fix: run Electron artifact builds in the bounded worker [CI SKIP]

2026-11-02 17:39:58 +09:00
parent ca4a819506
commit 6007e99985
9 changed files with 163 additions and 100 deletions
@@ -0,0 +1,27 @@
+const fs = require('node:fs');
+const path = require('node:path');
+const { spawnSync } = require('node:child_process');
+
+const config = JSON.parse(fs.readFileSync('/run/secrets/build-config', 'utf8'));
+const env = {
+  ...process.env,
+  NODE_ENV: 'development',
+  ...config.env,
+  NODE_OPTIONS: '--max-old-space-size=4096',
+  npm_config_jobs: '2',
+  MAKEFLAGS: '-j2',
+  CMAKE_BUILD_PARALLEL_LEVEL: '2',
+  UV_THREADPOOL_SIZE: '2',
+  GOMAXPROCS: '2',
+};
+for (const [phase, command] of [['install', config.installCommand], ['build', config.buildCommand]]) {
+  console.log(`[artifact] ${phase} started inside resource-limited worker`);
+  const result = spawnSync('/bin/sh', ['-c', command], { cwd: '/workspace', env, stdio: 'inherit' });
+  if (result.error || result.status !== 0) {
+    console.error(`[artifact] ${phase} failed: ${result.error?.message || result.signal || result.status}`);
+    process.exit(result.status || 1);
+  }
+}
+const output = fs.realpathSync(path.resolve('/workspace', config.outputDir));
+if (!output.startsWith('/workspace/')) throw new Error('Artifact output escaped the checkout');
+fs.cpSync(output, '/build-output', { recursive: true });