GKI_KernelSU_SUSFS/.github/actions/fuse-bpf/action.yml

name: 'Build FUSE-BPF Userspace Daemon'
description: 'Build the FUSE-BPF userspace daemon from kernel source for Android arm64'

inputs:
  version:
    description: 'Kernel config version (e.g., android16-6.12)'
    required: true
  kernel_version:
    description: 'Kernel version (e.g., 6.12)'
    required: true
  android_version:
    description: 'Android version (e.g., android16)'
    required: true

runs:
  using: "composite"
  steps:
    - name: Install Build Dependencies
      shell: bash
      run: |
        set -euo pipefail

        echo "Installing FUSE-BPF build dependencies..."
        sudo apt-get update -qq
        sudo apt-get install -y -qq \
          clang llvm binutils-aarch64-linux-gnu \
          libelf-dev \
          gcc-aarch64-linux-gnu \
          elfutils

    - name: Build BPF Object (fd_bpf.bpf) for arm64
      shell: bash
      run: |
        set -euo pipefail

        FUSE_DIR="${{ github.workspace }}/kernel/common/tools/testing/selftests/filesystems/fuse"

        if [ ! -d "$FUSE_DIR" ]; then
          echo "ERROR: FUSE selftests directory not found at: $FUSE_DIR"
          echo "Kernel source may not be downloaded yet."
          exit 1
        fi

        cd "$FUSE_DIR"

        # Use Android NDK compiler if available, otherwise use system cross-compiler
        if command -v aarch64-linux-android34-clang &>/dev/null; then
          BPF_CC="aarch64-linux-android34-clang"
        elif command -v aarch64-linux-gnu-clang &>/dev/null; then
          BPF_CC="aarch64-linux-gnu-clang"
        else
          echo "ERROR: No suitable BPF compiler found"
          exit 1
        fi

        echo "Using BPF compiler: $BPF_CC"
        echo "Compiling fd_bpf.c → fd_bpf.bpf..."

        $BPF_CC -target bpf \
          -D__TARGET_ARCH_arm64 \
          -I "${{ github.workspace }}/kernel/common/include" \
          -idirafter "${{ github.workspace }}/kernel/common/arch/arm64/include" \
          -idirafter "${{ github.workspace }}/kernel/common/arch/arm64/include/uapi" \
          -Wall -Werror -O2 -g \
          -emit-llvm -c fd_bpf.c -o fd_bpf.ir

        if command -v llc &>/dev/null; then
          llc -march=bpf -filetype=obj -o fd_bpf.bpf fd_bpf.ir
        else
          $BPF_CC -target bpf \
            -D__TARGET_ARCH_arm64 \
            -I "${{ github.workspace }}/kernel/common/include" \
            -Wall -Werror -O2 -g \
            -c fd_bpf.c -o fd_bpf.bpf
        fi

        echo "BPF bytecode compiled:"
        ls -la fd_bpf.bpf

    - name: Build FUSE-BPF Userspace Daemon for arm64
      shell: bash
      run: |
        set -euo pipefail

        FUSE_DIR="${{ github.workspace }}/kernel/common/tools/testing/selftests/filesystems/fuse"
        cd "$FUSE_DIR"

        # Use Android NDK compiler if available, otherwise use system cross-compiler
        if command -v aarch64-linux-android34-clang &>/dev/null; then
          CC="aarch64-linux-android34-clang"
        elif command -v aarch64-linux-gnu-clang &>/dev/null; then
          CC="aarch64-linux-gnu-clang"
        else
          echo "ERROR: No suitable compiler found for arm64"
          exit 1
        fi

        echo "Using compiler: $CC"

        # Compile bpf_loader.c (BPF program loader utilities)
        # Note: test_framework.c does NOT exist - only test_framework.h is in this directory
        # test_framework.h includes linux/compiler.h which we need to provide
        echo "Compiling bpf_loader.c..."
        $CC -target aarch64-linux-android \
          -D_FILE_OFFSET_BITS=64 \
          -D_GNU_SOURCE \
          -D__KERNEL__ \
          -D__EXPORTED_HEADERS__ \
          -I "${{ github.workspace }}/kernel/common/include/uapi" \
          -I "${{ github.workspace }}/kernel/common/include" \
          -I "${{ github.workspace }}/kernel/common/arch/arm64/include" \
          -I "${{ github.workspace }}/kernel/common/arch/arm64/include/uapi" \
          -I "${{ github.workspace }}/kernel/common/tools/testing/selftests" \
          -Wall \
          -c bpf_loader.c -o bpf_loader.o 2>&1 || true

