Backport #2758 to Release 2.0

.azure/OneBranch.Official.yml

@@ -15,6 +15,9 @@ trigger:
     - main
     - release/*
     - msrc/*
+  tags:
+    include:
+    - v*
 
 parameters: # parameters are shown up in ADO UI in a build queue time
 - name: 'debug'
@@ -164,3 +167,6 @@ extends:
       - build_uwp
       jobs:
       - template: .azure/obtemplates/build-nuget.yml@self
+        ${{ if startsWith(variables['Build.SourceBranch'], 'refs/tags/') }}:
+          parameters:
+            release: true

.azure/azure-pipelines.ci.yml

@@ -73,12 +73,6 @@ stages:
   displayName: Build Windows Drivers - Non Tested
   dependsOn: []
   jobs:
-  - template: ./templates/build-config-winkernel.yml
-    parameters:
-      arch: x86
-  - template: ./templates/build-config-winkernel.yml
-    parameters:
-      arch: arm
   - template: ./templates/build-config-winkernel.yml
     parameters:
       arch: arm64
@@ -121,26 +115,6 @@ stages:
       config: Release
       extraName: 'static'
       extraBuildArgs: -EnableTelemetryAsserts -Static -ExtraArtifactDir Static
-  - template: ./templates/build-config-user.yml
-    parameters:
-      image: windows-2019
-      platform: windows
-      arch: x64
-      tls: schannel
-      config: Release
-      extraName: 'xdp'
-      extraPrepareArgs: -Xdp
-      extraBuildArgs: -EnableTelemetryAsserts -UseXdp -ExtraArtifactDir xdp
-  - template: ./templates/build-config-user.yml
-    parameters:
-      image: windows-2019
-      platform: windows
-      arch: x64
-      tls: openssl
-      config: Release
-      extraName: 'xdp'
-      extraPrepareArgs: -Xdp
-      extraBuildArgs: -EnableTelemetryAsserts -UseXdp -ExtraArtifactDir xdp
 
 - stage: build_windows_debug
   displayName: Build Windows - Debug
@@ -499,54 +473,6 @@ stages:
       image: ubuntu-latest
       platform: linux
 
-#
-# Performance Tests
-#
-
-- stage: performance
-  displayName: Performance Testing
-  dependsOn:
-  - build_windows_release
-  - build_linux_release
-  - build_winkernel_release
-  jobs:
-  - template: ./templates/run-performance.yml
-    parameters:
-      pool: MsQuic-Win-Perf
-      platform: windows
-      localTls: schannel
-      remoteTls: schannel
-  - template: ./templates/run-performance.yml
-    parameters:
-      pool: MsQuic-Win-Perf
-      platform: windows
-      localTls: schannel
-      remoteTls: schannel
-      testTypes: 'Remote'
-      extraName: 'Kernel'
-      kernelMode: -Kernel
-  - template: ./templates/run-performance.yml
-    parameters:
-      pool: MsQuic-Win-Perf
-      platform: windows
-      localTls: openssl
-      remoteTls: openssl
-  - template: ./templates/run-performance.yml
-    parameters:
-      pool: MsQuic-Linux-Perf
-      platform: linux
-      localTls: openssl
-      remoteTls: openssl
-
-- ${{ if not(eq(variables['Build.Reason'], 'Schedule')) }}:
-  - stage: perf_post_process
-    displayName: Perf Post Processing
-    condition: succeededOrFailed()
-    dependsOn:
-    - performance
-    jobs:
-    - template: ./templates/post-process-performance.yml
-
 #
 # Windows Release BVTs
 #
@@ -848,25 +774,30 @@ stages:
 # Distribution
 #
 
-- ${{ if not(eq(variables['Build.Reason'], 'Schedule')) }}:
-  - stage: distribution
-    displayName: Distribution
-    dependsOn:
-    - build_windows_release
-    - build_linux_release
-    - build_windows_debug
-    - build_linux_debug
-    - build_windows_nontest
-    - build_linux_nontest
-    - merge_darwin
-    jobs:
-    - template: ./templates/build-distribution.yml
-
-- ${{ if not(eq(variables['Build.Reason'], 'Schedule')) }}:
-  - stage: nuget
-    displayName: Nuget
-    dependsOn:
-    - build_windows_release
-    - build_windows_nontest
-    jobs:
-    - template: ./templates/build-nuget.yml
+- stage: distribution
+  displayName: Distribution
+  dependsOn:
+  - build_windows_release
+  - build_linux_release
+  - build_windows_debug
+  - build_linux_debug
+  - build_windows_nontest
+  - build_linux_nontest
+  - merge_darwin
+  jobs:
+  - template: ./templates/build-distribution.yml
+
+- stage: test_distribution
+  displayName: Test Distribution
+  dependsOn:
+  - distribution
+  jobs:
+  - template: ./templates/test-distribution.yml
+
+- stage: nuget
+  displayName: Nuget
+  dependsOn:
+  - build_windows_release
+  - build_windows_nontest
+  jobs:
+  - template: ./templates/build-nuget.yml

