Skip to content

gpg tests

gpg tests #5

name: centos-and-fedora
on:
push:
branches:
- main
- maxirmx-refactor-centos
- 'release/**'
paths-ignore:
- '/*.sh'
- '/.*'
- '/_*'
- 'Brewfile'
- 'docs/**'
- '**.adoc'
- '**.md'
- '**.nix'
- 'flake.lock'
- '.github/workflows/*.yml'
- '!.github/workflows/centos-and-fedora-new.yml'
pull_request:
paths-ignore:
- '/*.sh'
- '/.*'
- '/_*'
- 'Brewfile'
- 'docs/**'
- '**.adoc'
- '**.md'
- '**.nix'
- 'flake.lock'
concurrency:
group: '${{ github.workflow }}-${{ github.job }}-${{ github.head_ref || github.ref_name }}'
cancel-in-progress: true
env:
CORES: 2
RNP_LOG_CONSOLE: 1
jobs:
tests:
name: ${{ matrix.image.container }} [CC ${{ matrix.env.CC }}; backend ${{ matrix.image.backend }}; gpg ${{ matrix.image.gpg_ver }}]
runs-on: ubuntu-latest
if: "!contains(github.event.head_commit.message, 'skip ci')"
timeout-minutes: 120
strategy:
fail-fast: false
matrix:
env:
- { CC: gcc, CXX: g++, BUILD_MODE: normal }
# normal --> Release build; sanitize --> Debug build so theoretically test conditions are different
# - { CC: clang, CXX: clang++, BUILD_MODE: normal }
- { CC: clang, CXX: clang++, BUILD_MODE: sanitize }
image:
- { container: 'centos-7-amd64', backend: 'Botan', gpg_ver: 'stable' }
- { container: 'centos-8-amd64', backend: 'Botan', gpg_ver: 'system' }
- { container: 'centos-8-amd64', backend: 'Botan', sm2: On, gpg_ver: 'lts' }
- { container: 'centos-8-amd64', backend: 'Botan', sm2: Off, gpg_ver: 'stable' }
- { container: 'centos-9-amd64', backend: 'Botan', gpg_ver: 'stable' }
- { container: 'fedora-35-amd64', backend: 'Botan', gpg_ver: 'system' }
- { container: 'fedora-36-amd64', backend: 'Botan', gpg_ver: 'system' }
- { container: 'fedora-36-amd64', backend: 'Botan', gpg_ver: 'head' }
- { container: 'centos-8-amd64', backend: 'OpenSSL', gpg_ver: 'lts' }
- { container: 'centos-9-amd64', backend: 'OpenSSL', idea: On, gpg_ver: 'stable' }
- { container: 'centos-9-amd64', backend: 'OpenSSL', idea: Off,gpg_ver: 'stable' }
- { container: 'fedora-35-amd64', backend: 'OpenSSL', gpg_ver: 'system' }
- { container: 'fedora-36-amd64', backend: 'OpenSSL', gpg_ver: 'system' }
include:
# Coverage report for Botan backend
- image: { container: 'centos-8-amd64', gpg_ver: stable, backend: Botan }
env: { CC: gcc, CXX: g++, BUILD_MODE: coverage }
# Coverage report for OpenSSL 1.1.1 backend
- image: { container: 'centos-8-amd64', gpg_ver: stable, backend: OpenSSL }
env: { CC: gcc, CXX: g++, BUILD_MODE: coverage }
# Coverage report for OpenSSL 3.0 backend
- image: { container: 'fedora-36-amd64', gpg_ver: stable, backend: OpenSSL }
env: { CC: gcc, CXX: g++, BUILD_MODE: coverage }
container: ghcr.io/maxirmx/ci-rnp-${{ matrix.image.container }}
env: ${{ matrix.env }}
steps:
- name: Checkout
uses: actions/checkout@v3
with:
submodules: true
- name: Setup environment
run: |
set -o errexit -o pipefail -o noclobber -o nounset
backend=${{ matrix.image.backend }}
backend="$(echo "${backend:-}" | tr '[:upper:]' '[:lower:]')"
echo CRYPTO_BACKEND="$backend" >> $GITHUB_ENV
gpg_ver=${{ matrix.image.gpg_ver }}
gpg_ver="$(echo "${gpg_ver:-}" | tr '[:upper:]' '[:lower:]')"
echo GPG_VERSION="$gpg_ver" >> $GITHUB_PATH
if [[ gpg_ver != 'system' ]]; then
echo "/opt/gpg/$gpg_ver/bin" >> $GITHUB_PATH
fi
useradd rnpuser
printf "\nrnpuser\tALL=(ALL)\tNOPASSWD:\tALL" > /etc/sudoers.d/rnpuser
printf "\nrnpuser\tsoft\tnproc\tunlimited\n" > /etc/security/limits.d/30-rnpuser.conf
# Need to build HEAD version since it is always different
- name: Build gpg HEAD version if required
run: |
if [[ "$GPG_VERSION" == 'head' ]]; then
/opt/tools/tools.sh build_and_install_gpg head
fi
- name: Configure
run: |
cmake -B build \
-DBUILD_SHARED_LIBS=ON \
-DCRYPTO_BACKEND=${{ matrix.image.backend }} \
-DDOWNLOAD_GTEST=ON \
-DCMAKE_BUILD_TYPE=Release .
- name: Build
run: cmake --build build --parallel ${{ env.CORES }}
- name: Test
run: |
mkdir -p "build/Testing/Temporary"
cp "cmake/CTestCostData.txt" "build/Testing/Temporary"
export PATH="$PWD/build/src/lib:$PATH"
chown -R rnpuser:rnpuser $PWD
exec su rnpuser -c "ctest --parallel ${{ env.CORES }} --test-dir build --output-on-failure"