        # Compile fuse_daemon.c (main daemon)
        echo "Compiling fuse_daemon.c..."
        $CC -target aarch64-linux-android \
          -D_FILE_OFFSET_BITS=64 \
          -D_GNU_SOURCE \
          -D__KERNEL__ \
          -D__EXPORTED_HEADERS__ \
          -I "${{ github.workspace }}/kernel/common/include/uapi" \
          -I "${{ github.workspace }}/kernel/common/include" \
          -I "${{ github.workspace }}/kernel/common/arch/arm64/include" \
          -I "${{ github.workspace }}/kernel/common/arch/arm64/include/uapi" \
          -I "${{ github.workspace }}/kernel/common/tools/testing/selftests" \
          -Wall \
          -c fuse_daemon.c -o fuse_daemon.o 2>&1 || true

        # Link the daemon
        echo "Linking fuse-daemon-arm64..."
        $CC \
          fuse_daemon.o bpf_loader.o \
          -lelf -lpthread \
          -o fuse-daemon-arm64 2>&1 || echo "Linking failed, trying minimal build..."

        ls -la fuse-daemon-arm64 2>/dev/null || echo "fuse-daemon-arm64 not built"

    - name: Build Minimal FUSE-BPF Daemon (Fallback)
      shell: bash
      run: |
        set -euo pipefail

        mkdir -p /tmp/fuse-bpf-minimal

        # Create a minimal standalone FUSE-BPF checker daemon using base64 to avoid YAML heredoc issues
        echo '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' | base64 -d > /tmp/fuse-bpf-minimal/fuse_bpf_daemon.c

        # Setup cross-compiler for arm64
        if command -v aarch64-linux-android34-clang &>/dev/null; then
          CC="aarch64-linux-android34-clang"
        elif command -v aarch64-linux-gnu-gcc &>/dev/null; then
          CC="aarch64-linux-gnu-gcc"
        elif command -v aarch64-linux-gnu-clang &>/dev/null; then
          CC="aarch64-linux-gnu-clang"
        else
          CC="gcc"
        fi

        echo "Building minimal FUSE-BPF checker daemon..."
        $CC -o /tmp/fuse-bpf-minimal/fuse-bpf \
          /tmp/fuse-bpf-minimal/fuse_bpf_daemon.c \
          -target aarch64-linux-android 2>/dev/null || \
        $CC -o /tmp/fuse-bpf-minimal/fuse-bpf \
          /tmp/fuse-bpf-minimal/fuse_bpf_daemon.c || true

        echo "Minimal daemon built:"
        ls -la /tmp/fuse-bpf-minimal/fuse-bpf 2>/dev/null || echo "Failed to build minimal daemon"

    - name: Copy FUSE-BPF Artifacts
      shell: bash
      run: |
        set -euo pipefail

        mkdir -p "${{ github.workspace }}/artifacts/fuse-bpf"

        # Copy the full daemon if built
        if [ -f "${{ github.workspace }}/kernel/common/tools/testing/selftests/filesystems/fuse/fuse-daemon-arm64" ]; then
          cp "${{ github.workspace }}/kernel/common/tools/testing/selftests/filesystems/fuse/fuse-daemon-arm64" \
            "${{ github.workspace }}/artifacts/fuse-bpf/fuse-daemon"
          echo "Copied full FUSE-BPF daemon"
        fi

        # Copy the BPF object
        if [ -f "${{ github.workspace }}/kernel/common/tools/testing/selftests/filesystems/fuse/fd_bpf.bpf" ]; then
          cp "${{ github.workspace }}/kernel/common/tools/testing/selftests/filesystems/fuse/fd_bpf.bpf" \
            "${{ github.workspace }}/artifacts/fuse-bpf/fd_bpf.bpf"
          echo "Copied fd_bpf.bpf"
        fi

        # Copy minimal daemon as fallback
        if [ -f "/tmp/fuse-bpf-minimal/fuse-bpf" ]; then
          cp /tmp/fuse-bpf-minimal/fuse-bpf \
            "${{ github.workspace }}/artifacts/fuse-bpf/fuse-bpf-checker"
          echo "Copied minimal FUSE-BPF checker"
        fi

        # Create README with usage instructions using base64 to avoid YAML heredoc issues
        echo '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' | base64 -d > "${{ github.workspace }}/artifacts/fuse-bpf/README.txt"

        echo "FUSE-BPF artifacts:"
        ls -la "${{ github.workspace }}/artifacts/fuse-bpf/"

    - name: Upload FUSE-BPF Artifact
      uses: actions/upload-artifact@v7
      with:
        name: fuse-bpf-arm64
        path: ${{ github.workspace }}/artifacts/fuse-bpf/
        if-no-files-found: warn