fix: keep go2rtc thumbnail preview alive and tear down its stream on … #8
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: build-deb-packages | |
| on: | |
| push: | |
| branches: [ release-1.38, master ] | |
| permissions: | |
| contents: write | |
| env: | |
| GPG_KEY_ID: ${{ secrets.ZMREPO_GPG_KEY_ID }} | |
| GPG_PASSPHRASE: ${{ secrets.ZMREPO_GPG_PASSPHRASE }} | |
| GPG_PRIVATE_KEY_B64: ${{ secrets.ZMREPO_GPG_PRIVATE_KEY_B64 }} | |
| DEBEMAIL: "info@zoneminder.com" | |
| DEBFULLNAME: "Github CI" | |
| TZ: America/New_York | |
| DEBIAN_FRONTEND: noninteractive | |
| DEBSIGN_KEYID: ${{ secrets.ZMREPO_GPG_KEY_ID }} | |
| jobs: | |
| build-debian: | |
| name: Build & sign .deb (${{ matrix.distro }}) | |
| if: github.repository == 'ZoneMinder/zoneminder' | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| distro: ["debian:sid", "debian:13", "debian:12", "ubuntu:25.10", "ubuntu:devel", "ubuntu:24.04", "ubuntu:22.04"] | |
| container: | |
| image: ${{ matrix.distro }} | |
| steps: | |
| - name: Prep apt | |
| run: | | |
| set -eux | |
| if grep -q '^deb http' /etc/apt/sources.list && ! grep -q '^deb-src'\ | |
| /etc/apt/sources.list; then | |
| sed -n 's/^deb /deb-src /p' /etc/apt/sources.list >> \ | |
| /etc/apt/sources.list | |
| fi | |
| if [ -f /etc/apt/sources.list.d/debian.sources ]; then | |
| sed -i 's/^Types: deb$/Types: deb deb-src/g' \ | |
| /etc/apt/sources.list.d/debian.sources | |
| fi | |
| if [ -f /etc/apt/sources.list.d/ubuntu.sources ]; then | |
| sed -i 's/^Types: deb$/Types: deb deb-src/g' \ | |
| /etc/apt/sources.list.d/ubuntu.sources | |
| fi | |
| apt-get update | |
| - name: Install build tools | |
| run: | | |
| set -eux | |
| apt install -y --no-install-recommends \ | |
| git ca-certificates gnupg lsb-release \ | |
| build-essential devscripts debhelper equivs fakeroot \ | |
| cmake pkg-config ccache curl bash rsync openssh-client | |
| apt install -y debhelper sphinx-doc dh-linktree dh-apache2 cmake \ | |
| libavcodec-dev libavdevice-dev libavformat-dev libavutil-dev \ | |
| libswresample-dev libswscale-dev libbz2-dev \ | |
| libturbojpeg0-dev default-libmysqlclient-dev \ | |
| libpolkit-gobject-1-dev libv4l-dev libvlc-dev libssl-dev \ | |
| libvncserver-dev libjwt-gnutls-dev libgsoap-dev gsoap \ | |
| libmosquittopp-dev | |
| - name: Checkout | |
| uses: actions/checkout@v7 | |
| with: | |
| fetch-depth: 0 | |
| - name: Import GPG key | |
| uses: crazy-max/ghaction-import-gpg@v7 | |
| with: | |
| gpg_private_key: ${{ secrets.ZMREPO_GPG_PRIVATE_KEY }} | |
| passphrase: ${{ secrets.ZMREPO_GPG_PASSPHRASE }} | |
| git_user_signingkey: false | |
| git_commit_gpgsign: false | |
| - name: Install build-deps from debian/control | |
| run: | | |
| set -eux | |
| ln -sf distros/ubuntu2004 debian | |
| mk-build-deps -ir -t "apt-get -y --no-install-recommends" \ | |
| debian/control | |
| - name: Build (signed) | |
| env: | |
| DEB_BUILD_OPTIONS: "parallel=$(nproc)" | |
| # gpg picks passphrase from environment via loopback | |
| run: | | |
| cd ../ | |
| ls -l | |
| ln -sf zoneminder ZoneMinder_ZoneMinder.git | |
| git config --global --add safe.directory /__w/zoneminder/zoneminder | |
| git config --global --add safe.directory /__w/zoneminder/ZoneMinder_ZoneMinder.git/.git | |
| #git submodule init | |
| #git submodule update --init --recursive | |
| curl -s -o do_debian_package.sh https://raw.githubusercontent.com/ZoneMinder/zoneminder/refs/heads/${GITHUB_REF_NAME}/utils/do_debian_package.sh | |
