a6f2a84baa
.gitlab-ci.yml: Add gitlab-ci integration to build WKD dir on tag using the `make wkd` target per FQDN used by Arch Linux. Builds only happen on a secure runner, the job is running in its own stage after the tests and only runs in pipelines for tags.
95 lines
1.9 KiB
YAML
95 lines
1.9 KiB
YAML
---
|
|
image: archlinux:latest
|
|
|
|
stages:
|
|
- test
|
|
- wkd
|
|
|
|
lint:
|
|
stage: test
|
|
needs: []
|
|
before_script:
|
|
- pacman -Syu --needed --noconfirm make flake8 mypy python-black python-isort
|
|
script:
|
|
- make lint
|
|
only:
|
|
changes:
|
|
- keyringctl
|
|
- libkeyringctl/*
|
|
- tests/*
|
|
- .gitlab-ci.yml
|
|
- Makefile
|
|
|
|
test:
|
|
stage: test
|
|
needs: []
|
|
before_script:
|
|
- pacman -Syu --needed --noconfirm make python sequoia-sq python-coverage python-pytest python-tomli
|
|
script:
|
|
- make test
|
|
only:
|
|
changes:
|
|
- keyringctl
|
|
- libkeyringctl/*
|
|
- tests/*
|
|
- .gitlab-ci.yml
|
|
- Makefile
|
|
coverage: '/TOTAL.*\s([.\d]+)%/'
|
|
artifacts:
|
|
when: always
|
|
reports:
|
|
coverage_report:
|
|
coverage_format: cobertura
|
|
path: build/coverage.xml
|
|
junit: build/junit-report.xml
|
|
|
|
build_install:
|
|
stage: test
|
|
needs: []
|
|
before_script:
|
|
- pacman -Syu --needed --noconfirm make pkgconf python sequoia-sq systemd
|
|
script:
|
|
- make
|
|
- make install PREFIX=/usr
|
|
- pacman-key --init
|
|
- pacman-key --populate archlinux
|
|
- pacman-key --updatedb
|
|
- pacman -Syu
|
|
|
|
keyring_check:
|
|
stage: test
|
|
needs: []
|
|
before_script:
|
|
- pacman -Syu --needed --noconfirm make python sequoia-sq git
|
|
script:
|
|
- ./keyringctl check
|
|
- ./keyringctl ci
|
|
only:
|
|
changes:
|
|
- keyring/**/*
|
|
- keyringctl
|
|
- libkeyringctl/*
|
|
- tests/*
|
|
- .gitlab-ci.yml
|
|
- Makefile
|
|
|
|
wkd_build:
|
|
stage: wkd
|
|
needs: []
|
|
tags:
|
|
- secure
|
|
before_script:
|
|
- pacman -Syu --needed --noconfirm make python sequoia-sq
|
|
script:
|
|
- make wkd
|
|
- make wkd WKD_FQDN=master-key.archlinux.org
|
|
- make wkd_inspect
|
|
- make wkd_inspect WKD_FQDN=master-key.archlinux.org
|
|
- mkdir public
|
|
- cp -r build/wkd/.* public
|
|
artifacts:
|
|
paths:
|
|
- public
|
|
rules:
|
|
- if: $CI_PROJECT_PATH == "archlinux/archlinux-keyring" && $CI_COMMIT_TAG
|