.azure/azure-pipelines.plugins.yml

@@ -6,7 +6,6 @@ trigger:
   branches:
     include:
     - main
-    - release/*
   paths:
     include:
     - .azure/*
@@ -18,7 +17,6 @@ pr:
   branches:
     include:
     - main
-    - release/*
   paths:
     include:
     - .azure/*

.azure/azure-pipelines.qns.yml

@@ -60,7 +60,7 @@ jobs:
         ${{ if eq(variables['Build.Reason'], 'BatchedCI') }}:
           tags: |
             latest
-            v2.0.0.$(Build.BuildId)
+            v2.0.3.$(Build.BuildId)
         ${{ if ne(variables['Build.Reason'], 'BatchedCI') }}:
           tags: custom-$(Build.BuildId)
 - template: .\templates\run-qns.yml

.azure/obtemplates/build-linux-packages.yml

@@ -34,6 +34,6 @@ jobs:
       target: linux_build_container2
       inputs:
         command: 'sign'
-        signing_profile: 'CP-459159-pgpdetached'
+        signing_profile: 'CP-450779-pgpdetached'
         files_to_sign: '**/*.rpm;**/*.deb'
         search_root: '$(ob_outputDirectory)'

.azure/obtemplates/build-nuget.yml

@@ -1,5 +1,8 @@
 # This template contains steps to merge all builds into a single set of files to distribute.
 
+parameters:
+  release: false
+
 jobs:
 - job: nuget
   displayName: Nuget
@@ -58,21 +61,31 @@ jobs:
     inputs:
       pwsh: false
       filePath: scripts/package-nuget.ps1
-      arguments: -Tls openssl -UWP
+      ${{ if eq(parameters.release, false) }}:
+        arguments: -Tls openssl -UWP
+      ${{ if eq(parameters.release, true) }}:
+        arguments: -Tls openssl -UWP -ReleaseBuild
 
   - task: PowerShell@2
     displayName: Package Nuget
     inputs:
       pwsh: false
       filePath: scripts/package-nuget.ps1
-      arguments: -Tls openssl
+      ${{ if eq(parameters.release, false) }}:
+        arguments: -Tls openssl
+      ${{ if eq(parameters.release, true) }}:
+        arguments: -Tls openssl -ReleaseBuild
 
   - task: PowerShell@2
     displayName: Package Nuget
     inputs:
       pwsh: false
       filePath: scripts/package-nuget.ps1
-      arguments: -Tls schannel
+      ${{ if eq(parameters.release, false) }}:
+        arguments: -Tls schannel
+      ${{ if eq(parameters.release, true) }}:
+        arguments: -Tls schannel -ReleaseBuild
+
 
   - task: onebranch.pipeline.signing@1
     inputs:

.azure/obtemplates/build-winkernel.yml

@@ -15,12 +15,6 @@ jobs:
   - script: scripts\onebranch-build-kernel.cmd ${{ parameters.config }} x64
     displayName: x64
     target: windows_build_container2
-  - script: scripts\onebranch-build-kernel.cmd ${{ parameters.config }} x86
-    displayName: x86
-    target: windows_build_container2
-  - script: scripts\onebranch-build-kernel.cmd ${{ parameters.config }} ARM
-    displayName: ARM
-    target: windows_build_container2
   - script: scripts\onebranch-build-kernel.cmd ${{ parameters.config }} ARM64
     displayName: ARM64
     target: windows_build_container2

.azure/obtemplates/git-submit.yml

@@ -21,4 +21,4 @@ jobs:
       configPath: '$(Build.SourcesDirectory)/artifacts/package/GitCheckin.json' # the path to the GitCheckin.json config file.
       artifactsDirectory: '$(Build.SourcesDirectory)/artifacts/package' # parent directory for the artifacts to submit to the destination repo.
       prTimeOut: 5
-      paToken: '$(GIT_PAT)' # "build token" from the previous wiki section. Ensure this secret isn't stored as plaintext.
+      paToken: '$(VPACK_PAT)' # "build token" from the previous wiki section. Ensure this secret isn't stored as plaintext.

