move to RAM build

.gitea/actions/prepare-ram-ci/action.yml

@@ -0,0 +1,204 @@
+name: Prepare RAM CI environment
+description: Configure RAM-backed CI directories and Nexus package proxies
+
+runs:
+  using: composite
+
+  steps:
+    - name: Configure RAM CI environment
+      shell: bash
+      run: |
+        set -euo pipefail
+        set +x
+
+        require_value() {
+          local name="$1"
+          local value="$2"
+
+          if [ -z "$value" ]; then
+            echo "ERROR: required CI value is empty: $name"
+            exit 1
+          fi
+        }
+
+        require_value "NEXUS_CARGO_URL" "$NEXUS_CARGO_URL"
+        require_value "NEXUS_MAVEN_URL" "$NEXUS_MAVEN_URL"
+        require_value "NEXUS_NPM_URL" "$NEXUS_NPM_URL"
+        require_value "NEXUS_NODEJS_URL" "$NEXUS_NODEJS_URL"
+
+        normalize_url() {
+          local value="$1"
+
+          value="${value//$'\r'/}"
+          value="${value//$'\n'/}"
+
+          case "$value" in
+            \"*\")
+              value="${value#\"}"
+              value="${value%\"}"
+              ;;
+            \'*\')
+              value="${value#\'}"
+              value="${value%\'}"
+              ;;
+          esac
+
+          printf '%s' "$value"
+        }
+
+        NEXUS_CARGO_URL="$(normalize_url "$NEXUS_CARGO_URL")"
+        NEXUS_MAVEN_URL="$(normalize_url "$NEXUS_MAVEN_URL")"
+        NEXUS_NPM_URL="$(normalize_url "$NEXUS_NPM_URL")"
+        NEXUS_NODEJS_URL="$(normalize_url "$NEXUS_NODEJS_URL")"
+
+        NEXUS_CARGO_URL="${NEXUS_CARGO_URL%/}/"
+        NEXUS_MAVEN_URL="${NEXUS_MAVEN_URL%/}/"
+        NEXUS_NPM_URL="${NEXUS_NPM_URL%/}/"
+        NEXUS_NODEJS_URL="${NEXUS_NODEJS_URL%/}/"
+
+        # Resolve the image's stable toolchain before HOME/CARGO_HOME move to RAM.
+        # Keep toolchains in the image; only registry data and build output are ephemeral.
+        RUSTUP_HOME="${RUSTUP_HOME:-$HOME/.rustup}"
+        export RUSTUP_HOME
+        RUST_BIN="$(dirname "$(rustup which --toolchain stable rustc)")"
+        test -x "$RUST_BIN/cargo"
+
+        CI_ROOT="$GITHUB_WORKSPACE/.ci"
+
+        CI_HOME="$CI_ROOT/home"
+        CI_TMP="$CI_ROOT/tmp"
+        CI_BIN="$CI_ROOT/bin"
+
+        NPM_CONFIG_USERCONFIG="$CI_ROOT/npmrc"
+        NPM_CACHE="$CI_ROOT/npm-cache"
+
+        COREPACK_HOME="$CI_ROOT/corepack"
+        PNPM_HOME="$CI_ROOT/pnpm-home"
+
+        GRADLE_USER_HOME="$CI_ROOT/gradle"
+
+        CARGO_HOME="$CI_ROOT/cargo"
+        CARGO_TARGET_DIR="$CI_ROOT/cargo-target"
+
+        XDG_CACHE_HOME="$CI_ROOT/xdg-cache"
+        XDG_CONFIG_HOME="$CI_ROOT/xdg-config"
+        XDG_DATA_HOME="$CI_ROOT/xdg-data"
+
+        mkdir -p \
+          "$CI_HOME" \
+          "$CI_TMP" \
+          "$CI_BIN" \
+          "$NPM_CACHE" \
+          "$COREPACK_HOME" \
+          "$PNPM_HOME" \
+          "$GRADLE_USER_HOME/init.d" \
+          "$CARGO_HOME" \
+          "$CARGO_TARGET_DIR" \
+          "$XDG_CACHE_HOME" \
+          "$XDG_CONFIG_HOME" \
+          "$XDG_DATA_HOME"
+
+        chmod 700 \
+          "$CI_HOME" \
+          "$GRADLE_USER_HOME" \
