dotnet-installer/.vsts-ci.yml

trigger:
  batch: true
  branches:
    include:
    - main
    - master
    - release/*
    - internal/release/3.*
    - internal/release/5.*
    - internal/release/6.*
    - internal/release/7.*

resources:
  repositories:
  - repository: vmr
    type: github
    name: dotnet/dotnet
    endpoint: dotnet

parameters:
- name: vmrBranch
  displayName: dotnet/dotnet branch to push to
  type: string
  default: $(Build.SourceBranchName)

variables:
- name: _PublishUsingPipelines
  value: false
- ${{ if or(startswith(variables['Build.SourceBranch'], 'refs/heads/release/'), startswith(variables['Build.SourceBranch'], 'refs/heads/internal/release/'), eq(variables['Build.Reason'], 'Manual')) }}:
  - name: PostBuildSign
    value: false
- ${{ else }}:
  - name: PostBuildSign
    value: true
- ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
  - name: Codeql.Enabled
    value: true
  - group: DotNet-DotNetCli-Storage
  - group: DotNet-Installer-SDLValidation-Params
  - name: _PublishUsingPipelines
    value: true

- name: _InternalRuntimeDownloadArgs
  value: ''

- ${{ if eq(variables['System.TeamProject'], 'internal') }}:
  - group: DotNetBuilds storage account read tokens
  - name: _InternalRuntimeDownloadArgs
    value: /p:DotNetRuntimeSourceFeed=https://dotnetbuilds.blob.core.windows.net/internal
      /p:DotNetRuntimeSourceFeedKey=$(dotnetbuilds-internal-container-read-token-base64)
      /p:dotnetbuilds-internal-container-read-token-base64=$(dotnetbuilds-internal-container-read-token-base64)

stages:
- stage: Build
  jobs:
  # This job is for build retry configuration.
  - job: Publish_Build_Configuration
    pool:
      ${{ if eq(variables['System.TeamProject'], 'public') }}:
        name: NetCore-Public
        demands: ImageOverride -equals windows.vs2022preview.amd64.open
      ${{ if eq(variables['System.TeamProject'], 'internal') }}:
        name: NetCore1ESPool-Internal
        demands: ImageOverride -equals windows.vs2022preview.amd64
    steps:
    - publish: $(Build.SourcesDirectory)\eng\buildConfiguration
      artifact: buildConfiguration
      displayName: Publish Build Config
  
  ## PR-only jobs
  
  - ${{ if or(eq(variables['System.TeamProject'], 'public'), in(variables['Build.Reason'], 'PullRequest')) }}:
    
    ## Windows

    - template: eng/build.yml
      parameters:
        agentOs: Windows_NT
        jobName: Build_Debug_x64
        buildConfiguration: Debug
        buildArchitecture: x64
        additionalBuildParameters: '/p:PublishInternalAsset=true'
        runTests: true

    ## Linux

    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Ubuntu_22_04_Debug_x64
        container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-22.04'
        buildConfiguration: Debug
        buildArchitecture: x64
        linuxPortable: true
        runTests: true
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Fedora_36_Debug_x64
        container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:fedora-36'
        buildConfiguration: Debug
        buildArchitecture: x64
        linuxPortable: true
        runTests: true
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_CentOS_7_Debug_x64
        container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:centos-7'
        buildConfiguration: Debug
        buildArchitecture: x64
        linuxPortable: false
        runTests: true
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Debian_Stretch_Debug_x64
        container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:debian-stretch'
        buildConfiguration: Debug
        buildArchitecture: x64
        additionalBuildParameters: '/p:BuildSdkDeb=true'
        linuxPortable: false
        runTests: true
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Arm64_Debug
        buildConfiguration: Debug
        buildArchitecture: arm64
        runtimeIdentifier: 'linux-arm64'
        linuxPortable: true
        # Never run tests on arm64
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Linux_musl_Debug_x64
        container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:alpine-3.15-WithNode'
        buildConfiguration: Debug
        buildArchitecture: x64
        runtimeIdentifier: 'linux-musl-x64'
        # Pass in HostOSName when running on alpine
        additionalBuildParameters: '/p:HostOSName="linux-musl"'
        linuxPortable: false
        runTests: true
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_LinuxPortable_Release_x64
        buildConfiguration: Release
        buildArchitecture: x64
        linuxPortable: true
        runTests: true

    # MacOS

    - template: eng/build.yml
      parameters:
        agentOs: Darwin
        jobName: Build_Release_x64
        buildConfiguration: Release
        buildArchitecture: x64
        runTests: true

  ## Official/PGO instrumentation Builds
  
  - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
    
    ## Windows

    - template: eng/build.yml
      parameters:
        agentOs: Windows_NT
        jobName: Build_Release_x64
        buildConfiguration: Release
        buildArchitecture: x64
        additionalBuildParameters: '/p:PublishInternalAsset=true'
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Windows_NT
        jobName: Build_Release_x86
        buildConfiguration: Release
        buildArchitecture: x86
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Windows_NT
        jobName: Build_Release_arm64
        buildConfiguration: Release
        buildArchitecture: arm64
        runTests: false

