Merge pull request 'forgejo/ci: run build in pazof/yavsc-build-env container' (#17 ) from feat/postit-release-page into main

Reviewed-on: #17
ci: unshallow clone for GitVersion
2026-08-16 13:50:12 +01:00 · 2026-08-16 13:39:53 +01:00 · 2026-08-16 13:35:44 +01:00 · 2026-08-16 13:27:36 +01:00 · 2026-08-16 13:26:12 +01:00 · 2026-08-16 13:22:56 +01:00
4 changed files with 42 additions and 9 deletions
--- a/.forgejo/workflows/buildAndTest.yml
+++ b/.forgejo/workflows/buildAndTest.yml
@ -37,17 +37,23 @@ jobs:

  build:

-    runs-on: debian-latest
+    runs-on: docker

    steps:
-    - uses: actions/checkout@v6
-    - name: Setup .NET
-      uses: actions/setup-dotnet@v5
-      with:
-        dotnet-version: 10.0.x
+    - name: Clone yavsc
+      run: |
+        cd /src
+        git clone https://forgejo.pschneider.fr/notazof/yavsc.git _src
+        cd _src
+        if [ -n "${GITHUB_REF:-}" ]; then
+          git fetch origin "$GITHUB_REF"
+          git checkout FETCH_HEAD
+        fi
+        git submodule update --init --recursive
+        echo "Checked out at $(git rev-parse HEAD) on $(git branch --show-current 2>/dev/null || echo detached HEAD)"
    - name: Restore dependencies
-      run: dotnet restore
+      run: cd /src/_src && dotnet restore
    - name: Build
-      run: dotnet build --no-restore
+      run: cd /src/_src && dotnet build --no-restore
    - name: Test
-      run: dotnet test --no-build --verbosity normal
+      run: cd /src/_src && dotnet test --no-build --verbosity normal
--- a/.gitmodules
+++ b/.gitmodules
@ -0,0 +1,3 @@
+[submodule "external/dotnet-android-build-image"]
+	path = external/dotnet-android-build-image
+	url = https://forgejo.pschneider.fr/notazof/dotnet-android-build-image.git
--- a/NuGet.config
+++ b/NuGet.config
@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  Project-level NuGet configuration.
+
+  The yavsc solution depends on HigginsSoft.IdentityServer8.* 8.1.0-alpha.*,
+  published only on the internal feed https://isn.pschneider.fr. The public
+  nuget.org feed has 8.0.4 as the nearest version, which causes NU1102 on
+  restore for every project that depends on it (Yavsc.Org, Yavsc.Api,
+  Yavsc.Blogs, Yavsc.Server, cli, tests).
+
+  Listing 'isn' before 'nuget.org' here ensures that restore finds the
+  alpha packages first, then falls back to nuget.org for everything else.
+  Both feeds are reachable anonymously; no credentials are stored here.
+
+  See AGENTS.md for the rationale.
+-->
+<configuration>
+  <packageSources>
+    <clear />
+    <add key="isn" value="https://isn.pschneider.fr/api/v3/index.json" />
+    <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
+  </packageSources>
+</configuration>
--- a/external/dotnet-android-build-image
+++ b/external/dotnet-android-build-image
@ -0,0 +1 @@
+Subproject commit 0695a6c1fea6508f1a88f7ad0ad9cb93733aa52d
Author	SHA1	Message	Date
Paul Schneider	4862260608	Merge pull request 'forgejo/ci: run build in pazof/yavsc-build-env container' (#17 ) from feat/postit-release-page into main Some checks failed Dotnet build and test / log-the-inputs (push) Successful in 9s Details Dotnet build and test / build (push) Has been cancelled Details Reviewed-on: #17	2026-08-16 13:50:12 +01:00
Paul Schneider	cc50a8bbc8	ci: unshallow clone for GitVersion All checks were successful Dotnet build and test / log-the-inputs (pull_request) Successful in 9s Details Dotnet build and test / build (pull_request) Successful in 5m41s Details GitVersion.MsBuild fails on shallow clones ('Repository is a shallow clone. Git repositories must contain the full history.') because it walks the git log to compute the SemVer version. Drop --depth 1 from both the PR ref fetch and the submodule update so the runner's working tree has full history. The repo is small enough that the cost is negligible.	2026-08-16 13:39:53 +01:00
Paul Schneider	94012c51ab	nuget: add NuGet.config pointing at isn.pschneider.fr Some checks failed Dotnet build and test / log-the-inputs (pull_request) Successful in 14s Details Dotnet build and test / build (pull_request) Failing after 1m58s Details The yavsc solution depends on HigginsSoft.IdentityServer8.* 8.1.0-alpha.*, which is only published on the internal feed https://isn.pschneider.fr. Public nuget.org has 8.0.4 as the nearest version, so every project that uses IdentityServer8 (Yavsc.Org, Yavsc.Api, Yavsc.Blogs, Yavsc.Server, cli, Yavsc.Org.Tests, Yavsc.Blogs.Tests) fails with NU1102 on restore. Both feeds are reachable anonymously, so listing isn first and nuget.org second in a project-level config restores everything without credentials. The CI runner on forgejo now sees the same sources as a local clone.	2026-08-16 13:35:44 +01:00