+          "$CARGO_HOME"
+
+        cat > "$NPM_CONFIG_USERCONFIG" <<EOF
+        registry=$NEXUS_NPM_URL
+        cache=$NPM_CACHE
+        EOF
+
+        chmod 600 "$NPM_CONFIG_USERCONFIG"
+
+        {
+          printf '%s\n' '[source.crates-io]'
+          printf '%s\n' 'replace-with = "cargo-proxy"'
+          printf '\n'
+          printf '%s\n' '[source.cargo-proxy]'
+          printf 'registry = "sparse+%s"\n' "$NEXUS_CARGO_URL"
+        } > "$CARGO_HOME/config.toml"
+
+        chmod 600 "$CARGO_HOME/config.toml"
+
+        if [ "$(wc -l < "$CARGO_HOME/config.toml")" -ne 5 ]; then
+          echo "ERROR: generated Cargo config has unexpected line count"
+          nl -ba "$CARGO_HOME/config.toml"
+          exit 1
+        fi
+
+        cat > "$GRADLE_USER_HOME/init.d/00-nexus.init.gradle" <<'EOF'
+        def nexusUrl = System.getenv("NEXUS_MAVEN_URL")
+
+        if (nexusUrl == null || nexusUrl.isBlank()) {
+            throw new GradleException(
+                "NEXUS_MAVEN_URL is not configured"
+            )
+        }
+
+        def configureNexusRepository = { repositories ->
+            repositories.maven {
+                name = "CI_NEXUS"
+                url = uri(nexusUrl)
+                allowInsecureProtocol =
+                    nexusUrl.startsWith("http://")
+
+            }
+        }
+
+        gradle.beforeSettings { settings ->
+            configureNexusRepository(
+                settings.pluginManagement.repositories
+            )
+
+            configureNexusRepository(
+                settings.dependencyResolutionManagement.repositories
+            )
+        }
+        EOF
+
+        chmod 600 \
+          "$GRADLE_USER_HOME/init.d/00-nexus.init.gradle"
+
+        {
+          echo "CI_ROOT=$CI_ROOT"
+          echo "CI_BIN=$CI_BIN"
+
+          echo "HOME=$CI_HOME"
+          echo "TMPDIR=$CI_TMP"
+
+          echo "XDG_CACHE_HOME=$XDG_CACHE_HOME"
+          echo "XDG_CONFIG_HOME=$XDG_CONFIG_HOME"
+          echo "XDG_DATA_HOME=$XDG_DATA_HOME"
+
+          echo "NPM_CONFIG_USERCONFIG=$NPM_CONFIG_USERCONFIG"
+          echo "NPM_CONFIG_CACHE=$NPM_CACHE"
+          echo "npm_config_cache=$NPM_CACHE"
+
+          echo "COREPACK_HOME=$COREPACK_HOME"
+          echo "COREPACK_NPM_REGISTRY=$NEXUS_NPM_URL"
+
+          echo "PNPM_HOME=$PNPM_HOME"
+          echo "PNPM_CONFIG_REGISTRY=$NEXUS_NPM_URL"
+
+          echo "GRADLE_USER_HOME=$GRADLE_USER_HOME"
+
+          echo "CARGO_HOME=$CARGO_HOME"
+          echo "CARGO_TARGET_DIR=$CARGO_TARGET_DIR"
+          echo "RUSTUP_HOME=$RUSTUP_HOME"
+          echo "RUSTUP_TOOLCHAIN=stable"
+
+          echo "NVM_NODEJS_ORG_MIRROR=$NEXUS_NODEJS_URL"
+
+          echo "NEXUS_CARGO_URL=$NEXUS_CARGO_URL"
+          echo "NEXUS_MAVEN_URL=$NEXUS_MAVEN_URL"
+          echo "NEXUS_NPM_URL=$NEXUS_NPM_URL"
+          echo "NEXUS_NODEJS_URL=$NEXUS_NODEJS_URL"
+        } >> "$GITHUB_ENV"
+
+        {
+          echo "$RUST_BIN"
+          echo "$CI_BIN"
+          echo "$PNPM_HOME"
+        } >> "$GITHUB_PATH"
+
+        echo "CI package environment prepared."

