---
name: Build bootupd with systemd-boot

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

env:
  CARGO_TERM_COLOR: always
  RUST_BACKTRACE: 1

jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write

    steps:
      - name: Checkout code
        run: |
          echo "Cloning repository..."
          git clone https://git.raines.xyz/particle-os/bootupd-sdboot.git /tmp/bootupd-sdboot
          cd /tmp/bootupd-sdboot
          git fetch --all
          git checkout ${{ github.sha || gitea.sha || 'main' }}

      - name: Setup apt-cacher-ng
        run: |
          echo "Setting up apt-cacher-ng for faster builds..."

          # Try apt-cacher-ng first, fallback to standard mirrors
          echo "Checking for apt-cacher-ng availability..."

          # Quick check with timeout to avoid hanging
          if timeout 10 curl -s --connect-timeout 5 \
            http://192.168.1.101:3142/acng-report.html > /dev/null 2>&1; then
            echo "✅ apt-cacher-ng is available, configuring Docker proxy..."

            # Create Docker daemon configuration for apt-cacher-ng
            sudo mkdir -p /etc/docker
            echo '{
              "proxies": {
                "default": {
                  "httpProxy": "http://192.168.1.101:3142",
                  "httpsProxy": "http://192.168.1.101:3142",
                  "noProxy": "localhost,127.0.0.1"
                }
              }
            }' | sudo tee /etc/docker/daemon.json

            # Note: Docker daemon restart requires systemd, which isn't available in CI
            # The proxy configuration will be used by Docker builds
            echo "Docker proxy configuration created (restart not possible in CI)"
          else
            echo "⚠️ apt-cacher-ng not available, using standard mirrors..."
            echo "Using standard Debian mirrors for Docker builds"
          fi

      - name: Build Docker image
        run: |
          cd /tmp/bootupd-sdboot
          docker build --build-arg release_name=unstable -f Dockerfile \
            -t bootupd-sdboot:latest .

      - name: Build bootupd inside container
        run: |
          cd /tmp/bootupd-sdboot
          echo "Current directory before Docker run: $(pwd)"
          echo "Files in current directory before Docker run:"
          ls -la
          
          # Run Docker container and capture container ID
          CONTAINER_ID=$(docker run -d -v $(pwd):/workspace bootupd-sdboot:latest bash -c "
            # Setup apt-cacher-ng inside container if available
            if timeout 5 curl -s --connect-timeout 3 \
              http://192.168.1.101:3142/acng-report.html > /dev/null 2>&1; then
              echo '✅ Using apt-cacher-ng for package downloads...'
              echo 'deb http://192.168.1.101:3142/ftp.us.debian.org/debian unstable main' > /etc/apt/sources.list
              echo 'deb-src http://192.168.1.101:3142/ftp.us.debian.org/debian unstable main' >> /etc/apt/sources.list
            else
              echo '⚠️ Using standard Debian mirrors...'
              echo 'deb http://deb.debian.org/debian unstable main' > /etc/apt/sources.list
              echo 'deb-src http://deb.debian.org/debian unstable main' >> /etc/apt/sources.list
            fi

            # Update package lists
            apt update -y

            # Clone and build bootupd
            git clone https://github.com/p5/coreos-bootupd.git bootupd && \
            cd bootupd && \
            git fetch --all && \
            git switch origin/sdboot-support -d && \
            cargo build --release --bins --features systemd-boot && \
            install -Dpm0755 -t /usr/bin ./target/release/bootupd && \
            ln -s ./bootupd /usr/bin/bootupctl && \
            cp /usr/bin/bootupd /workspace/ && \
            cp /usr/bin/bootupctl /workspace/ && \
            echo 'Creating Debian package...' && \
            cd /workspace && \
            BUILD_NUMBER=\"${FORGEJO_RUN_NUMBER:-${GITEA_RUN_NUMBER:-$(date +%Y%m%d%H%M%S)}}\" && \
            COMMIT_HASH=\"$(git rev-parse HEAD 2>/dev/null || echo unknown)\" && \
            SHORT_COMMIT=\"$(echo \"$COMMIT_HASH\" | cut -c1-10)\" && \
            mkdir -p bootupd-package/usr/bin bootupd-package/DEBIAN && \
            cp /usr/bin/bootupd bootupd-package/usr/bin/ && \
            cp /usr/bin/bootupctl bootupd-package/usr/bin/ && \
            chmod +x bootupd-package/usr/bin/bootupd bootupd-package/usr/bin/bootupctl && \
            printf 'Package: bootupd\\nVersion: 0.1.0+%s+%s\\nSection: admin\\n' \"$BUILD_NUMBER\" \"$SHORT_COMMIT\" > bootupd-package/DEBIAN/control && \
            printf 'Priority: optional\\nArchitecture: amd64\\n' >> bootupd-package/DEBIAN/control && \
            printf 'Maintainer: CI Build <ci@example.com>\\n' >> bootupd-package/DEBIAN/control && \
            printf 'Depends: libc6 (>= 2.39), libgcc-s1 (>= 3.0), ' >> bootupd-package/DEBIAN/control && \
            printf 'libssl3t64 (>= 3.0.0), systemd (>= 250)\\n' >> bootupd-package/DEBIAN/control && \
            printf 'Description: Distribution-independent bootloader update tool ' >> bootupd-package/DEBIAN/control && \
            printf 'with systemd-boot support\\n' >> bootupd-package/DEBIAN/control && \
            printf ' Bootupd is a distribution-independent tool for managing ' >> bootupd-package/DEBIAN/control && \
            printf 'bootloader updates.\\n' >> bootupd-package/DEBIAN/control && \
            printf ' This package includes systemd-boot support.\\n .\\n' >> bootupd-package/DEBIAN/control && \
            printf ' Features:\\n  - systemd-boot support\\n' >> bootupd-package/DEBIAN/control && \
            printf '  - Distribution-independent\\n  - Safe bootloader updates\\n' >> bootupd-package/DEBIAN/control && \
            dpkg-deb --build bootupd-package bootupd_0.1.0+${BUILD_NUMBER}+${SHORT_COMMIT}_amd64.deb && \
            echo \"✅ Debian package created: bootupd_0.1.0+${BUILD_NUMBER}+${SHORT_COMMIT}_amd64.deb\" && \
            echo \"Files in /workspace after package creation:\" && \
            ls -la /workspace/ && \
            echo \"Looking for .deb files in /workspace:\" && \
            ls -la /workspace/*.deb 2>/dev/null || echo \"No .deb files found in /workspace\"
          ")
          
