GKI_KernelSU_SUSFS/.github/workflows/build.yml

name: Kernel Build Process
permissions:
  contents: write
  actions: write

on:
  workflow_call:
    inputs:
      kernel_version:
        required: true
        type: string
      variant:
        required: false
        type: string
      ksu_commit:
        required: false
        type: string
      anykernel_commit:
        required: false
        type: string
      patches_commit:
        required: false
        type: string
      susfs_commit:
        required: false
        type: string
      feature_set:
        required: true
        type: string

jobs:
  build-gki:
    name: "${{ inputs.kernel_version }}${{ inputs.variant && format('-{0}', inputs.variant) || '' }}"
    runs-on: ubuntu-latest
    timeout-minutes: 60

    steps:
    - name: Checkout Repository
      uses: actions/checkout@v4

    - name: Parse kernel version
      id: parse
      run: |
        # Parse version string. 
        # Format: [KERNEL_VERSION].[SUBLEVEL]-[ANDROID_VERSION]-[PATCH_LEVEL]
        # Example 1: 5.10.198-android12-2024-01 -> K=5.10, S=198, A=android12, P=2024-01
        # Example 2: 5.10.X-android12-lts       -> K=5.10, S=X,   A=android12, P=lts
        
        INPUT_VERSION="${{ inputs.kernel_version }}"
        
        # Split by hyphens
        IFS='-' read -r KERNEL_PART ANDROID_PART REST <<< "$INPUT_VERSION"
        
        # Extract Kernel Version and Sublevel
        KERNEL_VERSION="${KERNEL_PART%.*}"
        SUB_LEVEL="${KERNEL_PART##*.}"
        
        # Extract Android Version
        ANDROID_VERSION="$ANDROID_PART"
        
        # Everything after the android version is the patch level
        OS_PATCH_LEVEL="$REST"
  
        echo "Parsed: KERNEL=$KERNEL_VERSION, SUB=$SUB_LEVEL, ANDROID=$ANDROID_VERSION, PATCH=$OS_PATCH_LEVEL"
        
        # Set environment variables for subsequent steps and shell scripts
        echo "ANDROID_VERSION=$ANDROID_VERSION" >> "$GITHUB_ENV"
        echo "KERNEL_VERSION=$KERNEL_VERSION" >> "$GITHUB_ENV"
        echo "SUB_LEVEL=$SUB_LEVEL" >> "$GITHUB_ENV"
        echo "OS_PATCH_LEVEL=$OS_PATCH_LEVEL" >> "$GITHUB_ENV"

        # Set step outputs for immediate YAML context access (avoids validation warnings)
        echo "android_version=$ANDROID_VERSION" >> $GITHUB_OUTPUT
        echo "kernel_version=$KERNEL_VERSION" >> $GITHUB_OUTPUT
        echo "sub_level=$SUB_LEVEL" >> $GITHUB_OUTPUT
        echo "os_patch_level=$OS_PATCH_LEVEL" >> $GITHUB_OUTPUT

    - name: Free Disk Space
      if: true
      uses: endersonmenezes/free-disk-space@v3  # Use @main for latest, @v3 for stable
      with:
        remove_android: true
        remove_dotnet: true
        remove_haskell: true
        remove_tool_cache: true
        remove_swap: true
        remove_packages: "azure-cli google-cloud-cli microsoft-edge-stable google-chrome-stable firefox postgresql* temurin-* *llvm* mysql* dotnet-sdk-*"
        remove_packages_one_command: true
        remove_folders: "/usr/share/swift /usr/share/miniconda /usr/share/az* /usr/local/lib/node_modules /usr/local/share/chromium /usr/local/share/powershell /usr/local/julia /usr/local/aws-cli /usr/local/aws-sam-cli /usr/share/gradle"
        rm_cmd: "rmz"  # Use 'rmz' for faster deletion (default: 'rm')
        rmz_version: "3.1.1"  # Required when rm_cmd is 'rmz'
        testing: false

    - name: Setup Build Environment
      run: |
        mkdir -p "$GITHUB_WORKSPACE/kernel"
        mkdir -p "$GITHUB_WORKSPACE/git-repo"
        curl -L https://storage.googleapis.com/git-repo-downloads/repo -o "$GITHUB_WORKSPACE/git-repo/repo"
        chmod +x "$GITHUB_WORKSPACE/git-repo/repo"
        echo "$GITHUB_WORKSPACE/git-repo" >> "$GITHUB_PATH"
        
