condorcore-keyring/.gitlab-ci.yml

---
image: archlinux:latest

stages:
  - test
  - wkd

lint:
  stage: test
  needs: []
  before_script:
    - pacman -Syu --needed --noconfirm make flake8 mypy python-black python-isort
  script:
    - make lint
  only:
    changes:
      - keyringctl
      - libkeyringctl/*
      - tests/*
      - .gitlab-ci.yml
      - Makefile

test:
  stage: test
  needs: []
  before_script:
    - pacman -Syu --needed --noconfirm make python sequoia-sq python-coverage python-pytest python-tomli
  script:
    - make test
  only:
    changes:
      - keyringctl
      - libkeyringctl/*
      - tests/*
      - .gitlab-ci.yml
      - Makefile
  coverage: '/TOTAL.*\s([.\d]+)%/'
  artifacts:
    when: always
    reports:
      coverage_report:
        coverage_format: cobertura
        path: build/coverage.xml
      junit: build/junit-report.xml

build_install:
  stage: test
  needs: []
  before_script:
    - pacman -Syu --needed --noconfirm make pkgconf python sequoia-sq systemd
  script:
    - make
    - make install PREFIX=/usr
    - pacman-key --init
    - pacman-key --populate archlinux
    - pacman-key --updatedb
    - pacman -Syu

keyring_check:
  stage: test
  needs: []
  before_script:
    - pacman -Syu --needed --noconfirm make python sequoia-sq git
  script:
    - ./keyringctl check
    - ./keyringctl ci
  only:
    changes:
      - keyring/**/*
      - keyringctl
      - libkeyringctl/*
      - tests/*
      - .gitlab-ci.yml
      - Makefile

pages:
  stage: wkd
  needs: []
  tags:
    - secure
  before_script:
    - pacman -Syu --needed --noconfirm make python sequoia-sq
  script:
    - make wkd
    - make wkd WKD_FQDN=master-key.archlinux.org
    - make wkd_inspect
    - make wkd_inspect WKD_FQDN=master-key.archlinux.org
    - cp -r build/wkd/ public
  artifacts:
    paths:
      - public
  rules:
    - if: $CI_PROJECT_PATH == "archlinux/archlinux-keyring" && $CI_COMMIT_TAG
gitlab-ci: Run lint, build and install .gitlab-ci.yml: Add rule to run `make lint` if `keyringctl` changes in a merge request. Add integration stage to always attempt to build and install the keyring in a containerized environment. 2021-10-16 18:03:44 -05:00			`---`
ci: add basic job to check new key additions and removals 2021-04-29 16:58:47 -05:00			`image: archlinux:latest`