| chmod +x do_debian_package.sh | |
| # Tell gpg to use loopback + passphrase | |
| export GPG_TTY=$(tty || true) | |
| ls -l /bin/bash | |
| if [[ "$GITHUB_REF" == refs/tags/* ]]; then | |
| TAG="${GITHUB_REF#refs/tags/}" | |
| ./do_debian_package.sh -r="$TAG" -t=binary -b=${GITHUB_REF_NAME} -v=1 | |
| else | |
| ./do_debian_package.sh -s=CURRENT -t=binary -b=${GITHUB_REF_NAME} -v=1 | |
| fi | |
| - name: Cleanup | |
| run: | | |
| rm -rf *_zoneminder_release *.build | |
| - name: Collect .deb artifacts (incl. signed metadata & public key) | |
| run: | | |
| set -eux | |
| mkdir -p artifacts/deb | |
| ls -l ../ | |
| # Only collect binary artifacts. Source files (.dsc, .orig.tar.*, | |
| # .debian.tar.*) are not needed for binary uploads and the orig | |
| # tarball has the same filename across distros which confuses | |
| # mini-dinstall. | |
| mv ../*.deb ../*.buildinfo ../*.changes artifacts/deb/ || true | |
| # quick verify signatures (non-fatal) | |
| gpg --verify artifacts/deb/*.changes || true | |
| gpg --verify artifacts/deb/*.buildinfo || true | |
| - name: Sanitize Artifact name | |
| id: prep_artifact_name | |
| run: | | |
| # Use `sed` to replace invalid characters with a hyphen | |
| sanitized_distro_name=$(echo -n "${{ matrix.distro }}" | sed -e 's/[;\\\/:<>"|*?]/_/g' -e 's/__*/_/g') | |
| echo "artifact_name=binary-${sanitized_distro_name}" >> $GITHUB_ENV | |
| - name: Upload .deb artifacts | |
| # Only the tag-only `release` job consumes these. On branch pushes the | |
| # packages go straight to ZMREPO below, so uploading is pure storage cost. | |
| if: startsWith(github.ref, 'refs/tags/') | |
| uses: actions/upload-artifact@v7 | |
| with: | |
| path: artifacts/deb | |
| name: ${{ env.artifact_name }} | |
| retention-days: 1 | |
| - name: Compute deploy target | |
| run: | | |
| VERSION="${GITHUB_REF_NAME#release-}" | |
| if [[ "$GITHUB_REF" == refs/tags/* ]]; then | |
| echo "DEPLOY_TARGET=debian/release-${VERSION}/mini-dinstall/incoming/" >> $GITHUB_ENV | |
| else | |
| echo "DEPLOY_TARGET=debian/master/mini-dinstall/incoming/" >> $GITHUB_ENV | |
| fi | |
| - name: Publish to ZMREPO | |
| uses: easingthemes/ssh-deploy@main | |
| env: | |
| SSH_PRIVATE_KEY: ${{ secrets.ZMREPO_SSH_KEY }} | |
| ARGS: "-rltgoDzvO" | |
| SOURCE: artifacts/deb/ | |
| REMOTE_HOST: ${{ secrets.ZMREPO_HOST }} | |
| REMOTE_USER: ${{ secrets.ZMREPO_SSH_USER }} | |
| TARGET: ${{ env.DEPLOY_TARGET }} | |
| release: | |
| name: Create GitHub Release (on tag) | |
| needs: build-debian | |
| if: github.repository == 'ZoneMinder/zoneminder' && startsWith(github.ref, 'refs/tags/') | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Download artifacts | |
| uses: actions/download-artifact@v8 | |
| with: | |
| path: dist | |
| - name: Compute deploy target | |
| run: | | |
| VERSION="${GITHUB_REF_NAME#release-}" | |
| echo "DEPLOY_TARGET=debian/release-${VERSION}/mini-dinstall/incoming/" >> $GITHUB_ENV | |
| - name: Publish release to ZMREPO | |
| uses: easingthemes/ssh-deploy@main | |
| env: | |
| SSH_PRIVATE_KEY: ${{ secrets.ZMREPO_SSH_KEY }} | |
| ARGS: "-rltgoDzvO" | |
| SOURCE: dist/ | |
| REMOTE_HOST: ${{ secrets.ZMREPO_HOST }} | |
| REMOTE_USER: ${{ secrets.ZMREPO_SSH_USER }} | |
| TARGET: ${{ env.DEPLOY_TARGET }} | |
| - name: Create release | |
| uses: softprops/action-gh-release@v3 | |
| with: | |
| files: dist/**/* |