docs: Update projects #10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # SPDX-FileCopyrightText: 2026 The RISE Project | |
| # SPDX-License-Identifier: MIT | |
| --- | |
| # This workflow is based on the `build_wheels` job of | |
| # https://github.com/orm011/pgserver/blob/v0.1.4/.github/workflows/build-and-test.yml | |
| name: Build pgserver wheels (riscv64) | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| version: | |
| description: 'Version glob to (re)build; empty builds every version of docs/packages/pgserver.yaml not released yet' | |
| required: false | |
| default: '' | |
| pull_request: | |
| branches: [main] | |
| paths: | |
| - '.github/workflows/build-pgserver.yml' | |
| - 'docs/packages/pgserver.yaml' | |
| push: | |
| branches: [main] | |
| paths: | |
| - '.github/workflows/build-pgserver.yml' | |
| - 'docs/packages/pgserver.yaml' | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read # to fetch code (actions/checkout) | |
| env: | |
| MANYLINUX_RISCV64_IMAGE: quay.io/pypa/manylinux_2_39_riscv64 | |
| jobs: | |
| setup: | |
| uses: $/.github/workflows/_setup.yml | |
| with: | |
| package: pgserver | |
| version: ${{ inputs.version }} | |
| build_wheels: | |
| needs: [setup] | |
| if: needs.setup.outputs.versions != '[]' | |
| name: Build pgserver ${{ matrix.version }} ${{ matrix.python }}-manylinux_riscv64 | |
| runs-on: ubuntu-24.04-riscv | |
| timeout-minutes: 180 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| version: ${{ fromJSON(needs.setup.outputs.versions) }} | |
| python: ["cp312", "cp313", "cp314", "cp314t"] | |
| include: | |
| # The test extra's psycopg2-binary publishes no free-threaded wheel for any platform (gotcha 149). | |
| - python: "cp314t" | |
| test_skip: "*" | |
| env: | |
| PGSERVER_VERSION: ${{ matrix.version }} | |
| steps: | |
| - name: Checkout pgserver v${{ env.PGSERVER_VERSION }} | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| repository: orm011/pgserver | |
| ref: v${{ env.PGSERVER_VERSION }} | |
| persist-credentials: false | |
| - name: Checkout python-wheels | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| path: python-wheels | |
| persist-credentials: false | |
| - name: Patch pgserver source | |
| run: git apply python-wheels/patches/pgserver/${{ env.PGSERVER_VERSION }}/00*.patch | |
| - name: Build wheels | |
| uses: pypa/cibuildwheel@1828c10ab37f080699c7b81cea34097c684a7074 # v4.2.0 | |
| with: | |
| output-dir: wheelhouse/ | |
| only: ${{ matrix.python }}-manylinux_riscv64 | |
| env: | |
| CIBW_MANYLINUX_RISCV64_IMAGE: ${{ env.MANYLINUX_RISCV64_IMAGE }} | |
| # initdb/postgres are non-PIE; keep their base above vm.mmap_min_addr once auditwheel's patchelf prepends a segment (gotcha 595). | |
| CIBW_ENVIRONMENT: >- | |
| PIP_EXTRA_INDEX_URL=https://pypi.riseproject.dev/simple/ | |
| LDFLAGS="-Wl,-Ttext-segment=0x200000" | |
| CIBW_TEST_SKIP: ${{ matrix.test_skip }} | |
| # sqlalchemy-utils 0.42.1 (latest) still imports the removed | |
| # sqlalchemy.orm.attributes.ScalarAttributeImpl, so pgserver's unpinned | |
| # `sqlalchemy>=2` test extra resolves to a broken combo now that sqlalchemy 2.1 | |
| # is out; cap it to the last 2.0.x release so the test extra and this pin resolve | |
| # together (gotcha 55/215 pattern for a test-only dependency drift). | |
| CIBW_TEST_REQUIRES: "sqlalchemy<2.1" | |
| - name: Verify the wheel ships the compiled postgres server, pgvector and their licences | |
| run: | | |
| python3 - wheelhouse/*.whl <<'EOF' | |
| import sys, zipfile | |
| names = zipfile.ZipFile(sys.argv[1]).namelist() | |
| assert any(n.endswith("pgserver/pginstall/bin/postgres") for n in names), names | |
| assert any(n.endswith("pgserver/pginstall/lib/postgresql/vector.so") for n in names), names | |
| lic = {n.split("/")[-1] for n in names if ".dist-info/licenses/" in n and not n.endswith("/")} | |
| assert {"LICENSE", "LICENSE.postgresql", "LICENSE.pgvector"} <= lic, lic | |
| EOF | |
| mkdir wheel-check | |
| python3 -m zipfile -e wheelhouse/*.whl wheel-check | |
| for exe in initdb postgres pg_ctl; do | |
| chmod +x "wheel-check/pgserver/pginstall/bin/$exe" | |
| "wheel-check/pgserver/pginstall/bin/$exe" --version | |
| done | |
| - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: pgserver-${{ env.PGSERVER_VERSION }}-${{ matrix.python }}-manylinux_riscv64 | |
| path: wheelhouse/*.whl | |
| if-no-files-found: error | |
| publish: | |
| name: Publish pgserver ${{ matrix.version }} | |
| needs: [setup, build_wheels] | |
| if: needs.setup.outputs.versions != '[]' | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| version: ${{ fromJSON(needs.setup.outputs.versions) }} | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| uses: $/.github/workflows/_publish-wheel.yml | |
| secrets: | |
| app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }} | |
| with: | |
| artifact-pattern: pgserver-${{ matrix.version }}-*-manylinux_riscv64 |