aws-database-encryption-sdk-dynamodb/.github/workflows/library_rust_tests.yml at ed64d93d8df14a4da0e5197ecab4796708b0eb9e · aws/aws-database-encryption-sdk-dynamodb · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
# This workflow performs tests in Rust.
name: Library Rust tests

on:
  workflow_call:
    inputs:
      dafny:
        description: "The Dafny version to run"
        required: true
        type: string
      regenerate-code:
        description: "Regenerate code using smithy-dafny"
        required: false
        default: false
        type: boolean
      mpl-head:
        description: "Running on MPL HEAD"
        required: false
        default: false
        type: boolean

jobs:
  testRust:
    strategy:
      fail-fast: false
      matrix:
        library: [DynamoDbEncryption, TestVectors]
        # removed windows-latest because somehow it can't build aws-lc in CI
        os: [ubuntu-22.04, macos-15-intel]
    runs-on: ${{ matrix.os }}
    permissions:
      id-token: write
      contents: read
    env:
      RUST_MIN_STACK: 838860800
    steps:
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v5
        with:
          aws-region: us-west-2
          role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2
          role-session-name: DDBEC-Dafny-Rust-Tests

      - name: Setup Docker
        if: matrix.os == 'macos-15-intel' && matrix.library == 'TestVectors'
        uses: douglascamata/setup-docker-macos-action@v1.1.0

      - name: Setup DynamoDB Local
        if: matrix.library == 'TestVectors'
        uses: rrainn/dynamodb-action@v4.0.0
        with:
          port: 8000
          cors: "*"

      - name: Support longpaths on Git checkout
        run: |
          git config --global core.longpaths true
      - uses: actions/checkout@v5
      - name: Init Submodules
        shell: bash
        run: |
          git submodule update --init --recursive submodules/smithy-dafny
          git submodule update --init --recursive submodules/MaterialProviders

      - name: Setup Rust Toolchain for GitHub CI
        uses: actions-rust-lang/setup-rust-toolchain@v1
        with:
          components: rustfmt

      - name: Setup Dafny
        uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/
        with:
          dafny-version: 4.10.0

      - name: Update MPL submodule if using MPL HEAD
        if: ${{ inputs.mpl-head == true }}
        working-directory: submodules/MaterialProviders
        run: |
          git checkout main
          git pull
          git submodule update --init --recursive
          git rev-parse HEAD

      - name: Setup Java 17 for codegen
        uses: actions/setup-java@v5
        with:
          distribution: "corretto"
          java-version: "17"

      - name: Setup NASM for Windows (aws-lc-sys)
        if: matrix.os == 'windows-latest'
        uses: ilammy/setup-nasm@v1

      - name: Install Smithy-Dafny codegen dependencies
        uses: ./.github/actions/install_smithy_dafny_codegen_dependencies

      - name: Run make polymorph_rust
        shell: bash
        working-directory: ./${{ matrix.library }}
        run: |
          make polymorph_rust

      - name: Compile ${{ matrix.library }} implementation
        shell: bash
        working-directory: ./${{ matrix.library }}
        run: |
          # This works because `node` is installed by default on GHA runners
          CORES=$(node -e 'console.log(os.cpus().length)')
          make transpile_rust TRANSPILE_TESTS_IN_RUST=1 CORES=$CORES

      - name: Copy ${{ matrix.library }} Vector Files
        if: ${{ matrix.library == 'TestVectors' }}
        shell: bash
        working-directory: ./${{ matrix.library }}
        run: |
          cp runtimes/java/*.json runtimes/rust/

      - name: Test ${{ matrix.library }} Rust
        shell: bash
        working-directory: ./${{ matrix.library }}
        run: |
          make test_rust

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v5
        with:
          aws-region: us-west-2
          role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2
          role-session-name: DDBEC-Dafny-Rust-Tests

      - name: Test ${{ matrix.library }} Rust Fips
        shell: bash
        working-directory: ./${{ matrix.library }}/runtimes/rust/
        run: |
          cargo test --release --features fips -- --nocapture

      - name: Test ${{ matrix.library }} Rust Debug
        if: ${{ matrix.library != 'TestVectors' }}
        shell: bash
        working-directory: ./${{ matrix.library }}
        run: |
          make test_rust test_rust_debug

      - name: Test Examples for Rust in ${{ matrix.library }}
        if: ${{ matrix.library == 'DynamoDbEncryption' }}
        working-directory: ./${{ matrix.library }}/runtimes/rust/
        shell: bash
        run: |
          cargo run --release --example main
          cargo test --release --example main