Create custom action for Mullvad build env

9 files changed, 21 insertions, 234 deletions

diff --git a/.github/workflows/clippy.yml b/.github/workflows/clippy.yml
index 1e448fb863..d904c03924 100644
--- a/.github/workflows/clippy.yml
+++ b/.github/workflows/clippy.yml
@@ -46,42 +46,9 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Install Protoc
-        uses: arduino/setup-protoc@v3
+      - uses: ./.github/actions/mullvad-build-env
         with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Checkout submodules
-        run: |
-          git submodule update --init --depth=1 dist-assets/binaries
-          git submodule update --init wireguard-go-rs/libwg/wireguard-go
-
-      - name: Install build dependencies
-        if: matrix.os == 'ubuntu-latest'
-        run: |
-          sudo apt-get update
-          sudo apt-get install libdbus-1-dev
-
-      - name: Install msbuild
-        if: matrix.os == 'windows-latest'
-        uses: microsoft/setup-msbuild@v1.0.2
-        with:
-          vs-version: 16
-
-      - name: Install latest zig
-        if: matrix.os == 'windows-latest'
-        uses: mlugg/setup-zig@v2
-        with:
-          version: 0.14.1
-
-      - name: Install Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: 1.21.3
-
-      - name: Install Rust components
-        shell: bash
-        run: rustup component add clippy
+          rustup-components: clippy
 
       - name: Clippy check
         shell: bash
diff --git a/.github/workflows/daemon.yml b/.github/workflows/daemon.yml
index 49fefca8c5..994c7faf33 100644
--- a/.github/workflows/daemon.yml
+++ b/.github/workflows/daemon.yml
@@ -97,20 +97,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Checkout wireguard-go submodule
-        run: |
-          git config --global --add safe.directory '*'
-          git submodule update --init wireguard-go-rs/libwg/wireguard-go
-
-      - name: Install Protoc
-        uses: arduino/setup-protoc@v3
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Install Go
-        uses: actions/setup-go@v3
-        with:
-          go-version: 1.21.3
+      - uses: ./.github/actions/mullvad-build-env
 
       - name: Build and test crates
         run: ./ci/check-rust.sh
@@ -133,79 +120,22 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Checkout submodules
-        run: |
-          git submodule update --init --depth=1
-          git submodule update --init wireguard-go-rs/libwg/wireguard-go
-
-      - name: Install Protoc
-        uses: arduino/setup-protoc@v3
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Calculate Windows libraries cache hash
-        id: windows-modules-hash
-        shell: bash
-        run: |
-          hash="$(git grep --recurse-submodules --cached -l '' -- './windows/' \
-            | grep -v '\.exe$\|\.md$' \
-            | xargs sha1sum \
-            | sha1sum \
-            | cut -d" " -f1)"
-          echo "hash=$hash" >> "$GITHUB_OUTPUT"
-
-      - name: Cache Windows libraries
-        uses: actions/cache@v4
-        id: cache-windows-modules
-        with:
-          path: |
-            ./windows/*/bin/${{ matrix.config.arch }}-*/*.dll
-            ./windows/*/bin/${{ matrix.config.arch }}-*/*.lib
-            !./windows/*/bin/${{ matrix.config.arch }}-*/libcommon.lib
-            !./windows/*/bin/${{ matrix.config.arch }}-*/libshared.lib
-            !./windows/*/bin/${{ matrix.config.arch }}-*/libwfp.lib
-          key: windows-modules-${{ steps.windows-modules-hash.outputs.hash }}
-
-      # The x64 toolchain is needed to build talpid-openvpn-plugin
-      # TODO: Remove once fixed
-      - name: Install Rust x64 target
-        uses: actions-rust-lang/setup-rust-toolchain@v1
-        if: ${{ matrix.config.arch == 'arm64' }}
-        with:
-          target: x86_64-pc-windows-msvc
-
-      - name: Install Rust
-        uses: actions-rust-lang/setup-rust-toolchain@v1
-        with:
-          target: i686-pc-windows-msvc
-
-      - name: Install msbuild
-        uses: microsoft/setup-msbuild@v1.0.2
-        with:
-          vs-version: 16
-
-      - name: Install latest zig
-        uses: mlugg/setup-zig@v2
-
-      - name: Install Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: 1.21.3
+      - uses: ./.github/actions/mullvad-build-env
 
