build osslsigncode locally for debian:testing #633
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Copyright (C) Viktor Szakats. See LICENSE.md | |
# SPDX-License-Identifier: MIT | |
--- | |
# https://docs.github.com/actions/learn-github-actions | |
# https://github.com/actions/upload-artifact | |
name: build | |
on: | |
push: | |
branches: | |
- main | |
- dev | |
- test | |
concurrency: | |
group: ${{ github.workflow }}-${{ github.ref }} | |
cancel-in-progress: true | |
permissions: {} | |
env: | |
CW_MAP: '1' | |
CW_JOBS: '4' | |
DO_NOT_TRACK: '1' | |
DOCKER_CONTENT_TRUST: '1' | |
jobs: | |
reuse-check: | |
runs-on: ubuntu-latest | |
timeout-minutes: 5 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'REUSE compliance check' | |
uses: fsfe/reuse-action@v3 | |
env: | |
DOCKER_CONTENT_TRUST: '' | |
shellcheck: | |
runs-on: ubuntu-latest | |
timeout-minutes: 5 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'shellcheck' | |
run: | | |
shellcheck --version | |
shellcheck --exclude=1091 \ | |
--enable=avoid-nullary-conditions,deprecate-which,quote-safe-variables,require-variable-braces \ | |
./*.sh | |
spellcheck: | |
runs-on: ubuntu-latest | |
timeout-minutes: 5 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'install tools' | |
run: pip install -U codespell | |
- name: 'spellcheck' | |
run: | | |
codespell --version | |
codespell --skip='*.asc,*.patch,*.pem' \ | |
$(git ls-files) | |
linux-glibc-debian-testing-llvm: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux' | |
export CW_REVISION='${{ github.sha }}' | |
. ./_versions.sh | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-glibc-debian-testing-llvm' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-glibc-debian-testing-gcc: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux-gcc' | |
export CW_REVISION='${{ github.sha }}' | |
. ./_versions.sh | |
export CW_GCCSUFFIX='-13' | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-glibc-debian-testing-gcc' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-glibc-debian-bookworm-llvm: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux' | |
export CW_REVISION='${{ github.sha }}' | |
DOCKER_IMAGE='debian:bookworm-slim' | |
export CW_CCSUFFIX='-15' | |
export CW_GCCSUFFIX='-12' | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-glibc-debian-bookworm-llvm' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-glibc-debian-bookworm-gcc: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux-gcc' | |
export CW_REVISION='${{ github.sha }}' | |
DOCKER_IMAGE='debian:bookworm-slim' | |
export CW_CCSUFFIX='-15' | |
export CW_GCCSUFFIX='-12' | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-glibc-debian-bookworm-gcc' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-glibc-debian-sid-llvm-riscv64: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux-r64' | |
export CW_REVISION='${{ github.sha }}' | |
DOCKER_IMAGE='debian:sid-slim' | |
export CW_CCSUFFIX='-18' | |
export CW_GCCSUFFIX='-13' | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-glibc-debian-sid-llvm-riscv64' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-glibc-debian-sid-gcc-riscv64: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux-gcc-r64' | |
export CW_REVISION='${{ github.sha }}' | |
DOCKER_IMAGE='debian:sid-slim' | |
export CW_CCSUFFIX='-18' | |
export CW_GCCSUFFIX='-13' | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-glibc-debian-sid-gcc-riscv64' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-musl-debian-testing-llvm: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux-musl' | |
export CW_REVISION='${{ github.sha }}' | |
. ./_versions.sh | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-musl-debian-testing-llvm' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-musl-debian-testing-gcc: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux-musl-gcc' | |
export CW_REVISION='${{ github.sha }}' | |
. ./_versions.sh | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-musl-debian-testing-gcc' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-musl-debian-bookworm-llvm: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux-musl' | |
export CW_REVISION='${{ github.sha }}' | |
DOCKER_IMAGE='debian:bookworm-slim' | |
export CW_CCSUFFIX='-15' | |
export CW_GCCSUFFIX='-12' | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-musl-debian-bookworm-llvm' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-musl-debian-bookworm-gcc: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux-musl-gcc' | |
export CW_REVISION='${{ github.sha }}' | |