.gitea/workflows/desktop.yml

@@ -2,9 +2,6 @@ name: Build Fluxer Desktop
 
 on:
   workflow_dispatch:
-  push:
-    branches:
-      - main
 
 env:
   NODE_VERSION: "24"
@@ -386,9 +383,21 @@ jobs:
   linux-x64:
     name: Linux x64
 
-    runs-on: ubuntu-22.04
+    runs-on: ci-linux-builder
+
+    env:
+      NEXUS_CARGO_URL: ${{ secrets.NEXUS_CARGO_URL }}
+      NEXUS_MAVEN_URL: ${{ secrets.NEXUS_MAVEN_URL }}
+      NEXUS_NPM_URL: ${{ secrets.NEXUS_NPM_URL }}
+      NEXUS_NODEJS_URL: ${{ secrets.NEXUS_NODEJS_URL }}
 
     steps:
+      - name: Checkout CI repository
+        uses: actions/checkout@v4
+
+      - name: Prepare RAM CI environment
+        uses: ./.gitea/actions/prepare-ram-ci
+
       - name: Clone Fluxer
         shell: bash
         run: |
@@ -412,251 +421,43 @@ jobs:
           ls -la fluxer-src/fluxer_desktop
 
 
-      - name: Install Linux build dependencies
+      - name: Verify builder image
         shell: bash
+        env:
+          PKG_CONFIG_PATH: /usr/local/lib/x86_64-linux-gnu/pkgconfig:/usr/local/lib/pkgconfig:/usr/lib/x86_64-linux-gnu/pkgconfig
         run: |
-          set -euxo pipefail
+          set -euo pipefail
 
-          apt-get update
+          node --version
-
+          npm --version
-          DEBIAN_FRONTEND=noninteractive apt-get install -y \
+          corepack --version
-            build-essential \
+          rustc --version
-            ca-certificates \
+          cargo --version
-            clang \
+          cmake --version
-            cmake \
+          meson --version
-            curl \
+          ninja --version
-            desktop-file-utils \
-            dpkg-dev \
-            fakeroot \
-            ffmpeg \
-            git \
-            libasound2 \
-            libaom-dev \
-            libavcodec-dev \
-            libavfilter-dev \
-            libavformat-dev \
-            libavutil-dev \
-            libcbor-dev \
-            libdbus-1-dev \
-            libdav1d-dev \
-            libde265-dev \
-            libfido2-dev \
-            libgbm1 \
-            libgtk-3-0 \
-            liblcms2-dev \
-            libnotify4 \
-            libnss3 \
-            libpipewire-0.3-dev \
-            libpulse-dev \
-            libsecret-1-0 \
-            libssl-dev \
-            libswresample-dev \
-            libswscale-dev \
-            libudev-dev \
-            libvips-dev \
-            libwayland-dev \
-            libwebp-dev \
-            libx11-xcb1 \
-            libxcb-dri3-0 \
-            libxcomposite1 \
-            libxdamage1 \
-            libxkbcommon-dev \
-            libxkbcommon0 \
-            libxrandr2 \
-            libxshmfence1 \
-            libxss1 \
-            libxtst6 \
-            llvm \
-            meson \
-            nasm \
-            ninja-build \
-            pkg-config \
-            python3 \
-            python3-pip \
-            rpm \
-            unzip \
-            xdg-utils \
-            xz-utils \
-            yasm \
-            zlib1g-dev \
-            zstd
-
-      - name: Install modern libfido2
-        shell: bash
-        run: |
-          set -euxo pipefail
-
-          rm -rf /tmp/libfido2
-
-          git clone \
-            --depth 1 \
-            --branch 1.17.0 \
-            https://github.com/Yubico/libfido2.git \
-            /tmp/libfido2
-
-          cmake \
-            -S /tmp/libfido2 \
-            -B /tmp/libfido2/build \
-            -DCMAKE_BUILD_TYPE=Release \
-            -DCMAKE_INSTALL_PREFIX=/usr/local \
-            -DCMAKE_INSTALL_LIBDIR=lib/x86_64-linux-gnu \
-            -DBUILD_EXAMPLES=OFF \
-            -DBUILD_MANPAGES=OFF \
-            -DBUILD_TOOLS=OFF
-
-          cmake \
-            --build /tmp/libfido2/build \
-            --parallel "$(nproc)"
-
-          cmake \
-            --install /tmp/libfido2/build
-
-          ldconfig
-
-          echo "=== libfido2 ==="
-
-          PKG_CONFIG_PATH="/usr/local/lib/x86_64-linux-gnu/pkgconfig:/usr/local/lib/pkgconfig:/usr/lib/x86_64-linux-gnu/pkgconfig" \
-            pkg-config --modversion libfido2
 
