Squashed 'panda/' changes from 869f123..49ffbe9

49ffbe9 disable non-universal checks in hyundai safety
3a85f4c use whole route when running safety replay from CLI
098f47a Fix leaf brake rx check (#547)
b826734 Add pre commit checks + CI (#545)
339976c document tx message addresses better (#543)
a618e64 fix typing errors
9bece64 use mazda init
08db086 mazda cleanup
89658d0 Mazda: safety tests add missing safety checks (#525)
bdec139 Fix length of 0x20b in NISSAN_TX_MSGS, wasn't cancelling ACC (#544)
b48c74c Adding UNO to automated tests (#538)
a5802cd Hyundai: remove unused message from RX checks
9ebde25 Reset state on safety mode init (#542)
d4f3f15 Refactor addr check (#541)
5210e51 remove unused files
0657064 Hyundai checksum (#540)
07e668e Fast CI (#539)
5307bf7 Fix multi message iso tp requests
0610ed1 Hyundai wheel speed counter is actually 4 bits spread over two signals
0d581aa dockerfile optimization
eaefa2f fix docker file path
243a65f pull base image
0dd9470 only push to dockerhub from master
55b79b4 GitHub Actions (#535)
b2c720b Dos (#533)
01bf740 remove 0x1BE checksum test
0bd06c9 remove 0x1BE check (breaks some vehicles)
c31b899 honda bosch longitudinal safety
66250c4 Disable docker layer caching (#534)
6b19fa4 include nissan safety in release build
db31886 gate mazda safety behind debug flag
e4558c0 Safety: message length check on RX and TX (#529)

git-subtree-dir: panda
git-subtree-split: 49ffbe9

.github/workflows/test.yaml

@@ -0,0 +1,128 @@
+name: panda tests
+on: [push, pull_request]
+
+env:
+  RUN: docker run --rm panda /bin/bash -c
+  PERSIST: docker run --name panda panda /bin/sh -c
+  BUILD: |
+      docker pull $(grep -ioP '(?<=^from)\s+\S+' Dockerfile.panda) || true
+      docker pull docker.io/commaai/panda:latest || true
+      docker build --cache-from docker.io/commaai/panda:latest -t panda -f Dockerfile.panda .
+
+jobs:
+  docker_push:
+    name: docker push
+    runs-on: ubuntu-16.04
+    timeout-minutes: 45
+    if: github.ref == 'refs/heads/master' && github.event_name != 'pull_request' && github.repository == 'commaai/panda'
+    steps:
+      - uses: actions/checkout@v2
+      - name: Build Docker image
+        run: eval "$BUILD"
+      - name: Login to dockerhub
+        run: docker login -u wmelching -p ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Tag image
+        run: docker tag panda docker.io/commaai/panda:latest
+      - name: Push image
+        run: docker push docker.io/commaai/panda:latest
+
+  build:
+    name: build
+    runs-on: ubuntu-16.04
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v2
+      - name: Build Docker image
+        run: eval "$BUILD"
+      - name: Test python package installer
+        run: $RUN "cd /tmp/openpilot/panda && python setup.py install"
+      - name: Build panda STM image
+        run: $RUN "cd /tmp/openpilot/panda/board && make bin"
+      - name: Build panda STM bootstub image
+        run: $RUN "cd /tmp/openpilot/panda/board && make obj/bootstub.panda.bin"
