4 Commits

2 changed files with 165 additions and 107 deletions

View File

@ -1,115 +1,133 @@
---
include:
- remote: 'https://git.scc.kit.edu/KIT-CERT/publish/-/raw/main/gitlab-ci/build_image.yml'
variables:
BUILD_CONTEXT: ci_container
BUILD_FILE: Dockerfile
IMAGE_NAME: pkg_build-exim-encrypt-dlfunc/bullseye
stages: stages:
- build_image
- build - build
- debian-package - debian-package
.image-buster: .image-buster:
image: '${CONTAINER_REGISTRY_NAME}/exim-encrypt-dlfunc-build-buster' IMAGE_NAME: pkg_build-exim-encrypt-dlfunc/buster
.image-bullseye: .image-bullseye:
image: '${CONTAINER_REGISTRY_NAME}/exim-encrypt-dlfunc-build-bullseye' IMAGE_NAME: pkg_build-exim-encrypt-dlfunc/bullseye
.image-focal: .image-jammy:
image: '${CONTAINER_REGISTRY_NAME}/exim-encrypt-dlfunc-build-focal' variables:
IMAGE_NAME: pkg_build-exim-encrypt-dlfunc/jammy
BUILD_FILE: Dockerfile.jammy
.code-coverage: build_pkg_image_jammy:
stage: build
script:
- "export PATH=/usr/local/sbin:/usr/local/bin:${PATH}"
- meson build -Db_coverage=true
- cd build
- ninja
- ninja test
- ninja coverage-xml
- grep -Eo 'line-rate="[^"]+"' meson-logs/coverage.xml | head -n 1 |
grep -Eo '[0-9.]+' | awk '{ printf "coverage\x3a %.2f%% of statements\n", $1 * 100 }'
- ninja coverage-html
- mv meson-logs/coveragereport ../coverage
artifacts:
paths:
- coverage/
reports:
cobertura: build/meson-logs/coverage.xml
.build:
stage: build
script:
- which meson
- meson build
- cd build
- ninja
- ninja test
artifacts:
paths:
- build/src/libexim-encrypt-dlfunc.so
- build/src/libexim-encrypt-dlfunc-genkeys
- build/src/libexim-encrypt-dlfunc-decrypt-secretbox
- build/src/libexim-encrypt-dlfunc-decrypt-sealedbox
.debian-package:
stage: debian-package
script:
- mkdir ~/.gnupg; chown root:root ~/.gnupg; chmod 700 ~/.gnupg
- eval $(gpg-agent --batch --sh --disable-scdaemon)
- echo "pinentry-mode loopback" > ~/.gnupg/gpg.conf
- echo "allow-loopback-pinentry" > ~/.gnupg/gpg-agent.conf
- gpg-connect-agent /bye
- echo $DEBIAN_SIGNING_KEY_ASC | base64 -d | gpg --batch --import --always-trust --yes
- echo "1DC7C2770DC111723D505DD61614D5CDEE1555A7:6:" | gpg --import-ownertrust
- dpkg-buildpackage --sign-key=1DC7C2770DC111723D505DD61614D5CDEE1555A7
- mv -t . ../*.deb ../*.dsc ../*.tar.gz ../*.changes ../*.buildinfo
artifacts:
paths:
- ./*.deb
- ./*.dsc
- ./*.tar.gz
- ./*.changes
- ./*.buildinfo
code-coverage:
extends: extends:
- .image-bullseye - .image-jammy
- .code-coverage - build_pkg_image
needs: [ ]
build:bullseye: #.code-coverage:
extends: # stage: build
- .image-bullseye # script:
- .build # - "export PATH=/usr/local/sbin:/usr/local/bin:${PATH}"
- .code-coverage # - meson build -Db_coverage=true
needs: [ ] # - cd build
# - ninja
build:focal: # - ninja test
extends: # - ninja coverage-xml
- .image-focal # - grep -Eo 'line-rate="[^"]+"' meson-logs/coverage.xml | head -n 1 |
- .build # grep -Eo '[0-9.]+' | awk '{ printf "coverage\x3a %.2f%% of statements\n", $1 * 100 }'
needs: [ ] # - ninja coverage-html
# - mv meson-logs/coveragereport ../coverage
build:buster: # artifacts:
extends: # paths:
- .build # - coverage/
- .image-buster # reports:
needs: [ ] # cobertura: build/meson-logs/coverage.xml
