mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-10-17 16:03:06 +00:00
f9513e82ee
* feat: prototype running duckdb jobs out of process inside nsjail Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix: bound runner output, honor force install outside the jail, set oom score before exec Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix: gate the duckdb runner bin behind a feature and decode pre-install errors Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * feat: allowlist-only policy inside the duckdb jail, with its own extension cache Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * feat: run duckdb jobs out of process under job isolation and drop the engine fork Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * feat: runner everywhere, stock duckdb engine, no sql fence Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * chore: update ee-repo-ref to 24bdc6615b3f651141fb740e2cacf9c3c2d81252 This commit updates the EE repository reference after PR #884 was merged in windmill-ee-private. Previous ee-repo-ref: 73452bbc280cc9ca33cf0fe325d26c2fbf3aace4 New ee-repo-ref: 24bdc6615b3f651141fb740e2cacf9c3c2d81252 Automated by sync-ee-ref workflow. * fix: pass the windows system env and TZ to the duckdb runner Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * feat: cap a jailed duckdb job's disk use from the worker, 6GiB by default on cloud Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix: keep a disk-backed jail tmp under the duckdb disk cap Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * chore: drop the benchmark scaffolding and bump duckdb to 1.5.6 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
80 lines
2.6 KiB
YAML
80 lines
2.6 KiB
YAML
name: Build and Publish Windows Worker
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v*"
|
|
|
|
env:
|
|
CARGO_INCREMENTAL: 0
|
|
SQLX_OFFLINE: true
|
|
DISABLE_EMBEDDING: true
|
|
RUST_LOG: info
|
|
|
|
jobs:
|
|
cargo_build_windows:
|
|
runs-on: blacksmith-16vcpu-windows-2025
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Read EE repo commit hash
|
|
shell: pwsh
|
|
run: |
|
|
$ee_repo_ref = Get-Content .\backend\ee-repo-ref.txt
|
|
echo "ee_repo_ref=$ee_repo_ref" | Out-File -FilePath $env:GITHUB_ENV -Append
|
|
|
|
- name: Checkout windmill-ee-private repository
|
|
uses: actions/checkout@v4
|
|
with:
|
|
repository: windmill-labs/windmill-ee-private
|
|
path: ./windmill-ee-private
|
|
ref: ${{ env.ee_repo_ref }}
|
|
token: ${{ secrets.WINDMILL_EE_PRIVATE_ACCESS }}
|
|
fetch-depth: 0
|
|
|
|
- uses: actions-rust-lang/setup-rust-toolchain@v1
|
|
with:
|
|
cache-workspaces: backend
|
|
toolchain: 1.97.0
|
|
|
|
- name: Substitute EE code
|
|
shell: bash
|
|
run: |
|
|
./backend/substitute_ee_code.sh --copy --dir ./windmill-ee-private
|
|
|
|
- name: Cargo build dynamic libraries windows
|
|
timeout-minutes: 180
|
|
run: |
|
|
cd backend/windmill-duckdb-ffi-internal
|
|
cargo build --release -p windmill_duckdb_ffi_internal
|
|
|
|
- name: Cargo build windows
|
|
timeout-minutes: 180
|
|
run: |
|
|
vcpkg.exe install openssl:x64-windows-static
|
|
vcpkg.exe integrate install
|
|
$env:VCPKGRS_DYNAMIC=1
|
|
$env:OPENSSL_DIR="${Env:VCPKG_INSTALLATION_ROOT}\installed\x64-windows-static"
|
|
cd backend
|
|
# Stub the openapi specs to empty: they are compiled in via an ungated
|
|
# include_str! but a worker binary never serves them, so this avoids
|
|
# embedding ~2.5MB of spec.
|
|
New-Item -Path . -Name "windmill-api/openapi-deref.yaml" -ItemType "File" -Force
|
|
New-Item -Path . -Name "windmill-api/openapi-deref.json" -ItemType "File" -Force
|
|
cargo build --release --features=ee_windows
|
|
- name: Rename binary with corresponding architecture
|
|
run: |
|
|
Rename-Item -Path ".\backend\target\release\windmill.exe" -NewName "windmill-ee.exe"
|
|
|
|
- name: Attach binary to release
|
|
uses: softprops/action-gh-release@v2
|
|
with:
|
|
files: |
|
|
./backend/target/release/windmill-ee.exe
|
|
|
|
- name: Attach the DuckDB runner to release
|
|
uses: softprops/action-gh-release@v2
|
|
with:
|
|
files: |
|
|
./backend/windmill-duckdb-ffi-internal/target/release/windmill_duckdb_runner.exe
|