guix: support PLATFORM_GUI=1 release builds

Guix builds accept a PLATFORM_GUI knob: guix-build prefetches the Rust standard libraries and the platform_cxx vendored-crates archive outside the offline container (they are host-independent and need network and git access), and passes the knob through to the containerized depends build. The manifest gains patchelf and zlib for the prebuilt Rust toolchain and lbzip2 for bzip2 depends archives. The Guix workflow gains workflow_dispatch with host and platform_gui inputs so a single-host Platform build can be exercised on demand; scheduled and tag builds are unchanged and never set the knob.

Author: PastaPastaPasta

.github/workflows/guix-build.yml

@@ -12,14 +12,26 @@ on:
   schedule:
     # Run weekly at 3 AM UTC on Sunday on the default branch
     - cron: '0 3 * * 0'
+  workflow_dispatch:
+    inputs:
+      hosts:
+        description: 'Host triplet to build (single host)'
+        required: false
+        default: 'x86_64-linux-gnu'
+      platform_gui:
+        description: 'Build with PLATFORM_GUI=1 (Platform GUI + vendored Rust crates)'
+        type: boolean
+        required: false
+        default: false
 
 jobs:
   build-image:
     runs-on: ubuntu-24.04-arm
     if: |
       (github.event_name == 'push' && (startsWith(github.ref, 'refs/tags/') || vars.RUN_GUIX_ON_ALL_PUSH == 'true')) ||
       contains(github.event.pull_request.labels.*.name, 'guix-build') ||
-      github.event_name == 'schedule'
+      github.event_name == 'schedule' ||
+      github.event_name == 'workflow_dispatch'
     outputs:
       image-tag: ${{ steps.prepare.outputs.image-tag }}
       repo-name: ${{ steps.prepare.outputs.repo-name }}
@@ -77,7 +89,7 @@ jobs:
     runs-on: ubuntu-24.04-arm
     strategy:
       matrix:
-        build_target: [x86_64-linux-gnu, aarch64-linux-gnu, riscv64-linux-gnu, powerpc64-linux-gnu, x86_64-w64-mingw32, x86_64-apple-darwin, arm64-apple-darwin]
+        build_target: ${{ github.event_name == 'workflow_dispatch' && fromJSON(format('["{0}"]', inputs.hosts)) || fromJSON('["x86_64-linux-gnu", "aarch64-linux-gnu", "riscv64-linux-gnu", "powerpc64-linux-gnu", "x86_64-w64-mingw32", "x86_64-apple-darwin", "arm64-apple-darwin"]') }}
 
     timeout-minutes: 480
     steps:
@@ -98,7 +110,7 @@ jobs:
         uses: actions/cache@v5
         with:
           path: dash/depends/sources
-          key: depends-sources-${{ hashFiles('dash/depends/packages/*') }}
+          key: depends-sources-${{ hashFiles('dash/depends/packages/*', 'dash/depends/patches/platform_cxx/cargo-config.toml') }}
           restore-keys: |
             depends-sources-
 
@@ -129,7 +141,7 @@ jobs:
             -v ${{ github.workspace }}/.cache:/home/ubuntu/.cache \
             -w /src/dash \
             ghcr.io/${{ needs.build-image.outputs.repo-name }}/dashcore-guix-builder:${{ needs.build-image.outputs.image-tag }} && \
-          docker exec guix-daemon bash -c 'HOSTS=${{ matrix.build_target }} /usr/local/bin/guix-start /src/dash'
+          docker exec guix-daemon bash -c 'HOSTS=${{ matrix.build_target }} PLATFORM_GUI=${{ inputs.platform_gui && '1' || '' }} /usr/local/bin/guix-start /src/dash'
 
       - name: Ensure build passes
         run: |

contrib/containers/guix/scripts/guix-start

@@ -26,6 +26,8 @@ fi
 cd "${WORKSPACE_PATH}"
 git status >> /dev/null
 
+export PLATFORM_GUI="${PLATFORM_GUI:-}"
+
 export HOSTS="${HOSTS:-x86_64-linux-gnu aarch64-linux-gnu riscv64-linux-gnu
                        x86_64-w64-mingw32
                        x86_64-apple-darwin arm64-apple-darwin}"

contrib/guix/guix-build

@@ -302,9 +302,16 @@ mkdir -p "$OUTDIR_BASE"
 # Download the depends sources now as we won't have internet access in the build
 # container
 for host in $HOSTS; do
-    make -C "${PWD}/depends" -j"$JOBS" download-"$(host_to_commonname "$host")" ${V:+V=1} ${SOURCES_PATH:+SOURCES_PATH="$SOURCES_PATH"}
+    make -C "${PWD}/depends" -j"$JOBS" download-"$(host_to_commonname "$host")" ${V:+V=1} ${PLATFORM_GUI:+PLATFORM_GUI=1} ${SOURCES_PATH:+SOURCES_PATH="$SOURCES_PATH"}
 done
 
+# Rust standard libraries and vendored crates are host-independent and need
+# network (and git) access, so they must be fetched once out here as well —
+# the build container is offline.
+if [ -n "${PLATFORM_GUI}" ]; then
+    make -C "${PWD}/depends" -j"$JOBS" PLATFORM_GUI=1 download-rust-std vendor-dep-crates ${V:+V=1} ${SOURCES_PATH:+SOURCES_PATH="$SOURCES_PATH"}
+fi
+
 # Usage: outdir_for_host HOST SUFFIX
 #
 #   HOST: The current platform triple we're building for
@@ -466,6 +473,7 @@ EOF
                                         ${SOURCES_PATH:+SOURCES_PATH="$SOURCES_PATH"} \
                                         ${BASE_CACHE:+BASE_CACHE="$BASE_CACHE"} \
                                         ${SDK_PATH:+SDK_PATH="$SDK_PATH"} \
+                                        ${PLATFORM_GUI:+PLATFORM_GUI=1} \
                                         DISTSRC="$(DISTSRC_BASE=/distsrc-base && distsrc_for_host "$HOST")" \
                                         OUTDIR="$(OUTDIR_BASE=/outdir-base && outdir_for_host "$HOST")" \
                                         DIST_ARCHIVE_BASE=/outdir-base/dist-archive \

contrib/guix/libexec/build.sh

@@ -173,6 +173,7 @@ export TZ="UTC"
 # Build the depends tree, overriding variables that assume multilib gcc
 make -C depends --jobs="$JOBS" HOST="$HOST" \
                                    ${V:+V=1} \
+                                   ${PLATFORM_GUI:+PLATFORM_GUI=1} \
                                    ${SOURCES_PATH+SOURCES_PATH="$SOURCES_PATH"} \
                                    ${BASE_CACHE+BASE_CACHE="$BASE_CACHE"} \
                                    ${SDK_PATH+SDK_PATH="$SDK_PATH"} \

contrib/guix/manifest.scm

@@ -5,6 +5,7 @@
              ((gnu packages certs) #:select (nss-certs))
              ((gnu packages check) #:select (libfaketime))
              ((gnu packages cmake) #:select (cmake-minimal))
+             ((gnu packages elf) #:select (patchelf))
              (gnu packages commencement)
              (gnu packages compression)
              (gnu packages cross-base)
@@ -534,6 +535,8 @@ inspecting signatures in Mach-O binaries.")
         autoconf-2.71
         automake
         pkg-config
+        patchelf
+        zlib
         ;; Scripting
         python-minimal ;; (3.10)
         ;; Git