       - name: Build Windows modules (x86_64)
-        if: ${{ (steps.cache-windows-modules.outputs.cache-hit != 'true') && (matrix.config.arch == 'x64') }}
+        if: ${{ matrix.config.arch == 'x64' }}
         shell: bash
-        run: ./build-windows-modules.sh
+        run: ./build-windows-modules.sh build winfw
 
       - name: Build Windows modules (ARM64)
-        if: ${{ (steps.cache-windows-modules.outputs.cache-hit != 'true') && (matrix.config.arch == 'arm64') }}
+        if: ${{ matrix.config.arch == 'arm64' }}
         shell: bash
         # By default, ./build-windows-modules.sh will use 4 concurrent processes during compilation
         # because the Windows 11 ARM runner has 4 cores:
         # https://docs.github.com/en/actions/how-tos/write-workflows/choose-where-workflows-run/choose-the-runner-for-a-job#standard-github-hosted-runners-for-public-repositories
         #
         # Cap the number of concurrent processes to something less than 4 to avoid OOM issues.
-        run: ./build-windows-modules.sh --max-concurrent-processes 2
+        run: ./build-windows-modules.sh --max-concurrent-processes 2 build winfw
 
       - name: Build and test crates
         shell: bash
diff --git a/.github/workflows/desktop-e2e.yml b/.github/workflows/desktop-e2e.yml
index 5fa4667e2b..ce74e237af 100644
--- a/.github/workflows/desktop-e2e.yml
+++ b/.github/workflows/desktop-e2e.yml
@@ -324,29 +324,7 @@ jobs:
           git config --system core.longpaths true
       - name: Checkout repository
         uses: actions/checkout@v4
-      - name: Checkout submodules
-        run: |
-          git config --global --add safe.directory '*'
-          git submodule update --init --depth=1
-      - name: Install Protoc
-        uses: arduino/setup-protoc@v3
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/setup-node@v4
-        with:
-          node-version-file: desktop/package.json
-          cache: 'npm'
-          cache-dependency-path: desktop/package-lock.json
-      - name: Install Rust
-        run: rustup target add i686-pc-windows-msvc
-      - name: Install latest zig
-        uses: mlugg/setup-zig@v2
-        with:
-          version: 0.14.0-dev.3036+7ac110ac2
-      - name: Install msbuild
-        uses: microsoft/setup-msbuild@v1.0.2
-        with:
-          vs-version: 16
+      - uses: ./.github/actions/mullvad-build-env
       - name: Build app
         shell: bash
         run: |
@@ -439,23 +417,7 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-      - name: Checkout submodules
-        run: |
-          git config --global --add safe.directory '*'
-          git submodule update --init --depth=1
-      - name: Install Go
-        uses: actions/setup-go@v3
-        with:
-          go-version: 1.21.3
-      - name: Install Protoc
-        uses: arduino/setup-protoc@v3
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/setup-node@v4
-        with:
-          node-version-file: desktop/package.json
-          cache: 'npm'
-          cache-dependency-path: desktop/package-lock.json
+      - uses: ./.github/actions/mullvad-build-env
       - name: Build app
         run: ./build.sh
       - name: Build test executable
diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
index a1c648d358..c6bd51e2f8 100644
--- a/.github/workflows/frontend.yml
+++ b/.github/workflows/frontend.yml
@@ -27,15 +27,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Checkout wireguard-go submodule
-        run: git submodule update --init --depth=1 wireguard-go-rs
-
-      - name: Setup node
-        uses: actions/setup-node@v4
-        with:
-          node-version-file: desktop/package.json
-          cache: 'npm'
-          cache-dependency-path: desktop/package-lock.json
+      - uses: ./.github/actions/mullvad-build-env
 
       - name: Install dependencies
         working-directory: desktop
diff --git a/.github/workflows/rust-supply-chain.yml b/.github/workflows/rust-supply-chain.yml
index f2650d886c..4b5d4a0907 100644
--- a/.github/workflows/rust-supply-chain.yml
+++ b/.github/workflows/rust-supply-chain.yml
@@ -19,8 +19,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Checkout wireguard-go submodule
-        run: git submodule update --init --depth=1 wireguard-go-rs
+      - uses: ./.github/actions/mullvad-build-env
 
