2376 #303

Workflow file for this run

	name: ci
	on:
	pull_request:

	jobs:
	check_go_mod:
	name: check_go_mod
	runs-on: ubuntu-22.04
	container: golang:1.21.9
	steps:
	- uses: actions/checkout@v2

	- name: Check go.mod
	run: \|
	git config --global --add safe.directory $(pwd)
	./scripts/check-go.mod

	lint_markdown:
	name: lint_markdown
	runs-on: ubuntu-22.04
	container: node:18-slim
	steps:
	- uses: actions/checkout@v2

	- name: Install markdownlint
	run: npm install -g markdownlint-cli

	- name: Check for Lint
	run: markdownlint .

	check_source:
	name: check_source
	runs-on: ubuntu-22.04
	container: golangci/golangci-lint:v1.59.1
	steps:
	- uses: actions/checkout@v2

	- name: Check apptainer source
	run: \|
	git config --global --add safe.directory $(pwd)
	./mconfig -v -p /usr/local --with-suid
	make -C ./builddir check

	shellcheck:
	name: shellcheck
	runs-on: ubuntu-22.04
	container: koalaman/shellcheck-alpine
	steps:
	- uses: actions/checkout@v2
	- name: shellcheck files that appear to be sh or bash scripts (or some cousin thereof)
	run: \|
	shellcheck $( ./scripts/get-shell-files.sh )

	alpine:
	name: alpine
	runs-on: ubuntu-22.04
	container: golang:1.22-alpine
	steps:
	- name: Fetch deps
	run: apk add -q --no-cache git bash alpine-sdk automake libtool linux-headers libarchive-dev util-linux-dev libuuid openssl-dev gawk sed cryptsetup

	- uses: actions/checkout@v2

	- name: Build Apptainer
	run: \|
	git config --global --add safe.directory $(pwd)
	./mconfig -v -p /usr/local --with-suid
	make -C ./builddir all

	oldgo:
	name: oldgo
	runs-on: ubuntu-22.04
	# match the minimum version required by mconfig
	container: golang:1.21-alpine
	steps:
	- name: Fetch deps
	run: apk add -q --no-cache git bash alpine-sdk automake libtool linux-headers libarchive-dev util-linux-dev libuuid openssl-dev gawk sed cryptsetup

	- uses: actions/checkout@v2

	- name: Build Apptainer
	run: \|
	git config --global --add safe.directory $(pwd)
	./mconfig -v -p /usr/local --with-suid
	make -C ./builddir all

	check_test_corpus:
	name: check_test_corpus
	runs-on: ubuntu-22.04
	container: golang:1.21.9
	steps:
	- uses: actions/checkout@v2

	- name: Generate Certificates
	run: \|
	git config --global --add safe.directory $(pwd)
	cd test/certs/ && go run ./gen_certs.go && cd ../..

	- name: Check Test Corpus Tidiness
	run: git diff --exit-code --

	check_license_dependencies:
	name: check_license_dependencies
	runs-on: ubuntu-22.04
	container: golang:1.21.9
	steps:
	- uses: actions/checkout@v2

	- name: Update LICENSE_DEPENDENCIES.md
	run: \|
	git config --global --add safe.directory $(pwd)
	./scripts/update-license-dependencies.sh

	- name: Check License Changes
	run: git diff --exit-code -- LICENSE_DEPENDENCIES.md

	debian:
	name: debian
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@v2
	# fetch tags as checkout@v2 doesn't do that by default
	- run: git fetch --prune --unshallow --tags --force

	- name: Build and test deb under docker
	env:
	OS_TYPE: debian
	OS_VERSION: 11
	# setting GO_ARCH speeds things by using go binaries instead of source
	GO_ARCH: linux-amd64
	run: ./scripts/ci-docker-run

	ubuntu-2310:
	name: debbuild-ubuntu23
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@v2
	# fetch tags as checkout@v2 doesn't do that by default
	- run: git fetch --prune --unshallow --tags --force

	- name: Build and test deb under docker
	env:
	OS_TYPE: ubuntu
	OS_VERSION: '23.10'
	GO_ARCH: linux-amd64
	run: ./scripts/ci-docker-run

	ubuntu-2404:
	name: debbuild-ubuntu24
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@v2
	# fetch tags as checkout@v2 doesn't do that by default
	- run: git fetch --prune --unshallow --tags --force