+      - name: Build pedal STM image
+        run: $RUN "cd /tmp/openpilot/panda/board/pedal && make obj/comma.bin"
+      - name: Build pedal STM bootstub image
+        run: $RUN "cd /tmp/openpilot/panda/board/pedal && make obj/bootstub.bin"
+
+  build_esp:
+    name: build esp
+    runs-on: ubuntu-16.04
+    timeout-minutes: 45
+    steps:
+    - uses: actions/checkout@v2
+    - name: Build docker image
+      run: |
+        docker pull $(grep -ioP '(?<=^from)\s+\S+' tests/build/Dockerfile.panda_esp) || true
+        docker pull docker.io/commaai/panda_esp:latest || true
+        docker build --cache-from docker.io/commaai/panda_esp:latest -t panda_esp -f tests/build/Dockerfile.panda_esp .
+    - name: Build ESP image
+      run: docker run --rm panda_esp /bin/sh -c "cd /panda/boardesp && make user1.bin"
+    - name: Push image
+      if: github.ref == 'refs/heads/master' && github.event_name != 'pull_request' && github.repository == 'commaai/panda'
+      run:  |
+        docker login -u wmelching -p ${{ secrets.DOCKERHUB_TOKEN }}
+        docker tag panda_esp docker.io/commaai/panda_esp:latest
+        docker push docker.io/commaai/panda_esp:latest
+
+  safety:
+    name: safety
+    runs-on: ubuntu-16.04
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v2
+      - name: Build Docker image
+        run: eval "$BUILD"
+      - name: Run safety tests
+        run: |
+          $RUN "cd /tmp/openpilot && \
+                scons -c && \
+                scons -j$(nproc) opendbc/ cereal/ && \
+                cd panda/tests/safety && \
+                ./test.sh"
+
+  safety_replay:
+    name: safety replay
+    runs-on: ubuntu-16.04
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v2
+      - name: Build Docker image
+        run: eval "$BUILD"
+      - name: Run safety replay
+        run: $RUN "cd /tmp/openpilot/panda/tests/safety_replay && ./test_safety_replay.py"
+
+  misra:
+    name: misra c2012
+    runs-on: ubuntu-16.04
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v2
+      - name: Build Docker image
+        run: eval "$BUILD"
+      - name: Run Misra C 2012 analysis
+        run: $PERSIST "cd /tmp/openpilot/panda/tests/misra && ./test_misra.sh"
+      - name: Copy analysis outputs
+        run: docker cp panda:/tmp/misra /tmp
+      - uses: actions/upload-artifact@v2
+        if: always()
+        with:
+          name: cppcheck.txt
+          path: /tmp/misra/cppcheck_output.txt
+      - uses: actions/upload-artifact@v2
+        if: always()
+        with:
+          name: misra.txt
+          path: /tmp/misra/misra_output.txt
+
+  python_linter:
+    name: python linter
+    runs-on: ubuntu-16.04
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v2
+      - name: Build Docker image
+        run: eval "$BUILD"
+      - name: Run static analysis
+        run: |
+          $RUN "cd /tmp/openpilot/panda && git init && git add -A && MYPYPATH=/tmp/openpilot pre-commit run --all"