        # Clone patches if commit is provided
        if [ -n "${{ inputs.patches_commit }}" ]; then
          echo "Cloning Kernel Patches at commit ${{ inputs.patches_commit }}"
          if [ -d "$GITHUB_WORKSPACE/kernel_patches" ]; then rm -rf "$GITHUB_WORKSPACE/kernel_patches"; fi
          git clone https://github.com/WildKernels/kernel_patches.git "$GITHUB_WORKSPACE/kernel_patches"
          cd "$GITHUB_WORKSPACE/kernel_patches"
          git checkout "${{ inputs.patches_commit }}"
          cd "$GITHUB_WORKSPACE"
        else
          git clone https://github.com/WildKernels/kernel_patches.git "$GITHUB_WORKSPACE/kernel_patches"
        fi

        # Use specific commit if provided
        if [ -n "${{ inputs.anykernel_commit }}" ]; then
          echo "Cloning AnyKernel3 at commit ${{ inputs.anykernel_commit }}"
          if [ -d "$GITHUB_WORKSPACE/AnyKernel3" ]; then rm -rf "$GITHUB_WORKSPACE/AnyKernel3"; fi
          git clone https://github.com/WildKernels/AnyKernel3.git "$GITHUB_WORKSPACE/AnyKernel3"
          cd "$GITHUB_WORKSPACE/AnyKernel3"
          git checkout "${{ inputs.anykernel_commit }}"
          cd "$GITHUB_WORKSPACE"
        elif [ ! -d "$GITHUB_WORKSPACE/AnyKernel3" ]; then
           # Fallback if not downloaded
           git clone https://github.com/WildKernels/AnyKernel3.git -b gki-2.0 "$GITHUB_WORKSPACE/AnyKernel3"
        fi

    - name: Download Kernel Repository
      uses: ./.github/actions/download-kernel
      with:
        android_version: ${{ steps.parse.outputs.android_version }}
        kernel_version: ${{ steps.parse.outputs.kernel_version }}
        os_patch_level: ${{ steps.parse.outputs.os_patch_level }}

    - name: Extract Sublevel and Set File Name
      id: extract
      run: |
        SUBLEVEL="$SUB_LEVEL"
        if [[ -f "$GITHUB_WORKSPACE/kernel/common/Makefile" ]]; then
          EXTRACTED=$(grep '^SUBLEVEL = ' "$GITHUB_WORKSPACE/kernel/common/Makefile" | awk '{print $3}')
          [[ -n "$EXTRACTED" ]] && SUBLEVEL="$EXTRACTED"
        fi

        FILE_NAME="$KERNEL_VERSION.$SUBLEVEL-$ANDROID_VERSION-$OS_PATCH_LEVEL${{ inputs.variant && format('-{0}', inputs.variant) || '' }}"
        echo "SUBLEVEL=$SUBLEVEL" >> $GITHUB_ENV
        echo "FILE_NAME=$FILE_NAME" >> $GITHUB_ENV
        
        # Set step outputs for parse-time YAML context access
        echo "file_name=$FILE_NAME" >> $GITHUB_OUTPUT
        echo "sublevel=$SUBLEVEL" >> $GITHUB_OUTPUT

