WIP

freedomofpress · Jan 2, 2024 · adbc916 · adbc916
1 parent 7d6c3b8
commit adbc916
Showing 1 changed file with 45 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -45,6 +45,8 @@ jobs:
           - bullseye
           - bookworm
     runs-on: ubuntu-latest
+    outputs:
+      artifact_id: ${{ steps.upload.outputs.artifact-id }}
     steps:
       - uses: actions/checkout@v4
       - uses: actions/checkout@v4
@@ -56,7 +58,50 @@ jobs:
         run: |
           DEBIAN_VERSION=${{ matrix.debian_version }} BUILDER=securedrop-builder ./scripts/build-debs.sh
       - uses: actions/upload-artifact@v4
+        id: upload
         with:
           name: build-${{ matrix.debian_version }}
           path: build
           if-no-files-found: error
+
+  # Second round of builds (in parallel) for diffoscoping
+  build-debs2:
+    strategy:
+      matrix:
+        debian_version:
+          - bullseye
+          - bookworm
+    runs-on: ubuntu-latest
+    outputs:
+      artifact_id: ${{ steps.upload.outputs.artifact-id }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4
+        with:
+          repository: "freedomofpress/securedrop-builder"
+          path: "securedrop-builder"
+          lfs: true
+      - name: Build packages
+        run: |
+          DEBIAN_VERSION=${{ matrix.debian_version }} BUILDER=securedrop-builder ./scripts/build-debs.sh
+      - uses: actions/upload-artifact@v4
+        id: upload
+        with:
+          name: build2-${{ matrix.debian_version }}
+          path: build
+          if-no-files-found: error
+
+  reproducible-debs:
+    strategy:
+      matrix:
+        debian_version:
+          - bullseye
+          - bookworm
+    runs-on: ubuntu-latest
+    needs:
+      - build-debs
+      - build-debs2
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: ${{ matrix.debian_version }}