Merge pull request #112 from bodgit/issue89

test: Fix tests on Ubuntu 22.04

.github/workflows/build.yml

@@ -0,0 +1,129 @@
+name: Build
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  workflow_dispatch:
+  schedule:
+    - cron: 0 0 * * 1
+
+jobs:
+  test:
+    name: Build and Test
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        go:
+          - '1.19'
+          - '1.20'
+
+    env:
+      DNS_HOST: ns.example.com
+      DNS_PORT: 8053
+      DNS_REALM: EXAMPLE.COM
+      DNS_USERNAME: test
+      DNS_PASSWORD: password
+      DNS_KEYTAB: ${{ github.workspace }}/testdata/test.keytab
+      KRB5_CONFIG: ${{ github.workspace }}/testdata/krb5.conf
+      KRB5_KTNAME: ${{ github.workspace }}/testdata/dns.keytab
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: ${{ matrix.go }}
+
+      #- name: golangci-lint
+      #  uses: golangci/golangci-lint-action@v3
+      #  if: github.event_name == 'pull_request'
+      #  with:
+      #    only-new-issues: true
+
+      - name: Install Kerberos client
+        run: |
+          sudo DEBIAN_FRONTEND=noninteractive apt-get install -yq libkrb5-dev krb5-user
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build KDC image
+        uses: docker/build-push-action@v5
+        with:
+          context: "{{defaultContext}}:testdata"
+          load: true
+          tags: kdc
+          target: kdc
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Build DNS image
+        uses: docker/build-push-action@v5
+        with:
+          context: "{{defaultContext}}:testdata"
+          load: true
+          tags: ns
+          target: ns
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Extract keytab
+        uses: docker/build-push-action@v5
+        with:
+          context: "{{defaultContext}}:testdata"
+          outputs: type=local,dest=testdata
+          target: keytab
+
+      - name: Pull containers into Podman
+        run: |
+          podman pull docker-daemon:kdc:latest
+          podman pull docker-daemon:ns:latest
+
+      - name: Create infrastructure
+        run: |
+          podman run -d \
+            -v /etc/localtime:/etc/localtime:ro \
+            -p 127.0.0.1:8088:8088 \
+            -p 127.0.0.1:8088:8088/udp \
+            -p 127.0.0.1:8464:8464 \
+            -p 127.0.0.1:8464:8464/udp \
+            --name kdc kdc
+          podman run -d \
+            -v /etc/localtime:/etc/localtime:ro \
+            -p 127.0.0.1:${DNS_PORT}:${DNS_PORT} \
+            --name ns --hostname $DNS_HOST ns
+          echo 127.0.0.1 $DNS_HOST | sudo tee -a /etc/hosts
+          echo $DNS_PASSWORD | KRB5_TRACE=/dev/stdout kinit ${DNS_USERNAME}@${DNS_REALM}
+
+      - name: Test (gokrb5)
+        run: go test -v -coverprofile=gokrb5.out ./...
+
+      - name: Test (apcera)
+        run: go test -v -coverprofile=apcera.out -tags apcera ./...
+
+      - name: Build (SSPI)
+        run: go build ./...
+        env:
+          GOARCH: amd64
+          GOOS: windows
+
+      - name: Install coverage tools
+        run: |
+          go get github.com/wadey/gocovmerge
+          go get github.com/mattn/goveralls
+        env:
+          GO111MODULE: off
+
+      - name: Merge coverage reports
+        run: gocovmerge gokrb5.out apcera.out >cover.out
+
+      - name: Send coverage
+        run: goveralls -coverprofile=cover.out -service=github
+        env:
+          COVERALLS_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/cleanup.yml

@@ -0,0 +1,37 @@
+name: Clean up per-branch caches
+
+on:
+  pull_request:
+    types:
+      - closed
+  workflow_dispatch:
+
+jobs:
+  cleanup:
+    runs-on: ubuntu-latest
+
+    permissions:
+      actions: write
+      contents: read
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Cleanup
+        run: |
+          gh extension install actions/gh-actions-cache
+
+          BRANCH=refs/pull/${{ github.event.pull_request.number }}/merge
+
+          echo "Fetching list of cache keys"
+          keys=$(gh actions-cache list -R $GITHUB_REPOSITORY -B $BRANCH -L 100 | cut -f 1)
+
+          set +e
+          echo "Deleting caches..."
+          for key in $keys ; do
+            gh actions-cache delete $key -R $GITHUB_REPOSITORY -B $BRANCH --confirm
+          done
+          echo "Done"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr-lint.yml

@@ -0,0 +1,43 @@
+name: Lint pull request
+
+on:
+  pull_request:
+    types:
+      - opened
+      - edited
+      - synchronize
+
+jobs:
+  main:
+    name: Validate PR title
+    runs-on: ubuntu-latest
+
+    permissions:
+      pull-requests: write
+
+    steps:
+      - uses: amannn/action-semantic-pull-request@v5
+        id: lint_pr_title
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - uses: marocchino/sticky-pull-request-comment@v2
+        if: always() && steps.lint_pr_title.outputs.error_message != null
+        with:
+          header: pr-title-lint-error
+          message: |
+            Hey there and thank you for opening this pull request! 👋🏼
+
+            We require pull request titles to follow the [Conventional Commits specification](https://www.conventionalcommits.org/en/v1.0.0/) and it looks like your proposed title needs to be adjusted.
+
+            Details:
+
+            ```
+            ${{ steps.lint_pr_title.outputs.error_message }}
+            ```
+
+      - uses: marocchino/sticky-pull-request-comment@v2
+        if: steps.lint_pr_title.outputs.error_message == null
+        with:
+          header: pr-title-lint-error
+          delete: true

.github/workflows/release.yml

@@ -0,0 +1,17 @@
+name: Track releases
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Run release-please
+        uses: google-github-actions/release-please-action@v3
+        with:
+          command: manifest
+          token: ${{ secrets.RELEASE_TOKEN }}

.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "1.2.2"
+}

README.md

@@ -1,10 +1,10 @@
 [![GitHub release](https://img.shields.io/github/v/release/bodgit/tsig)](https://github.com/bodgit/tsig/releases)
-[![Build Status](https://img.shields.io/github/actions/workflow/status/bodgit/tsig/main.yml?branch=main)](https://github.com/bodgit/tsig/actions?query=workflow%3Abuild)
-[![Coverage Status](https://coveralls.io/repos/github/bodgit/tsig/badge.svg?branch=master)](https://coveralls.io/github/bodgit/tsig?branch=master)
+[![Build Status](https://img.shields.io/github/actions/workflow/status/bodgit/tsig/build.yml?branch=main)](https://github.com/bodgit/tsig/actions?query=workflow%3ABuild)
+[![Coverage Status](https://coveralls.io/repos/github/bodgit/tsig/badge.svg?branch=main)](https://coveralls.io/github/bodgit/tsig?branch=main)
 [![Go Report Card](https://goreportcard.com/badge/github.com/bodgit/tsig)](https://goreportcard.com/report/github.com/bodgit/tsig)
 [![GoDoc](https://godoc.org/github.com/bodgit/tsig?status.svg)](https://godoc.org/github.com/bodgit/tsig)
+![Go version](https://img.shields.io/badge/Go-1.20-brightgreen.svg)
 ![Go version](https://img.shields.io/badge/Go-1.19-brightgreen.svg)
-![Go version](https://img.shields.io/badge/Go-1.18-brightgreen.svg)
 
 # Additional TSIG methods
 

release-please-config.json

@@ -0,0 +1,6 @@
+{
+  "packages": {
+    ".": {}
+  },
+  "release-type": "go"
+}