ci: update publishing workflow to use appropriate pre release and stable versions #3198
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build & Test | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - develop | |
| - release/* | |
| - integration-test-workflow | |
| pull_request: | |
| branches: | |
| - main | |
| - develop | |
| - release/* | |
| defaults: | |
| run: | |
| shell: bash | |
| permissions: | |
| contents: read | |
| env: | |
| CG_EXEC: export R_UID=$(id -u); CGROUP_LOGLEVEL=DEBUG cgexec -g cpu,memory:user.slice/user-${R_UID}.slice/user@${R_UID}.service/e2e-${{ github.run_id }} --sticky ionice -c 2 -n 2 nice -n 19 | |
| jobs: | |
| build: | |
| name: Build using Node ${{ matrix.node }} | |
| runs-on: [self-hosted, Linux, medium, ephemeral] | |
| strategy: | |
| matrix: | |
| node: [ "16", "18" ] | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout Code | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
| with: | |
| submodules: true | |
| - name: Install Task | |
| uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v2.0.0 | |
| with: | |
| version: 3.35.1 | |
| - name: Install PNPM | |
| uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0 | |
| with: | |
| version: 8.15.4 | |
| - name: Setup Node | |
| uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| cache: pnpm | |
| - name: Build @hashgraph/sdk | |
| run: task -v build | |
| test: | |
| name: Test using Node ${{ matrix.node }} | |
| runs-on: [self-hosted, Linux, large, ephemeral] | |
| strategy: | |
| matrix: | |
| node: [ "16" ] | |
| steps: | |
| - name: Setup Control Groups | |
| run: | | |
| echo "::group::Get System Configuration" | |
| USR_ID="$(id -un)" | |
| GRP_ID="$(id -gn)" | |
| E2E_MEM_LIMIT="30064771072" | |
| AGENT_MEM_LIMIT="2147483648" | |
| USER_SLICE="user.slice/user-$(id -u).slice" | |
| USER_SERVICE="${USER_SLICE}/user@$(id -u).service" | |
| E2E_GROUP_NAME="${USER_SERVICE}/e2e-${{ github.run_id }}" | |
| AGENT_GROUP_NAME="${USER_SERVICE}/agent-${{ github.run_id }}" | |
| echo "::endgroup::" | |
| echo "::group::Install Control Group Tools" | |
| if ! command -v cgcreate >/dev/null 2>&1; then | |
| sudo apt-get update | |
| sudo apt-get install -y cgroup-tools | |
| fi | |
| echo "::endgroup::" | |
| echo "::group::Create Control Groups" | |
| sudo cgcreate -g cpu,memory:${USER_SLICE} -a ${USR_ID}:${GRP_ID} -t ${USR_ID}:${GRP_ID} | |
| sudo cgcreate -g cpu,memory:${USER_SERVICE} -a ${USR_ID}:${GRP_ID} -t ${USR_ID}:${GRP_ID} | |
| sudo cgcreate -g cpu,memory:${E2E_GROUP_NAME} -a ${USR_ID}:${GRP_ID} -t ${USR_ID}:${GRP_ID} | |
| sudo cgcreate -g cpu,memory:${AGENT_GROUP_NAME} -a ${USR_ID}:${GRP_ID} -t ${USR_ID}:${GRP_ID} | |
| echo "::endgroup::" | |
| echo "::group::Set Control Group Limits" | |
| cgset -r cpu.weight=768 ${E2E_GROUP_NAME} | |
| cgset -r cpu.weight=500 ${AGENT_GROUP_NAME} | |
| cgset -r memory.max=${E2E_MEM_LIMIT} ${E2E_GROUP_NAME} | |
| cgset -r memory.max=${AGENT_MEM_LIMIT} ${AGENT_GROUP_NAME} | |
| cgset -r memory.swap.max=${E2E_MEM_LIMIT} ${E2E_GROUP_NAME} | |
| cgset -r memory.swap.max=${AGENT_MEM_LIMIT} ${AGENT_GROUP_NAME} | |
| echo "::endgroup::" | |
| echo "::group::Move Runner Processes to Control Groups" | |
| sudo cgclassify --sticky -g cpu,memory:${AGENT_GROUP_NAME} $(pgrep 'Runner.Listener' | tr '\n' ' ') | |
