chore(release/0.8): cherry-pick CI features/fixes (#359)

* add build support for aarch64 linux binary (#328)

* Bump azure-blob-storage-upload to v2.0.1

Signed-off-by: Matthew Fisher <matt.fisher@fermyon.com>

* fix(deny.toml): add Unicode-DFS-2016 to allowed licenses

Signed-off-by: Vaughn Dice <vaughn.dice@fermyon.com>

Signed-off-by: Matthew Fisher <matt.fisher@fermyon.com>
Signed-off-by: Vaughn Dice <vaughn.dice@fermyon.com>
Co-authored-by: VishnuJin <45007338+VishnuJin@users.noreply.github.com>
Co-authored-by: Matthew Fisher <matt.fisher@fermyon.com>

.cargo/config

@@ -0,0 +1,2 @@
+[target.aarch64-unknown-linux-gnu]
+linker = "aarch64-linux-gnu-gcc"

.github/workflows/release.yaml

@@ -20,6 +20,13 @@ jobs:
               env: {},
               targetPath: "target/release/",
             }
+          - {
+              os: "ubuntu-latest",
+              arch: "aarch64",
+              extension: "",
+              env: { OPENSSL_DIR: "/usr/local/openssl-aarch64" },
+              targetPath: "target/aarch64-unknown-linux-gnu/release/",
+            }
           - {
               os: "macos-latest",
               arch: "amd64",
@@ -68,15 +75,38 @@ jobs:
           default: true
           components: clippy, rustfmt
 
+      - name: setup for cross-compile builds
+        if: matrix.config.arch == 'aarch64' && matrix.config.os == 'ubuntu-latest'
+        run: |
+          sudo apt install gcc-aarch64-linux-gnu g++-aarch64-linux-gnu
+          cd /tmp
+          git clone https://github.com/openssl/openssl
+          cd openssl
+          git checkout OpenSSL_1_1_1l
+          sudo mkdir -p $OPENSSL_DIR
+          ./Configure linux-aarch64 --prefix=$OPENSSL_DIR --openssldir=$OPENSSL_DIR shared
+          make CC=aarch64-linux-gnu-gcc
+          sudo make install
+          rustup target add aarch64-unknown-linux-gnu
+
       - name: Install latest Rust stable toolchain
         uses: actions-rs/toolchain@v1
-        if: matrix.config.arch == 'aarch64'
+        if: matrix.config.arch == 'aarch64' && matrix.config.os == 'macos-latest'
         with:
           toolchain: stable
           default: true
           components: clippy, rustfmt
           target: aarch64-apple-darwin
 
+      - name: Install latest Rust stable toolchain
+        uses: actions-rs/toolchain@v1
+        if: matrix.config.arch == 'aarch64' && matrix.config.os == 'ubuntu-latest'
+        with:
+          toolchain: stable
+          default: true
+          components: clippy, rustfmt
+          target: aarch64-unknown-linux-gnu
+
       - name: build release
         uses: actions-rs/cargo@v1
         if: matrix.config.arch != 'aarch64'
@@ -86,11 +116,18 @@ jobs:
 
       - name: build release
         uses: actions-rs/cargo@v1
-        if: matrix.config.arch == 'aarch64'
+        if: matrix.config.arch == 'aarch64' && matrix.config.os == 'macos-latest'
         with:
           command: build
           args: "--all-features --release --target aarch64-apple-darwin"
 
+      - name: build release
+        uses: actions-rs/cargo@v1
+        if: matrix.config.arch == 'aarch64' && matrix.config.os == 'ubuntu-latest'
+        with:
+          command: build
+          args: "--all-features --release --target aarch64-unknown-linux-gnu"
+
       - name: package release assets
         shell: bash
         run: |
@@ -125,7 +162,7 @@ jobs:
           cd bindle
           sha256sum * > checksums-${{ env.RELEASE_VERSION }}.txt
       - name: upload to azure
-        uses: bacongobbler/azure-blob-storage-upload@v2.0.0
+        uses: bacongobbler/azure-blob-storage-upload@v2.0.1
         with:
           source_dir: bindle
           container_name: releases

deny.toml

@@ -78,6 +78,7 @@ unlicensed = "deny"
 allow = [
     "LicenseRef-ring",
     "MPL-2.0",
+    "Unicode-DFS-2016"
 ]
 # List of explictly disallowed licenses
 # See https://spdx.org/licenses/ for list of possible licenses