refactor(ci): consolidate build-all-versions workflows into 2 files (#93)

## Summary Consolidate the four `build-all-versions*` files into two, mirroring the matrix approach used for the process-updates / weekly families: | Before | After | |---|---| | `build-all-versions-amd64.yaml` + `build-all-versions-arm64.yaml` | `build-all-versions.yaml` | | `build-all-versions-install-deps-amd64.yaml` + `-arm64.yaml` | `build-all-versions-install-deps.yaml` | `ARCH` becomes a matrix axis carrying the per-arch differences: `agent` (artemis/gaia), `BACKEND` (kubernetes/docker), and `R_PKG_CACHE_DIR`. Build-all keeps its `SPLIT_INDEX` parallelism, so its matrix is ARCH x SPLIT = 8 rows; only the rows matching the selected arch run. **Invocation unchanged.** Routing uses the existing task selector `task == "build-all-${ARCH}"`, so `--var task=build-all-amd64 ...` still runs exactly the amd64 rows. `OS` / `OS_VERSION` / `R_VERSION` / `K8S_INSTANCE_TYPE` are still passed via `--var`. (You can drop `--var ARCH=...` now — arch comes from the matrix/task.) **No cron.** These pipelines are manual-only, so there are no scheduled runs to affect. ## Validation before merge Same matrix-interpolation-in-`when`/`labels` mechanism validated for #92, plus it now relies on per-row `agent`/`BACKEND` selecting the right execution backend (kubernetes for amd64, docker for arm64). Before merge, on this branch trigger a small `task=build-all-arm64` run and confirm it lands on the gaia/docker backend (and amd64 on artemis/kubernetes). Originals are in git history for rollback. Note: `archive-missed-packages.yaml` was already a single consolidated matrix file (cron + manual) and is left untouched. Reviewed-on: #93
2026-06-16 09:33:13 +00:00 · 2026-06-16 09:33:13 +00:00 · b297f0fbc0
commit b297f0fbc0
parent 4406a8735b
1 changed files with 100 additions and 295 deletions
--- a/.crow/build-all-versions.yaml
+++ b/.crow/build-all-versions.yaml
@ -0,0 +1,163 @@
+### Manual full rebuild of all CRAN binaries for one OS/arch.
+# Set the variables below in the manual-run form (or via --var on the CLI).
+# `target_arch` routes the matrix; OS/OS_VERSION/R_VERSION select the platform
+# image and cache volume. Placement is via the agent label (artemis/gaia).
+# Skip list lives in local/excluded-packages.json (read by local/build-all.R).
+variables:
+  target_arch:
+    description: "Architecture to build."
+    options:
+      - amd64
+      - arm64
+    default: amd64
+  OS:
+    description: "Base OS image name (e.g. alpine, redhat, ubuntu)."
+    default: alpine
+  OS_VERSION:
+    description: "OS version / image tag (e.g. 3.24, 9, jammy, noble)."
+    default: "3.24"
+  R_VERSION:
+    description: "Primary R version under /opt/R."
+    options:
+      - 4.5.3
+      - 4.4.3
+    default: 4.5.3
+
+when:
+  - event: manual
+    evaluate: 'target_arch == "${ARCH}"'
+
+skip_clone: true
+
+labels:
+  platform: linux/${ARCH}
+  agent: ${AGENT}
+
+matrix:
+  include:
+    - ARCH: amd64
+      AGENT: artemis
+      R_PKG_CACHE_DIR: ''
+      SPLIT_INTO: 4
+      SPLIT_INDEX: 1
+    - ARCH: amd64
+      AGENT: artemis
+      R_PKG_CACHE_DIR: ''
+      SPLIT_INTO: 4
+      SPLIT_INDEX: 2
+    - ARCH: amd64
+      AGENT: artemis
+      R_PKG_CACHE_DIR: ''
+      SPLIT_INTO: 4
+      SPLIT_INDEX: 3
+    - ARCH: amd64
+      AGENT: artemis
+      R_PKG_CACHE_DIR: ''
+      SPLIT_INTO: 4
+      SPLIT_INDEX: 4
+    - ARCH: arm64
+      AGENT: gaia
+      R_PKG_CACHE_DIR: /mnt/cache/pkgcache
+      SPLIT_INTO: 4
+      SPLIT_INDEX: 1
+    - ARCH: arm64
+      AGENT: gaia
+      R_PKG_CACHE_DIR: /mnt/cache/pkgcache
+      SPLIT_INTO: 4
+      SPLIT_INDEX: 2
+    - ARCH: arm64
+      AGENT: gaia
+      R_PKG_CACHE_DIR: /mnt/cache/pkgcache
+      SPLIT_INTO: 4
+      SPLIT_INDEX: 3
+    - ARCH: arm64
+      AGENT: gaia
+      R_PKG_CACHE_DIR: /mnt/cache/pkgcache
+      SPLIT_INTO: 4
+      SPLIT_INDEX: 4
+
+depends_on:
+  - build-all-versions-install-deps
+
+steps:
+  - name: 'Build binaries'
+    image: 'reg.devxy.io/rpkgs/build-env-${OS}:${OS_VERSION}'
+    pull: true
+    environment:
+      RED_HAT_DEV_PW:
+        from_secret: RED_HAT_DEV_PW
+      B2_S3_ACCESS_KEY:
+        from_secret: B2_S3_ACCESS_KEY
+      B2_S3_SECRET_KEY:
+        from_secret: B2_S3_SECRET_KEY
+      PGPASS:
+        from_secret: PGPASS
+      REPO_RO_TOKEN:
+        from_secret: REPO_RO_TOKEN
+      GITHUB_PAT:
+        from_secret: GITHUB_PAT
+      # normal env vars
+      GIT_USER: pat-s
+      # set the location of the 'pkgcache' cache dir which persists the R package dependencies needed to install the packages themselves
+      R_PKG_CACHE_DIR: ${R_PKG_CACHE_DIR}
+      R_LIBS_USER: /mnt/cache/R-pkgs
+      CCACHE_DIR: /mnt/cache/ccache
+      NCPUS: 2
+    volumes:
+      - ${ARCH}-binaries-r-dep-cache-${OS}-${OS_VERSION//./}:/mnt/cache
+    commands:
+      - git clone -q https://pat-s:$$REPO_RO_TOKEN@git.devxy.io/devxy/build-cran-binaries.git .