    - name: Apply glibc 2.38 Compatibility Fix
      if: true
      run: |
        # Use SUBLEVEL for LTS builds, otherwise use the input sub_level
        if [[ "$ANDROID_VERSION" == "android13" && "$KERNEL_VERSION" == "5.10" && $SUBLEVEL -le 186 ]] || 
           [[ "$ANDROID_VERSION" == "android13" && "$KERNEL_VERSION" == "5.15" && $SUBLEVEL -le 119 ]] || 
           [[ "$ANDROID_VERSION" == "android14" && "$KERNEL_VERSION" == "5.15" && $SUBLEVEL -le 110 ]] || 
           [[ "$ANDROID_VERSION" == "android14" && "$KERNEL_VERSION" == "6.1" && $SUBLEVEL -le 43 ]]; then
          GLIBC_VERSION=$(ldd --version 2>/dev/null | head -n 1 | awk '{print $NF}') 
          if [ "$(printf '%s\n' "2.38" "$GLIBC_VERSION" | sort -V | head -n1)" = "2.38" ]; then 
            cd "$GITHUB_WORKSPACE/kernel/common"
            sed -i '/\$(Q)\$(MAKE) -C \$(SUBCMD_SRC) OUTPUT=\$(abspath \$(dir \$@))\/ \$(abspath \$@)/s//$(Q)$(MAKE) -C $(SUBCMD_SRC) EXTRA_CFLAGS="$(CFLAGS)" OUTPUT=$(abspath $(dir $@))\/ $(abspath $@)/' tools/bpf/resolve_btfids/Makefile 2>/dev/null || true
            if [[ "$ANDROID_VERSION" == "android13" && "$KERNEL_VERSION" == "5.10" && $SUBLEVEL -le 186 ]] || 
               [[ "$ANDROID_VERSION" == "android13" && "$KERNEL_VERSION" == "5.15" && $SUBLEVEL -le 119 ]] || 
               [[ "$ANDROID_VERSION" == "android14" && "$KERNEL_VERSION" == "5.15" && $SUBLEVEL -le 110 ]]; then
              sed -i '/char \*buf = NULL;/a int i;' tools/lib/subcmd/parse-options.c 2>/dev/null || true
              sed -i 's/for (int i = 0; subcommands\[i\]; i++) {/for (i = 0; subcommands[i]; i++) {/' tools/lib/subcmd/parse-options.c 2>/dev/null || true
              sed -i '/if (subcommands) {/a int i;' tools/lib/subcmd/parse-options.c 2>/dev/null || true
              sed -i 's/for (int i = 0; subcommands\[i\]; i++)/for (i = 0; subcommands[i]; i++)/' tools/lib/subcmd/parse-options.c 2>/dev/null || true
            fi
          fi
        fi 

    - name: Fix Less Than 6.6.50 Builds
      if: ${{ steps.parse.outputs.android_version == 'android15' && steps.parse.outputs.kernel_version == '6.6' && false }}
      working-directory: ${{ github.workspace }}/kernel/common
      run: |
        if ! grep -qxF '#include <trace/hooks/fs.h>' ./fs/namespace.c; then
            sed -i '/#include <trace\/hooks\/blk.h>/a #include <trace\/hooks\/fs.h>' ./fs/namespace.c
        fi

    - name: Setup Wild KSU
      if: contains(inputs.feature_set, 'WKSU')
      uses: ./.github/actions/wksu
      with:
        ksu_commit: ${{ inputs.ksu_commit }}

    - name: Setup SUSFS
      if: contains(inputs.feature_set, 'SUSFS')
      uses: ./.github/actions/susfs
      with:
        android_version: ${{ steps.parse.outputs.android_version }}
        kernel_version: ${{ steps.parse.outputs.kernel_version }}
        os_patch_level: ${{ steps.parse.outputs.os_patch_level }}
        sublevel: ${{ steps.extract.outputs.sublevel }}
        susfs_commit: ${{ inputs.susfs_commit }}

    - name: Setup SUSFS Patches
      if: contains(inputs.feature_set, 'SUSFS')
      uses: ./.github/actions/susfs-patches
      with:
        android_version: ${{ steps.parse.outputs.android_version }}
        kernel_version: ${{ steps.parse.outputs.kernel_version }}
        os_patch_level: ${{ steps.parse.outputs.os_patch_level }}
        sublevel: ${{ steps.extract.outputs.sublevel }}

    - name: Setup Baseband Guard
      if: contains(inputs.feature_set, 'BBG')
      uses: ./.github/actions/bbg

    - name: Apply Module Check Bypass
      if: ${{ inputs.variant == 'Bypass' || inputs.variant == 'Hakan' }}
      run: |
        if [[ "$KERNEL_VERSION" == "6.1" || "$KERNEL_VERSION" == "6.6" || "$KERNEL_VERSION" == "6.12" ]]; then
          TARGET_FILE="$GITHUB_WORKSPACE/kernel/common/kernel/module/version.c"
        else
          TARGET_FILE="$GITHUB_WORKSPACE/kernel/common/kernel/module.c"
        fi
        # Apply bypass patch to the target file
        sed -i '/bad_version:/{:a;n;/return 0;/{s/return 0;/return 1;/;b};ba}' "$TARGET_FILE"

