image: archlinux
repositories:
  aurbuild: >
    https://aurbuild.xdavidwu.link/#F73F137D4573DEFAA097DBF09544CFF6B08A3FD3
packages:
  - base-devel
secrets:
  - 3eb89d61-a73d-48dd-81cf-54c7bd006028
sources:
environment:
tasks:
  - prepare: |
      sudo sed "s/COMPRESSZST=(zstd -c -z -q -)/COMPRESSZST=(zstd -c -z -T$(nproc) -q -19 -)/" -i /etc/makepkg.conf
      echo 'PACKAGER="aurbuild <aurbuild@builds.xdavidwu.link>"' | sudo tee -a /etc/makepkg.conf
      echo "MAKEFLAGS=\"-j$(nproc)\"" | sudo tee -a /etc/makepkg.conf
      cd "$pkgbase"
      source PKGBUILD
      printf "Key-Type: RSA\nKey-Length: 4096\nKey-Usage: sign\nName-Real: aurbuild AUTOMATED key for lsign\nName-Email: aurbuild@localhost\nExpire-Date: 0\n%%no-protection\n%%commit\n" | gpg --gen-key --batch
      for i in $(seq 0 $((${#validpgpkeys[@]} - 1))); do
        gpg --batch --keyserver hkps://keyserver.ubuntu.com --recv-keys ${validpgpkeys[$i]}
        printf "y\ny\n" | gpg --command-fd 0 --batch --lsign-key ${validpgpkeys[$i]};
      done
      makepkg -so --noconfirm
  - build: |
      . /etc/profile
      cd "$pkgbase"
      makepkg -ce
  - deploy: |
      echo "StrictHostKeyChecking=no" >> ~/.ssh/config
      cd "$pkgbase"
      for i in *.pkg.tar.zst; do
        ssh deploy@aurbuild.xdavidwu.link "$i" < "$i"
      done
triggers:
  - action: email
    condition: failure
    to: xdavidwuph@gmail.com