autopkg_run.yml

name: Run `autopkg run`
on: [push, pull_request]
jobs:
  autopkg_run:
    name: Install and configure AutoPkg
    runs-on: macos-latest
    steps:
      - name: Dump environment information
        run: |
          sw_vers
          $(which curl) --version
          $(which jq) --version
        shell: bash -x {0}
      - uses: actions/checkout@v3
        with:
          fetch-depth: 2
      - name: Get changed files
        id: changed-recipe-files
        uses: tj-actions/changed-files@v41.0.0
        with:
          files: "**/**.recipe"
          separator: ","
      - name: Install AutoPkg (latest)
        if: steps.changed-recipe-files.outputs.any_changed == 'true'
        run: |
          AUTOPKG_LATEST=$(curl -Ls -H 'Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}' https://api.github.com/repos/autopkg/autopkg/releases/latest)
          AUTOPKG_LATEST_URL=$(jq -r '.["assets"][0]["browser_download_url"]' <<< ${AUTOPKG_LATEST})
          curl -LOJs "${AUTOPKG_LATEST_URL}"
          sudo installer -pkg "${AUTOPKG_LATEST_URL##*/}" -target /
        shell: bash -exuo pipefail {0}
      - name: Configure AutoPkg
        if: steps.changed-recipe-files.outputs.any_changed == 'true'
        run: |
          AUTOPKG_DIR="/usr/local/autopkg"
          sudo mkdir -p "${AUTOPKG_DIR}"
          sudo chown root:admin "${AUTOPKG_DIR}"
          sudo chmod 775 "${AUTOPKG_DIR}"

          # Configure AutoPkg override directory to be server wide (multi-user)
          RECIPE_OVERRIDE_DIRS="${AUTOPKG_DIR}/recipe_overrides"
          mkdir -p "${RECIPE_OVERRIDE_DIRS}"
          defaults write com.github.autopkg RECIPE_OVERRIDE_DIRS "${RECIPE_OVERRIDE_DIRS}"
          defaults read com.github.autopkg RECIPE_OVERRIDE_DIRS

          # Configure AutoPkg cache dir to be on the data volume
          CACHE_DIR="${AUTOPKG_DIR}/cache"
          mkdir -p "${CACHE_DIR}"
          defaults write com.github.autopkg CACHE_DIR "${CACHE_DIR}"
          defaults read com.github.autopkg CACHE_DIR

          # Configure AutoPkg recipe repo dir to be on the data volume
          RECIPE_REPO_DIR="${AUTOPKG_DIR}/recipe_repos"
          mkdir -p "${RECIPE_REPO_DIR}"
          defaults write com.github.autopkg RECIPE_REPO_DIR "${RECIPE_REPO_DIR}"
          defaults read com.github.autopkg RECIPE_REPO_DIR

          autopkg repo-add https://github.com/autopkg/recipes.git
          autopkg repo-add https://github.com/autopkg/n8felton-recipes.git
        shell: bash -exuo pipefail {0}
      - name: Install Munki (latest)
        if: steps.changed-recipe-files.outputs.any_changed == 'true'
        run: |
          # Build a temp munki enviornment
          MUNKI_REPO="/Users/Shared/munki"
          sudo mkdir -p "${MUNKI_REPO}"
          sudo chown root:admin "${MUNKI_REPO}"
          sudo chmod 775 "${MUNKI_REPO}"
          cd "${MUNKI_REPO}"
          mkdir catalogs manifests pkgs pkgsinfo icons
          # defaults write com.googlecode.munki.munkiimport repo_path "${MUNKI_REPO}"
          defaults write com.googlecode.munki.munkiimport repo_url "file://${MUNKI_REPO}"
          defaults write com.googlecode.munki.munkiimport pkginfo_extension ".plist"
          defaults write com.googlecode.munki.munkiimport default_catalog "testing"
          defaults read com.googlecode.munki.munkiimport

          defaults write com.github.autopkg MUNKI_REPO "${MUNKI_REPO}"

          # Install Admin only version of Munki
          MUNKI_LATEST=$(curl -Ls -H 'Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}' https://api.github.com/repos/munki/munki/releases/latest)
          MUNKI_LATEST_URL=$(jq -r '.["assets"][0]["browser_download_url"]' <<< ${MUNKI_LATEST})
          MUNKI_ADMIN_URL="https://raw.githubusercontent.com/n8felton/macOS-Scripts/master/munki/admin.xml"
          curl -LOJs -H 'Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}' "${MUNKI_LATEST_URL}"
          curl -LOJs -H 'Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}' "${MUNKI_ADMIN_URL}"
          sudo /usr/sbin/installer -applyChoiceChangesXML "${MUNKI_ADMIN_URL##*/}" -pkg "${MUNKI_LATEST_URL##*/}" -target /
        shell: bash -exuo pipefail {0}
      - name: Run AutoPkg for changed recipes
        if: steps.changed-recipe-files.outputs.any_changed == 'true'
        run: |
          export PYTHONUNBUFFERED=1
          IFS=$',' read -a ALL_CHANGED_FILES <<< "${{ steps.changed-recipe-files.outputs.all_changed_files }}"
          for changed_file in "${ALL_CHANGED_FILES[@]}"; do
            echo "${changed_file}"
            case "${changed_file}" in
              *.recipe)
                if [ -f "${changed_file}" ]; then
                  autopkg run -vvvv "${changed_file}"
                fi
                ;;
              *)
                ;;
            esac
          done