| sudo cgclassify -g cpu,memory:${AGENT_GROUP_NAME} $(pgrep 'Runner.Worker' | tr '\n' ' ') | |
| echo "::endgroup::" | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout Code | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
| with: | |
| submodules: recursive | |
| - name: Install Task | |
| uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v2.0.0 | |
| with: | |
| version: 3.35.1 | |
| - name: "Create env file" | |
| run: | | |
| touch .env | |
| echo OPERATOR_KEY="302e020100300506032b65700422042091132178e72057a1d7528025956fe39b0b847f200ab59b2fdd367017f3087137" >> .env | |
| echo OPERATOR_ID="0.0.2" >> .env | |
| echo HEDERA_NETWORK="local-node" >> .env | |
| cat .env | |
| - name: Install PNPM | |
| uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0 | |
| with: | |
| version: 8.15.4 | |
| - name: Setup Node | |
| uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| cache: pnpm | |
| - name: Build @hashgraph/sdk | |
| id: build-sdk | |
| run: task build | |
| - name: Install Playwright Dependencies | |
| id: playwright-deps | |
| if: ${{ steps.build-sdk.conclusion == 'success' && !cancelled() && always() }} | |
| run: sudo npx playwright install-deps | |
| - name: Start the local node | |
| id: start-local-node | |
| if: ${{ steps.build-sdk.conclusion == 'success' && !cancelled() && always() }} | |
| run: | | |
| ${{ env.CG_EXEC }} npx @hashgraph/hedera-local start -d -—network local --balance=100000 | |
| # Wait for the network to fully start | |
| sleep 30 | |
| - name: Run Hedera SDK Integration Tests Codecov | |
| if: ${{ steps.build-sdk.conclusion == 'success' && steps.start-local-node.conclusion == 'success' && !cancelled() && always() }} | |
| run: ${{ env.CG_EXEC }} task test:integration:codecov | |
| - name: Stop the local node | |
| id: stop-local-node | |
| if: ${{ steps.start-local-node.conclusion == 'success' && !cancelled() && always() }} | |
| run: ${{ env.CG_EXEC }} npx @hashgraph/hedera-local stop | |
| - name: Build @hashgraph/cryptography | |
| working-directory: packages/cryptography | |
| if: ${{ steps.build-sdk.conclusion == 'success' && steps.stop-local-node.conclusion == 'success' && !cancelled() && always() }} | |
| run: ${{ env.CG_EXEC }} task build | |
| - name: Unit Test @hashgraph/cryptography | |
| working-directory: packages/cryptography | |
| if: ${{ steps.build-sdk.conclusion == 'success' && steps.stop-local-node.conclusion == 'success' && !cancelled() && always() }} | |
| run: ${{ env.CG_EXEC }} task test:unit | |
| - name: Codecov @hashgraph/cryptography | |
| working-directory: packages/cryptography | |
| if: ${{ steps.build-sdk.conclusion == 'success' && steps.stop-local-node.conclusion == 'success' && !cancelled() && always() }} | |
| run: ${{ env.CG_EXEC }} task test:unit:codecov | |
| - name: Unit Test @hashgraph/sdk | |
| if: ${{ steps.build-sdk.conclusion == 'success' && steps.stop-local-node.conclusion == 'success' && steps.playwright-deps.conclusion == 'success' && !cancelled() && always() }} | |
| run: ${{ env.CG_EXEC }} task test:unit | |
| - name: Codecov @hashgraph/sdk | |
| if: ${{ steps.build-sdk.conclusion == 'success' && steps.stop-local-node.conclusion == 'success' && !cancelled() && always() }} | |
| run: ${{ env.CG_EXEC }} task test:unit:codecov |