Use private runners for ARM

The public ones still don't support docker.

Author: hasufell

.github/workflows/release.yaml

@@ -136,24 +136,6 @@ jobs:
                     , ADD_CABAL_ARGS: "--enable-split-sections"
                     , runner: "ubuntu-latest"
                     , ARCH: 64
-                    },
-                    { image: "arm64v8/alpine:3.21"
-                    , installCmd: "apk add"
-                    , toolRequirements: "curl gcc g++ binutils binutils-gold coreutils bsd-compat-headers gmp-dev ncurses-dev libffi-dev make xz tar perl bash diffutils git gzip gnupg autoconf automake patchelf zlib zlib-dev bzip2 bzip2-dev findutils"
-                    , DISTRO: "Alpine"
-                    , ARTIFACT: "aarch64-linux-alpine"
-                    , ADD_CABAL_ARGS: "--enable-split-sections"
-                    , runner: "ubuntu-22.04-arm"
-                    , ARCH: "ARM64"
-                    },
-                    { image: "arm64v8/debian:10"
-                    , installCmd: "apt-get update && apt-get install -y"
-                    , toolRequirements: "libnuma-dev zlib1g-dev libgmp-dev libgmp10 libssl-dev liblzma-dev libbz2-dev git wget lsb-release software-properties-common gnupg2 apt-transport-https gcc autoconf automake build-essential curl ghc gzip libffi-dev libncurses-dev libncurses5 libtinfo5 patchelf"
-                    , DISTRO: "Debian"
-                    , ARTIFACT: "aarch64-linux-deb10"
-                    , ADD_CABAL_ARGS: "--enable-split-sections"
-                    , runner: "ubuntu-22.04-arm"
-                    , ARCH: "ARM64"
                     }
                   ]
 
@@ -195,6 +177,62 @@ jobs:
           path: |
             ./out-${{ matrix.platform.ARTIFACT }}-${{ matrix.ghc }}.tar
 
+  build-arm:
+    name: Build ARM binary
+    runs-on: [self-hosted, Linux, ARM64, maerwald]
+    env:
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      S3_HOST: ${{ secrets.S3_HOST }}
+      TARBALL_EXT: tar.xz
+      ADD_CABAL_ARGS: ""
+      DEBIAN_FRONTEND: noninteractive
+      TZ: Asia/Singapore
+      DISTRO: Debian
+      ARCH: "ARM64"
+      ARTIFACT: "aarch64-linux-deb10"
+    strategy:
+      fail-fast: true
+      matrix:
+        ghc: ["9.12.2", "9.10.1", "9.8.4", "9.6.7", "9.4.8"]
+    steps:
+      - uses: docker://hasufell/arm64v8-debian-haskell:10
+        name: Cleanup (aarch64 linux)
+        with:
+          args: "find . -mindepth 1 -maxdepth 1 -exec rm -rf -- {} +"
+
+      - name: git config
+        run: |
+          git config --global --get-all safe.directory | grep '^\*$' || git config --global --add safe.directory "*"
+        shell: bash
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - uses: docker://hasufell/arm64v8-debian-haskell:10
+        name: Run build (aarch64 linux)
+        with:
+          args: bash .github/scripts/build.sh
+        env:
+          GHC_VERSION: ${{ matrix.ghc }}
+
+      - uses: docker://hasufell/arm64v8-debian-haskell:10
+        name: Run build (aarch64 linux)
+        with:
+          args: bash .github/scripts/tar.sh
+        env:
+          GHC_VERSION: ${{ matrix.ghc }}
+
+      - if: always()
+        name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          if-no-files-found: error
+          retention-days: 2
+          name: artifacts-arm-${{ matrix.ghc }}
+          path: |
+            ./out-${{ matrix.platform.ARTIFACT }}-${{ matrix.ghc }}.tar
+
   build-freebsd:
     name: Build binary (FreeBSD)
     runs-on: [self-hosted, FreeBSD, X64]
@@ -439,20 +477,6 @@ jobs:
             ARCH: 64
             ARTIFACT: "x86_64-linux-mint21.3"
             runs-on: [self-hosted, linux-space, maerwald]
-          - image: "arm64v8/alpine:3.21"
-            installCmd: "apk add"
-            toolRequirements: "curl gcc g++ binutils binutils-gold coreutils bsd-compat-headers gmp-dev ncurses-dev libffi-dev make xz tar perl bash diffutils git gzip gnupg autoconf automake patchelf  zlib zlib-dev bzip2 bzip2-dev findutils"
-            DISTRO: "Alpine"
-            ARCH: ARM64
-            ARTIFACT: "aarch64-linux-alpine"
-            runs-on: [self-hosted, ARM64, maerwald]
-          - image: arm64v8/debian:10
-            installCmd: apt-get update && apt-get install -y
-            toolRequirements: libnuma-dev zlib1g-dev libgmp-dev libgmp10 libssl-dev liblzma-dev libbz2-dev git wget lsb-release software-properties-common gnupg2 apt-transport-https gcc autoconf automake build-essential curl ghc gzip libffi-dev libncurses-dev libncurses5 libtinfo5 patchelf tree
-            DISTRO: Debian
-            ARCH: ARM64
-            ARTIFACT: "aarch64-linux-deb10"
-            runs-on: [self-hosted, ARM64, maerwald]
 
     container:
       image: ${{ matrix.image }}
@@ -501,6 +525,59 @@ jobs:
         with:
           name: artifacts-${{ matrix.ARTIFACT }}-*
 
