2407 #350
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci | |
| on: | |
| pull_request: | |
| jobs: | |
| check_go_mod: | |
| name: check_go_mod | |
| runs-on: ubuntu-22.04 | |
| container: golang:1.21.9 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Check go.mod | |
| run: | | |
| git config --global --add safe.directory $(pwd) | |
| ./scripts/check-go.mod | |
| lint_markdown: | |
| name: lint_markdown | |
| runs-on: ubuntu-22.04 | |
| container: node:18-slim | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Install markdownlint | |
| run: npm install -g markdownlint-cli | |
| - name: Check for Lint | |
| run: markdownlint . | |
| check_source: | |
| name: check_source | |
| runs-on: ubuntu-22.04 | |
| container: golangci/golangci-lint:v1.59.1 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Check apptainer source | |
| run: | | |
| git config --global --add safe.directory $(pwd) | |
| ./mconfig -v -p /usr/local --with-suid | |
| make -C ./builddir check | |
| shellcheck: | |
| name: shellcheck | |
| runs-on: ubuntu-22.04 | |
| container: koalaman/shellcheck-alpine | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: shellcheck files that appear to be sh or bash scripts (or some cousin thereof) | |
| run: | | |
| shellcheck $( ./scripts/get-shell-files.sh ) | |
| alpine: | |
| name: alpine | |
| runs-on: ubuntu-22.04 | |
| container: golang:1.22-alpine | |
| steps: | |
| - name: Fetch deps | |
| run: apk add -q --no-cache git bash alpine-sdk automake libtool linux-headers libarchive-dev util-linux-dev libuuid openssl-dev gawk sed cryptsetup | |
| - uses: actions/checkout@v2 | |
| - name: Build Apptainer | |
| run: | | |
| git config --global --add safe.directory $(pwd) | |
| ./mconfig -v -p /usr/local --with-suid | |
| make -C ./builddir all | |
| oldgo: | |
| name: oldgo | |
| runs-on: ubuntu-22.04 | |
| # match the minimum version required by mconfig | |
| container: golang:1.21-alpine | |
| steps: | |
| - name: Fetch deps | |
| run: apk add -q --no-cache git bash alpine-sdk automake libtool linux-headers libarchive-dev util-linux-dev libuuid openssl-dev gawk sed cryptsetup | |
| - uses: actions/checkout@v2 | |
| - name: Build Apptainer | |
| run: | | |
| git config --global --add safe.directory $(pwd) | |
| ./mconfig -v -p /usr/local --with-suid | |
| make -C ./builddir all | |
| check_test_corpus: | |
| name: check_test_corpus | |
| runs-on: ubuntu-22.04 | |
| container: golang:1.21.9 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Generate Certificates | |
| run: | | |
| git config --global --add safe.directory $(pwd) | |
| cd test/certs/ && go run ./gen_certs.go && cd ../.. | |
| - name: Check Test Corpus Tidiness | |
| run: git diff --exit-code -- | |
| check_license_dependencies: | |
| name: check_license_dependencies | |
| runs-on: ubuntu-22.04 | |
| container: golang:1.21.9 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Update LICENSE_DEPENDENCIES.md | |
| run: | | |
| git config --global --add safe.directory $(pwd) | |
| ./scripts/update-license-dependencies.sh | |
| - name: Check License Changes | |
| run: git diff --exit-code -- LICENSE_DEPENDENCIES.md | |
| debian: | |
| name: debian | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| # fetch tags as checkout@v2 doesn't do that by default | |
| - run: git fetch --prune --unshallow --tags --force | |
| - name: Build and test deb under docker | |
| env: | |
| OS_TYPE: debian | |
| OS_VERSION: 11 | |
| # setting GO_ARCH speeds things by using go binaries instead of source | |
| GO_ARCH: linux-amd64 | |
| run: ./scripts/ci-docker-run | |
| ubuntu-2310: | |
| name: debbuild-ubuntu23 | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| # fetch tags as checkout@v2 doesn't do that by default | |
| - run: git fetch --prune --unshallow --tags --force | |
| - name: Build and test deb under docker | |
| env: | |
| OS_TYPE: ubuntu | |
| OS_VERSION: '23.10' | |
| GO_ARCH: linux-amd64 | |
| run: ./scripts/ci-docker-run | |
| ubuntu-2404: | |
