wolfProvider/.github/workflows/multi-compiler.yml at cfa77890a1826d4e8d655027c9c455293c33d6bf · wolfSSL/wolfProvider · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
name: Multi-Compiler Tests

# START OF COMMON SECTION
on:
  push:
    branches: [ 'master', 'main', 'release/**' ]
  pull_request:
    branches: [ '*' ]
    types: [opened, synchronize, reopened, ready_for_review]
    paths-ignore:
      - '**.md'
      - 'docs/**'
      - 'LICENSE*'
      - '.github/ISSUE_TEMPLATE/**'
      - '.github/dependabot.yml'
      - '.gitignore'
      - 'AUTHORS'
      - 'COPYING'
      - 'README*'
      - 'CHANGELOG*'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
# END OF COMMON SECTION

jobs:
  build_wolfprovider:
    if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
    name: Build with compiler ${{ matrix.CC }}, wolfssl ${{ matrix.wolfssl_ref }}, OpenSSL ${{ matrix.openssl_ref }}
    runs-on: ubuntu-22.04
    container:
      image: ghcr.io/wolfssl/wolfprovider-test-deps:bookworm
      env:
        DEBIAN_FRONTEND: noninteractive
    timeout-minutes: 20
    strategy:
      fail-fast: false
      # PR-time matrix is intentionally narrow: only compilers that ship
      # in Debian Bookworm (the test-deps image base). Dropped vs the
      # prior matrix: gcc-9, gcc-10, gcc-13, gcc-14, clang-12. Full
      # cross-compiler coverage (including those) runs in the nightly
      # multi-compiler job called from nightly-osp.yml.
      matrix:
        include:
          - CC: gcc-11
            CXX: g++-11
            wolfssl_ref: master
            openssl_ref: master
          - CC: gcc-12
            CXX: g++-12
            wolfssl_ref: master
            openssl_ref: master
          - CC: gcc-12
            CXX: g++-12
            wolfssl_ref: v5.8.0-stable
            openssl_ref: master
          - CC: gcc-12
            CXX: g++-12
            wolfssl_ref: v5.8.4-stable
            openssl_ref: master
          - CC: clang-13
            CXX: clang++-13
            wolfssl_ref: master
            openssl_ref: master
          - CC: clang-14
            CXX: clang++-14
            wolfssl_ref: master
            openssl_ref: master
          - CC: clang-15
            CXX: clang++-15
            wolfssl_ref: master
            openssl_ref: master
    steps:
      - name: Checkout wolfProvider
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Get OpenSSL commit hash
        id: openssl-ref
        run: |
          sha=$(./scripts/resolve-ref.sh "${{ matrix.openssl_ref }}" "openssl/openssl")
          echo "ref=$sha" >> "$GITHUB_OUTPUT"
        env:
          # Used token to bypass rate limits
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Get WolfSSL commit hash
        id: wolfssl-ref
        run: |
          sha=$(./scripts/resolve-ref.sh "${{ matrix.wolfssl_ref }}" "wolfssl/wolfssl")
          echo "ref=$sha" >> "$GITHUB_OUTPUT"
        env:
          # Used token to bypass rate limits
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      # Look for a cached version of OpenSSL -- with this compiler version
      - name: Checking OpenSSL in cache
        uses: actions/cache@v4
        id: openssl-cache
        with:
          path: |
            openssl-install
          key: openssl-depends-${{ matrix.CC }}-${{ steps.openssl-ref.outputs.ref }}
          lookup-only: false

      # Look for a cached version of WolfSSL -- with this compiler version
      - name: Checking WolfSSL in cache
        uses: actions/cache@v4
        id: wolfssl-cache
        with:
          path: |
            wolfssl-install
          key: wolfssl-depends-${{ matrix.CC }}-${{ steps.wolfssl-ref.outputs.ref }}
          lookup-only: false

      - name: Build wolfProvider
        env:
          CC: ${{ matrix.CC }}
          CXX: ${{ matrix.CXX }}
        run: |
          OPENSSL_TAG=${{ matrix.openssl_ref }} WOLFSSL_TAG=${{ matrix.wolfssl_ref }} ./scripts/build-wolfprovider.sh

      - name: Print errors
        if: ${{ failure() }}
        run: |
          for f in scripts/build-release.log scripts/build-debug.log test-suite.log config.log; do
            if [ -f "$f" ]; then
              echo "=== $f (last 200 lines) ==="
              tail -200 "$f"
            fi
          done