.gitlab-ci.yml

image: registry.gitlab.com/fdroid/ci-images-client:latest

cache:
  paths:
    - .gradle/wrapper
    - .gradle/caches

stages:
  - test
  - deploy

before_script:
  - export GRADLE_USER_HOME=$PWD/.gradle
  - export ANDROID_COMPILE_SDK=`sed -n 's,.*compileSdkVersion\s*\([0-9][0-9]*\).*,\1,p' libnetcipher/build.gradle`
  - alias sdkmanager="sdkmanager --no_https"
  - echo y | sdkmanager
      "platforms;android-${ANDROID_COMPILE_SDK}"
      "$(sed -nE 's,.*buildToolsVersion *.([0-9.]+).*,build-tools;\1,p' libnetcipher/build.gradle)"
      "build-tools;23.0.3" > /dev/null

.test-template: &test-template
  artifacts:
    name: "${CI_PROJECT_PATH}_${CI_JOB_STAGE}_${CI_COMMIT_REF_NAME}_${CI_COMMIT_SHA}"
    paths:
      - "logcat.txt"
      - "tor.log"
      - "syslog"
      - "*/build/reports"
      - "*/build/outputs/*ml"
      - "*/build/outputs/apk"
    expire_in: 1 week
    when: on_failure
  after_script:
    - echo "Download debug artifacts from https://gitlab.com/${CI_PROJECT_PATH}/-/jobs"

# Run the most important first. Then we can decide whether to ignore
# the style tests if the rest of the more meaningful tests pass.
test:
  stage: test
  <<: *test-template
  script:
    # print lint errors/warnings to build log
    - sed -i 's,\s*textReport .*,\ttextReport true,g' */build.gradle
    # 'assemble' everything and run all checks that do not require a device/emulator
    - ./gradlew build -PdisablePreDex
    # test release process
    - ./gradlew jarRelease -PdisablePreDex

errorprone:
  stage: test
  script:
    - for f in */build.gradle; do cat tools/errorprone.gradle >> $f; done
    - ./gradlew assembleDebug -PdisablePreDex

.connected-template: &connected-template
  retry: 2
  script:
    - ./gradlew assembleDebug
    - export AVD_SDK=`echo $CI_JOB_NAME | awk '{print $2}'`
    - export AVD_TAG=`echo $CI_JOB_NAME | awk '{print $3}'`
    - export AVD_ARCH=`echo $CI_JOB_NAME | awk '{print $4}'`
    - export AVD_PACKAGE="system-images;android-${AVD_SDK};${AVD_TAG};${AVD_ARCH}"
    - echo $AVD_PACKAGE

    - alias sdkmanager
    - ls -l ~/.android

    - if [ $AVD_SDK -ge 24 ]; then
          set -x;
          apt-get update;
          apt-get -qy install jq netcat-openbsd tor --no-install-recommends;
          service tor start;
          while ! nc -w 1 localhost 9050; do echo "waiting for proxy port..."; sleep 1; done;
          while ! curl --proxy socks5://localhost:9050 --location https://check.torproject.org/api/ip | jq --exit-status '.IsTor'; do echo 'waiting for tor...'; sleep 1; done;
          set +x;
      fi

    - adb start-server
    - start-emulator
    - wait-for-emulator
    - adb devices
    - adb shell input keyevent 82 &
    # these tests only work in Android Studio, not from command line :-|
    - export EXCLUDES="--exclude-task :netcipher-conscrypt:connectedDebugAndroidTest --exclude-task :netcipher-webkit:connectedDebugAndroidTest"
    - ./gradlew connectedCheck $EXCLUDES
      || ./gradlew connectedCheck $EXCLUDES
      || ./gradlew connectedCheck $EXCLUDES
      || (adb -e logcat -d > logcat.txt; exit 1)

connected 22 default armeabi-v7a:
  <<: *test-template
  <<: *connected-template

.kvm-template: &kvm-template
  tags:
    - fdroid
    - kvm
  <<: *test-template
  <<: *connected-template

connected 17 default x86:
  <<: *kvm-template
  allow_failure: true

connected 18 default x86:
  <<: *kvm-template
  allow_failure: true
  only:
    - master@guardianproject/netcipher

connected 21 default x86:
  <<: *kvm-template
  only:
    - master@guardianproject/netcipher

connected 22 default x86:
  <<: *kvm-template
  only:
    - master@guardianproject/netcipher

connected 25 default x86:
  <<: *kvm-template

connected 26 google_apis x86:
  <<: *kvm-template
  only:
    - master@guardianproject/netcipher

connected 27 google_apis_playstore x86:
  <<: *kvm-template

connected 29 default x86_64:
  <<: *kvm-template
  allow_failure: true
  retry:
    when:
      - api_failure
      - runner_system_failure

jarRelease:
  stage: deploy
  artifacts:
    name: "${CI_PROJECT_PATH}_${CI_JOB_STAGE}_${CI_COMMIT_REF_NAME}_${CI_COMMIT_SHA}"
    paths:
      - "logcat.txt"
      - "*/build/libs"
      - "*/build/reports"
      - "*/build/outputs/*ml"
      - "*/build/outputs/apk"
    expire_in: 1 week
    when: always
  script:
    - ./make-release-build

pages:
  stage: deploy
  artifacts:
    paths:
    - public
  script:
    - ./gradlew javadoc
    - test -d public || mkdir public
    - printf '<!DOCTYPE html>\n\n<html><body><h1>NetCipher Javadoc</h1><ul>' > public/index.html
    - for f in */build/docs/javadoc; do
        libname=`echo $f | cut -d / -f 1`;
        printf "<li><a href=\"$libname\/\">$libname</a></li>" >> public/index.html;
        cp -a $f public/$libname;
      done
    - printf '</ul></body></html>' >> public/index.html

after_script:
    # this file changes every time but should not be cached
    - rm -f $GRADLE_USER_HOME/caches/modules-2/modules-2.lock
    - rm -fr $GRADLE_USER_HOME/caches/*/plugin-resolution/
    - (cp /var/log/tor/log tor.log; chmod a+r tor.log) || true
    - (cp /var/log/syslog syslog; chmod a+r syslog) || true