dovenest

← Back to log @ f9a5d2b

ci fix

AuthorKonata <konata@posteo.jp>

Date2026-09-12 16:14:27 UTC

Commitf9a5d2b6d96cf49b79cc8c37444bb55a61faa95e

Parentabe68fc

1 file changed, 10 insertions(+), 41 deletions(-)

▾M.hearthforge-ci.toml

+10-41@ f9a5d2b @ master

@@ -1,6 +1,4 @@

# HearthForge CI for filebrowser-ng.

# Steps run in file order, in one container, sharing /ci/build.

# The steps call the `just` recipes that already live in the repo.

image = "docker.io/rust:1.90-bookworm"

work_dir = "/ci/build"

@@ -9,10 +7,9 @@ clone_project_to = "/ci/build/project"

# The rust image ships bash. /bin/sh is dash and has no `pipefail`.

shell = ["/bin/bash", "-c"]

# shell_setup is prepended to every step, so this exports the target dir once.

# It must sit outside the clone path: a cache volume mounted under

# /ci/build/project would create that directory, and `git clone` refuses to

# clone into a directory that is not empty.

# CARGO_TARGET_DIR must stay outside clone_project_to: the cache volume is

# mounted before the clone runs, and git refuses to clone into a non-empty

# directory.

shell_setup = """

set -euo pipefail

export CARGO_TARGET_DIR=/ci/cache/target

@@ -21,7 +18,6 @@ export CARGO_TARGET_DIR=/ci/cache/target

timeout = 5400

memory_limit = "6g"

# Without these every run recompiles the whole dependency tree from scratch.

cache = [

"/usr/local/cargo/registry",

"/ci/cache/target",

@@ -42,40 +38,17 @@ tag = true

default = "1.4.0"

description = "Bun release that bundles web/cm6.js. Matches the Containerfile."

# ── diagnose ─────────────────────────────────────────────────────────────────

# TEMPORARY. HearthForge clones the repo before the first step and discards

# the result, so a failed clone is invisible. This step reproduces it and

# prints why. Delete it once the clone works.

[diagnose]

run_sh = """

set +e

echo "cwd: $PWD"

echo "--- /ci/build ---"

ls -la /ci/build

echo "--- repo mount ---"

ls -la /hearthforge-repo.git

git -C /hearthforge-repo.git rev-parse --is-bare-repository

echo "--- ci vars ---"

echo "SOURCE=${CI_TRIGGER_SOURCE}"

echo "SHA=${CI_COMMIT_SHA}"

echo "BRANCH=${CI_COMMIT_BRANCH}"

echo "TAG=${CI_COMMIT_TAG}"

echo "--- manual clone ---"

git clone /hearthforge-repo.git /ci/build/project

echo "clone rc=$?"

ls -la /ci/build/project | head

exit 0

"""

# ── toolchain ────────────────────────────────────────────────────────────────

# The rust image has cargo only. The build also needs the wasm target, just,

# bun and trunk. binaryen supplies wasm-opt, so trunk does not download one.

# binaryen supplies wasm-opt, so trunk does not download its own.

[setup]

timeout = 900

run_sh = """

apt-get update -qq

apt-get install -y --no-install-recommends binaryen unzip

# The official rust images use rustup's minimal profile, so rustfmt and

# clippy are absent. `just lint` needs both.

rustup component add rustfmt clippy

rustup target add wasm32-unknown-unknown

curl -fsSL https://just.systems/install.sh | bash -s -- --to /usr/local/bin

@@ -83,8 +56,7 @@ curl -fsSL https://just.systems/install.sh | bash -s -- --to /usr/local/bin

# BUN_INSTALL controls the prefix, so the binary lands in /usr/local/bin.

curl -fsSL https://bun.sh/install | BUN_INSTALL=/usr/local bash -s "bun-v${BUN_VERSION}"

# Pinned and checksum-checked, same as the Containerfile. This is the gnu

# build, not the musl one, because the image is Debian.

# The gnu build, not the musl one: the image is Debian.

url="https://github.com/trunk-rs/trunk/releases/download/v${TRUNK_VERSION}/trunk-x86_64-unknown-linux-gnu.tar.gz"

curl -fsSL -o /tmp/trunk.tar.gz "$url"

curl -fsSL "$url.sha256" | awk '{print $1 " /tmp/trunk.tar.gz"}' | sha256sum -c -

@@ -92,20 +64,18 @@ tar xzf /tmp/trunk.tar.gz -C /usr/local/bin

rm -f /tmp/trunk.tar.gz

just --version && bun --version && trunk --version

cargo fmt --version && cargo clippy --version

"""

# ── checks ───────────────────────────────────────────────────────────────────

# `just lint` is cargo fmt --check plus clippy with warnings denied.

[lint]

run_sh = "cd project && just lint"

# `just test` covers server and api-types. The web crate has its own tests.

# `just test` covers server and api-types only, hence the extra web run.

[test]

run_sh = "cd project && just test && cargo test -p web"

# ── build ────────────────────────────────────────────────────────────────────

# `just build` bundles CodeMirror, builds the frontend, stages it into

# server/dist and links the single binary with the `embedded` feature.

[build]

timeout = 2400

run_sh = "cd project && just build"

@@ -117,7 +87,6 @@ publish_file = ["/ci/cache/target/release/filebrowser-ng"]

run_sh = "cd project && cargo test -p server --features embedded"

# ── release ──────────────────────────────────────────────────────────────────

# Tags only. Ships the binary under a versioned name.

[release]

run_if = 'test -n "${CI_COMMIT_TAG}"'

run_sh = """