        # Verify the bypass
        if grep -A 5 "bad_version:" "$TARGET_FILE" | grep -q "return 1;"; then
          echo "SUCCESS: Module check bypass verified in $TARGET_FILE"
        else
          echo "FAILED: Module check bypass not found in $TARGET_FILE"
          grep -A 5 "bad_version:" "$TARGET_FILE" || true
          exit 1
        fi

    - name: Apply Device-Specific Patches
      uses: ./.github/actions/apply-device-patches
      with:
        kernel_version: ${{ steps.parse.outputs.kernel_version }}

    - name: Configure Kernel Options
      uses: ./.github/actions/configure-kernel
      with:
        kernel_version: ${{ steps.parse.outputs.kernel_version }}

    - name: Setup Hakan
      if: ${{ inputs.variant == 'Hakan' }}
      uses: ./.github/actions/hakan

    - name: Setup vTomsonek
      if: ${{ inputs.variant == 'vTomsonek' }}
      uses: ./.github/actions/vtomsonek
      with:
        android_version: ${{ steps.parse.outputs.android_version }}
        kernel_version: ${{ steps.parse.outputs.kernel_version }}
        sublevel: ${{ steps.parse.outputs.sub_level }}
        os_patch_level: ${{ steps.parse.outputs.os_patch_level }}

    - name: Apply ABI Compare Bypass
      if: false
      working-directory: ${{ github.workspace }}/kernel
      run: |
        # ABI compare bypass per kernel/android version
        # Edit each block as needed per version
        if [[ "$ANDROID_VERSION" == "android12" && "$KERNEL_VERSION" == "5.10" ]]; then
          sed -i 's/^\s*exit 1$/    echo "Who Cares? Bypassing Now!"/' build/abi/compare_to_symbol_list
        elif [[ "$ANDROID_VERSION" == "android13" && "$KERNEL_VERSION" == "5.10" ]]; then
          sed -i 's/^\s*exit 1$/    echo "Who Cares? Bypassing Now!"/' build/kernel/abi/compare_to_symbol_list
        elif [[ "$ANDROID_VERSION" == "android13" && "$KERNEL_VERSION" == "5.15" ]]; then
          sed -i 's/^\s*exit 1$/    echo "Who Cares? Bypassing Now!"/' build/kernel/abi/compare_to_symbol_list
        elif [[ "$ANDROID_VERSION" == "android14" && "$KERNEL_VERSION" == "5.15" ]]; then
          perl -i -pe 's/^(\s*)return 1$/$1print("Who Cares? Bypassing Now!")\n$1return 0/g if /if missing_symbols:/../return 1/' build/kernel/abi/check_buildtime_symbol_protection.py
        elif [[ "$ANDROID_VERSION" == "android14" && "$KERNEL_VERSION" == "6.1" ]]; then
          perl -i -pe 's/^(\s*)return 1$/$1print("Who Cares? Bypassing Now!")\n$1return 0/g if /if missing_symbols:/../return 1/' build/kernel/abi/check_buildtime_symbol_protection.py
        elif [[ "$ANDROID_VERSION" == "android15" && "$KERNEL_VERSION" == "6.6" ]]; then
          perl -i -pe 's/^(\s*)return 1$/$1print("Who Cares? Bypassing Now!")\n$1return 0/g if /if missing_symbols:/../return 1/' build/kernel/abi/check_buildtime_symbol_protection.py
        fi

    - name: Append ashmem exports if missing
      if: ${{ steps.parse.outputs.android_version == 'android16' && steps.parse.outputs.kernel_version == '6.12' && false }}
      working-directory: ${{ github.workspace }}/kernel
      run: |
        FILE=common/drivers/staging/android/ashmem.c
        if [[ -f "$FILE" ]] && ! grep -q 'is_ashmem_file' "$FILE"; then
        cat >>"$FILE" <<'EOF'
        bool is_ashmem_file(struct file *file) { return false; }
        int ashmem_area_name(struct file *file, char *name) { return 0; }
        long ashmem_area_size(struct file *file) { return 0; }
        struct file *ashmem_area_vmfile(struct file *file) { return NULL; }
        EXPORT_SYMBOL_GPL(is_ashmem_file);
        EXPORT_SYMBOL_GPL(ashmem_area_name);
        EXPORT_SYMBOL_GPL(ashmem_area_size);
        EXPORT_SYMBOL_GPL(ashmem_area_vmfile);
        EOF
        fi

