为了能够在带着较低的 GLibC 的麒麟或 UOS 等国产化系统跑起来经由 GitHub Action 构建的 dotnet AOT 应用，就要求在 GitHub Action 的发布环境需要采用足够旧的系统版本，当前 2025 最佳的为 Debian 10（buster）版本
本文将告诉大家应该如何编写 GitHub Action 的 yml 文件，从而能够在足够旧的 Debian 10（buster）进行 dotnet AOT 构建
开始之前先来看一下我手头的麒麟系统上的 glibc 的版本
$ ldd --version
ldd (Ubuntu GLIBC 2.31-0kylin9.1k21.6) 2.31
以及 UOS 系统的 glibc 的版本
$ ldd --version
ldd (Debian GLIBC 2.28.30-deepin1) 2.28
在 GitHub Action 的基础设施机制里面，提供了内置在 docker 容器镜像里面运行的方式，这将大大方便咱的工作
在 yml 文件里面，通过指定 container 的方式配置采用 debian:buster-slim 容器来运行，其示例代码如下
PackOnLinuxX64:runs-on: ubuntu-latestcontainer:image: debian:buster-slim
由于 debian:buster-slim 容器里面啥都没有，直接在里面跑 actions/setup-dotnet 将会失败，大概的提示如下
Run actions/setup-dotnet@v4
/usr/bin/docker exec 03691b621c91f406e8b9ff39659f0ee58fe971995fd7ec9eef52f0dea518469c sh -c "cat /etc/*release | grep ^ID"
/__w/_actions/actions/setup-dotnet/v4/externals/install-dotnet.sh --skip-non-versioned-files --runtime dotnet --channel LTS
dotnet_install: Error: curl (recommended) or wget are required to download dotnet. Install missing prerequisite to proceed.
Warning: Failed to install dotnet runtime + cli, exit code: 1. dotnet_install: Error: curl (recommended) or wget are required to download dotnet. Install missing prerequisite to proceed./__w/_actions/actions/setup-dotnet/v4/externals/install-dotnet.sh --skip-non-versioned-files --channel 9.0
dotnet_install: Error: curl (recommended) or wget are required to download dotnet. Install missing prerequisite to proceed.
Error: Failed to install dotnet, exit code: 1. dotnet_install: Error: curl (recommended) or wget are required to download dotnet. Install missing prerequisite to proceed.
解决此问题的方法就是安装工具，继续添加如下代码进行工具的安装
PackOnLinuxX64:runs-on: ubuntu-latestcontainer:image: debian:buster-slimsteps:- name: InstallToolrun: |dpkg --add-architecture arm64apt-get cleanapt-get updateapt-get install libicu-dev -yapt-get install libssl-dev -yapt-get install wget -yapt-get install curl -yapt-get install clang llvm -yapt-get install gcc-aarch64-linux-gnu -yapt-get install binutils-aarch64-linux-gnu -yapt-get install zlib1g-dev -yapt-get install zlib1g-dev:arm64 -y
然而在以上安装过程中，将会看到如下错误
Ign:1 http://deb.debian.org/debian buster InRelease
Ign:2 http://deb.debian.org/debian-security buster/updates InRelease
Ign:3 http://deb.debian.org/debian buster-updates InRelease
Err:4 http://deb.debian.org/debian buster Release404 Not Found [IP: 146.75.30.132 80]
Err:5 http://deb.debian.org/debian-security buster/updates Release404 Not Found [IP: 146.75.30.132 80]
Err:6 http://deb.debian.org/debian buster-updates Release404 Not Found [IP: 146.75.30.132 80]
Reading package lists...
E: The repository 'http://deb.debian.org/debian buster Release' does not have a Release file.
E: The repository 'http://deb.debian.org/debian-security buster/updates Release' does not have a Release file.
E: The repository 'http://deb.debian.org/debian buster-updates Release' does not have a Release file.
这个错误的原因是 Debian 10 (buster) 已经停止支持，被移动到 archive 里，需要更换包源。我在另一篇博客详细介绍了其原因，详细请参阅：制作一个能构建 dotnet AOT 的 gitlab ruuner 的 Debian docker 镜像
本文这里简单起见，直接修改包源，添加如下代码进行修改
steps:# 由于 Debian 10 (buster) 停止维护了，需要换成 archive.debian.org 源头- name: UpdateSourcerun: |rm /etc/apt/sources.listecho 'deb http://archive.debian.org/debian buster main contrib non-free' >> /etc/apt/sources.listecho 'deb http://archive.debian.org/debian buster-updates main contrib non-free' >> /etc/apt/sources.listecho 'deb http://archive.debian.org/debian-security buster/updates main contrib non-free' >> /etc/apt/sources.list
这里需要说明的是，除了 http://archive.debian.org/debian 之外，后面两个也是非常重要的，否则将会遇到找不到 libc-dev 失败，大概提示如下
Get:1 http://archive.debian.org/debian buster InRelease [122 kB]
Get:2 http://archive.debian.org/debian buster/main amd64 Packages [7909 kB]
Get:3 http://archive.debian.org/debian buster/contrib arm64 Packages [38.4 kB]
Get:4 http://archive.debian.org/debian buster/non-free arm64 Packages [53.9 kB]
Get:5 http://archive.debian.org/debian buster/contrib amd64 Packages [50.1 kB]
Get:6 http://archive.debian.org/debian buster/non-free amd64 Packages [87.8 kB]
Get:7 http://archive.debian.org/debian buster/main arm64 Packages [7737 kB]
Fetched 16.0 MB in 2s (8464 kB/s)
Reading package lists...