       - name: Run cargo deny
         uses: EmbarkStudios/cargo-deny-action@v2
diff --git a/.github/workflows/rust-unused-dependencies.yml b/.github/workflows/rust-unused-dependencies.yml
index b5caa33e97..b710f34220 100644
--- a/.github/workflows/rust-unused-dependencies.yml
+++ b/.github/workflows/rust-unused-dependencies.yml
@@ -108,40 +108,14 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Checkout wireguard-go submodule
-        run: |
-          git config --global --add safe.directory '*'
-          git submodule update --init --depth=1
-          git submodule update --init wireguard-go-rs/libwg/wireguard-go
-
-      - name: Install msbuild
-        if: matrix.os == 'windows-latest'
-        uses: microsoft/setup-msbuild@v1.0.2
-        with:
-          vs-version: 16
-
-      - name: Install latest zig
-        if: matrix.os == 'windows-latest'
-        uses: mlugg/setup-zig@v2
-
-      - name: Install Protoc
-        uses: arduino/setup-protoc@v3
+      - uses: ./.github/actions/mullvad-build-env
         with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Install nightly Rust
-        run: rustup override set ${{ env.RUST_NIGHTLY_TOOLCHAIN }}
+          rust-toolchain: ${{ env.RUST_NIGHTLY_TOOLCHAIN }}
 
       - uses: taiki-e/install-action@v2
         with:
           tool: cargo-udeps
 
-      - name: Install Go
-        if: matrix.os == 'macos-latest'
-        uses: actions/setup-go@v3
-        with:
-          go-version: 1.21.3
-
       - name: Check for unused dependencies
         shell: bash
         run: cargo udeps --workspace
diff --git a/.github/workflows/rustfmt.yml b/.github/workflows/rustfmt.yml
index 381280c2c4..efcbfb7838 100644
--- a/.github/workflows/rustfmt.yml
+++ b/.github/workflows/rustfmt.yml
@@ -17,12 +17,9 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Checkout wireguard-go submodule
-        run: git submodule update --init --depth=1 wireguard-go-rs
-
-      - name: Install Rust components
-        shell: bash
-        run: rustup component add rustfmt
+      - uses: ./.github/actions/mullvad-build-env
+        with:
+          rustup-components: rustfmt
 
       - name: Check formatting
         run: |-
diff --git a/.github/workflows/testframework-clippy.yml b/.github/workflows/testframework-clippy.yml
index 34926e20c7..b4cd42e43f 100644
--- a/.github/workflows/testframework-clippy.yml
+++ b/.github/workflows/testframework-clippy.yml
@@ -23,20 +23,9 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Install Protoc
-        uses: arduino/setup-protoc@v3
+      - uses: ./.github/actions/mullvad-build-env
         with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Install build dependencies
-        if: matrix.os == 'ubuntu-latest'
-        run: |
-          sudo apt-get update
-          sudo apt-get install libdbus-1-dev
-
-      - name: Install Rust components
-        shell: bash
-        run: rustup component add clippy
+          rustup-components: clippy
 
       - name: Clippy check
         working-directory: test
@@ -59,14 +48,9 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Install Protoc
-        uses: arduino/setup-protoc@v3
+      - uses: ./.github/actions/mullvad-build-env
         with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Install Rust components
-        shell: bash
-        run: rustup component add clippy
+          rustup-components: clippy
 
       - name: Clippy check
         working-directory: test
diff --git a/.github/workflows/unicode-check.yml b/.github/workflows/unicode-check.yml
deleted file mode 100644
index 407262ffdf..0000000000
--- a/.github/workflows/unicode-check.yml
+++ /dev/null
@@ -1,18 +0,0 @@
----
-name: Bidirectional Unicode scan
-on: [pull_request, workflow_dispatch]
-
-permissions: {}
-
-jobs:
-  build-linux:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Checkout submodules
-        run: git submodule update --init --depth=1 dist-assets/binaries wireguard-go-rs
-
-      - name: Scan for code points
-        run: ./ci/check-trojan-source.sh .