+  bindist-arm:
+    name: Tar linux bindists (arm)
+    runs-on: [self-hosted, Linux, ARM64, maerwald]
+    needs: ["build-arm"]
+    env:
+      TARBALL_EXT: tar.xz
+      DEBIAN_FRONTEND: noninteractive
+      TZ: Asia/Singapore
+      ARCH: "ARM64"
+      ARTIFACT: "aarch64-linux-deb10"
+    steps:
+      - uses: docker://hasufell/arm64v8-debian-haskell:10
+        name: Cleanup (aarch64 linux)
+        with:
+          args: "find . -mindepth 1 -maxdepth 1 -exec rm -rf -- {} +"
+
+      - name: git config
+        run: |
+          git config --global --get-all safe.directory | grep '^\*$' || git config --global --add safe.directory "*"
+        shell: bash
+
+      - uses: actions/checkout@v4
+
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: artifacts-arm-*
+          merge-multiple: true
+          path: ./
+
+      - uses: docker://hasufell/arm64v8-debian-haskell:10
+        name: Unpack (aarch64)
+        with:
+          args: bash .github/scripts/untar.sh
+
+      - if: matrix.platform.ARCH == 'ARM64'
+        uses: docker://hasufell/arm64v8-debian-haskell:10
+        name: Create bindist (aarch64 linux)
+        with:
+          args: bash .github/scripts/bindist.sh
+
+      - name: Upload bindist
+        uses: actions/upload-artifact@v4
+        with:
+          if-no-files-found: error
+          name: bindists-arm
+          path: |
+            ./out/*.tar.xz
+            ./out/plan.json/*
+
+      - uses: geekyeggo/delete-artifact@v5
+        with:
+          name: artifacts-arm-*
+
   bindist-mac:
     name: Tar bindists
     runs-on: ${{ matrix.platform.os }}
@@ -765,20 +842,6 @@ jobs:
             ARTIFACT: "x86_64-linux-rocky9"
             ARCH: 64
             runs-on: ubuntu-latest
-          - image: "arm64v8/alpine:3.21"
-            installCmd: "apk add"
-            toolRequirements: "curl gcc g++ binutils binutils-gold coreutils bsd-compat-headers gmp-dev ncurses-dev libffi-dev make xz tar perl bash diffutils git gzip gnupg autoconf automake patchelf tree zlib zlib-dev bzip2 bzip2-dev findutils"
-            DISTRO: "Alpine"
-            ARTIFACT: "aarch64-linux-alpine"
-            ARCH: ARM64
-            runs-on: ubuntu-22.04-arm
-          - image: arm64v8/debian:10
-            installCmd: apt-get update && apt-get install -y
-            toolRequirements: libnuma-dev zlib1g-dev libgmp-dev libgmp10 libssl-dev liblzma-dev libbz2-dev git wget lsb-release software-properties-common gnupg2 apt-transport-https gcc autoconf automake build-essential curl ghc gzip libffi-dev libncurses-dev libncurses5 libtinfo5 patchelf tree
-            DISTRO: Debian
-            ARTIFACT: "aarch64-linux-deb10"
-            ARCH: ARM64
-            runs-on: ubuntu-22.04-arm
     container:
       image: ${{ matrix.image }}
     steps:
@@ -807,6 +870,42 @@ jobs:
           DISTRO: ${{ matrix.DISTRO }}
           ARCH: ${{ matrix.ARCH }}
 
+  test-arm:
+    runs-on: [self-hosted, Linux, ARM64, maerwald]
+    needs: ["bindist-arm"]
+    env:
+      TARBALL_EXT: tar.xz
+      DEBIAN_FRONTEND: noninteractive
+      TZ: Asia/Singapore
+      DISTRO: Debian
+      ARCH: "ARM64"
+      ARTIFACT: "aarch64-linux-deb10"
+    strategy:
+      fail-fast: true
+    steps:
+      - uses: docker://hasufell/arm64v8-debian-haskell:10
+        name: Cleanup (aarch64 linux)
+        with:
+          args: "find . -mindepth 1 -maxdepth 1 -exec rm -rf -- {} +"
+
+      - name: git config
+        run: |
+          git config --global --get-all safe.directory | grep '^\*$' || git config --global --add safe.directory "*"
+        shell: bash
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - uses: actions/download-artifact@v4
+        with:
+          name: bindists-arm
+          path: ./out
+
+      - uses: docker://hasufell/arm64v8-debian-haskell:10
+        name: Run test (aarch64 linux)
+        with:
+          args: bash .github/scripts/test.sh
+
   test-mac:
     name: Test binary
     runs-on: ${{ matrix.platform.os }}