CI: add binaries to releases

.github/workflows/release-upload.yaml

@@ -0,0 +1,111 @@
+name: Post Release Upload
+# This makes it easy to get download release binaries built using
+# a github action for any tagged commit.
+#
+# This workflow builds and uploads the macOS, win64 and linux
+# binary packages as github assets.
+#
+# It uses `--builders "" --max-jobs 0` to ensure the assets are
+# from the IOG cache.
+on:
+  workflow_dispatch:
+  release:
+    types:
+      - published
+  push:
+    tags:
+      - '**'
+env:
+  # Only to avoid some repetition
+  FLAKE_REF: github:${{ github.repository }}/${{ github.ref_name }}
+  GH_TOKEN: ${{ github.token }}
+
+jobs:
+  wait-for-hydra:
+    name: "Wait for hydra check-runs"
+    runs-on: ubuntu-latest
+    steps:
+    - name: Get specific check run status
+      timeout-minutes: 120
+      run: |
+        while [[ true ]]; do
+          conclusion=$(gh api repos/$GITHUB_REPOSITORY/commits/$GITHUB_SHA/check-runs --jq '.check_runs[] | select(.name == "ci/hydra-build:required") | .conclusion')
+          case "$conclusion" in
+            success)
+              echo "ci/hydra-build:required succeeded"
+              exit 0;;
+            failure)
+              echo "ci/hydra-build:required failed"
+              exit 1;;
+            *)
+              echo "ci/hydra-build:required pending. Waiting 30s..."
+              sleep 30;;
+          esac
+        done
+    
+  pull:
+    needs: [wait-for-hydra]
+    strategy:
+      matrix:
+        arch: [linux, macos, win64]
+    name: "Download Asset from the Cache"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Install Nix with good defaults
+        uses: input-output-hk/install-nix-action@v20
+        with:
+          extra_nix_config: |
+            trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= hydra.iohk.io:f/Ea+s+dFdN+3Y/G+FDgSq+a5NEWhJGzdjvKNGv0/EQ=
+            substituters = https://cache.iog.io/ https://cache.nixos.org/
+          nix_path: nixpkgs=channel:nixos-unstable
+      - name: Display flake metadata
+        id: flake-metadata
+        run: |
+          nix flake metadata ${{ env.FLAKE_REF }}
+          nix flake metadata ${{ env.FLAKE_REF }} --json | jq -r '"LOCKED_URL=\(.url)"' >> "$GITHUB_OUTPUT"
+      - name: Build
+        run: |
+          case ${{ matrix.arch }} in
+            linux)
+            nix build --builders "" --max-jobs 0 ${{ steps.flake-metadata.outputs.LOCKED_URL }}#cardano-cli:exe:cardano-cli
+              cp result/bin/cardano-cli cardano-cli-${{ matrix.arch }}
+              ;;
+            macos)
+              # TODO FIXME
+              nix build --builders "" --max-jobs 0 ${{ steps.flake-metadata.outputs.LOCKED_URL }}#cardano-cli:exe:cardano-cli
+              tree result
+              ;;
+            win64)
+              # TODO FIXME
+              nix build --builders "" --max-jobs 0 ${{ steps.flake-metadata.outputs.LOCKED_URL }}#x86_64-w64-mingw32:cardano-cli:exe:cardano-cli
+              tree result
+              ;;              
+          esac
+      - uses: actions/upload-artifact@v3
+        with:
+          name: ${{ github.sha }}-${{ matrix.arch }}       
+          path: cardano-cli-*
+          retention-days: 1
+
+  # upload-assets:
+  #   needs: [pull]
+  #   name: "Upload Assets"
+  #   runs-on: ubuntu-latest
+  #   steps:
+  #     - uses: actions/download-artifact@v3
+  #       with:
+  #         name: ${{ github.sha }}-linux
+  #     - uses: actions/download-artifact@v3
+  #       with:
+  #         name: ${{ github.sha }}-macos
+  #     - uses: actions/download-artifact@v3
+  #       with:
+  #         name: ${{ github.sha }}-win64
+  #     - name: Release
+  #       uses: input-output-hk/action-gh-release@v1
+  #       with:
+  #         draft: true
+  #         files: |
+  #           cardano-node-*-win64.zip
+  #           cardano-node-*-macos.tar.gz
+  #           cardano-node-*-linux.tar.gz