+      - mkdir -p /mnt/cache/pkgcache /mnt/cache/R-pkgs /mnt/cache/ccache /mnt/cache/packages
+      - XVFB=$(command -v xwfb-run 2>/dev/null || command -v xvfb-run); XVFB_ARGS=""; if command -v xwfb-run >/dev/null 2>&1; then dnf install -y -q weston 2>/dev/null; XVFB_ARGS="-c weston"; fi
+      - $XVFB $XVFB_ARGS -n $SPLIT_INDEX -- /opt/R/$R_VERSION/bin/Rscript local/build-all.R $SPLIT_INTO $SPLIT_INDEX $NCPUS 2>&1
+      - |
+        PRIMARY_MINOR=$(echo "$R_VERSION" | cut -d. -f1-2)
+        for RBIN in /opt/R/[0-9]*/bin/R; do
+          RV=$(basename "$(dirname "$(dirname "$RBIN")")")
+          RMINOR=$(echo "$RV" | cut -d. -f1-2)
+          [ "$RMINOR" = "$PRIMARY_MINOR" ] && continue
+          echo "=== R-minor-sensitive pass under R $RV ==="
+          LIB="/mnt/cache/R-pkgs-$RMINOR"
+          mkdir -p "$LIB"
+          R_LIBS_USER="$LIB" "$(dirname "$RBIN")/R" -q -e 'if (!requireNamespace("bincraft", quietly = TRUE) || packageVersion("bincraft") != "4.2.2") pak::pak("git::https://codefloe.com/rpkgs/bincraft.git@v4.2.2")' || true
+          R_LIBS_USER="$LIB" $XVFB $XVFB_ARGS -n $SPLIT_INDEX -- "$(dirname "$RBIN")/Rscript" local/build-all.R --sensitive-only $SPLIT_INTO $SPLIT_INDEX $NCPUS 2>&1 || true
+        done
+      # archive missed packages
+      - /opt/R/$R_VERSION/bin/R -q -e "bincraft::process_unarchived_pkgs(paste(Sys.getenv('OS'), Sys.getenv('OS_VERSION')), Sys.getenv('ARCH'), workers = $NCPUS)"
+    backend_options:
+      docker:
+        resources:
+          requests:
+            memory: 5Gi
+            cpu: 1000m
+          limits:
+            memory: 20Gi
+            cpu: 2000m
+  - name: 'Upload package indexes'
+    image: 'reg.devxy.io/rpkgs/build-env-${OS}:${OS_VERSION}'
+    pull: true
+    environment:
+      B2_S3_ACCESS_KEY:
+        from_secret: B2_S3_ACCESS_KEY
+      B2_S3_SECRET_KEY:
+        from_secret: B2_S3_SECRET_KEY
+      R_LIBS_USER: /mnt/cache/R-pkgs
+    volumes:
+      - ${ARCH}-binaries-r-dep-cache-${OS}-${OS_VERSION//./}:/mnt/cache
+    commands:
+      - |
+        CODENAME=$(/opt/R/$R_VERSION/bin/Rscript -e "cat(bincraft::set_codename(NULL))")
+        /opt/R/$R_VERSION/bin/R -q -e "bincraft::upload_package_index(codename = '$CODENAME', s3_endpoint = 'https://s3.eu-central-003.backblazeb2.com', s3_region = 'eu-central-003', s3_bucket = 'devxy-rpkgs-binaries', s3_access_key_id = Sys.getenv('B2_S3_ACCESS_KEY'), s3_secret_access_key = Sys.getenv('B2_S3_SECRET_KEY'))"
+        for RBIN in /opt/R/[0-9]*/bin/R; do
+          RMINOR=$(basename "$(dirname "$(dirname "$RBIN")")" | cut -d. -f1-2)
+          /opt/R/$R_VERSION/bin/R -q -e "bincraft::upload_package_index(codename = '$CODENAME', r_minor = '$RMINOR', s3_endpoint = 'https://s3.eu-central-003.backblazeb2.com', s3_region = 'eu-central-003', s3_bucket = 'devxy-rpkgs-binaries', s3_access_key_id = Sys.getenv('B2_S3_ACCESS_KEY'), s3_secret_access_key = Sys.getenv('B2_S3_SECRET_KEY'))" || true
+        done
+    backend_options:
+      docker:
+        resources:
+          requests:
+            memory: 5Gi
+            cpu: 1000m
+          limits:
+            memory: 20Gi
+            cpu: 2000m