        if [ -f common/drivers/android/binder/Makefile ]; then
          perl -i -0777 -pe 's/\$\(\s*CONFIG_ANDROID_BINDER_IPC_RUST\s*\)/m/' common/drivers/android/binder/Makefile
          #perl -i -ne 'print unless /CONFIG_ANDROID_BINDER_IPC_RUST_DUMMY/' common/drivers/android/binder/Makefile
          perl -i -pe 's/^rust_binder-\$\([^)]+\)\s*:=/rust_binder-y :=/' common/drivers/android/binder/Makefile
          cat common/drivers/android/Makefile
          cat common/drivers/android/binder/Makefile
          #perl -ni -e 'print unless /rust_toolchain\s*=\s*"\/\/build\/rust:linux_kernel_toolchain",/' common/BUILD.bazel
          #cat common/BUILD.bazel
          rustup set profile minimal
          rustup update nightly
          rustup default nightly
          rustup target add aarch64-unknown-none
        else
          perl -i -0777 -pe 's/\$\(\s*CONFIG_ANDROID_BINDER_IPC_RUST\s*\)/m/' common/drivers/android/Makefile
          cat common/drivers/android/Makefile
        fi

    - name: Apply Kernel Branding
      uses: ./.github/actions/apply-kernel-branding
      with:
        build_type: ${{ inputs.variant || 'Normal' }}
        kernel_version: ${{ steps.parse.outputs.kernel_version }}

    - name: Clean Kernel Flags
      uses: ./.github/actions/clean-kernel-flags

    - name: Build Kernel
      working-directory: ${{ github.workspace }}/kernel
      run: |
        set -ex
        #make -C common mrproper
        if [ -f "build/build.sh" ]; then
          SKIP_MRPROPER=1 GKI_DEFCONFIG_FRAGMENT="$GITHUB_WORKSPACE/wild_gki.fragment" LTO=thin BUILD_CONFIG=common/build.config.gki.aarch64 build/build.sh || exit 1
        else
          # Copy fragment to kernel tree for bazel
          cp "$GITHUB_WORKSPACE/wild_gki.fragment" common/arch/arm64/configs/wild_gki.fragment
          if [[ "$ANDROID_VERSION" == "android14" ]]; then
            tools/bazel build --config=fast --lto=thin --defconfig_fragment=//common:arch/arm64/configs/wild_gki.fragment //common:kernel_aarch64_dist || exit 1
          else
            tools/bazel build --config=fast --lto=none --defconfig_fragment=//common:arch/arm64/configs/wild_gki.fragment //common:kernel_aarch64_dist || exit 1
          fi
        fi

    - name: Prepare AnyKernel3 Zip
      run: |
        # Copy Image from normal build locations
        if [ -f "$GITHUB_WORKSPACE/kernel/out/$ANDROID_VERSION-$KERNEL_VERSION/dist/Image" ]; then
          cp "$GITHUB_WORKSPACE/kernel/out/$ANDROID_VERSION-$KERNEL_VERSION/dist/Image" "$GITHUB_WORKSPACE/AnyKernel3/Image"
        elif [ -f "$GITHUB_WORKSPACE/kernel/bazel-bin/common/kernel_aarch64/Image" ]; then
          cp "$GITHUB_WORKSPACE/kernel/bazel-bin/common/kernel_aarch64/Image" "$GITHUB_WORKSPACE/AnyKernel3/Image"
        else
          echo "Error: Image file not found in any expected location"
          exit 1
        fi
    