.gitignore

@@ -15,3 +15,4 @@ examples/output.csv
 .DS_Store
 .vscode
 nosetests.xml
+.mypy_cache/

.pre-commit-config.yaml

@@ -0,0 +1,30 @@
+repos:
+-   repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: master
+    hooks:
+    -   id: check-ast
+    -   id: check-json
+    -   id: check-xml
+    -   id: check-yaml
+-   repo: https://github.com/pre-commit/mirrors-mypy
+    rev: master
+    hooks:
+    -   id: mypy
+        exclude: '^(tests/automated)/'
+-   repo: https://github.com/PyCQA/flake8
+    rev: master
+    hooks:
+    -   id: flake8
+        exclude: '^(tests/automated)/'
+        args:
+        - --select=F
+-   repo: local
+    hooks:
+    -   id: pylint
+        name: pylint
+        entry: pylint
+        language: system
+        types: [python]
+        exclude: '^(tests/automated)/'
+        args:
+        - --disable=R,C,W

.pylintrc

@@ -0,0 +1,2 @@
+[MASTER]
+generated-members=usb1.*

Dockerfile.panda

@@ -0,0 +1,66 @@
+FROM ubuntu:16.04
+ENV PYTHONUNBUFFERED 1
+ENV PYTHONPATH /tmp/openpilot:$PYTHONPATH
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    autoconf \
+    automake \
+    bzip2 \
+    capnproto \
+    clang \
+    curl \
+    g++ \
+    gcc-arm-none-eabi libnewlib-arm-none-eabi \
+    git \
+    libarchive-dev \
+    libavformat-dev libavcodec-dev libavdevice-dev libavutil-dev libswscale-dev libavresample-dev libavfilter-dev \
+    libbz2-dev \
+    libcapnp-dev \
+    libcurl4-openssl-dev \
+    libffi-dev \
+    libtool \
+    libssl-dev \
+    libsqlite3-dev \
+    libusb-1.0-0 \
+    libzmq3-dev \
+    locales \
+    make \
+    pkg-config \
+    python \
+    python-dev \
+    python-pip \
+    unzip \
+    wget \
+    zlib1g-dev \
+ && rm -rf /var/lib/apt/lists/*
+
+RUN sed -i -e 's/# en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/' /etc/locale.gen && locale-gen
+ENV LANG en_US.UTF-8
+ENV LANGUAGE en_US:en
+ENV LC_ALL en_US.UTF-8
+
+RUN curl -L https://github.com/pyenv/pyenv-installer/raw/master/bin/pyenv-installer | bash
+ENV PATH="/root/.pyenv/bin:/root/.pyenv/shims:${PATH}"
+
+COPY requirements.txt /tmp/
+RUN pyenv install 3.7.3 && \
+    pyenv global 3.7.3 && \
+    pyenv rehash && \
+    pip install --no-cache-dir --upgrade pip==18.0 && \
+    pip install --no-cache-dir -r /tmp/requirements.txt
+
+RUN cd /tmp && \
+    git clone https://github.com/commaai/openpilot.git tmppilot || true && \
+    cd /tmp/tmppilot && \
+    git pull && git checkout 44560b5bb74e451767725144c3fa5f1564481a20 && \
+    git submodule update --init cereal opendbc && \
+    mkdir /tmp/openpilot && \
+    cp -pR SConstruct tools/ selfdrive/ common/ cereal/ opendbc/ /tmp/openpilot && \
+    rm -rf /tmp/tmppilot
+
+RUN cd /tmp/openpilot && \
+    pip install --no-cache-dir -r opendbc/requirements.txt && \
+    pip install --no-cache-dir -r tools/requirements.txt
+
+COPY . /tmp/openpilot/panda
+RUN rm -rf /tmp/openpilot/panda/.git

README.md

@@ -13,7 +13,7 @@ It uses an [STM32F413](http://www.st.com/en/microcontrollers/stm32f413-423.html?
 
 It is 2nd gen hardware, reusing code and parts from the [NEO](https://github.com/commaai/neo) interface board.
 
-[![CircleCI](https://circleci.com/gh/commaai/panda.svg?style=svg)](https://circleci.com/gh/commaai/panda)
+![panda tests](https://github.com/commaai/panda/workflows/panda%20tests/badge.svg)
 
 Usage (Python)
 ------
@@ -99,7 +99,7 @@ When compiled from an [EON Dev Kit](https://comma.ai/shop/products/eon-gold-dash
 conjuction with [openpilot](https://github.com/commaai/openpilot). The panda FW, through its safety model, provides and enforces the
 [openpilot Safety](https://github.com/commaai/openpilot/blob/devel/SAFETY.md). Due to its critical function, it's important that the application code rigor within the `board` folder is held to high standards.
 
-These are the [CI regression tests](https://circleci.com/gh/commaai/panda) we have in place:
+These are the [CI regression tests](https://github.com/commaai/panda/actions) we have in place:
 * A generic static code analysis is performed by [Cppcheck](https://github.com/danmar/cppcheck/).
 * In addition, [Cppcheck](https://github.com/danmar/cppcheck/) has a specific addon to check for [MISRA C:2012](https://www.misra.org.uk/MISRAHome/MISRAC2012/tabid/196/Default.aspx) violations. See [current coverage](https://github.com/commaai/panda/blob/master/tests/misra/coverage_table).
 * Compiler options are relatively strict: the flags `-Wall -Wextra -Wstrict-prototypes -Werror` are enforced on board and pedal makefiles.

__init__.py

@@ -1 +1,3 @@
-from .python import Panda, PandaWifiStreaming, PandaDFU, ESPROM, CesantaFlasher, flash_release, BASEDIR, ensure_st_up_to_date, build_st, PandaSerial  # noqa: F401
+# flake8: noqa
+# pylint: skip-file
+from .python import Panda, PandaWifiStreaming, PandaDFU, ESPROM, CesantaFlasher, flash_release, BASEDIR, ensure_st_up_to_date, build_st, PandaSerial