          # Wait for container to complete
          echo "Waiting for container to complete..."
          docker wait $CONTAINER_ID
          
          # Copy .deb file from container to host
          echo "Copying .deb file from container to host..."
          docker cp $CONTAINER_ID:/workspace/bootupd_0.1.0++_amd64.deb .
          
          # Clean up container
          docker rm $CONTAINER_ID
          
          echo "Current directory after Docker run: $(pwd)"
          echo "Files in current directory after Docker run:"
          ls -la

      - name: Upload to Forgejo Debian Registry
        run: |
          cd /tmp/bootupd-sdboot
          echo "Uploading to Forgejo Debian Registry..."
          
          # Debug: List files in current directory
          echo "Files in current directory:"
          ls -la
          echo "Looking for .deb files:"
          ls -la *.deb 2>/dev/null || echo "No .deb files found"

          # Set Forgejo configuration
          FORGEJO_OWNER="particle-os"
          FORGEJO_DISTRIBUTION="trixie"
          FORGEJO_COMPONENT="main"

          # Find the .deb file (it should be in the current directory from Docker mount)
          DEB_FILE=$(ls bootupd_*.deb 2>/dev/null | head -1)

          if [ -z "$DEB_FILE" ]; then
            echo "❌ No .deb file found for upload"
            exit 1
          fi

          echo "📦 Uploading package: $DEB_FILE"

          # Extract package info
          PKG_NAME=$(dpkg-deb -f "$DEB_FILE" Package 2>/dev/null || echo "bootupd")
          PKG_VERSION=$(dpkg-deb -f "$DEB_FILE" Version 2>/dev/null || echo "unknown")
          PKG_ARCH=$(dpkg-deb -f "$DEB_FILE" Architecture 2>/dev/null || echo "amd64")

          echo "  Package: $PKG_NAME"
          echo "  Version: $PKG_VERSION"
          echo "  Architecture: $PKG_ARCH"

          # Forgejo Debian Registry upload URL
          UPLOAD_URL="https://git.raines.xyz/api/packages/${FORGEJO_OWNER}/debian/pool/${FORGEJO_DISTRIBUTION}/${FORGEJO_COMPONENT}/upload"

          echo "  Upload URL: $UPLOAD_URL"

          # Upload to Forgejo Debian Registry
          if [ -n "${{ secrets.ACCESS_TOKEN }}" ]; then
            echo "  🔐 Using authentication token..."
            UPLOAD_RESULT=$(curl -s -w "%{http_code}" \
              --user "${FORGEJO_OWNER}:${{ secrets.ACCESS_TOKEN }}" \
              --upload-file "$DEB_FILE" \
              "$UPLOAD_URL" 2>/dev/null)

            # Extract HTTP status code (last 3 characters)
            HTTP_CODE=$(echo "$UPLOAD_RESULT" | tail -c 4)
            # Extract response body (everything except last 3 characters)
            RESPONSE_BODY=$(echo "$UPLOAD_RESULT" | head -c -4)

            case $HTTP_CODE in
              201)
                echo "  ✅ Successfully published to Forgejo Debian Registry!"
                echo "  📥 Install with: apt install $PKG_NAME"
                ;;
              409)
                echo "  ⚠️ Package already exists (version conflict)"
                echo "  💡 Consider deleting old version first"
                ;;
              400)
                echo "  ❌ Bad request - package validation failed"
                ;;
              *)
                echo "  ❌ Upload failed with HTTP $HTTP_CODE"
                echo "  Response: $RESPONSE_BODY"
                ;;
            esac
          else
            echo "  ⚠️ No ACCESS_TOKEN secret available - skipping upload"
            echo "  💡 Set ACCESS_TOKEN secret in repository settings to enable automatic publishing"
            echo "  📋 Manual upload command:"
            echo "     curl --user your_username:your_token \\"
            echo "          --upload-file $DEB_FILE \\"
            echo "          $UPLOAD_URL"
          fi

          echo ""
          echo "🎯 Debian package publishing complete!"
          echo "📦 Package is now available in Forgejo Debian Registry"
          echo "🔧 To install: apt install bootupd"

      - name: Upload artifacts
        run: |
          cd /tmp/bootupd-sdboot
          echo "Creating artifact directory..."
          mkdir -p /tmp/artifacts
          cp bootupd bootupctl bootupd_*.deb /tmp/artifacts/ 2>/dev/null || true
          echo "Artifacts created in /tmp/artifacts/"
          ls -la /tmp/artifacts/