2020-08-05 19:00:52 +02:00
|
|
|
name: C/C++ CI
|
|
|
|
|
|
|
|
|
|
on:
|
|
|
|
|
push:
|
|
|
|
|
branches: [ master, ci ]
|
|
|
|
|
pull_request:
|
|
|
|
|
branches: [ master ]
|
|
|
|
|
|
|
|
|
|
jobs:
|
2021-02-17 08:41:30 +01:00
|
|
|
linux:
|
Add self-hosted runners for VMs of other platforms.
Github only hosts a limited number of platforms, and the runner code
is only supported on slightly wider range of platforms. To increase
our test coverage beyond that, we run the runner natively on a VM host,
where it runs a jobs that boot VMs of other platforms, waits for them
to come up then runs the build and test by ssh'ing into the guest.
This means that the minimum dependencies for the guests are quite low
(basically just sshd, a compiler and make).
The interface to the VM host is fairly simple (basically 3 scripts:
vmstartup, vmrun and vmshutdown), but those are specific to the VM host
so are not in the public repo. We also mount the working directory on the
host via sshfs, so things like artifact upload by the runner also work.
As part of this we are moving the per-test-target configs into a single
place (.github/configs) where there will be referenced by a single short
"config" key. I plan to make the github-hosted runners use this too.
The self-hosted runners are run off a private repo on github since that
prevents third parties from accessing them[0], and since runner quota is
limited on private repos, we avoid running the tests we run on the public
repo.
[0] https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners#self-hosted-runner-security-with-public-repositories
2021-01-15 04:11:43 +01:00
|
|
|
if: github.repository != 'openssh/openssh-portable-selfhosted'
|
2021-01-08 04:26:32 +01:00
|
|
|
strategy:
|
2021-02-17 08:41:30 +01:00
|
|
|
fail-fast: false
|
2021-01-08 04:26:32 +01:00
|
|
|
matrix:
|
2021-02-17 08:41:30 +01:00
|
|
|
os: [ubuntu-16_04, ubuntu-18_04, ubuntu-20.04]
|
|
|
|
|
configs: [default, pam]
|
|
|
|
|
# Then we include any extra configs we want to test for specific VMs.
|
|
|
|
|
include:
|
|
|
|
|
- { os: ubuntu-20.04, configs: kitchensink }
|
|
|
|
|
- { os: ubuntu-20.04, configs: hardenedmalloc }
|
|
|
|
|
- { os: ubuntu-20.04, configs: libressl-head }
|
|
|
|
|
- { os: ubuntu-20.04, configs: openssl-head }
|
|
|
|
|
- { os: ubuntu-18.04, configs: kerberos5 }
|
|
|
|
|
- { os: ubuntu-18.04, configs: libedit }
|
|
|
|
|
- { os: ubuntu-18.04, configs: sk }
|
|
|
|
|
- { os: ubuntu-18.04, configs: selinux }
|
|
|
|
|
- { os: ubuntu-18.04, configs: kitchensink }
|
|
|
|
|
- { os: ubuntu-18.04, configs: without-openssl }
|
|
|
|
|
- { os: ubuntu-16_04, configs: kitchensink }
|
|
|
|
|
runs-on: ${{ matrix.os }}
|
2021-01-08 04:26:32 +01:00
|
|
|
steps:
|
|
|
|
|
- uses: actions/checkout@v2
|
|
|
|
|
- name: setup CI system
|
|
|
|
|
run: ./.github/setup_ci.sh ${{ matrix.configs }}
|
|
|
|
|
- name: autoreconf
|
|
|
|
|
run: autoreconf
|
|
|
|
|
- name: configure
|
2021-02-17 08:41:30 +01:00
|
|
|
run: ./.github/configure.sh ${{ matrix.configs }}
|
2021-01-08 04:26:32 +01:00
|
|
|
- name: make
|
2021-01-28 10:55:16 +01:00
|
|
|
run: make -j2
|
2021-01-27 02:34:07 +01:00
|
|
|
- name: copy moduli
|
|
|
|
|
run: sudo cp moduli /usr/local/etc/
|
2021-01-08 04:26:32 +01:00
|
|
|
- name: make tests
|
|
|
|
|
run: ./.github/run_test.sh ${{ matrix.configs }}
|
|
|
|
|
env:
|
2021-01-08 05:50:41 +01:00
|
|
|
SUDO: sudo
|
2021-01-08 04:26:32 +01:00
|
|
|
TEST_SSH_UNSAFE_PERMISSIONS: 1
|
2021-01-12 09:22:47 +01:00
|
|
|
|
2021-01-13 08:00:57 +01:00
|
|
|
macos:
|
Add self-hosted runners for VMs of other platforms.
Github only hosts a limited number of platforms, and the runner code
is only supported on slightly wider range of platforms. To increase
our test coverage beyond that, we run the runner natively on a VM host,
where it runs a jobs that boot VMs of other platforms, waits for them
to come up then runs the build and test by ssh'ing into the guest.
This means that the minimum dependencies for the guests are quite low
(basically just sshd, a compiler and make).
The interface to the VM host is fairly simple (basically 3 scripts:
vmstartup, vmrun and vmshutdown), but those are specific to the VM host
so are not in the public repo. We also mount the working directory on the
host via sshfs, so things like artifact upload by the runner also work.
As part of this we are moving the per-test-target configs into a single
place (.github/configs) where there will be referenced by a single short
"config" key. I plan to make the github-hosted runners use this too.
The self-hosted runners are run off a private repo on github since that
prevents third parties from accessing them[0], and since runner quota is
limited on private repos, we avoid running the tests we run on the public
repo.
[0] https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners#self-hosted-runner-security-with-public-repositories
2021-01-15 04:11:43 +01:00
|
|
|
if: github.repository != 'openssh/openssh-portable-selfhosted'
|
2021-01-12 09:22:47 +01:00
|
|
|
strategy:
|
|
|
|
|
matrix:
|
2021-01-13 08:00:57 +01:00
|
|
|
os: [ macos-10.15, macos-11.0 ]
|
2021-02-17 08:41:30 +01:00
|
|
|
configs: [default, pam]
|
2021-01-13 08:00:57 +01:00
|
|
|
runs-on: ${{ matrix.os }}
|
2021-01-12 09:22:47 +01:00
|
|
|
steps:
|
|
|
|
|
- uses: actions/checkout@v2
|
|
|
|
|
- name: setup CI system
|
|
|
|
|
run: ./.github/setup_ci.sh ${{ matrix.configs }}
|
|
|
|
|
- name: autoreconf
|
|
|
|
|
run: autoreconf
|
|
|
|
|
- name: configure
|
|
|
|
|
run: ./configure --with-ssl-dir=/usr/local/opt/openssl ${{ matrix.configs }}
|
|
|
|
|
- name: make
|
2021-01-28 10:55:16 +01:00
|
|
|
run: make -j2
|
2021-01-27 02:34:07 +01:00
|
|
|
- name: copy moduli
|
|
|
|
|
run: sudo cp moduli /usr/local/etc/
|
2021-01-12 09:22:47 +01:00
|
|
|
- name: make tests
|
|
|
|
|
run: ./.github/run_test.sh ${{ matrix.configs }}
|
|
|
|
|
env:
|
|
|
|
|
SUDO: sudo
|
|
|
|
|
TEST_SSH_UNSAFE_PERMISSIONS: 1
|