Reading package lists...
Building dependency tree...
Reading state information...
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:The following packages have unmet dependencies:libicu-dev : Depends: libc6-dev but it is not going to be installed orlibc-dev
E: Unable to correct problems, you have held broken packages.
由于 GitHub Action 是跑在国外的，就没有必要去使用腾讯的源
完成以上步骤之后，即可按照正常方式进行安装 .NET SDK 了，代码如下
- name: Setup .NETuses: actions/setup-dotnet@v1with:dotnet-version: |3.1.x5.0.x6.0.x9.0.x
如果后续步骤需要使用 dotnet tool 的话，需要额外添加以下步骤进行设置，代码如下
- name: Add .NET global tools to PATHrun: echo "$HOME/.dotnet/tools" >> $GITHUB_PATH
如果没有以上设置，则会在后续安装工具的时候给出警告，如以下步骤的安装 dotnet campus 的 TagToVersion 工具的例子
- name: Install dotnet toolrun: dotnet tool install -g dotnetCampus.TagToVersion
安装过程中会看到如下提示
Tools directory '/github/home/.dotnet/tools' is not currently on the PATH environment variable.
If you are using bash, you can add it to your profile by running the following command:cat << \EOF >> ~/.bash_profile
# Add .NET Core SDK tools
export PATH="$PATH:/github/home/.dotnet/tools"
EOFYou can add it to the current session by running the following command:export PATH="$PATH:/github/home/.dotnet/tools"You can invoke the tool using the following command: dotnet-TagToVersion
Tool 'dotnetcampus.tagtoversion' (version '1.0.11') was successfully installed.
此时使用 export PATH="$PATH:/github/home/.dotnet/tools" 是无效的，会在 GitHub Action 里提示找不到 dotnet 工具。正确做法是需要添加到 GITHUB_PATH 里，采用的是 echo "$HOME/.dotnet/tools" >> $GITHUB_PATH 命令，详细请参阅 https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-commands
完成以上步骤之后，就可以正常打包了
在本文开始的安装工具步骤里，添加了 linux-arm64 的交叉构建，以上步骤即可构建出 linux-x64 和 linux-arm64 的 dotnet AOT 应用
以下是本文的示例文件代码，此文件是 https://github.com/dotnet-campus/DocumentFormat.OpenXml.Extensions 项目的构建脚本
以下代码内容有所删减，如对整个构建脚本感兴趣，还请自行到 https://github.com/dotnet-campus/DocumentFormat.OpenXml.Extensions 项目获取完全的构建脚本
name: Publish MediaConverters NuGeton: push:tags:- '*'jobs:PackOnLinuxX64:runs-on: ubuntu-latestcontainer:image: debian:buster-slimsteps:# 由于 Debian 10 (buster) 停止维护了，需要换成 archive.debian.org 源头- name: UpdateSourcerun: |rm /etc/apt/sources.listecho 'deb http://archive.debian.org/debian buster main contrib non-free' >> /etc/apt/sources.listecho 'deb http://archive.debian.org/debian buster-updates main contrib non-free' >> /etc/apt/sources.listecho 'deb http://archive.debian.org/debian-security buster/updates main contrib non-free' >> /etc/apt/sources.list- name: InstallToolrun: |dpkg --add-architecture arm64apt-get cleanapt-get updateapt-get install libicu-dev -yapt-get install libssl-dev -yapt-get install wget -yapt-get install curl -yapt-get install clang llvm -yapt-get install gcc-aarch64-linux-gnu -yapt-get install binutils-aarch64-linux-gnu -yapt-get install zlib1g-dev -yapt-get install zlib1g-dev:arm64 -y- uses: actions/checkout@v4- name: Setup .NETuses: actions/setup-dotnet@v1with:dotnet-version: |3.1.x5.0.x6.0.x9.0.x- name: Add .NET global tools to PATHrun: echo "$HOME/.dotnet/tools" >> $GITHUB_PATH- name: Install dotnet toolrun: dotnet tool install -g dotnetCampus.TagToVersion- name: Set tag to version run: dotnet-TagToVersion -t 1.0.0- name: Build with dotnetrun: dotnet build --configuration Release src/MediaConverters/MediaConverters.sln- name: Publish and Pack linux-x64run: |dotnet publish -c Release -r linux-x64 src/MediaConverters/MediaConverters.Tool/MediaConverters.Tool.csprojdotnet pack --configuration Release /p:RuntimeIdentifier=linux-x64 src/MediaConverters/MediaConverters.Tool.RuntimeNuGet/MediaConverters.Tool.RuntimeNuGet.csproj
