---
include:
  - remote: 'https://git.scc.kit.edu/KIT-CERT/publish/-/raw/main/gitlab-ci/ssh-config.yml'
  - remote: 'https://git.scc.kit.edu/KIT-CERT/publish/-/raw/main/gitlab-ci/build_image.yml'
  - remote: 'https://git.scc.kit.edu/KIT-CERT/publish/-/raw/main/gitlab-ci/python-pkg.yml'

variables:
  BUILD_CONTEXT: ci_container
  BUILD_FILE: Dockerfile
  IMAGE_NAME: pkg_build-exim-encrypt-dlfunc/bullseye
  TARGET_REPOSITORY: "bullseye"


stages:
  - build_image
  - build_pkg
  - debian-package

.image-buster:
  IMAGE_NAME: pkg_build-exim-encrypt-dlfunc/buster
  BUILD_FILE: Dockerfile.buster
  TARGET_REPOSITORY: "buster"

.image-bullseye:
  IMAGE_NAME: pkg_build-exim-encrypt-dlfunc/bullseye

.image-jammy:
  variables:
    IMAGE_NAME: pkg_build-exim-encrypt-dlfunc/jammy
    BUILD_FILE: Dockerfile.jammy

build_pkg_image_buster:
  extends:
    - .image-buster
    - build_pkg_image

pkg_buster:
  extends:
    - .image-buster
    - python_pkg

build_pkg_image_jammy:
  extends:
    - .image-jammy
    - build_pkg_image

#.code-coverage:
#    stage: build
#    script:
#        - "export PATH=/usr/local/sbin:/usr/local/bin:${PATH}"
#        - meson build -Db_coverage=true
#        - cd build
#        - ninja
#        - ninja test
#        - ninja coverage-xml
#        - grep -Eo 'line-rate="[^"]+"' meson-logs/coverage.xml | head -n 1 |
#            grep -Eo '[0-9.]+' | awk '{ printf "coverage\x3a %.2f%% of statements\n", $1 * 100 }'
#        - ninja coverage-html
#        - mv meson-logs/coveragereport ../coverage
#    artifacts:
#        paths:
#            - coverage/
#        reports:
#            cobertura: build/meson-logs/coverage.xml
#
#.build:
#    stage: build
#    script:
#        - which meson
#        - meson build
#        - cd build
#        - ninja
#        - ninja test
#    artifacts:
#        paths:
#            - build/src/libexim-encrypt-dlfunc.so
#            - build/src/libexim-encrypt-dlfunc-genkeys
#            - build/src/libexim-encrypt-dlfunc-decrypt-secretbox
#            - build/src/libexim-encrypt-dlfunc-decrypt-sealedbox
#
#.debian-package:
#    stage: debian-package
#    script:
#        - mkdir ~/.gnupg; chown root:root ~/.gnupg; chmod 700 ~/.gnupg
#        - eval $(gpg-agent --batch --sh --disable-scdaemon)
#        - echo "pinentry-mode loopback" > ~/.gnupg/gpg.conf
#        - echo "allow-loopback-pinentry" > ~/.gnupg/gpg-agent.conf
#        - gpg-connect-agent /bye
#        - echo $DEBIAN_SIGNING_KEY_ASC | base64 -d | gpg --batch --import --always-trust --yes
#        - echo "1DC7C2770DC111723D505DD61614D5CDEE1555A7:6:" | gpg --import-ownertrust
#        - dpkg-buildpackage --sign-key=1DC7C2770DC111723D505DD61614D5CDEE1555A7
#        - mv -t . ../*.deb ../*.dsc ../*.tar.gz ../*.changes ../*.buildinfo
#    artifacts:
#        paths:
#            - ./*.deb
#            - ./*.dsc
#            - ./*.tar.gz
#            - ./*.changes
#            - ./*.buildinfo
#
#code-coverage:
#    extends:
#        - .image-bullseye
#        - .code-coverage
#    needs: [ ]
#
#build:bullseye:
#    extends:
#        - .image-bullseye
#        - .build
#        - .code-coverage
#    needs: [ ]
#
#build:focal:
#    extends:
#        - .image-focal
#        - .build
#    needs: [ ]
#
#build:buster:
#    extends:
#        - .build
#        - .image-buster
#    needs: [ ]
#
#debian-package:bullseye:
#    extends:
#        - .image-bullseye
#        - .debian-package
#    dependencies:
#        - build:bullseye
#    needs: [ "build:bullseye" ]
#
#debian-package:focal:
#    extends:
#        - .image-focal
#        - .debian-package
#    dependencies:
#        - build:focal
#    needs: [ "build:focal" ]
#
#debian-package:buster:
#    extends:
#        - .image-buster
#        - .debian-package
#    dependencies:
#        - build:buster
#    needs: [ "build:buster" ]