# Build flake-hub packages for aarch64-linux and push to attic.
# Separate workflow per arch — see amd64.yaml for rationale.

when:
  - event: push
    branch: main

clone:
  - name: clone
    image: woodpeckerci/plugin-git
    environment:
      CI_NETRC_MACHINE: git.oleks.space
      CI_NETRC_USERNAME: oleks
      CI_NETRC_PASSWORD:
        from_secret: gitea_clone_token
      PLUGIN_TAGS: "false"
      PLUGIN_DEPTH: "1"

steps:
  - name: build-arm64
    image: git.oleks.space/oleks/nix-ci:latest
    environment:
      ATTIC_TOKEN:
        from_secret: attic_token
      GITEA_CLONE_TOKEN:
        from_secret: gitea_clone_token
    backend_options:
      kubernetes:
        nodeSelector:
          kubernetes.io/arch: arm64
        labels:
          commit-tag: "${CI_COMMIT_TAG}"
          commit-branch: "${CI_COMMIT_BRANCH}"
          pipeline-number: "${CI_PIPELINE_NUMBER}"
    commands:
      - echo "▸ arch=$(uname -m)"
      - sh ci/setup.sh
      # NODE-BOUND LEG (emmett#44, cluster#192): aarch64-linux can't be built on
      # emmett (linux/amd64) and these native packages have no cross path, so this
      # leg must run on an aarch64 node (the arch nodeSelector above). Same
      # parity-lib attic-closure front door as amd64, only the arch app differs.
      - PUBLISH=1 nix run .#publish-aarch64-linux