			`stages:`
feature(keyringctl): adding basic infrastructure for running tests 2021-10-31 11:53:20 -06:00			`- test`
Add gitlab-ci integration to build WKD dir on tag .gitlab-ci.yml: Add gitlab-ci integration to build WKD dir on tag using the `make wkd` target per FQDN used by Arch Linux. Builds only happen on a secure runner, the job is running in its own stage after the tests and only runs in pipelines for tags. 2022-08-31 03:27:45 -05:00			`- wkd`
ci: add basic job to check new key additions and removals 2021-04-29 16:58:47 -05:00
feature(keyringctl): adding basic infrastructure for running tests 2021-10-31 11:53:20 -06:00			`lint:`
			`stage: test`
ci: add basic job to check new key additions and removals 2021-04-29 16:58:47 -05:00			`needs: []`
feature(keyringctl): adding basic infrastructure for running tests 2021-10-31 11:53:20 -06:00			`before_script:`
			`- pacman -Syu --needed --noconfirm make flake8 mypy python-black python-isort`
ci: add basic job to check new key additions and removals 2021-04-29 16:58:47 -05:00			`script:`
feature(keyringctl): adding basic infrastructure for running tests 2021-10-31 11:53:20 -06:00			`- make lint`
ci: add basic job to check new key additions and removals 2021-04-29 16:58:47 -05:00			`only:`
			`changes:`
feature(keyringctl): adding basic infrastructure for running tests 2021-10-31 11:53:20 -06:00			`- keyringctl`
			`- libkeyringctl/*`
feature(ci): add testing and coverage data to gitlab ci artifacts 2021-11-01 11:36:02 -06:00			`- tests/*`
Also trigger tests and linting on changes to CI .gitlab-ci.yml: Also trigger tests and linting on changes to .gitlab-ci.yml. 2021-10-31 15:25:09 -06:00			`- .gitlab-ci.yml`
feature(ci): add testing and coverage data to gitlab ci artifacts 2021-11-01 11:36:02 -06:00			`- Makefile`
gitlab-ci: Run lint, build and install .gitlab-ci.yml: Add rule to run `make lint` if `keyringctl` changes in a merge request. Add integration stage to always attempt to build and install the keyring in a containerized environment. 2021-10-16 18:03:44 -05:00
feature(keyringctl): adding basic infrastructure for running tests 2021-10-31 11:53:20 -06:00			`test:`
			`stage: test`
			`needs: []`
gitlab-ci: Run lint, build and install .gitlab-ci.yml: Add rule to run `make lint` if `keyringctl` changes in a merge request. Add integration stage to always attempt to build and install the keyring in a containerized environment. 2021-10-16 18:03:44 -05:00			`before_script:`
fix(keyringctl): add missing python-toml for coverage run 2021-11-07 15:30:37 -06:00			`- pacman -Syu --needed --noconfirm make python sequoia-sq python-coverage python-pytest python-tomli`
gitlab-ci: Run lint, build and install .gitlab-ci.yml: Add rule to run `make lint` if `keyringctl` changes in a merge request. Add integration stage to always attempt to build and install the keyring in a containerized environment. 2021-10-16 18:03:44 -05:00			`script:`
feature(keyringctl): adding basic infrastructure for running tests 2021-10-31 11:53:20 -06:00			`- make test`
gitlab-ci: Run lint, build and install .gitlab-ci.yml: Add rule to run `make lint` if `keyringctl` changes in a merge request. Add integration stage to always attempt to build and install the keyring in a containerized environment. 2021-10-16 18:03:44 -05:00			`only:`
			`changes:`
			`- keyringctl`
feature(keyringctl): adding basic infrastructure for running tests 2021-10-31 11:53:20 -06:00			`- libkeyringctl/*`
feature(ci): add testing and coverage data to gitlab ci artifacts 2021-11-01 11:36:02 -06:00			`- tests/*`
Also trigger tests and linting on changes to CI .gitlab-ci.yml: Also trigger tests and linting on changes to .gitlab-ci.yml. 2021-10-31 15:25:09 -06:00			`- .gitlab-ci.yml`
feature(ci): add testing and coverage data to gitlab ci artifacts 2021-11-01 11:36:02 -06:00			`- Makefile`
Fix coverage reporting with gitlab CI .gitlab-ci.yml: Remove legacy keyword 'cobertura' and use the gitlab >= 15 based `coverage_report` which is used to specify format and path to coverage XML. 2022-06-04 03:40:24 -05:00			`coverage: '/TOTAL.*\s([.\d]+)%/'`
feature(ci): add testing and coverage data to gitlab ci artifacts 2021-11-01 11:36:02 -06:00			`artifacts:`
			`when: always`
			`reports:`
Fix coverage reporting with gitlab CI .gitlab-ci.yml: Remove legacy keyword 'cobertura' and use the gitlab >= 15 based `coverage_report` which is used to specify format and path to coverage XML. 2022-06-04 03:40:24 -05:00			`coverage_report:`
			`coverage_format: cobertura`
			`path: build/coverage.xml`
feature(ci): add testing and coverage data to gitlab ci artifacts 2021-11-01 11:36:02 -06:00			`junit: build/junit-report.xml`
