123 lines
3.3 KiB
YAML
123 lines
3.3 KiB
YAML
.golang-inputs: &golang_inputs
|
|
runOnMR: true
|
|
runOnBranches: '^master$'
|
|
outputDir: artifacts
|
|
runner: linux-x86-8cpu-16gb
|
|
stage: build
|
|
golangVersion: "boring-1.24"
|
|
imageVersion: "3371-f5539bd6f83d@sha256:a2a68f580070f9411d0d3155959ed63b700ef319b5fcc62db340e92227bbc628"
|
|
CGO_ENABLED: 1
|
|
|
|
.default-packaging-job: &packaging-job-defaults
|
|
stage: build
|
|
needs:
|
|
- ci-image-get-image-ref
|
|
rules:
|
|
- !reference [.default-rules, run-on-master]
|
|
image: $BUILD_IMAGE
|
|
cache: {}
|
|
artifacts:
|
|
paths:
|
|
- artifacts/*
|
|
|
|
include:
|
|
###################
|
|
### Linux Build ###
|
|
###################
|
|
- component: $CI_SERVER_FQDN/cloudflare/ci/golang/boring-make@~latest
|
|
inputs:
|
|
<<: *golang_inputs
|
|
jobPrefix: linux-build
|
|
GOLANG_MAKE_TARGET: ci-build
|
|
|
|
########################
|
|
### Linux FIPS Build ###
|
|
########################
|
|
- component: $CI_SERVER_FQDN/cloudflare/ci/golang/boring-make@~latest
|
|
inputs:
|
|
<<: *golang_inputs
|
|
jobPrefix: linux-fips-build
|
|
GOLANG_MAKE_TARGET: ci-fips-build
|
|
|
|
#################
|
|
### Unit Tests ##
|
|
#################
|
|
- component: $CI_SERVER_FQDN/cloudflare/ci/golang/boring-make@~latest
|
|
inputs:
|
|
<<: *golang_inputs
|
|
stage: test
|
|
jobPrefix: test
|
|
GOLANG_MAKE_TARGET: ci-test
|
|
|
|
######################
|
|
### Unit Tests FIPS ##
|
|
######################
|
|
- component: $CI_SERVER_FQDN/cloudflare/ci/golang/boring-make@~latest
|
|
inputs:
|
|
<<: *golang_inputs
|
|
stage: test
|
|
jobPrefix: test-fips
|
|
GOLANG_MAKE_TARGET: ci-fips-test
|
|
|
|
#################
|
|
### Vuln Check ##
|
|
#################
|
|
- component: $CI_SERVER_FQDN/cloudflare/ci/golang/boring-make@~latest
|
|
inputs:
|
|
<<: *golang_inputs
|
|
runOnBranches: '^$'
|
|
stage: validate
|
|
jobPrefix: vulncheck
|
|
GOLANG_MAKE_TARGET: vulncheck
|
|
|
|
#################################
|
|
### Run Linux Component Tests ###
|
|
#################################
|
|
component-tests-linux: &component-tests-linux
|
|
stage: test
|
|
extends: .component-tests
|
|
needs:
|
|
- ci-image-get-image-ref
|
|
- linux-build-boring-make
|
|
script:
|
|
- ./.ci/scripts/component-tests.sh
|
|
variables: &component-tests-variables
|
|
CI: 1
|
|
COMPONENT_TESTS_CONFIG_CONTENT: Y2xvdWRmbGFyZWRfYmluYXJ5OiAuL2Nsb3VkZmxhcmVkCmNyZWRlbnRpYWxzX2ZpbGU6IGNyZWQuanNvbgpvcmlnaW5jZXJ0OiBjZXJ0LnBlbQp6b25lX2RvbWFpbjogYXJnb3R1bm5lbHRlc3QuY29tCnpvbmVfdGFnOiA0ODc5NmYxZTcwYmI3NjY5YzI5YmI1MWJhMjgyYmY2NQ==
|
|
tags:
|
|
- linux-x86-8cpu-16gb
|
|
artifacts:
|
|
reports:
|
|
junit: report.xml
|
|
|
|
######################################
|
|
### Run Linux FIPS Component Tests ###
|
|
######################################
|
|
component-tests-linux-fips:
|
|
<<: *component-tests-linux
|
|
needs:
|
|
- ci-image-get-image-ref
|
|
- linux-fips-build-boring-make
|
|
variables:
|
|
<<: *component-tests-variables
|
|
COMPONENT_TESTS_FIPS: 1
|
|
|
|
################################
|
|
####### Linux Packaging ########
|
|
################################
|
|
linux-packaging:
|
|
<<: *packaging-job-defaults
|
|
parallel:
|
|
matrix:
|
|
- ARCH: ["386", "amd64", "arm", "armhf", "arm64"]
|
|
script:
|
|
- ./.ci/scripts/linux/build-packages.sh ${ARCH}
|
|
|
|
################################
|
|
##### Linux FIPS Packaging #####
|
|
################################
|
|
linux-packaging-fips:
|
|
<<: *packaging-job-defaults
|
|
script:
|
|
- ./.ci/scripts/linux/build-packages-fips.sh
|