SERVER-104338: Add evergreen task to compile the crypt package. (#36321)

GitOrigin-RevId: a06be7ea74d7c081ae2502cb8c21cb1d07a53e88

.github/CODEOWNERS

@@ -206,6 +206,7 @@ WORKSPACE.bazel @10gen/devprod-build @svc-auto-approve-bot
 /evergreen/**/restore_git_history_and_tags.sh @10gen/devprod-correctness @svc-auto-approve-bot
 /evergreen/**/retry_git.sh @10gen/devprod-correctness @svc-auto-approve-bot
 /evergreen/**/validate_compile_commands.py @10gen/devprod-build @svc-auto-approve-bot
+/evergreen/**/packager_crypt_py_run.sh @10gen/devprod-build @svc-auto-approve-bot
 
 # The following patterns are parsed from ./jstests/OWNERS.yml
 /jstests/**/*analyze_shard_key* @10gen/server-cluster-scalability @svc-auto-approve-bot

etc/evergreen_yml_components/definitions.yml

@@ -2074,6 +2074,17 @@ functions:
         args:
           - "./src/evergreen/packager.py_run.sh"
 
+  "run packager_crypt.py":
+    - *get_version_expansions
+    - *apply_version_expansions
+    - *f_expansions_write
+    - command: subprocess.exec
+      display_name: "packager crypt py_run sh"
+      params:
+        binary: bash
+        args:
+          - "./src/evergreen/packager_crypt_py_run.sh"
+
   "do watchdog setup":
     - *f_expansions_write
     - command: subprocess.exec

etc/evergreen_yml_components/tasks/compile_tasks_shared.yml

@@ -320,6 +320,42 @@ tasks:
           content_type: ${content_type|application/tar}
           display_name: "Mongo crypt Library"
 
+  - name: crypt_lib_package
+    tags:
+      [
+        "assigned_to_jira_team_devprod_build",
+        "crypt",
+        "incompatible_aubsan",
+        "incompatible_community",
+        "incompatible_mac",
+        "incompatible_tsan",
+        "incompatible_windows",
+        "release_critical",
+        "requires_compile_variant",
+        "requires_large_host",
+      ]
+    depends_on:
+      - name: crypt_create_lib
+    commands:
+      - func: "run packager_crypt.py"
+      - command: archive.targz_pack
+        params:
+          target: "packages.tgz"
+          source_dir: "src"
+          include:
+            - "repo/**"
+      - command: s3.put
+        params:
+          optional: true
+          aws_key: ${aws_key}
+          aws_secret: ${aws_secret}
+          local_file: packages.tgz
+          remote_file: ${project}/${build_variant}/${revision}/artifacts/${build_id}-packages.tgz
+          bucket: mciuploads
+          permissions: public-read
+          content_type: application/tar
+          display_name: Packages
+
   - name: package
     tags: ["assigned_to_jira_team_devprod_build", "auxiliary"]
     depends_on:

evergreen/OWNERS.yml

@@ -15,3 +15,6 @@ filters:
   - "validate_compile_commands.py":
     approvers:
       - 10gen/devprod-build
+  - "packager_crypt_py_run.sh":
+    approvers:
+      - 10gen/devprod-build

evergreen/packager_crypt_py_run.sh

@@ -0,0 +1,27 @@
+set -o errexit verbose
+
+ROOT_DIR="$(dirname $(realpath ${BASH_SOURCE[0]}))"
+readonly ROOT_DIR
+source "${ROOT_DIR}/prelude.sh"
+
+activate_venv
+[[ "${has_packages}" != "true" ]] && exit 0
+
+if [[ -z "${packager_script+x}" ]]; then
+  echo "Error: packager run when packager_script is not set, please remove the package task from this variant (or variant task group) or set packager_script if this variant is intended to run the packager."
+  exit 1
+fi
+
+pushd "${ROOT_DIR}/src/buildscripts" >&/dev/null
+trap 'popd >& /dev/null' EXIT
+
+$python \
+  ${packager_script} \
+  --prefix $(pwd)/.. \
+  --distros \
+  --crypt_spec \
+  ${packager_distro} \
+  --tarball $(pwd)/../bazel-bin/mongo_crypt-stripped.tgz \
+  -s ${version} \
+  -m HEAD \
+  -a ${packager_arch}