# Make Linux Plugin workflow (grpc/grpc-web)

> The Make Linux Plugin workflow from grpc/grpc-web, explained and optimized by Latchkey.

Source: https://latchkey.dev/workflows/grpc-grpc-web-make-plugin-linux  
Upstream: [grpc/grpc-web](https://github.com/grpc/grpc-web/blob/master/.github/workflows/make-plugin-linux.yml) (.github/workflows/make-plugin-linux.yml), licence Apache-2.0

## What it does

This is the Make Linux Plugin workflow from the grpc/grpc-web repository, a real project running GitHub Actions. It is shown here with attribution under its Apache-2.0 license.

Below, Latchkey shows a faster, safer version produced by its optimization engine.

## The workflow

```yaml
name: Make Linux Plugin

on:
  push:
    paths:
      - .github/workflows/make-plugin-linux.yml
  pull_request:
    paths:
      - .github/workflows/make-plugin-linux.yml
  workflow_dispatch:
    inputs:
      version_number:
        description: 'Version number'
        required: true
        default: '2.x.x'

jobs:
  build:
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-22.04, ubuntu-22.04-arm]
    runs-on: ${{ matrix.os }}
    steps:
    - uses: actions/checkout@v4
    - name: Compute VERSION_NUMBER
      run: |
        INPUT_VERSION="${{ github.event.inputs.version_number }}"
        if [ -n "$INPUT_VERSION" ]; then
          VERSION="$INPUT_VERSION"
        else
          VERSION="$GITHUB_REF_NAME"
        fi
        VERSION="${VERSION//\//-}"
        echo "VERSION_NUMBER=$VERSION" >> "$GITHUB_ENV"
        echo "Computed VERSION_NUMBER=$VERSION"
    - name: Compute ARCH suffix and artifact name
      id: meta
      run: |
        ARCH=$(uname -m)
        case "$ARCH" in
          aarch64|arm64)
            ARCH_SUFFIX="aarch64"
            ;;
          x86_64|amd64)
            ARCH_SUFFIX="x86_64"
            ;;
          *)
            echo "Unsupported architecture: $ARCH" >&2
            exit 1
            ;;
        esac
        ARTIFACT="protoc-gen-grpc-web-${VERSION_NUMBER}-linux-${ARCH_SUFFIX}"
        echo "ARTIFACT=$ARTIFACT" >> "$GITHUB_ENV"
        echo "artifact=$ARTIFACT" >> "$GITHUB_OUTPUT"
        echo "Will produce artifact: $ARTIFACT"
    - name: Install Bazelisk (Bazel)
      run: |
        sudo apt-get update
        sudo apt-get install -y unzip zip
        ARCH=$(uname -m)
        case "$ARCH" in
          aarch64|arm64)
            BAZELISK_URL="https://github.com/bazelbuild/bazelisk/releases/latest/download/bazelisk-linux-arm64"
            ;;
          x86_64|amd64)
            BAZELISK_URL="https://github.com/bazelbuild/bazelisk/releases/latest/download/bazelisk-linux-amd64"
            ;;
          *)
            echo "Unsupported architecture for Bazelisk: $ARCH" >&2
            exit 1
            ;;
        esac
        echo "Downloading Bazelisk from $BAZELISK_URL"
        sudo curl -L -o /usr/local/bin/bazelisk "$BAZELISK_URL"
        sudo chmod +x /usr/local/bin/bazelisk
        # Also provide `bazel` symlink for tools that expect it
        sudo ln -sf /usr/local/bin/bazelisk /usr/local/bin/bazel
        bazelisk version
    - name: Build protoc-gen-grpc-web with Bazel (older glibc baseline)
      run: |
        # Partially static link libstdc++/libgcc to reduce GLIBCXX constraints
        bazelisk build \
          --linkopt=-static-libstdc++ \
          --linkopt=-static-libgcc \
          //javascript/net/grpc/web/generator:protoc-gen-grpc-web
    - name: Move artifact
      run: |
        mv bazel-bin/javascript/net/grpc/web/generator/protoc-gen-grpc-web \
          ./${ARTIFACT}
    - name: Generate sha256
      run: |
        openssl dgst -sha256 -r -out ${ARTIFACT}.sha256 \
          ${ARTIFACT}
    - name: Verify sha256
      run: sha256sum -c ${ARTIFACT}.sha256
    - name: Upload artifacts
      uses: actions/upload-artifact@v4
      with:
        name: ${{ steps.meta.outputs.artifact }}
        path: protoc-gen-grpc-web*
```

## FAQ

### What does the Make Linux Plugin workflow (grpc/grpc-web) workflow do?

This is the Make Linux Plugin workflow from the grpc/grpc-web repository, a real project running GitHub Actions. It is shown here with attribution under its Apache-2.0 license.

### What CI health grade does this workflow get?

This Automation and other workflow grades C. Paste your own workflow into the Latchkey grader to see its grade and the exact fixes.

### How can I improve this Automation and other workflow?

Add run de-duplication and job timeouts. Latchkey applies these automatically on managed runners when you point runs-on at Latchkey.

---

Latchkey runs CI/CD that repairs its own failures. Agent entry points: https://latchkey.dev/agent.txt, https://latchkey.dev/openapi.json, https://latchkey.dev/llms.txt