CI: Simplify kryoptic build #181
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- | |
name: Kryoptic | |
on: | |
push: | |
branches: ["main"] | |
pull_request: | |
branches: ["main"] | |
jobs: | |
build: | |
name: CI with kryoptic token | |
runs-on: ubuntu-22.04 | |
container: fedora:latest | |
steps: | |
- name: Get Date for DNF cache entry | |
id: get-date | |
run: | | |
echo "date=$(/bin/date -u "+%Y%V")" >> $GITHUB_OUTPUT | |
shell: bash | |
- name: DNF cache | |
uses: actions/cache@v4 | |
with: | |
path: | | |
/var/cache/dnf | |
key: ${{ runner.os }}-dnf-${{ steps.get-date.outputs.date }} | |
- name: Install Dependencies | |
run: | | |
dnf -y install clang git meson cargo expect pkgconf-pkg-config \ | |
openssl-devel openssl opensc p11-kit-devel gnutls-utils \ | |
gcc g++ zlib-devel sqlite-devel python3-six which | |
- name: Checkout Repository | |
uses: actions/checkout@v4 | |
- name: Get Kryoptic | |
id: kryoptic_setup | |
run: | | |
git clone https://github.com/latchset/kryoptic.git | |
cd kryoptic | |
echo "KRYOPTIC=${PWD}" >> "$GITHUB_OUTPUT" | |
- name: Generate lock file | |
run: | | |
cd kryoptic | |
cargo generate-lockfile | |
- name: Cache Rust dependencies | |
uses: actions/cache@v4 | |
with: | |
path: | | |
~/.cargo/bin/ | |
~/.cargo/registry/index/ | |
~/.cargo/registry/cache/ | |
~/.cargo/git/db/ | |
kryoptic/target/ | |
key: ${{ runner.os }}-cargo-${{ hashFiles('kryoptic/**/Cargo.lock') }} | |
- name: Build Kryoptic | |
run: | | |
cd kryoptic | |
cargo build --features dynamic | |
cargo test --features dynamic | tee testout.log 2>&1 | |
grep -q "0 failed" testout.log | |
- name: Setup | |
run: | | |
git config --global --add safe.directory \ | |
/__w/pkcs11-provider/pkcs11-provider | |
git submodule update --init | |
meson setup builddir | |
- name: Build | |
run: | |
meson compile -C builddir | |
- name: Test | |
env: | |
KRYOPTIC: ${{ steps.kryoptic_setup.outputs.KRYOPTIC }} | |
run: | |
meson test --num-processes 1 -C builddir | |
- uses: actions/upload-artifact@v4 | |
if: failure() | |
with: | |
name: Test logs kryoptic | |
path: | | |
builddir/meson-logs/ | |
builddir/tests/tmp.kryoptic/p11prov-debug.log | |
builddir/tests/tmp.kryoptic/testvars | |
builddir/tests/tmp.kryoptic/openssl.cnf | |
builddir/tests/*.log |