feat: build with FIPS on #13
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: aws-lc-rs fips sanity tests | |
| on: | |
| push: | |
| branches: [ '*' ] | |
| pull_request: | |
| branches: [ '*' ] | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref_name }} | |
| cancel-in-progress: true | |
| env: | |
| GOPROXY: https://proxy.golang.org,direct | |
| AWS_LC_SYS_CMAKE_BUILDER: 1 | |
| RUST_NIGHTLY_TOOLCHAIN: nightly-2024-05-22 | |
| jobs: | |
| standard: | |
| if: github.repository_owner == 'aws' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| repository: aws/aws-lc-rs | |
| path: ./aws-lc-rs | |
| submodules: false | |
| - uses: dtolnay/rust-toolchain@master | |
| with: | |
| # Our aws-lc-fips-sys generation scripts require nightly. | |
| toolchain: ${{ env.RUST_NIGHTLY_TOOLCHAIN }} | |
| - run: rustup override set $RUST_NIGHTLY_TOOLCHAIN | |
| - uses: actions-rs/cargo@v1 | |
| with: | |
| command: install | |
| args: rust-script | |
| - name: Install OS Dependencies | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get -y --no-install-recommends install cmake gcc clang ninja-build golang | |
| - name: Remove aws-lc submodule from crate directory | |
| working-directory: ./aws-lc-rs/aws-lc-fips-sys | |
| run: | | |
| rm -rf aws-lc | |
| - uses: actions/checkout@v3 | |
| with: | |
| path: ./aws-lc-rs/aws-lc-fips-sys/aws-lc | |
| - name: Regenerate aws-lc-fips-sys crate | |
| working-directory: ./aws-lc-rs/aws-lc-fips-sys | |
| run: | | |
| rm -rf symbols/* | |
| rm -rf generated-include/openssl/* | |
| ../scripts/generate/_collect_symbols_build.sh -f -c aws-lc-fips-sys | |
| ../scripts/generate/_generate_prefix_headers.sh -f -c aws-lc-fips-sys | |
| ../scripts/generate/_generate_bindings.sh -c aws-lc-fips-sys | |
| - name: aws-lc-fips-sys build | |
| working-directory: ./aws-lc-rs/aws-lc-fips-sys | |
| run: | | |
| cargo build | |
| - name: aws-lc-fips-sys test | |
| working-directory: ./aws-lc-rs/aws-lc-fips-sys | |
| run: | | |
| cargo test | |
| - name: aws-lc-fips-sys packaging | |
| working-directory: ./aws-lc-rs/aws-lc-fips-sys | |
| run: | | |
| cargo package --allow-dirty | |
| - name: aws-lc-rs build | |
| working-directory: ./aws-lc-rs/aws-lc-rs | |
| run: | | |
| cargo build --no-default-features --features fips | |
| - name: aws-lc-rs test | |
| working-directory: ./aws-lc-rs/aws-lc-rs | |
| run: | | |
| cargo test --no-default-features --features fips |