    ## Linux 

    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Arm_Release
        buildConfiguration: Release
        buildArchitecture: arm
        runtimeIdentifier: 'linux-arm'
        linuxPortable: true
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Arm64_Release
        buildConfiguration: Release
        buildArchitecture: arm64
        runtimeIdentifier: 'linux-arm64'
        linuxPortable: true
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Linux_musl_Release_arm
        container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-18.04-cross'
        buildConfiguration: Release
        buildArchitecture: arm
        runtimeIdentifier: 'linux-musl-arm'
        additionalBuildParameters: '/p:OSName="linux-musl"'
        linuxPortable: false
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Linux_musl_Release_arm64
        buildConfiguration: Release
        buildArchitecture: arm64
        runtimeIdentifier: 'linux-musl-arm64'
        additionalBuildParameters: '/p:OSName="linux-musl"'
        linuxPortable: false
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Linux_musl_Release_x64
        container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:alpine-3.15-WithNode'
        buildConfiguration: Release
        buildArchitecture: x64
        runtimeIdentifier: 'linux-musl-x64'
        # Pass in HostOSName when running on alpine
        additionalBuildParameters: '/p:HostOSName="linux-musl"'
        linuxPortable: false
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Linux_Portable_Deb_Release_x64
        container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-18.04-debpkg'
        buildConfiguration: Release
        buildArchitecture: x64
        # Do not publish zips and tarballs. The linux-x64 binaries are
        # already published by Build_LinuxPortable_Release_x64
        additionalBuildParameters: '/p:PublishBinariesAndBadge=false /p:BuildSdkDeb=true'
        linuxPortable: true
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Linux_Portable_Rpm_Release_x64
        container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:centos-7-rpmpkg'
        buildConfiguration: Release
        buildArchitecture: x64
        # Do not publish zips and tarballs. The linux-x64 binaries are
        # already published by Build_LinuxPortable_Release_x64
        additionalBuildParameters: '/p:PublishBinariesAndBadge=false'
        linuxPortable: true
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_Linux_Portable_Rpm_Release_Arm64
        container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:centos-7-rpmpkg'
        buildConfiguration: Release
        buildArchitecture: arm64
        runtimeIdentifier: 'linux-arm64'
        # Do not publish zips and tarballs. The linux-x64 binaries are
        # already published by Build_LinuxPortable_Release_x64
        additionalBuildParameters: '/p:PublishBinariesAndBadge=false /p:CLIBUILD_SKIP_TESTS=true'
        linuxPortable: true
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Linux
        jobName: Build_LinuxPortable_Release_x64
        buildConfiguration: Release
        buildArchitecture: x64
        linuxPortable: true
        runTests: false

    # MacOS

    - template: eng/build.yml
      parameters:
        agentOs: Darwin
        jobName: Build_Release_x64
        buildConfiguration: Release
        buildArchitecture: x64
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Darwin
        jobName: Build_Release_arm64
        runtimeIdentifier: 'osx-arm64'
        buildConfiguration: Release
        buildArchitecture: arm64
        runTests: false

    ## Windows PGO Instrumentation builds

    - template: eng/build.yml
      parameters:
        agentOs: Windows_NT
        pgoInstrument: true
        jobName: Build_Release_x64
        buildConfiguration: Release
        buildArchitecture: x64
        additionalBuildParameters: '/p:PublishInternalAsset=true'
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Windows_NT
        pgoInstrument: true
        jobName: Build_Release_x86
        buildConfiguration: Release
        buildArchitecture: x86
        runTests: false
    - template: eng/build.yml
      parameters:
        agentOs: Windows_NT
        pgoInstrument: true
        jobName: Build_Release_arm64
        buildConfiguration: Release
        buildArchitecture: arm64
        runTests: false

    ## Linux PGO Instrumentation builds

    - template: eng/build.yml
      parameters:
        agentOs: Linux
        pgoInstrument: true
        jobName: Build_LinuxPortable_Release_x64
        buildConfiguration: Release
        buildArchitecture: x64
        linuxPortable: true
        runTests: false

    - template: eng/build.yml
      parameters:
        agentOs: Linux
        pgoInstrument: true
        jobName: Build_Release_arm64
        buildConfiguration: Release
        buildArchitecture: arm64
        linuxPortable: true
        runTests: false

  - template: /eng/common/templates/jobs/source-build.yml

- ${{ if and(eq(variables['System.TeamProject'], 'internal'), ne(variables['Build.Reason'], 'PullRequest')) }}:
  - stage: Synchronize_VMR
    displayName: Synchronize VMR
    dependsOn: []
    jobs:
    - template: eng/pipelines/templates/jobs/vmr-synchronization.yml
      parameters:
        vmrBranch: ${{ parameters.vmrBranch }}

# In case the VMR Build stage needs to be temporarily disabled, please make sure that
# the VMR synchronization step is run to validate that the PR can be merged and later
# synchronized into the VMR without problems.
# You can do this by allowing the Synchronize_VMR stage from above in PRs.
- ${{ if eq(variables['Build.Reason'], 'PullRequest') }}:
  - template: eng/pipelines/templates/stages/vmr-build.yml
    parameters:
      vmrBranch: ${{ parameters.vmrBranch }}
      installerBuildResourceId: current

- ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
  - stage: Publish
    dependsOn:
    - Build
    jobs:
    - template: /eng/common/templates/job/publish-build-assets.yml
      parameters:
        publishUsingPipelines: true
        publishAssetsImmediately: true
        pool:
          ${{ if eq(variables['System.TeamProject'], 'internal') }}:
            name: NetCore1ESPool-Internal
            demands: ImageOverride -equals windows.vs2022.amd64