GKI_KernelSU_SUSFS/.github/actions/build-kernel/action.yml

name: 'Build Kernel'
description: 'Builds kernel using legacy build.sh or Bazel (kleaf)'
inputs:
  bypass:
    description: 'Whether to add the bypass hack or not'
    required: true
  version:
    description: 'Kernel config version (e.g., android14-6.1)'
    required: true

runs:
  using: composite
  steps:
  - name: 'Build Kernel'
    shell: bash
    working-directory: ${{ github.workspace }}/kernel
    run: |
      set -euo pipefail
      if [ "${{ inputs.bypass }}" = "true" ]; then
        if [[ ${{ inputs.version }} == "android14-6.1" || ${{ inputs.version }} == "android15-6.6" || ${{ inputs.version }} == "android16-6.12" ]]; then
          TARGET_FILE="${{ github.workspace }}/kernel/common/kernel/module/version.c"
        else
          TARGET_FILE="${{ github.workspace }}/kernel/common/kernel/module.c"
        fi

        sed -i '/bad_version:/{:a;n;/return 0;/{s/return 0;/return 1;/;b};ba}' "$TARGET_FILE"

        if ! grep -A 5 "bad_version:" "$TARGET_FILE" | grep -q "return 1;"; then
          echo "Patch failed! 'return 1;' not found at bad_version:"
          grep -A 10 "bad_version:" "$TARGET_FILE" || true
          exit 1
        fi
      else
        echo "Bypass hack not applied as per input parameter."
      fi

      # Strip trailing empty lines from gki_defconfig to match savedefconfig output
      # (savedefconfig strips trailing newlines, causing check_defconfig to fail on 5.10.233+)
      perl -pi -e 's/\n*\z/\n/' common/arch/arm64/configs/gki_defconfig

      cp "${{ github.workspace }}/wild_gki.fragment" common/arch/arm64/configs/wild_gki.fragment

      if [ -f "build/build.sh" ]; then
        BUILD_GKI_ARTIFACTS= \
        BUILD_GKI_CERTIFICATION_TOOLS=0 \
        BUILD_SYSTEM_DLKM=0 \
        SKIP_VENDOR_BOOT=1 \
        SKIP_EXT_MODULES=1 \
        SKIP_CP_KERNEL_HDR=1 \
        OUT_DIR="/home/runner/out" \
        LTO=thin \
        BUILD_CONFIG=common/build.config.gki.aarch64 \
        PRE_DEFCONFIG_CMDS="KCONFIG_CONFIG=\${ROOT_DIR}/common/arch/arm64/configs/gki_defconfig \${ROOT_DIR}/common/scripts/kconfig/merge_config.sh -m -r \${ROOT_DIR}/common/arch/arm64/configs/gki_defconfig \${ROOT_DIR}/common/arch/arm64/configs/wild_gki.fragment" \
        build/build.sh -j"$(nproc)" \
        CC="/usr/bin/ccache clang" \
        CXX="/usr/bin/ccache clang+" \
        HOSTCC="/usr/bin/ccache clang" \
        HOSTCXX="/usr/bin/ccache clang+" \
        LD="${{ github.workspace }}/kernel/common/ld-wrapper" \
        HOSTLD="${{ github.workspace }}/kernel/common/ld-wrapper"
      else
        tools/bazel info output_base
        cp "${{ github.workspace }}/wild_gki.fragment" common/arch/arm64/configs/wild_gki.fragment
        if [[ ${{ inputs.version }} == "android16-6.12" ]]; then
          tools/bazel run \
            --config=fast \
            --config=stamp \
            --defconfig_fragment=//common:arch/arm64/configs/wild_gki.fragment \
            --disk_cache=/home/runner/.cache/bazel \
            //common:kernel_aarch64_dist \
            -- --destdir=/home/runner/out
        else
          tools/bazel run \
            --config=fast \
            --config=stamp \
            --defconfig_fragment=//common:arch/arm64/configs/wild_gki.fragment \
            --disk_cache=/home/runner/.cache/bazel \
            //common:kernel_aarch64_dist \
            -- --dist_dir=/home/runner/out
        fi
      fi

      echo "Contents of /home/runner/out"
      ls /home/runner/out

  - name: 'Gather Build Artifacts'
    shell: bash
    working-directory: ${{ github.workspace }}
    run: |
      set -euo pipefail
      if [ -f "/home/runner/out/dist/Image" ]; then
        echo "Found Image at /home/runner/out/dist/Image"
        if [[ ${{ inputs.bypass }} == "true" ]]; then
          cp "/home/runner/out/dist/Image" "${{ github.workspace }}/AnyKernel3/Bypass-Image"
        else
          cp "/home/runner/out/dist/Image" "${{ github.workspace }}/AnyKernel3/Image"
        fi
          exit 0
        fi
      if [ -f "/home/runner/out/Image" ]; then
        echo "Found Image at /home/runner/out/Image"
        if [[ ${{ inputs.bypass }} == "true" ]]; then
          cp "/home/runner/out/Image" "${{ github.workspace }}/AnyKernel3/Bypass-Image"
        else
          cp "/home/runner/out/Image" "${{ github.workspace }}/AnyKernel3/Image"
        fi
        exit 0
      fi

      exit 1

  - name: 'Patch AnyKernel3 for Bypass Hack'
    shell: bash
    if: ${{ inputs.bypass == 'true' }}
    working-directory: ${{ github.workspace }}/AnyKernel3
    run: |
      set -euo pipefail
      cp ${{ github.action_path }}/patches/bypass.patch "${{ github.workspace }}/AnyKernel3/bypass.patch"
      patch -p1 < bypass.patch