App-Ariza.git | resources/templates/ci/ | smoke-installer-linux-x86_64-glibc.yml.j2

---

  smoke-installer-linux-x86_64-glibc:
    name: smoke the published installer (linux-x86_64-glibc)
    needs: publish
    if: startsWith(github.ref, 'refs/tags/')
    # A plain runner, deliberately: no container, no toolchain, nothing
    # this repository put there. Whatever the bundle needs, the bundle has
    # to carry -- and this, together with its macOS and Windows siblings
    # below, is the only coverage that tests that claim against the
    # artefact a user will actually download.
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - name: Download the published linux-x86_64-glibc bundle
        env:
          GH_TOKEN: {% raw %}${{ github.token }}{% endraw %}
        run: |
          set -euo pipefail
          mkdir -p published
          # The archive and its digest sidecar, so install.sh has
          # something to verify against.
          gh release download "$GITHUB_REF_NAME" --repo "$GITHUB_REPOSITORY" \
            --pattern '{{ app_exec }}-*-linux-x86_64-glibc.tar.gz*' --dir published
          ls -l published

      - name: Install it with this repository's own install.sh
        run: |
          set -euo pipefail
          # The committed script, not a raw.githubusercontent URL: this has
          # to work for the first release, before that URL serves anything,
          # and it is the script this tag actually ships.
          archive=$(ls published/*.tar.gz)
          sh ./install.sh --url "$PWD/$archive"

      - name: Run the installed launcher with a replaced environment
        run: |
          set -euo pipefail
          # `env -i`: the launcher gets HOME, PATH and TERM and nothing
          # else, so it cannot pass by borrowing something the runner image
          # happens to have lying around.
          env -i HOME="$HOME" PATH=/usr/bin:/bin TERM=xterm \
            "$HOME/.local/bin/{{ app_exec }}" --version