gitlab-ci: Run lint, build and install .gitlab-ci.yml: Add rule to run `make lint` if `keyringctl` changes in a merge request. Add integration stage to always attempt to build and install the keyring in a containerized environment. 2021-10-16 18:03:44 -05:00
			`build_install:`
feature(keyringctl): adding basic infrastructure for running tests 2021-10-31 11:53:20 -06:00			`stage: test`
			`needs: []`
gitlab-ci: Run lint, build and install .gitlab-ci.yml: Add rule to run `make lint` if `keyringctl` changes in a merge request. Add integration stage to always attempt to build and install the keyring in a containerized environment. 2021-10-16 18:03:44 -05:00			`before_script:`
Add pkgconf and systemd before building/ installing .gitlab-ci.yml: Add pkgconf and systemd to the list of packages, that are installed before executing the build and install targets. They are required to retrieve the correct path for systemd's system units. 2022-07-22 18:53:23 -05:00			`- pacman -Syu --needed --noconfirm make pkgconf python sequoia-sq systemd`
gitlab-ci: Run lint, build and install .gitlab-ci.yml: Add rule to run `make lint` if `keyringctl` changes in a merge request. Add integration stage to always attempt to build and install the keyring in a containerized environment. 2021-10-16 18:03:44 -05:00			`script:`
			`- make`
			`- make install PREFIX=/usr`
			`- pacman-key --init`
			`- pacman-key --populate archlinux`
			`- pacman-key --updatedb`
			`- pacman -Syu`
feature(ci): run keyring integrity check if keyring or code changes 2021-11-07 16:31:19 -06:00
			`keyring_check:`
			`stage: test`
			`needs: []`
			`before_script:`
gitlab: invoke ci target for advanced checks on new keys This invokes the dedicated ci keyringctl command that is responsible to check with sq-keyring-linter and hokey when completely unknown new keys are added to the keyring. 2022-01-12 16:48:29 -06:00			`- pacman -Syu --needed --noconfirm make python sequoia-sq git`
feature(ci): run keyring integrity check if keyring or code changes 2021-11-07 16:31:19 -06:00			`script:`
			`- ./keyringctl check`
gitlab: invoke ci target for advanced checks on new keys This invokes the dedicated ci keyringctl command that is responsible to check with sq-keyring-linter and hokey when completely unknown new keys are added to the keyring. 2022-01-12 16:48:29 -06:00			`- ./keyringctl ci`
feature(ci): run keyring integrity check if keyring or code changes 2021-11-07 16:31:19 -06:00			`only:`
			`changes:`
gitlab: invoke ci target for advanced checks on new keys This invokes the dedicated ci keyringctl command that is responsible to check with sq-keyring-linter and hokey when completely unknown new keys are added to the keyring. 2022-01-12 16:48:29 -06:00			`- keyring/*/`
feature(ci): run keyring integrity check if keyring or code changes 2021-11-07 16:31:19 -06:00			`- keyringctl`
			`- libkeyringctl/*`
			`- tests/*`
			`- .gitlab-ci.yml`
			`- Makefile`
Add gitlab-ci integration to build WKD dir on tag .gitlab-ci.yml: Add gitlab-ci integration to build WKD dir on tag using the `make wkd` target per FQDN used by Arch Linux. Builds only happen on a secure runner, the job is running in its own stage after the tests and only runs in pipelines for tags. 2022-08-31 03:27:45 -05:00
Rename wkd_build to pages .gitlab-ci.yml: Rename wkd_build to pages, as that is apparently what gitlab needs. 2022-09-02 12:04:02 -05:00			`pages:`
Add gitlab-ci integration to build WKD dir on tag .gitlab-ci.yml: Add gitlab-ci integration to build WKD dir on tag using the `make wkd` target per FQDN used by Arch Linux. Builds only happen on a secure runner, the job is running in its own stage after the tests and only runs in pipelines for tags. 2022-08-31 03:27:45 -05:00			`stage: wkd`
			`needs: []`
			`tags:`
			`- secure`
			`before_script:`
			`- pacman -Syu --needed --noconfirm make python sequoia-sq`
			`script:`
			`- make wkd`
			`- make wkd WKD_FQDN=master-key.archlinux.org`
			`- make wkd_inspect`
			`- make wkd_inspect WKD_FQDN=master-key.archlinux.org`
Copy WKD dir to public directly .gitlab-ci.yml: Copy the WKD dir to a public dir (used by gitlab pages) directly instead of creating the public dir and copying into it, as that is brittle. 2022-09-02 11:31:38 -05:00			`- cp -r build/wkd/ public`
Add gitlab-ci integration to build WKD dir on tag .gitlab-ci.yml: Add gitlab-ci integration to build WKD dir on tag using the `make wkd` target per FQDN used by Arch Linux. Builds only happen on a secure runner, the job is running in its own stage after the tests and only runs in pipelines for tags. 2022-08-31 03:27:45 -05:00			`artifacts:`
			`paths:`
			`- public`
			`rules:`
			`- if: $CI_PROJECT_PATH == "archlinux/archlinux-keyring" && $CI_COMMIT_TAG`