Add Maturin build scripts for wheels

Signed-off-by: Wiktor Kwapisiewicz <[email protected]>

.github/workflows/before-script-linux.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+
+set -euxo pipefail
+
+if [ -f /usr/bin/yum ]; then
+    yum install -y openssl-devel pcsc-lite-devel centos-release-scl llvm-toolset-7
+
+    source /opt/rh/llvm-toolset-7/enable
+
+    PREFIX=/
+    # Need to download from mirror because of: https://www.theregister.com/2023/06/28/microsofts_github_gmp_project/
+    # See: https://ftp.gnu.org/gnu/gmp/
+    GMP_VERSION=6.3.0
+    # See: https://ftp.gnu.org/gnu/nettle/
+    NETTLE_VERSION=3.9.1
+
+    cd /tmp && \
+    curl --fail -sSL -O https://ftp.gnu.org/gnu/gmp/gmp-${GMP_VERSION}.tar.bz2 && \
+    tar xvf gmp-${GMP_VERSION}.tar.bz2 && \
+    cd gmp-${GMP_VERSION} && \
+    ./configure --prefix=$PREFIX && \
+    make && make install
+
+    cd /tmp &&
+    curl --fail -sSL -O https://ftp.gnu.org/gnu/nettle/nettle-${NETTLE_VERSION}.tar.gz && \
+    tar xvf nettle-${NETTLE_VERSION}.tar.gz && \
+    cd nettle-${NETTLE_VERSION} && \
+    ./configure --prefix=$PREFIX \
+      --with-lib-path=$PREFIX/lib \
+      --with-include-path=$PREFIX/include \
+      --disable-openssl && \
+    make && make install
+else
+    # Note that this config is NOT used at the moment and can be severely broken
+    apt-get update
+    apt-get install -yqq cargo clang git nettle-dev pkg-config libssl-dev openssl libpcsclite-dev llvm gcc-multilib libgmp-dev libgmp3-dev
+fi

.github/workflows/maturin.yml

@@ -0,0 +1,108 @@
+name: Maturin
+
+on: [push, pull_request, workflow_dispatch]
+
+permissions:
+  contents: read
+
+jobs:
+  linux:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        target: [x86_64]
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-python@v4
+        with:
+          python-version: '3.10'
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist --find-interpreter
+          manylinux: auto
+          before-script-linux: .github/workflows/before-script-linux.sh
+          docker-options: -e LIBCLANG_PATH=/opt/rh/llvm-toolset-7/root/usr/lib64/ -e LIBCLANG_STATIC_PATH=/opt/rh/llvm-toolset-7/root/usr/lib64/ -e CLANG_PATH=/opt/rh/llvm-toolset-7/root/usr/bin/clang
+      - name: Upload wheels
+        uses: actions/upload-artifact@v3
+        with:
+          name: wheels
+          path: dist
+
+  windows:
+    runs-on: windows-latest
+    strategy:
+      matrix:
+        target: [x64]
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-python@v4
+        with:
+          python-version: '3.10'
+          architecture: ${{ matrix.target }}
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist --find-interpreter
+          sccache: 'true'
+      - name: Upload wheels
+        uses: actions/upload-artifact@v3
+        with:
+          name: wheels
+          path: dist
+
+  macos:
+    runs-on: macos-latest
+    strategy:
+      matrix:
+        target: [x86_64, aarch64]
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-python@v4
+        with:
+          python-version: '3.10'
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist --find-interpreter
+          sccache: 'true'
+      - name: Upload wheels
+        uses: actions/upload-artifact@v3
+        with:
+          name: wheels
+          path: dist
+
+  sdist:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: Build sdist
+        uses: PyO3/maturin-action@v1
+        with:
+          command: sdist
+          args: --out dist
+      - name: Upload sdist
+        uses: actions/upload-artifact@v3
+        with:
+          name: wheels
+          path: dist
+
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    if: "startsWith(github.ref, 'refs/tags/')"
+    needs: [linux, windows, macos, sdist]
+    steps:
+      - uses: actions/download-artifact@v3
+        with:
+          name: wheels
+      - name: Publish to PyPI
+        uses: PyO3/maturin-action@v1
+        # no credentials needed here because we're using Trusted Publishing
+        # see: https://github.com/PyO3/maturin/issues/1575#issuecomment-1702761101
+        with:
+          command: upload
+          args: --skip-existing *