Merge pull request #4577 from coreos/dependabot/cargo/nix-0.26.4 #1629
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| permissions: | |
| contents: read | |
| env: | |
| CARGO_TERM_COLOR: always | |
| # Minimum supported Rust version (MSRV) | |
| ACTION_MSRV_TOOLCHAIN: 1.60.0 | |
| # Pinned toolchain for linting | |
| ACTION_LINTS_TOOLCHAIN: 1.60.0 | |
| jobs: | |
| build: | |
| name: "Build" | |
| runs-on: ubuntu-latest | |
| container: registry.ci.openshift.org/coreos/fcos-buildroot:testing-devel | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| # https://github.com/actions/checkout/issues/760 | |
| - name: Mark git checkout as safe | |
| run: git config --global --add safe.directory "$GITHUB_WORKSPACE" | |
| - name: Codestyle | |
| run: ./ci/codestyle.sh | |
| - name: Build | |
| run: ./ci/build.sh && make install DESTDIR=$(pwd)/install && tar -C install -czf install.tar . | |
| - name: Upload binary | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: install.tar | |
| path: install.tar | |
| build-tests: | |
| name: "Build Integration Test Data" | |
| runs-on: ubuntu-latest | |
| container: | |
| image: registry.ci.openshift.org/coreos/fcos-buildroot:testing-devel | |
| # Run privileged to hack around createrepo_c hitting the classic seccomp | |
| # broken behaviour of returning EPERM instead of ENOSYS. We should be able | |
| # to drop this once `ubuntu-latest` is bumped to include the fix for | |
| # https://github.com/opencontainers/runc/issues/2151. | |
| options: "--user root --privileged" | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| # https://github.com/actions/checkout/issues/760 | |
| - name: Mark git checkout as safe | |
| run: git config --global --add safe.directory "$GITHUB_WORKSPACE" | |
| - name: Build | |
| run: make -C tests/kolainst && make -C tests/kolainst install DESTDIR=$(pwd)/install && tar -C install -czf tests.tar . | |
| - name: Upload binary | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: tests.tar | |
| path: tests.tar | |
| cxx-verify: | |
| name: "Verify CXX generation" | |
| runs-on: ubuntu-latest | |
| container: registry.ci.openshift.org/coreos/fcos-buildroot:testing-devel | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| # https://github.com/actions/checkout/issues/760 | |
| - name: Mark git checkout as safe | |
| run: git config --global --add safe.directory "$GITHUB_WORKSPACE" | |
| - name: Codestyle | |
| run: ./ci/verify-cxx.sh | |
| # TODO: Enable this once we've switched closer to having `cargo build` | |
| # be the primary buildsystem entrypoint. Right now the problem is | |
| # in order to build the libdnf-sys dependency it relies on us having | |
| # run through autoconf, but that flow wants to a "real" Rust build | |
| # and not clippy. | |
| # linting: | |
| # name: "Lints, pinned toolchain" | |
| # runs-on: ubuntu-latest | |
| # container: quay.io/coreos-assembler/fcos-buildroot:testing-devel | |
| # steps: | |
| # - name: Checkout repository | |
| # uses: actions/checkout@v3 | |
| # - name: Install dependencies | |
| # run: ./ci/installdeps.sh | |
| # - name: Remove system Rust toolchain | |
| # run: dnf remove -y rust cargo | |
| # - name: Install toolchain | |
| # uses: dtolnay/rust-toolchain@v1 | |
| # with: | |
| # toolchain: ${{ env['ACTION_LINTS_TOOLCHAIN'] }} | |
| # components: rustfmt, clippy | |
| # - name: cargo fmt (check) | |
| # run: cargo fmt -- --check -l | |
| # - name: cargo clippy (warnings) | |
| # run: cargo clippy -- -D warnings | |
| build-clang: | |
| name: "Build (clang)" | |
| runs-on: ubuntu-latest | |
| container: registry.ci.openshift.org/coreos/fcos-buildroot:testing-devel | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| # https://github.com/actions/checkout/issues/760 | |
| - name: Mark git checkout as safe | |
| run: git config --global --add safe.directory "$GITHUB_WORKSPACE" | |
| - name: Build | |
| run: ./ci/clang-build-check.sh | |
| integration: | |
| name: "Container Integration" | |
| needs: [build, build-tests] | |
| runs-on: ubuntu-latest | |
| container: quay.io/fedora/fedora-coreos:testing-devel | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| - name: Download build | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: install.tar | |
