'true' || runner.debug == '1' }}
      - name: Upload Logs on failure
        if: ${{ failure() }}
        uses: actions/upload-artifact@v4
        with:
          name: Build failure logs
          path: |
            /var/log/install.log
            ~/.rvm/log/**/*.log
            ~/Library/Logs/Homebrew/**/*
            ~/.rvm/rubies/ruby-*/lib/ruby/gems/*/extensions/**/mkmf.log
            ~/.rvm/rubies/ruby-*/lib/ruby/gems/*/extensions/**/gem_make.out
          overwrite: true
          compression-level: 9