Skip to content

Add testing against kryoptic in CI #14

Add testing against kryoptic in CI

Add testing against kryoptic in CI #14

Workflow file for this run

---
name: Kryoptic
on:
push:
branches: ["main"]
pull_request:
branches: ["main"]
jobs:
build:
name: CI with kryoptic token
runs-on: ubuntu-22.04
container: fedora:latest
steps:
- name: Get Date for DNF cache entry
id: get-date
run: |
echo "date=$(/bin/date -u "+%Y%V")" >> $GITHUB_OUTPUT
shell: bash
- name: Restore DNF cache
uses: actions/cache/restore@v4
with:
path: |
/var/cache/dnf
key: ${{ runner.os }}-dnf-${{ steps.get-date.outputs.date }}
- name: Install Dependencies
run: |
dnf -y install clang git meson cargo \
pkgconf-pkg-config openssl-devel openssl opensc \
p11-kit-devel p11-kit-server gnutls-utils \
gcc g++ perl-interpreter zlib-devel sqlite-devel \
'perl(Module::Load::Conditional)' 'perl(File::Temp)' \
'perl(IPC::Cmd)' 'perl(FindBin)' 'perl(lib)' \
'perl(File::Compare)' 'perl(File::Copy)'
- name: Store DNF cache
uses: actions/cache@v4
with:
path: |
/var/cache/dnf
key: ${{ runner.os }}-dnf-${{ steps.get-date.outputs.date }}
- name: Checkout Repository
uses: actions/checkout@v4
- name: Setup Kryoptic
id: kryoptic_setup
run: |
git clone https://github.com/latchset/kryoptic.git
cd kryoptic
git submodule update --init
echo "KRYOPTIC=${PWD}" >> "$GITHUB_OUTPUT"
echo "OSSLHEAD=${PWD}/.git/modules/openssl/HEAD" >> "$GITHUB_OUTPUT"
cd ~
echo "TILDE=${PWD}" >> "$GITHUB_OUTPUT"
echo ${PWD)
- name: Restore OpenSSL build
uses: actions/cache/restore@v4
id: cache
with:
path: |
{{ steps.kryoptic_setup.outputs.KRYOPTIC }}/openssl/
key: ${{ runner.os }}-ossl-${{ hashFiles(steps.kryoptic_setup.outputs.OSSLHEAD) }}
- name: Generate lock file
run: |
cd ${{ steps.kryoptic_setup.outputs.KRYOPTIC }}
cargo generate-lockfile
- name: Cache Rust dependencies
env:
KRYOPTIC: ${{ steps.kryoptic_setup.outputs.KRYOPTIC }}
uses: actions/cache@v4
with:
path: |
~/.cargo/bin/
~/.cargo/registry/index/
~/.cargo/registry/cache/
~/.cargo/git/db/
${{ steps.kryoptic_setup.outputs.KRYOPTIC }}/target/
key: ${{ runner.os }}-cargo-${{ hashFiles('kryoptic/**/Cargo.lock') }}
- name: Build Kryoptic
run: |
cd ${{ steps.kryoptic_setup.outputs.KRYOPTIC }}
cargo build
cargo test | tee testout.log 2>&1
grep -q "0 failed" testout.log
- name: Setup
run:
meson setup builddir
- name: Build
run:
meson compile -C builddir
- name: Test
env:
KRYOPTIC: ${{ steps.kryoptic_setup.outputs.KRYOPTIC }}
run:
meson test --num-processes 1 -C builddir
- uses: actions/upload-artifact@v3
if: failure()
with:
name: Test logs kryoptic
path: |
builddir/meson-logs/
builddir/tests/tmp.kryoptic/p11prov-debug.log
builddir/tests/tmp.kryoptic/testvars
builddir/tests/tmp.kryoptic/openssl.cnf
- if: ${{ steps.cache.outputs.cache-hit != 'true' }}
name: Cache OpenSSL build
uses: actions/cache/save@v4
with:
path: |
${{ steps.kryoptic_setup.outputs.KRYOPTIC }}/openssl/
key: ${{ runner.os }}-ossl-${{ hashFiles(steps.kryoptic_setup.outputs.OSSLHEAD) }}