ModSecurity/.github/workflows/test-ci-windows.yml

name: CI/CD for IIS Module

on:
  push:
    branches:
      - v2/test-ci-windows
  pull_request:
    branches:
      - v2/test-ci-windows

jobs:
  build:
    strategy:
      matrix:
        arch: [x86, x64]
    runs-on: windows-latest
    
    # For Caching
    permissions:
      actions: read
      contents: read

    steps:
    - name: Checkout code
      uses: actions/checkout@v5

    - name: Install Apache for x86
      if: matrix.arch == 'x86'
      shell: pwsh
      run: |
        $apachePath = "${{ github.workspace }}\apache-x86"
        New-Item -ItemType Directory -Path $apachePath -Force
        choco install apache-httpd -y --force --forcex86 --no-progress -r --params="`"/installLocation:$apachePath /noService`""
        echo "APACHE_ROOT=$apachePath\Apache24" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append

    - name: Set Apache path for x64
      if: matrix.arch == 'x64'
      shell: pwsh
      run: |
        echo "APACHE_ROOT=C:\tools\Apache24" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append

    - name: Setup MSYS2
      uses: msys2/setup-msys2@v2
      with:
        msystem: ${{ matrix.arch == 'x86' && 'MINGW32' || 'UCRT64' }}
        update: true
        install: >
          git
          make
          autoconf
          automake
          libtool
          ${{ matrix.arch == 'x86' && 'mingw-w64-i686-gcc' || 'mingw-w64-ucrt-x86_64-gcc' }}
          ${{ matrix.arch == 'x86' && 'mingw-w64-i686-pkg-config' || 'mingw-w64-ucrt-x86_64-pkg-config' }}

    - name: Clone and build ssdeep
      shell: msys2 {0}
      run: |
        MSYS2_WORKSPACE=$(cygpath -u '${{ github.workspace }}')
        echo "Converted workspace path: $MSYS2_WORKSPACE"

        git clone https://github.com/ssdeep-project/ssdeep.git --depth 1
        cd ssdeep
        autoreconf -i
        
        if [ "${{ matrix.arch }}" = "x86" ]; then
          ./configure --enable-shared --disable-static CFLAGS="-O3" CXXFLAGS="-O3" --build=i686-pc-mingw32
        else
          ./configure --enable-shared --disable-static CFLAGS="-O3" CXXFLAGS="-O3"
        fi
        
        make dll

        mkdir -p "${MSYS2_WORKSPACE}/ssdeep-install-${{ matrix.arch }}/bin"
        mkdir -p "${MSYS2_WORKSPACE}/ssdeep-install-${{ matrix.arch }}/include"
        cp -v fuzzy.dll "${MSYS2_WORKSPACE}/ssdeep-install-${{ matrix.arch }}/bin/"
        cp -v fuzzy.h "${MSYS2_WORKSPACE}/ssdeep-install-${{ matrix.arch }}/include/"
        cp -v fuzzy.def "${MSYS2_WORKSPACE}/ssdeep-install-${{ matrix.arch }}/"

    - name: Restore vcpkg cache
      id: vcpkg-cache
      uses: TAServers/vcpkg-cache@v3
      with:
        token: ${{ secrets.GITHUB_TOKEN }}
        prefix: vcpkg-iis-module-${{ matrix.arch }}/

    - name: Configure CMake for IIS Module
      env:
        VCPKG_FEATURE_FLAGS: "binarycaching"
        VCPKG_BINARY_SOURCES: "clear;files,${{ steps.vcpkg-cache.outputs.path }},readwrite"
        VCPKG_DEFAULT_TRIPLET: ${{ matrix.arch }}-windows
      run: |
        $archFlag = "${{ matrix.arch }}"
        $cmakeArch = if ($archFlag -eq "x86") { "Win32" } else { "x64" }
        $installDir = if ($archFlag -eq "x86") { "x86" } else { "amd64" }

        cmake `
        -DAPACHE_ROOT="$env:APACHE_ROOT" `
        -DSSDEEP_ROOT="${{ github.workspace }}\ssdeep-install-${{ matrix.arch }}" `
        -DCMAKE_INSTALL_PREFIX="${{ github.workspace }}\iis\release\$installDir" `
        -DCMAKE_TOOLCHAIN_FILE="$env:VCPKG_INSTALLATION_ROOT\scripts\buildsystems\vcpkg.cmake" `
        -A $cmakeArch `
        -DWITH_SSDEEP=ON `
        -DWITH_LUA=ON `
        -DWITH_YAJL=ON `
        -S IIS -B "iis\build-${{ matrix.arch }}"

    - name: Build IIS Module
      shell: pwsh
      run: |
        cmake --build "iis\build-${{ matrix.arch }}" --config Release

    - name: Upload artifacts
      uses: actions/upload-artifact@v4
      with:
        name: iis-module-${{ matrix.arch }}
        path: iis/build-${{ matrix.arch }}/Release/
    
  package:
    needs: build
    runs-on: windows-latest
    steps:
    - name: Checkout code
      uses: actions/checkout@v5

    - name: Download x86 artifacts
      uses: actions/download-artifact@v4
      with:
        name: iis-module-x86
        path: iis/release/x86/


    - name: Download x64 artifacts
      uses: actions/download-artifact@v4
      with:
        name: iis-module-x64
        path: iis/release/amd64/
    
    - name: Package IIS Module with WiX
      shell: pwsh
      run: |
        $CURRENT_DIR = "${{ github.workspace }}\iis\"
        candle.exe -ext WixUtilExtension -ext WixUIExtension "$CURRENT_DIR\installer.wxs" -out "$CURRENT_DIR\installer.wixobj" -arch x64
        light.exe -ext WixUtilExtension -ext WixUIExtension "$CURRENT_DIR\installer.wixobj" -out "$CURRENT_DIR\installer\modsecurityiis-x64.msi"
        candle.exe -ext WixUtilExtension -ext WixUIExtension "$CURRENT_DIR\installer.wxs" -out "$CURRENT_DIR\installer.wixobj" -arch x86
        light.exe -ext WixUtilExtension -ext WixUIExtension "$CURRENT_DIR\installer.wixobj" -out "$CURRENT_DIR\installer\modsecurityiis-x86.msi"     

    - name: Upload artifacts
      uses: actions/upload-artifact@v4
      with:
        name: modsecurityiis-installers
        path: iis/installer/*.msi