Paul Schneider	5f50135c7f	ci: drop working-directory, cd into /src/_src explicitly Some checks failed Dotnet build and test / log-the-inputs (pull_request) Successful in 9s Details Dotnet build and test / build (pull_request) Failing after 2m1s Details forgejo-runner v13 does not interpolate ${{ runner.workspace }} in working-directory: (or ignores the field entirely for docker containers), so the container tried to chdir to '/_src' (literally) which does not exist. The image WORKDIR is /src, so clone directly into /src/_src and cd into it at the start of each step. Adds an echo of the checkout SHA + branch state for visibility in the log.	2026-08-16 13:27:36 +01:00
Paul Schneider	86e59ad1c1	submodule: switch URL from SSH to HTTPS for forgejo anonymous access Some checks failed Dotnet build and test / log-the-inputs (pull_request) Successful in 9s Details Dotnet build and test / build (pull_request) Failing after 13s Details The runner container does not have an SSH client, and even if it did, no key is configured for it. Forgejo Actions must reach the submodule over HTTPS with anonymous read access (which is now enabled on the Forgejo instance). Use 'git submodule sync --recursive' on the developer side after checkout to propagate the URL change to .git/modules/.	2026-08-16 13:26:12 +01:00
Paul Schneider	7370f48aac	ci: clone via GITHUB_REF instead of GITHUB_REF_NAME Some checks failed Dotnet build and test / log-the-inputs (pull_request) Successful in 9s Details Dotnet build and test / build (pull_request) Failing after 12s Details In pull_request context, GITHUB_REF_NAME is the PR number ('17'), not the source branch. Cloning --branch 17 fails with 'Could not find remote branch 17 to clone'. Use GITHUB_REF (refs/pull/N/head in PR context, refs/heads/<branch> in push context) and fetch + checkout FETCH_HEAD. workflow_dispatch falls back to the default branch.	2026-08-16 13:22:56 +01:00
Paul Schneider	380b5d12c8	ci: replace actions/checkout with manual git clone (image has no node) Some checks failed Dotnet build and test / log-the-inputs (pull_request) Successful in 9s Details Dotnet build and test / build (pull_request) Failing after 9s Details The pazof/yavsc-build-env:debian12-dotnet10-android36-v1 image only ships .NET 10 SDK + Android SDK + JDK 17, no Node. actions/checkout@v6 requires Node, so the job failed with 'exec: node not found'. Replace actions/checkout with a direct git clone over HTTPS (Forgejo anonymous is enabled), and init submodules recursively. Also drop the bogus docker://image:tag runs-on: matcher, use just 'docker' to match the runner's declared label name.	2026-08-16 13:15:10 +01:00
Paul Schneider	4ac8e14ba9	run on docker Some checks failed Dotnet build and test / log-the-inputs (pull_request) Successful in 9s Details Dotnet build and test / build (pull_request) Failing after 2m25s Details	2026-08-16 13:03:17 +01:00
Paul Schneider	e165e7bb61	dotnet-android-build-image: pin to <sha-ou-tag> Some checks failed Dotnet build and test / log-the-inputs (pull_request) Successful in 15s Details Dotnet build and test / build (pull_request) Has been cancelled Details	2026-08-16 12:49:50 +01:00
Paul Schneider	0fe293bcd2	forgejo/ci: run build in pazof/yavsc-build-env container Some checks failed Dotnet build and test / log-the-inputs (pull_request) Successful in 17s Details Dotnet build and test / build (pull_request) Has been cancelled Details Le workflow buildAndTest tournait sur un runner nu debian-latest avec setup-dotnet@v5 pour la SDK 10.0.x. Restore échouait car cet environnement n'a ni la source NuGet interne (isn.pschneider.fr) ni les workloads Android configurés, contrairement à l'image pazof/yavsc-build-env utilisée par le Dockerfile. Bascule le job sur un runner labelisé docker avec l'image debian12-dotnet10-android36-v1 directement. Le step setup-dotnet devient inutile (l'image a déjà la SDK 10.0), le restore partage la même config que le Dockerfile. Refs l'image cible par ARG BUILD_ENV_TAG=debian12-dotnet10-android36-v1.	2026-08-15 22:18:03 +01:00
				`@ -0,0 +1 @@`
				`Subproject commit 0695a6c1fea6508f1a88f7ad0ad9cb93733aa52d`