| name: debbuild-ubuntu24 | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| # fetch tags as checkout@v2 doesn't do that by default | |
| - run: git fetch --prune --unshallow --tags --force | |
| - name: Build and test deb under docker | |
| env: | |
| OS_TYPE: ubuntu | |
| OS_VERSION: 24.04 | |
| GO_ARCH: linux-amd64 | |
| run: ./scripts/ci-docker-run | |
| rpmbuild-rocky8: | |
| runs-on: ubuntu-22.04 | |
| name: rpmbuild-rocky8 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| # fetch tags as checkout@v2 doesn't do that by default | |
| - run: git fetch --prune --unshallow --tags --force | |
| - name: Build and test rpm under docker | |
| env: | |
| OS_TYPE: rockylinux | |
| OS_VERSION: 8 | |
| GO_ARCH: linux-amd64 | |
| run: ./scripts/ci-docker-run | |
| - name: Install and test unprivileged for rocky 8 | |
| env: | |
| OS_TYPE: rockylinux | |
| OS_VERSION: 8 | |
| TEST_TYPE: unpriv | |
| run: ./scripts/ci-docker-run | |
| - name: Install and test unprivileged for rocky 9 with rocky 8 container | |
| env: | |
| OS_TYPE: rockylinux | |
| OS_VERSION: 9 | |
| CONTAINER_VERS: rockylinux:8 | |
| TEST_TYPE: unpriv | |
| run: ./scripts/ci-docker-run | |
| - name: Install and test unprivileged for ubuntu 20.04 | |
| env: | |
| OS_TYPE: ubuntu | |
| OS_VERSION: 20.04 | |
| TEST_TYPE: unpriv | |
| run: ./scripts/ci-docker-run | |
| - name: Install and test unprivileged for debian 11 | |
| env: | |
| OS_TYPE: debian | |
| OS_VERSION: 11 | |
| TEST_TYPE: unpriv | |
| run: ./scripts/ci-docker-run | |
| - name: Install and test unprivileged for openSUSE leap | |
| env: | |
| OS_TYPE: opensuse/leap | |
| OS_VERSION: latest | |
| TEST_TYPE: unpriv | |
| run: ./scripts/ci-docker-run | |
| rpmbuild-rocky9: | |
| runs-on: ubuntu-22.04 | |
| name: rpmbuild-rocky9 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| # fetch tags as checkout@v2 doesn't do that by default | |
| - run: git fetch --prune --unshallow --tags --force | |
| - name: Build and test rpm under docker | |
| env: | |
| OS_TYPE: rockylinux | |
| OS_VERSION: 9 | |
| GO_ARCH: linux-amd64 | |
| run: ./scripts/ci-docker-run | |
| - name: Install and test unprivileged for rocky 9 | |
| env: | |
| OS_TYPE: rockylinux | |
| OS_VERSION: 9 | |
| TEST_TYPE: unpriv | |
| run: ./scripts/ci-docker-run | |
| - name: Install and test unprivileged for ubuntu 22.04 | |
| env: | |
| OS_TYPE: ubuntu | |
| OS_VERSION: 22.04 | |
| TEST_TYPE: unpriv | |
| run: ./scripts/ci-docker-run | |
| short_unit_tests: | |
| name: short_unit_tests | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| # fetch tags as checkout@v2 doesn't do that by default | |
| - run: git fetch --prune --unshallow --tags --force | |
| - name: Setup Go | |
| uses: actions/setup-go@v2 | |
| with: | |
| go-version: 1.21.9 | |
| - name: Fetch deps | |
| run: sudo apt-get -q update && sudo DEBIAN_FRONTEND=noninteractive apt-get install -y build-essential squashfs-tools squashfuse fuse-overlayfs fakeroot fuse2fs libseccomp-dev cryptsetup dbus-user-session | |
| - name: Build and install Apptainer | |
| run: | | |
| ./mconfig -v -p /usr/local --with-suid | |
| make -C ./builddir all && sudo make -C ./builddir install | |
| - name: Run unit tests | |
| run: make -C ./builddir short-unit-test | |
| - name: Check NFPM | |
| run: | | |
| go install github.com/goreleaser/nfpm/v2/cmd/nfpm@v2.10.0 | |
| go run ./dist/nfpm/generate.go -version $(./scripts/get-version) -prefix /usr/local | \ | |
| $HOME/go/bin/nfpm package -f /dev/stdin -p deb -t ./builddir | |
| integration_tests: | |
| name: integration_tests | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| # fetch tags as checkout@v2 doesn't do that by default | |
| - run: git fetch --prune --unshallow --tags --force | |
| - name: Setup Go | |
| uses: actions/setup-go@v2 | |
| with: | |
| go-version: 1.21.9 | |
| - name: Fetch deps | |
| run: sudo apt-get -q update && sudo DEBIAN_FRONTEND=noninteractive apt-get install -y build-essential squashfs-tools libseccomp-dev cryptsetup dbus-user-session | |
| - name: Build and install Apptainer | |
| run: | | |
| ./mconfig -v -p /usr/local --with-suid | |