+          pkg-config --atleast-version=1.17.0 libfido2
+          pkg-config --atleast-version=1.0.5 libpipewire-0.3
+          pkg-config --modversion libfido2 libpipewire-0.3 libspa-0.2
           test -f /usr/local/include/fido/es384.h
 
-          ls -la /usr/local/include/fido/
-
-          echo "=== libraries ==="
-
-          find /usr/local/lib \
-            -name 'libfido2*' \
-            -print
-
-      - name: Install modern PipeWire
-        shell: bash
-        run: |
-          set -euxo pipefail
-
-          PIPEWIRE_VERSION="1.0.5"
-
-          rm -rf /tmp/pipewire
-
-          git clone \
-            --depth 1 \
-            --branch "${PIPEWIRE_VERSION}" \
-            https://github.com/PipeWire/pipewire.git \
-            /tmp/pipewire
-
-          meson setup \
-            /tmp/pipewire/build \
-            /tmp/pipewire \
-            --prefix=/usr/local \
-            --libdir=lib/x86_64-linux-gnu \
-            --buildtype=release \
-            -Ddocs=disabled \
-            -Dman=disabled \
-            -Dexamples=disabled \
-            -Dtests=disabled \
-            -Dinstalled_tests=disabled \
-            -Dsession-managers=[] \
-            -Dgstreamer=disabled \
-            -Dsystemd=disabled \
-            -Dselinux=disabled \
-            -Dpipewire-jack=disabled \
-            -Dpipewire-v4l2=disabled \
-            -Dbluez5=disabled \
-            -Djack=disabled \
-            -Dv4l2=disabled \
-            -Dlibcamera=disabled \
-            -Dvulkan=disabled \
-            -Dsdl2=disabled \
-            -Dlibmysofa=disabled \
-            -Droc=disabled \
-            -Davahi=disabled \
-            -Decho-cancel-webrtc=disabled \
-            -Dlibusb=disabled \
-            -Draop=disabled \
-            -Dlv2=disabled \
-            -Dlibcanberra=disabled \
-            -Dlibffado=disabled
-
-          meson compile \
-            -C /tmp/pipewire/build \
-            -j "$(nproc)"
-
-          meson install \
-            -C /tmp/pipewire/build
-
-          ldconfig
-
-          export PKG_CONFIG_PATH="/usr/local/lib/x86_64-linux-gnu/pkgconfig:/usr/local/lib/pkgconfig:/usr/lib/x86_64-linux-gnu/pkgconfig"
-
-          echo "=== PipeWire ==="
-
-          pkg-config \
-            --modversion \
-            libpipewire-0.3
-
-          pkg-config \
-            --modversion \
-            libspa-0.2
-
-          echo "=== PipeWire CFLAGS ==="
-
-          pkg-config \
-            --cflags \
-            libpipewire-0.3
-
-          pkg-config \
-            --cflags \
-            libspa-0.2
-
-          echo "=== Checking headers ==="
-
-          grep -R \
-            "spa_meta_region_is_valid" \
-            /usr/local/include/spa-0.2/spa \
-            | head
-
-          echo "=== PipeWire libraries ==="
-
-          find /usr/local/lib \
-            \( -name 'libpipewire-0.3.so*' -o -name 'libspa*.so*' \) \
-            -print
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: "24"
-
 
       - name: Setup pnpm
         shell: bash
         run: |
           set -euxo pipefail
 
-          corepack enable
+          corepack enable \
-          corepack prepare pnpm@10.29.3 --activate
+            --install-directory "$CI_BIN"
+
+          corepack prepare \
+            "pnpm@$PNPM_VERSION" \
+            --activate
 
           node --version
           pnpm --version
-
+          pnpm store path
-
-      - name: Setup Rust
-        shell: bash
-        run: |
-          set -euxo pipefail
-
-          curl \
-            --proto '=https' \
-            --tlsv1.2 \
-            -sSf \
-            https://sh.rustup.rs |
-            sh -s -- -y --profile minimal
-
-          echo "$HOME/.cargo/bin" >> "$GITHUB_PATH"
-
-          "$HOME/.cargo/bin/rustup" update stable
-          "$HOME/.cargo/bin/rustup" default stable
-
-          "$HOME/.cargo/bin/rustc" --version
-          "$HOME/.cargo/bin/cargo" --version
 
 
       - name: Configure self-hosted server