#
debian-package:bullseye: #.build:
extends: # stage: build
- .image-bullseye # script:
- .debian-package # - which meson
dependencies: # - meson build
- build:bullseye # - cd build
needs: [ "build:bullseye" ] # - ninja
# - ninja test
debian-package:focal: # artifacts:
extends: # paths:
- .image-focal # - build/src/libexim-encrypt-dlfunc.so
- .debian-package # - build/src/libexim-encrypt-dlfunc-genkeys
dependencies: # - build/src/libexim-encrypt-dlfunc-decrypt-secretbox
- build:focal # - build/src/libexim-encrypt-dlfunc-decrypt-sealedbox
needs: [ "build:focal" ] #
#.debian-package:
debian-package:buster: # stage: debian-package
extends: # script:
- .image-buster # - mkdir ~/.gnupg; chown root:root ~/.gnupg; chmod 700 ~/.gnupg
- .debian-package # - eval $(gpg-agent --batch --sh --disable-scdaemon)
dependencies: # - echo "pinentry-mode loopback" > ~/.gnupg/gpg.conf
- build:buster # - echo "allow-loopback-pinentry" > ~/.gnupg/gpg-agent.conf
needs: [ "build:buster" ] # - gpg-connect-agent /bye
# - echo $DEBIAN_SIGNING_KEY_ASC | base64 -d | gpg --batch --import --always-trust --yes
# - echo "1DC7C2770DC111723D505DD61614D5CDEE1555A7:6:" | gpg --import-ownertrust
# - dpkg-buildpackage --sign-key=1DC7C2770DC111723D505DD61614D5CDEE1555A7
# - mv -t . ../*.deb ../*.dsc ../*.tar.gz ../*.changes ../*.buildinfo
# artifacts:
# paths:
# - ./*.deb
# - ./*.dsc
# - ./*.tar.gz
# - ./*.changes
# - ./*.buildinfo
#
#code-coverage:
# extends:
# - .image-bullseye
# - .code-coverage
# needs: [ ]
#
#build:bullseye:
# extends:
# - .image-bullseye
# - .build
# - .code-coverage
# needs: [ ]
#
#build:focal:
# extends:
# - .image-focal
# - .build
# needs: [ ]
#
#build:buster:
# extends:
# - .build
# - .image-buster
# needs: [ ]
#
#debian-package:bullseye:
# extends:
# - .image-bullseye
# - .debian-package
# dependencies:
# - build:bullseye
# needs: [ "build:bullseye" ]
#
#debian-package:focal:
# extends:
# - .image-focal
# - .debian-package
# dependencies:
# - build:focal
# needs: [ "build:focal" ]
#
#debian-package:buster:
# extends:
# - .image-buster
# - .debian-package
# dependencies:
# - build:buster
# needs: [ "build:buster" ]

View File

@ -0,0 +1,40 @@
FROM docker.io/library/ubuntu:jammy
LABEL org.opencontainers.image.created=${BUILDTIMESTAMP} \
org.opencontainers.image.authors="Heiko Reese <reese@kit.edu>" \
org.opencontainers.image.title="exim build container" \
org.opencontainers.image.description="A buld environment for exim-encrypt-dlfunc" \
org.opencontainers.image.source="https://git.scc.kit.edu/mail/exim-encrypt-dlfunc/" \
org.opencontainers.image.licenses="Apache-2.0"
RUN apt-get update; \
DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt-get install --no-install-recommends -y \
build-essential \
exim4-daemon-heavy \
exim4-dev \
gcovr \
git \
libsodium-dev \
openssl \
pkg-config \
python3-pip \
libxml2-utils \
debhelper \
debsigs \
devscripts \
dh-make \
git-buildpackage \
gpgv1 \
meson \
less \
mc \
openssh-client \
vim; \
DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt-get clean; \
rm -rf /var/lib/apt/lists/*;
RUN pip3 install --upgrade meson ninja; \
rm -rf ~/.cache/pip/*;
WORKDIR /mnt/