.github/workflows/build.yml - master - githubmirror/sssd

.github/workflows/build.yml
126 строк4 KB
Pavel Březina
ci: serialize make distcheck in build.yml
24 июл 2026, 17:42
24 июл 2026, 17:42df13bd9
name: Build
on:
  push:
  pull_request:
    # do not run if only system tests were edited inside a pull request
    paths-ignore:
    - 'src/tests/system/**'
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
jobs:
  make-distcheck:
    if: github.event_name == 'push' || !contains(github.event.pull_request.labels.*.name, 'Accepted')
    runs-on: ubuntu-latest
    container: quay.io/sssd/ci-client-devel:latest
    permissions:
      contents: read
    steps:
    - name: Checkout repository
      uses: actions/checkout@v7

    - name: Install dependencies
      id: dependencies
      uses: ./.github/actions/install-dependencies

    - name: Configure sssd
      uses: ./.github/actions/configure

    - name: make
      shell: bash
      working-directory: x86_64
      run: |
        source ../contrib/fedora/bashrc_sssd
        make CFLAGS+="$SSS_WARNINGS -Werror" -j$PROCESSORS

    - name: make check
      shell: bash
      working-directory: x86_64
      run: |
        source ../contrib/fedora/bashrc_sssd
        make CFLAGS+="$SSS_WARNINGS -Werror" -j$PROCESSORS check

    - name: make distcheck
      shell: bash
      working-directory: x86_64
      run: |
        source ../contrib/fedora/bashrc_sssd

        # parallel distcheck is full of race conditions
        make -j1 distcheck

    - uses: actions/upload-artifact@v7
      if: always()
      with:
        name: build
        path: |
          x86_64/config.log
          x86_64/config.h
          x86_64/test-suite.log
        if-no-files-found: ignore

  freebsd:
    if: github.event_name == 'push' || !contains(github.event.pull_request.labels.*.name, 'Accepted')
    runs-on: ubuntu-latest
    steps:
      - name: Repository checkout
        uses: actions/checkout@v7
      - uses: cross-platform-actions/action@v1.3.0
        with:
          operating_system: 'freebsd'
          version: '15.0'
          architecture: 'x86_64'
          run: |
            # Use latest package set
            sudo mkdir -p /usr/local/etc/pkg/repos/
            sudo cp /etc/pkg/FreeBSD.conf /usr/local/etc/pkg/repos/FreeBSD.conf
            sudo sed -i.bak -e 's|/quarterly|/latest|' /usr/local/etc/pkg/repos/FreeBSD.conf

            # Trick SSSD into believing that nsupdate supports 'realm' clause
            # until FreeBSD switches to MIT Kerberos by default
            # Can be removed with FreeBSD 15
            sed -i.bak -e 's|echo realm|echo class IN|g' src/external/nsupdate.m4

            # Patch the regexp to make the test pass
            # See https://github.com/SSSD/sssd/pull/8227
            sed -i.bak -e 's,\\(domain\\|application\\),[domainapplication]\\{1\,\\},g' \
                src/config/cfg_rules.ini

            echo "::group::Dependencies installation"
            sudo -E pkg install -y \
                autoconf automake gettext-tools gmake libtool pkgconf \
                ldb25 popt samba416 talloc tdb tevent adcli realmd libfido2 \
                bind-tools c-ares ding-libs git jose libinotify libuuid libxml2 \
                libxslt krb5 pcre2 python3 xmlcatmgr docbook-xsl \
                check cmocka cwrap softhsm2
            echo "::endgroup::"

            echo "::group::Build configuration"
            autoreconf -f -i

            env CFLAGS=-isystem/usr/local/include \
                CPPFLAGS='-isystem/usr/local/include' \
                LDFLAGS=-L/usr/local/lib \
                KRB5_CONFIG=/usr/local/bin/krb5-config \
                SOFTHSM2_PATH=/usr/local/lib/softhsm/libsofthsm2.so \
                MAKE=gmake \
                LIBS=-lintl \
                ./configure --disable-cifs-idmap-plugin \
                    --disable-linux-caps \
                    --without-autofs \
                    --without-selinux \
                    --without-nfsv4-idmapd-plugin \
                    --with-smb-idmap-interface-version=6 \
                    --with-adcli-path=${LOCALBASE}/sbin/adcli \
                    --with-realm-path=${LOCALBASE}/sbin/realm \
                    --with-xml-catalog-path=/usr/local/share/xml/catalog \
                    --with-passkey
            echo "::endgroup::"

            echo "::group::Building"
            gmake -j $(sysctl -n hw.ncpu)
            echo "::endgroup::"

            echo "::group::Testing"
            gmake check
            echo "::endgroup::"