DOCKER_IMAGE='debian:bookworm-slim' | |
export CW_CCSUFFIX='-15' | |
export CW_GCCSUFFIX='-12' | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-musl-debian-bookworm-gcc' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-musl-debian-sid-llvm-riscv64: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux-musl-r64' | |
export CW_REVISION='${{ github.sha }}' | |
DOCKER_IMAGE='debian:sid-slim' | |
export CW_CCSUFFIX='-18' | |
export CW_GCCSUFFIX='-13' | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-musl-debian-sid-llvm-riscv64' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-musl-debian-sid-gcc-riscv64: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux-musl-gcc-r64' | |
export CW_REVISION='${{ github.sha }}' | |
DOCKER_IMAGE='debian:sid-slim' | |
export CW_CCSUFFIX='-18' | |
export CW_GCCSUFFIX='-13' | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-musl-debian-sid-gcc-riscv64' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-musl-alpine-llvm: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux' | |
export CW_REVISION='${{ github.sha }}' | |
DOCKER_IMAGE='alpine:latest' | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c 'apk add --no-cache bash && ./_ci-linux-alpine.sh' | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-musl-alpine-llvm-x86_64' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-musl-alpine-gcc: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux-gcc' | |
export CW_REVISION='${{ github.sha }}' | |
DOCKER_IMAGE='alpine:latest' | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c 'apk add --no-cache bash && ./_ci-linux-alpine.sh' | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-musl-alpine-gcc-x86_64' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
linux-musl-from-mac: | |
runs-on: macos-13 | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-linux' | |
export CW_REVISION='${{ github.sha }}' | |
sh -c ./_ci-mac-homebrew.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-linux-musl-from-mac' | |
retention-days: 5 | |
path: | | |
*-*-linux*.* | |
urls.txt | |
mac-clang: | |
runs-on: macos-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-mac-macuni' | |
export CW_REVISION='${{ github.sha }}' | |
sh -c ./_ci-mac-homebrew.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-macos-universal-clang' | |
retention-days: 5 | |
path: | | |
*-*-macos*.* | |
urls.txt | |
mac-llvm: | |
runs-on: macos-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
- name: 'build' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-mac-macuni-llvm' | |
export CW_REVISION='${{ github.sha }}' | |
sh -c ./_ci-mac-homebrew.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-macos-universal-llvm' | |
retention-days: 5 | |
path: | | |
*-*-macos*.* | |
urls.txt | |
win-llvm-from-mac: | |
runs-on: macos-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
with: | |
fetch-depth: 8 | |
- name: 'build' | |
env: | |
CW_LLVM_MINGW_DL: '1' | |
CW_LLVM_MINGW_ONLY: '0' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-win' | |
export CW_REVISION='${{ github.sha }}' | |
. ./_versions.sh | |
sh -c ./_ci-mac-homebrew.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-windows-llvm-from-mac' | |
retention-days: 5 | |
path: | | |
*-*-mingw*.* | |
urls.txt | |
win-llvm: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
with: | |
fetch-depth: 8 | |
- name: 'build' | |
env: | |
CW_LLVM_MINGW_DL: '1' | |
CW_LLVM_MINGW_ONLY: '0' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-win' | |
export CW_REVISION='${{ github.sha }}' | |
. ./_versions.sh | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-windows-llvm' | |
retention-days: 5 | |
path: | | |
*-*-mingw*.* | |
urls.txt | |
win-gcc: | |
runs-on: ubuntu-latest | |
timeout-minutes: 30 | |
steps: | |
- uses: actions/checkout@v4 | |
with: | |
fetch-depth: 8 | |
- name: 'build' | |
env: | |
CW_LLVM_MINGW_DL: '1' | |
CW_LLVM_MINGW_ONLY: '0' | |
run: | | |
export CW_CONFIG='${{ github.ref_name }}-win-gcc' | |
export CW_REVISION='${{ github.sha }}' | |
. ./_versions.sh | |
docker trust inspect --pretty "${DOCKER_IMAGE}" | |
time docker pull "${DOCKER_IMAGE}" | |
docker images --digests | |
time docker run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \ | |
--env-file <(env | grep -a -E \ | |
'^(CW_|GITHUB_|DO_NOT_TRACK)') \ | |
"${DOCKER_IMAGE}" \ | |
sh -c ./_ci-linux-debian.sh | |
- name: 'list dependencies' | |
run: cat urls.txt | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: 'curl-windows-gcc-noarm64' | |
retention-days: 5 | |
path: | | |
*-*-mingw*.* | |
urls.txt |