	- name: Build and test deb under docker
	env:
	OS_TYPE: ubuntu
	OS_VERSION: 24.04
	GO_ARCH: linux-amd64
	run: ./scripts/ci-docker-run

	rpmbuild-rocky8:
	runs-on: ubuntu-22.04
	name: rpmbuild-rocky8
	steps:
	- uses: actions/checkout@v2
	# fetch tags as checkout@v2 doesn't do that by default
	- run: git fetch --prune --unshallow --tags --force

	- name: Build and test rpm under docker
	env:
	OS_TYPE: rockylinux
	OS_VERSION: 8
	GO_ARCH: linux-amd64
	run: ./scripts/ci-docker-run

	- name: Install and test unprivileged for rocky 8
	env:
	OS_TYPE: rockylinux
	OS_VERSION: 8
	TEST_TYPE: unpriv
	run: ./scripts/ci-docker-run

	- name: Install and test unprivileged for rocky 9 with rocky 8 container
	env:
	OS_TYPE: rockylinux
	OS_VERSION: 9
	CONTAINER_VERS: rockylinux:8
	TEST_TYPE: unpriv
	run: ./scripts/ci-docker-run

	- name: Install and test unprivileged for ubuntu 20.04
	env:
	OS_TYPE: ubuntu
	OS_VERSION: 20.04
	TEST_TYPE: unpriv
	run: ./scripts/ci-docker-run

	- name: Install and test unprivileged for debian 11
	env:
	OS_TYPE: debian
	OS_VERSION: 11
	TEST_TYPE: unpriv
	run: ./scripts/ci-docker-run

	- name: Install and test unprivileged for openSUSE leap
	env:
	OS_TYPE: opensuse/leap
	OS_VERSION: latest
	TEST_TYPE: unpriv
	run: ./scripts/ci-docker-run

	rpmbuild-rocky9:
	runs-on: ubuntu-22.04
	name: rpmbuild-rocky9
	steps:
	- uses: actions/checkout@v2
	# fetch tags as checkout@v2 doesn't do that by default
	- run: git fetch --prune --unshallow --tags --force

	- name: Build and test rpm under docker
	env:
	OS_TYPE: rockylinux
	OS_VERSION: 9
	GO_ARCH: linux-amd64
	run: ./scripts/ci-docker-run

	- name: Install and test unprivileged for rocky 9
	env:
	OS_TYPE: rockylinux
	OS_VERSION: 9
	TEST_TYPE: unpriv
	run: ./scripts/ci-docker-run

	- name: Install and test unprivileged for ubuntu 22.04
	env:
	OS_TYPE: ubuntu
	OS_VERSION: 22.04
	TEST_TYPE: unpriv
	run: ./scripts/ci-docker-run

	short_unit_tests:
	name: short_unit_tests
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@v2
	# fetch tags as checkout@v2 doesn't do that by default
	- run: git fetch --prune --unshallow --tags --force

	- name: Setup Go
	uses: actions/setup-go@v2
	with:
	go-version: 1.21.9

	- name: Fetch deps
	run: sudo apt-get -q update && sudo DEBIAN_FRONTEND=noninteractive apt-get install -y build-essential squashfs-tools squashfuse fuse-overlayfs fakeroot fuse2fs libseccomp-dev cryptsetup dbus-user-session

	- name: Build and install Apptainer
	run: \|
	./mconfig -v -p /usr/local --with-suid
	make -C ./builddir all && sudo make -C ./builddir install

	- name: Run unit tests
	run: make -C ./builddir short-unit-test

	- name: Check NFPM
	run: \|
	go install github.com/goreleaser/nfpm/v2/cmd/nfpm@v2.10.0
	go run ./dist/nfpm/generate.go -version $(./scripts/get-version) -prefix /usr/local \| \
	$HOME/go/bin/nfpm package -f /dev/stdin -p deb -t ./builddir

	integration_tests:
	name: integration_tests
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@v2
	# fetch tags as checkout@v2 doesn't do that by default
	- run: git fetch --prune --unshallow --tags --force

	- name: Setup Go
	uses: actions/setup-go@v2
	with:
	go-version: 1.21.9

	- name: Fetch deps
	run: sudo apt-get -q update && sudo DEBIAN_FRONTEND=noninteractive apt-get install -y build-essential squashfs-tools libseccomp-dev cryptsetup dbus-user-session

	- name: Build and install Apptainer
	run: \|
	./mconfig -v -p /usr/local --with-suid
	make -C ./builddir all && sudo make -C ./builddir install