    - name: Copy snd-aloop module
      if: ${{ inputs.variant == 'vTomsonek' }}
      run: |
        if [ "${{ inputs.variant }}" = "vTomsonek" ]; then
          sed -i 's|^do\.modules=.*|do.modules=1|' "$GITHUB_WORKSPACE/AnyKernel3/anykernel.sh"
        fi

        mkdir -p "$GITHUB_WORKSPACE/AnyKernel3/modules/data/adb/lkm"

        if [[ "$ANDROID_VERSION" == "android12" || "$ANDROID_VERSION" == "android13" ]]; then
          SRC_DIR="$GITHUB_WORKSPACE/kernel/out/$ANDROID_VERSION-$KERNEL_VERSION/dist"
        else
          SRC_DIR="$GITHUB_WORKSPACE/kernel/bazel-bin/common/kernel_aarch64"
        fi

        cp "$SRC_DIR/snd-aloop.ko" "$GITHUB_WORKSPACE/AnyKernel3/modules/data/adb/lkm/"
        cp "$SRC_DIR/g_audio.ko" "$GITHUB_WORKSPACE/AnyKernel3/modules/data/adb/lkm/"

    - name: Scan and collect patch rejects
      id: scan
      if: ${{ always() }}
      run: |
        set -e
        CONFIG_DIR="$GITHUB_WORKSPACE/kernel"
        REJECTS_DIR="$GITHUB_WORKSPACE/patch-rejects"
        mkdir -p "$REJECTS_DIR"
        # Find all .rej files under the configuration directory
        mapfile -t REJS < <(find "$CONFIG_DIR" -type f -name '*.rej')
        REJ_COUNT=${#REJS[@]}
        echo "Found $REJ_COUNT .rej files under $CONFIG_DIR"
        echo "REJ_COUNT=$REJ_COUNT" >> $GITHUB_ENV
        echo "rej_count=$REJ_COUNT" >> $GITHUB_OUTPUT
        if [ "$REJ_COUNT" -gt 0 ]; then
          for REJ in "${REJS[@]}"; do
            # Relative path from $CONFIG
            REL="${REJ#"$CONFIG_DIR"/}"
            DEST="$REJECTS_DIR/$REL"
            mkdir -p "$(dirname "$DEST")"
            cp "$REJ" "$DEST"
            # Copy the associated original file alongside the .rej
            ORIG="${REJ%.rej}"
            if [ -f "$ORIG" ]; then
              ORIG_DEST="$REJECTS_DIR/${REL%.rej}"
              mkdir -p "$(dirname "$ORIG_DEST")"
              cp "$ORIG" "$ORIG_DEST"
            fi
            echo "$REL" >> "$REJECTS_DIR/index.txt"
          done
        fi

    - name: Upload Artifacts
      uses: actions/upload-artifact@v4
      with:
        name: ${{ steps.extract.outputs.file_name }}-AnyKernel3
        path: ${{ github.workspace }}/AnyKernel3/**
        if-no-files-found: ignore
        compression-level: 9

    - name: Upload Rejects
      if: ${{ always() && inputs.variant != 'Bypass' && steps.scan.outputs.rej_count > 0 }}
      uses: actions/upload-artifact@v4
      with:
        name: ${{ steps.extract.outputs.file_name }}-Rejects
        path: patch-rejects/
        if-no-files-found: ignore
        compression-level: 9

    - name: Build Summary
      if: ${{ always() }}
      run: |
        # Kernel info
        echo "Android Version     : $ANDROID_VERSION"
        echo "Kernel Version      : $KERNEL_VERSION"
        echo "Sub Level           : $SUB_LEVEL"
        echo "Sub level (Makefile): $SUBLEVEL"
        echo "Patch Level         : $OS_PATCH_LEVEL"
        # Branch info
        echo "Repo Branch         : common-$KERNEL_VERSION-$ANDROID_VERSION-$OS_PATCH_LEVEL || 'normal'"
        echo "Deprecated          : $DEPRECATED_BRANCH"
        # Build info
        echo "Build Type          : ${{ inputs.variant || 'Normal' }}"
        # Features info
        echo "Features            : ${{ inputs.feature_set || 'None' }}"
        echo "WKSU Commit         : ${{ inputs.ksu_commit || 'canary' }}"
        echo "WKSU Tag            : $KSU_GIT_TAG"
        echo "WKSU Version        : $KSU_VERSION"
        echo "BBG Commit          : $BBG_COMMIT"
        echo "BBG Version         : $BBG_VERSION"
        # Variant info
        echo "Variant             : ${{ inputs.variant || 'Standard' }}"
        echo "Features            : ${{ inputs.feature_set || 'None' }}"
# End of workflow