Files
mistralrs-package/.gitea/workflows/build-release.yml
rob thijssen cacdbebbf7 refactor(ci): use RPM_REPO_HOST env var, add SSH connectivity test
- Set RPM_REPO_HOST=oolon.kosherinata.internal as a plain env var
  instead of treating the hostname as a secret via RSYNC_TARGET
- Add explicit SSH connectivity test step using StrictHostKeyChecking=accept-new
- Remove ssh-keyscan in favour of accept-new which provides meaningful errors
- Remove RSYNC_TARGET secret dependency

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-27 09:23:54 +03:00

188 lines
5.8 KiB
YAML

name: build-release
on:
workflow_dispatch:
inputs:
tag:
description: "mistral.rs upstream tag"
required: true
type: string
concurrency:
group: poll-and-build
cancel-in-progress: false
jobs:
build:
strategy:
fail-fast: false
matrix:
include:
- name: cuda13
fedora_version: "43"
runner: cuda-13.0
cuda_home: /usr/local/cuda-13.0
cargo_features: "cuda cudnn flash-attn nccl"
compute_caps: "120"
build_jobs: 12
nvcc_threads: 4
runs-on: ${{ matrix.runner }}
steps:
- uses: actions/checkout@v4
- name: Install/update Rust toolchain
run: |
if command -v rustup &> /dev/null; then
rustup update stable
else
curl --proto '=https' --tlsv1.2 --silent --show-error --fail https://sh.rustup.rs | sh -s -- -y
fi
echo "${HOME}/.cargo/bin" >> "$GITHUB_PATH"
#- name: Check for NCCL
# run: |
# if ! ldconfig -p | grep -q libnccl.so.2; then
# echo "ERROR: libnccl not found. Install with:"
# echo " sudo dnf config-manager addrepo --from-repofile=https://developer.download.nvidia.com/compute/cuda/repos/rhel9/x86_64/cuda-rhel9.repo"
# echo " sudo dnf --repo=cuda-rhel9-x86_64 install libnccl libnccl-devel"
# exit 1
# fi
- name: Clone mistral.rs at tag
run: |
git clone --depth 1 --branch "${{ inputs.tag }}" \
https://github.com/EricLBuehler/mistral.rs.git src/
- name: Build
run: ./script/build-binary.sh
env:
FLAVOUR_NAME: ${{ matrix.name }}
CUDA_HOME: ${{ matrix.cuda_home }}
CARGO_FEATURES: ${{ matrix.cargo_features }}
CUDA_COMPUTE_CAP: ${{ matrix.compute_caps }}
CARGO_BUILD_JOBS: ${{ matrix.build_jobs }}
NVCC_THREADS: ${{ matrix.nvcc_threads }}
SRC_DIR: src
- name: Upload binary artifact
uses: actions/upload-artifact@v3
with:
name: mistralrs-server-${{ matrix.name }}-fc${{ matrix.fedora_version }}
path: artifacts/mistralrs-server-${{ matrix.name }}
retention-days: 1
package:
needs: build
runs-on: fedora-43
strategy:
fail-fast: false
matrix:
include:
- name: cuda13
fedora_version: "43"
steps:
- uses: actions/checkout@v4
- name: Download binary
uses: actions/download-artifact@v3
with:
name: mistralrs-server-${{ matrix.name }}-fc${{ matrix.fedora_version }}
path: artifacts/
- name: Build RPM
run: |
rm -f ~/.rpmmacros
version="${TAG#v}"
rpmdev-setuptree
cp artifacts/mistralrs-server-${{ matrix.name }} ~/rpmbuild/SOURCES/
cp rpm/systemd/mistralrs@.service ~/rpmbuild/SOURCES/
cp rpm/systemd/mistralrs@.conf.example ~/rpmbuild/SOURCES/
rpmbuild -bb rpm/mistralrs.spec \
--define "mistralrs_version ${version}" \
--define "mistralrs_flavour ${{ matrix.name }}" \
--undefine dist \
--define "dist .fc${{ matrix.fedora_version }}"
env:
TAG: ${{ inputs.tag }}
- name: Upload RPM
uses: actions/upload-artifact@v3
with:
name: rpm-${{ matrix.name }}-fc${{ matrix.fedora_version }}
path: ~/rpmbuild/RPMS/x86_64/*.rpm
retention-days: 7
publish:
needs: package
runs-on: fedora-43
strategy:
fail-fast: false
matrix:
include:
- fedora_version: "43"
steps:
- uses: actions/checkout@v4
- name: Download RPMs for fc${{ matrix.fedora_version }}
uses: actions/download-artifact@v3
with:
path: rpms/
pattern: rpm-*-fc${{ matrix.fedora_version }}
- name: Flatten RPM artifacts
run: |
find rpms/ -name '*.rpm' -exec mv --target-directory=rpms/ {} +
find rpms/ -mindepth 1 -type d -empty -delete
- name: Check for sequoia-sq
run: |
if ! command -v sq &> /dev/null; then
echo "ERROR: sequoia-sq is not installed. Install with: sudo dnf install sequoia-sq"
exit 1
fi
- name: Import signing key
run: |
echo "${{ secrets.RPM_SIGNING_KEY }}" | gpg --batch --import
fpr=$(gpg --batch --with-colons --list-keys "${{ secrets.RPM_SIGNING_KEY_ID }}" | awk -F: '/^fpr:/ { print $10; exit }')
echo "${fpr}:6:" | gpg --batch --import-ownertrust
sed "s/@GPG_NAME@/${{ secrets.RPM_SIGNING_KEY_ID }}/" rpm/rpmmacros > ~/.rpmmacros
- name: Sign RPMs
run: |
for rpm in rpms/*.rpm; do
echo "signing ${rpm}..."
rpm --addsign "${rpm}"
done
- name: Set up SSH
run: |
install --directory --mode 700 ~/.ssh
echo "${RSYNC_SSH_KEY}" | install --mode 600 /dev/stdin ~/.ssh/id_ed25519
env:
RSYNC_SSH_KEY: ${{ secrets.RSYNC_SSH_KEY }}
- name: Test SSH connectivity
run: |
ssh -o StrictHostKeyChecking=accept-new "gitea_ci@${RPM_REPO_HOST}" exit
env:
RPM_REPO_HOST: oolon.kosherinata.internal
- name: Sync RPMs to repo
run: |
rsync \
--archive \
--verbose \
--chmod D755,F644 \
rpms/*.rpm \
"gitea_ci@${RPM_REPO_HOST}:/var/www/rpm/fedora/${{ matrix.fedora_version }}/x86_64/"
env:
RPM_REPO_HOST: oolon.kosherinata.internal
- name: Update repo metadata
run: |
ssh "gitea_ci@${RPM_REPO_HOST}" \
"cd /var/www/rpm/fedora/${{ matrix.fedora_version }}/x86_64 && createrepo_c --update ."
env:
RPM_REPO_HOST: oolon.kosherinata.internal