| - name: Install | |
| run: tar -C / -xzvf install.tar && rm -f install.tar | |
| - name: Download tests | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: tests.tar | |
| - name: Install Tests | |
| run: tar -C / -xzvf tests.tar && rm -f tests.tar | |
| - name: Integration tests | |
| run: ./ci/test-container.sh | |
| # Try to keep this in sync with https://github.com/ostreedev/ostree-rs-ext/blob/1fc115a760eeada22599e0f57026f58b22efded4/.github/workflows/rust.yml#L163 | |
| container-build: | |
| name: "Container build" | |
| needs: build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| - name: Checkout coreos-layering-examples | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: coreos/coreos-layering-examples | |
| path: coreos-layering-examples | |
| - name: Download | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: install.tar | |
| - name: Integration tests | |
| run: ./ci/container-build-integration.sh | |
| cargo-deny: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: EmbarkStudios/cargo-deny-action@v1 | |
| with: | |
| log-level: warn | |
| command: check bans sources licenses | |
| compose: | |
| name: "Compose tests" | |
| needs: build | |
| runs-on: ubuntu-latest | |
| container: | |
| image: registry.ci.openshift.org/coreos/coreos-assembler:latest | |
| options: "--user root --privileged -v /var/tmp:/var/tmp" | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| - name: Install test dependencies | |
| run: ./ci/install-test-deps.sh | |
| - name: Download build | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: install.tar | |
| - name: Install | |
| run: tar -C / -xzvf install.tar | |
| - name: Integration tests | |
| run: env TMPDIR=/var/tmp JOBS=3 ./tests/compose.sh | |
| compose-image: | |
| name: "compose-image tests" | |
| needs: build | |
| runs-on: ubuntu-latest | |
| container: | |
| image: registry.ci.openshift.org/coreos/coreos-assembler:latest | |
| options: "--user root --privileged -v /var/tmp:/var/tmp" | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| - name: Install test dependencies | |
| run: ./ci/install-test-deps.sh | |
| - name: Download build | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: install.tar | |
| - name: Install | |
| run: tar -C / -xzvf install.tar | |
| - name: Integration tests | |
| run: env TMPDIR=/var/tmp JOBS=3 ./tests/compose-image.sh | |
| container-encapsulate: | |
| name: "Encapsulate tests" | |
| needs: build | |
| runs-on: ubuntu-latest | |
| container: | |
| image: registry.ci.openshift.org/coreos/coreos-assembler:latest | |
| options: "--user root --privileged -v /var/tmp:/var/tmp" | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| - name: Download build | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: install.tar | |
| - name: Install | |
| run: tar -C / -xzvf install.tar | |
| - name: Integration tests | |
| run: env TMPDIR=/var/tmp ./tests/encapsulate.sh | |
| build-c9s: | |
| name: "Build (c9s)" | |
| runs-on: ubuntu-latest | |
| container: quay.io/centos/centos:stream9 | |
| steps: | |
| - name: Install git | |
| run: yum -y install git | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: true | |
| # https://github.com/actions/checkout/issues/760 | |
| - name: Mark git checkout as safe | |
| run: git config --global --add safe.directory "$GITHUB_WORKSPACE" | |
| - name: Run ridiculous RHEL -devel package workaround | |
| run: ./ci/ridiculous-rhel-devel-workaround.sh | |
| - name: Install dependencies | |
| run: ./ci/installdeps.sh | |
| - name: Build | |
| run: ./ci/build.sh && make install DESTDIR=$(pwd)/install && tar -C install -czf install.tar . | |
| - name: Upload binary | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: install-c9s.tar | |
| path: install.tar | |
| # Doc: https://github.com/redhat-plumbers-in-action/differential-shellcheck#usage | |
| differential-shellcheck: | |
| name: Differential ShellCheck | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - name: Differential ShellCheck | |
| uses: redhat-plumbers-in-action/differential-shellcheck@v4 | |
| with: | |
| severity: warning | |
| token: ${{ secrets.GITHUB_TOKEN }} |