| make -C ./builddir all && sudo make -C ./builddir install | |
| - name: Run integration tests | |
| run: make -C ./builddir integration-test | |
| e2e_tests: | |
| name: e2e_tests | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| # fetch tags as checkout@v2 doesn't do that by default | |
| - run: git fetch --prune --unshallow --tags --force | |
| - name: Check changes | |
| env: | |
| PROJECT_REF: ${{ github.ref }} | |
| PROJECT_REPOSITORY: ${{ github.repository }} | |
| PROJECT_PR_NUMBER: ${{ github.event.pull_request.number }} | |
| run: | | |
| git config --global --add safe.directory $(pwd) | |
| rc=0 | |
| ./scripts/should-e2e-run "${PROJECT_REPOSITORY}" "${PROJECT_REF##*/}" "${PROJECT_PR_NUMBER}" || rc=$? | |
| case $rc in | |
| 0) | |
| echo "Verifying critical changes" | |
| echo "run_tests=true" >> $GITHUB_ENV ;; | |
| 1) | |
| echo "No critical changes, skipping tests" ;; | |
| *) | |
| echo "E: ./scripts/should-e2e-run returned with exit code $rc. Abort." | |
| exit $rc ;; | |
| esac | |
| - name: Setup Go | |
| if: env.run_tests | |
| uses: actions/setup-go@v2 | |
| with: | |
| go-version: 1.21.9 | |
| - name: Fetch deps | |
| if: env.run_tests | |
| run: | | |
| set -e | |
| sudo apt-get -q update | |
| sudo DEBIAN_FRONTEND=noninteractive apt-get install -y build-essential uidmap squashfs-tools squashfuse fuse-overlayfs fakeroot fuse2fs libseccomp-dev cryptsetup dbus-user-session | |
| sudo DEBIAN_FRONTEND=noninteractive apt-get install -y autoconf automake libtool pkg-config libfuse3-dev zlib1g-dev | |
| - name: Download, compile, and install dependent packages | |
| if: env.run_tests | |
| run: | | |
| set -ex | |
| ./scripts/download-dependencies | |
| ./scripts/compile-dependencies | |
| sudo mkdir -p /usr/local/libexec/apptainer/bin | |
| sudo ./scripts/install-dependencies /usr/local/libexec | |
| # The fuse-overlayfs version from ubuntu-22.04, 1.7, is buggy, | |
| # so update to version 1.9 | |
| # See https://github.com/apptainer/apptainer/issues/796 | |
| - name: Update fuse-overlayfs version | |
| if: env.run_tests | |
| run: | | |
| sudo sh -c "echo 'deb http://old-releases.ubuntu.com/ubuntu kinetic universe' >/etc/apt/sources.list.d/kinetic.list" | |
| sudo apt-get -q update && sudo DEBIAN_FRONTEND=noninteractive apt-get install -y fuse-overlayfs | |
| - name: Enable full cgroups v2 delegation | |
| if: env.run_tests | |
| run: | | |
| sudo mkdir -p /etc/systemd/system/user@.service.d | |
| cat <<EOF | sudo tee /etc/systemd/system/user@.service.d/delegate.conf | |
| [Service] | |
| Delegate=cpu cpuset io memory pids | |
| EOF | |
| sudo systemctl daemon-reload | |
| - name: Build and install Apptainer | |
| if: env.run_tests | |
| run: | | |
| ./mconfig -v -p /usr/local --with-suid | |
| make -C ./builddir all && sudo make -C ./builddir install | |
| - name: Run E2E tests | |
| if: env.run_tests | |
| env: | |
| E2E_PARALLEL: 8 | |
| run: | | |
| # Set up systemd for the rootless cgroups tests | |
| systemctl --user daemon-reload | |
| systemctl --user start dbus | |
| export DBUS_SESSION_BUS_ADDRESS="unix:path=/run/user/$UID/bus" | |
| systemd-run --user --scope make -C ./builddir e2e-test | |
| - name: Upload artifacts | |
| if: env.run_tests | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: e2e-artifact | |
| path: builddir/e2e-cmd-report.txt | |
| retention-days: 7 | |
| check_pkg_no_buildcfg: | |
| name: check_pkg_no_buildcfg | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| # fetch tags as checkout@v2 doesn't do that by default | |
| - run: git fetch --prune --unshallow --tags --force | |
| - name: Setup Go | |
| uses: actions/setup-go@v2 | |
| with: | |
| go-version: 1.21.9 | |
| - name: Check pkg/... doesn't depend on buildcfg | |
| run: | | |
| if $(/usr/local/go/bin/go list -f '{{.Deps}}' ./pkg/... | grep -q buildcfg) | |
| then | |
| echo "Prohibited buildcfg dependency found in pkg/:" | |
| echo | |
| /usr/local/go/bin/go list -f '{{.ImportPath}} - {{.Deps}}' ./pkg/... | grep buildcfg | |
| exit 1 | |
| fi |