	- name: Run integration tests
	run: make -C ./builddir integration-test

	e2e_tests:
	name: e2e_tests
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@v2
	# fetch tags as checkout@v2 doesn't do that by default
	- run: git fetch --prune --unshallow --tags --force

	- name: Check changes
	env:
	PROJECT_REF: ${{ github.ref }}
	PROJECT_REPOSITORY: ${{ github.repository }}
	PROJECT_PR_NUMBER: ${{ github.event.pull_request.number }}
	run: \|
	git config --global --add safe.directory $(pwd)
	rc=0
	./scripts/should-e2e-run "${PROJECT_REPOSITORY}" "${PROJECT_REF##*/}" "${PROJECT_PR_NUMBER}" \|\| rc=$?
	case $rc in
	0)
	echo "Verifying critical changes"
	echo "run_tests=true" >> $GITHUB_ENV ;;
	1)
	echo "No critical changes, skipping tests" ;;
	*)
	echo "E: ./scripts/should-e2e-run returned with exit code $rc. Abort."
	exit $rc ;;
	esac

	- name: Setup Go
	if: env.run_tests
	uses: actions/setup-go@v2
	with:
	go-version: 1.21.9

	- name: Fetch deps
	if: env.run_tests
	run: \|
	set -e
	sudo apt-get -q update
	sudo DEBIAN_FRONTEND=noninteractive apt-get install -y build-essential uidmap squashfs-tools squashfuse fuse-overlayfs fakeroot fuse2fs libseccomp-dev cryptsetup dbus-user-session
	sudo DEBIAN_FRONTEND=noninteractive apt-get install -y autoconf automake libtool pkg-config libfuse3-dev zlib1g-dev

	- name: Download, compile, and install dependent packages
	if: env.run_tests
	run: \|
	set -ex
	./scripts/download-dependencies
	./scripts/compile-dependencies
	sudo mkdir -p /usr/local/libexec/apptainer/bin
	sudo ./scripts/install-dependencies /usr/local/libexec

	# The fuse-overlayfs version from ubuntu-22.04, 1.7, is buggy,
	# so update to version 1.9
	# See https://github.com/apptainer/apptainer/issues/796
	- name: Update fuse-overlayfs version
	if: env.run_tests
	run: \|
	sudo sh -c "echo 'deb http://old-releases.ubuntu.com/ubuntu kinetic universe' >/etc/apt/sources.list.d/kinetic.list"
	sudo apt-get -q update && sudo DEBIAN_FRONTEND=noninteractive apt-get install -y fuse-overlayfs

	- name: Enable full cgroups v2 delegation
	if: env.run_tests
	run: \|
	sudo mkdir -p /etc/systemd/system/user@.service.d
	cat <<EOF \| sudo tee /etc/systemd/system/user@.service.d/delegate.conf
	[Service]
	Delegate=cpu cpuset io memory pids
	EOF
	sudo systemctl daemon-reload

	- name: Build and install Apptainer
	if: env.run_tests
	run: \|
	./mconfig -v -p /usr/local --with-suid
	make -C ./builddir all && sudo make -C ./builddir install

	- name: Run E2E tests
	if: env.run_tests
	env:
	E2E_PARALLEL: 8
	run: \|
	# Set up systemd for the rootless cgroups tests
	systemctl --user daemon-reload
	systemctl --user start dbus
	export DBUS_SESSION_BUS_ADDRESS="unix:path=/run/user/$UID/bus"
	systemd-run --user --scope make -C ./builddir e2e-test

	- name: Upload artifacts
	if: env.run_tests
	uses: actions/upload-artifact@v2
	with:
	name: e2e-artifact
	path: builddir/e2e-cmd-report.txt
	retention-days: 7

	check_pkg_no_buildcfg:
	name: check_pkg_no_buildcfg
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@v2
	# fetch tags as checkout@v2 doesn't do that by default
	- run: git fetch --prune --unshallow --tags --force

	- name: Setup Go
	uses: actions/setup-go@v2
	with:
	go-version: 1.21.9

	- name: Check pkg/... doesn't depend on buildcfg
	run: \|
	if $(/usr/local/go/bin/go list -f '{{.Deps}}' ./pkg/... \| grep -q buildcfg)
	then
	echo "Prohibited buildcfg dependency found in pkg/:"
	echo
	/usr/local/go/bin/go list -f '{{.ImportPath}} - {{.Deps}}' ./pkg/... \| grep buildcfg
	exit 1
	fi

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

2376 #303

Workflow file

2376 #303

Jobs

Run details

Workflow file for this run