feat: services backup rewrite & no manual RunAsTI #942
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Create and Validate Atlas Playbook | |
| on: | |
| push: | |
| paths: | |
| - 'src/**' | |
| env: | |
| PACKAGE_PATH: '..\Atlas\src\playbook\Executables\AtlasModules\Packages' | |
| SXSC_REPO: 'https://github.com/Atlas-OS/sxsc' | |
| jobs: | |
| package-build: | |
| runs-on: windows-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v3 | |
| with: | |
| ref: ${{ github.ref }} | |
| token: ${{ secrets.RUNNER_SECRET }} | |
| - name: Get changed files | |
| id: changed-files | |
| uses: tj-actions/[email protected] | |
| with: | |
| files_yaml: | | |
| sxsc: | |
| - 'src/sxsc/*.yaml' | |
| - name: Copy modified .yamls | |
| if: steps.changed-files.outputs.sxsc_any_changed == 'true' | |
| id: copy_yamls | |
| run: | | |
| $configs = "..\configs" | |
| mkdir $configs | Out-Null | |
| $changedFiles = "${{ steps.changed-files.outputs.sxsc_all_changed_files }}" -split ' ' | |
| foreach ($file in $changedFiles) { | |
| Write-Output "Copying: $file" | |
| Copy-Item $file $configs -Force | |
| } | |
| - name: Clone the sxsc repository | |
| run: | | |
| git clone --depth=1 ${{ env.SXSC_REPO }} | |
| Copy-Item -Path "configs" -Destination ".\sxsc\configs" -Recurse -Force | |
| working-directory: .. | |
| if: ${{ steps.copy_yamls.outcome != 'skipped' }} | |
| - name: Build CAB | |
| run: | | |
| Write-Host "Installing dependencies..." | |
| pip install -r requirements.txt | Out-Null | |
| $packagePath = "${{ env.PACKAGE_PATH }}" | |
| mkdir $packagePath -EA SilentlyContinue | Out-Null | |
| Get-ChildItem -Recurse "configs" -Filter *.yaml | ForEach-Object { | |
| Write-Host "`nProcessing $($_.Name)`n------------------------------------------------------" | |
| Copy-Item -Path $_.FullName -Destination "cfg.yaml" -Force | Out-Null | |
| Write-Host "Generating package files..." | |
| python sxsc.py | |
| if ($LASTEXITCODE -ne 0) { exit 1 } | |
| Write-Host "Building package..." | |
| .\build.bat | |
| Write-Host "Copying package to AtlasModules..." | |
| Get-ChildItem -File -Recurse -Filter *.cab | ForEach-Object { | |
| Copy-Item -Path $_.FullName -Destination $packagePath -Force | |
| } | |
| Write-Host "Cleaning up..." | |
| .\clean.bat | |
| } | |
| working-directory: ..\sxsc | |
| if: ${{ steps.copy_yamls.outcome != 'skipped' }} | |
| - name: Commit and push changes | |
| run: | | |
| git config --local user.email "[email protected]" | |
| git config --local user.name "atlasos-admin" | |
| git add -A | |
| git commit -m "feat: auto-update CAB packages ($($env:GITHUB_SHA.Substring(0, 8)))" | |
| git push | |
| working-directory: src\playbook\Executables\AtlasModules\Packages | |
| if: ${{ steps.copy_yamls.outcome != 'skipped' }} | |
| build: | |
| needs: package-build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v3 | |
| with: | |
| ref: ${{ github.ref }} | |
| - name: Validate YAML files | |
| run: 'yamllint -d "{extends: relaxed, rules: {line-length: disable, new-line-at-end-of-file: disable, trailing-spaces: disable}}" src/playbook/.' | |
| - name: Configure playbook | |
| id: config-playbook | |
| if: ${{ !startsWith(github.ref, 'refs/heads/na-') }} | |
| run: | | |
| cd src/playbook | |
| echo "Making playbook display as unverified (remove ProductCode) so that it is not marked as malicious..." | |
| sed -i '/<ProductCode>/d' playbook.conf | |
| echo "Change description of playbook..." | |
| sed -i 's|<Description>.*<\/Description>|<Description>Experimental testing version of the Atlas Playbook, built with GitHub Actions from commit ${{ github.sha }}. Be aware of these builds being potentially unstable and buggy!</Description>|g' playbook.conf | |
| cd Configuration/atlas | |
| echo "Enabling AME Wizard Live Log..." | |
| sed '8s/ #//' | |
| - name: Create playbook (ZIP/APBX password is malte) | |
| if: ${{ steps.config-playbook.outcome != 'skipped' }} | |
| run: | | |
| cd src/playbook | |
| echo "Making a renamed password protected (malte) ZIP of playbook files..." | |
| zip -r -P malte "Atlas Playbook ${GITHUB_SHA::8}.apbx" . -x "local-build.cmd" | |
| echo "Move the .abpx playbook into the 'Release ZIP' to be released as an artifact with the additional files..." | |
| mv "Atlas Playbook ${GITHUB_SHA::8}.apbx" "../release-zip" | |
| - name: Upload artifact | |
| uses: actions/upload-artifact@v3 | |
| if: ${{ steps.config-playbook.outcome != 'skipped' }} | |
| with: | |
| name: Atlas Playbook | |
| path: | | |
| src/release-zip/* | |
| if-no-files-found: error |