.azure/obtemplates/push-vpack.yml

@@ -29,7 +29,7 @@ jobs:
       vpackToken: $(VPACK_PAT)
       majorVer: 2
       minorVer: 0
-      patchVer: 0
+      patchVer: 3
       prereleaseVer: $(Build.BuildId)
 
   - publish: $(XES_VPACKMANIFESTDIRECTORY)

.azure/templates/build-config-winkernel.yml

@@ -32,7 +32,7 @@ jobs:
       solution: msquic.kernel.sln
       platform: ${{ parameters.arch }}
       configuration: debug
-      msbuildArgs: /p:QUIC_VER_SUFFIX=-official /p:QUIC_VER_BUILD_ID=$(Build.BuildId)
+      msbuildArgs: /p:QUIC_VER_SUFFIX=-official /p:QUIC_VER_BUILD_ID=$(Build.BuildId) /p:QUIC_VER_GIT_HASH=$(Build.SourceVersion)
 
   - task: VSBuild@1
     displayName: Build Source Code (Release)
@@ -41,6 +41,6 @@ jobs:
       solution: msquic.kernel.sln
       platform: ${{ parameters.arch }}
       configuration: release
-      msbuildArgs: /p:QUIC_VER_SUFFIX=-official /p:QUIC_VER_BUILD_ID=$(Build.BuildId)
+      msbuildArgs: /p:QUIC_VER_SUFFIX=-official /p:QUIC_VER_BUILD_ID=$(Build.BuildId) /p:QUIC_VER_GIT_HASH=$(Build.SourceVersion)
 
   - template: ./upload-artifacts.yml

.azure/templates/cargo.yml

@@ -32,3 +32,5 @@ jobs:
     displayName: Cargo build
   - script: cargo test --all
     displayName: Cargo test
+  - script: cargo publish --dry-run
+    displayName: Cargo Publish (dry run)

.azure/templates/test-distribution.yml

@@ -0,0 +1,32 @@
+jobs:
+- job: test_distribution
+  displayName: Test Distribution
+  variables:
+  - name: runCodesignValidationInjection
+    value: false
+  - name: skipComponentGovernanceDetection
+    value: true
+  pool:
+    vmImage: ubuntu-latest
+
+  steps:
+  - task: DownloadBuildArtifacts@0
+    displayName: Download Test
+    inputs:
+      artifactName: artifacts
+      itemPattern: artifacts/bin/linux/x64_Release_openssl/msquictest
+      downloadPath: $(Build.SourcesDirectory)
+  - task: DownloadBuildArtifacts@0
+    displayName: Download Package
+    inputs:
+      artifactName: distribution
+      itemPattern: distribution/*.deb
+      downloadPath: $(Build.SourcesDirectory)
+  - pwsh: |
+      sudo apt-add-repository ppa:lttng/stable-2.12
+      sudo apt-get update
+      sudo apt-get install -y lttng-tools
+      sudo dpkg -i $(Build.SourcesDirectory)/distribution/libmsquic_2.0.3_amd64.deb
+  - pwsh: |
+      chmod +x $(Build.SourcesDirectory)/artifacts/bin/linux/x64_Release_openssl/msquictest
+      $(Build.SourcesDirectory)/artifacts/bin/linux/x64_Release_openssl/msquictest --gtest_filter=ParameterValidation.ValidateApi

.github/workflows/check-dotnet.yml

@@ -0,0 +1,41 @@
+name: CheckDotnet
+
+on:
+  push:
+    branches:
+    - main
+    - release/*
+  pull_request:
+    branches:
+    - main
+    - release/*
+
+permissions: read-all
+
+jobs:
+  validate:
+    permissions:
+      contents: read # for actions/checkout to fetch code
+    name: Validate
+    runs-on: windows-latest
+    steps:
+    - name: Harden Runner
+      uses: step-security/harden-runner@bdb12b622a910dfdc99a31fdfe6f45a16bc287a4
+      with:
+        egress-policy: audit
+    - name: Setup .NET
+      uses: actions/setup-dotnet@9211491ffb35dd6a6657ca4f45d43dfe6e97c829
+      with:
+        dotnet-version: 6.0.x
+    - name: Checkout repository
+      uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5
+    - name: Prepare Machine
+      run: scripts/prepare-machine.ps1 -Configuration Dev
+      shell: pwsh
+    - name: Run DotNet Update
+      run: scripts/generate-dotnet.ps1
+      shell: pwsh
+    - name: Check for Changes
+      run: |
+        git add .
+        git --no-pager diff --exit-code HEAD

.github/workflows/wan-perf.yml

@@ -4,7 +4,6 @@ on:
   push:
     branches:
     - main
-    - release/*
     paths-ignore:
     - .azure/*
     - docs/*
@@ -18,7 +17,6 @@ on:
   pull_request:
     branches:
     - main
-    - release/*
     paths-ignore:
     - .azure/*
     - docs/*
@@ -30,6 +28,12 @@ on:
     - Cargo.toml
     - README.md
 
+concurrency:
+  # Cancel any workflow currently in progress for the same PR.
+  # Allow running concurrently with any other commits.
+  group: wanperf-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: true
+
 permissions: read-all
 
 jobs: