TEMP(testing): trigger nightly-osp on push to ci-draft-pause #1054
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: libeac3 Tests | ||
|
Check failure on line 1 in .github/workflows/libeac3.yml
|
||
| on: | ||
| workflow_call: | ||
| inputs: | ||
| wolfssl_refs_json: | ||
| description: "JSON array of wolfssl refs to test; empty = use discover_versions output" | ||
| required: false | ||
| type: string | ||
| default: "" | ||
| workflow_dispatch: {} | ||
| jobs: | ||
| discover_versions: | ||
| uses: ./.github/workflows/_discover-versions.yml | ||
| build_wolfprovider: | ||
| needs: discover_versions | ||
| uses: ./.github/workflows/build-wolfprovider.yml | ||
| with: | ||
| wolfssl_ref: ${{ matrix.wolfssl_ref }} | ||
| openssl_ref: ${{ matrix.openssl_ref }} | ||
| fips_ref: ${{ matrix.fips_ref }} | ||
| replace_default: ${{ matrix.replace_default }} | ||
| strategy: | ||
| fail-fast: false | ||
| matrix: | ||
| wolfssl_ref: ${{ inputs.wolfssl_refs_json != "" && fromJson(inputs.wolfssl_refs_json) || fromJson(needs.discover_versions.outputs.wolfssl_ref_array) }} | ||
| openssl_ref: ${{ fromJson(needs.discover_versions.outputs.openssl_ref_array) }} | ||
| fips_ref: [ 'FIPS', 'non-FIPS' ] | ||
| replace_default: [ true ] | ||
| test_libeac3: | ||
| runs-on: ubuntu-22.04 | ||
| needs: [build_wolfprovider, discover_versions] | ||
| container: | ||
| image: ghcr.io/wolfssl/wolfprovider-test-deps:bookworm | ||
| env: | ||
| DEBIAN_FRONTEND: noninteractive | ||
| # This should be a safe limit for the tests to run. | ||
| timeout-minutes: 60 | ||
| strategy: | ||
| fail-fast: false | ||
| matrix: | ||
| openpace_ref: [ '1.1.3' ] | ||
| wolfssl_ref: ${{ inputs.wolfssl_refs_json != "" && fromJson(inputs.wolfssl_refs_json) || fromJson(needs.discover_versions.outputs.wolfssl_ref_array) }} | ||
| openssl_ref: ${{ fromJson(needs.discover_versions.outputs.openssl_ref_array) }} | ||
| fips_ref: [ 'FIPS', 'non-FIPS' ] | ||
| force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] | ||
| replace_default: [ true ] | ||
| env: | ||
| WOLFSSL_PACKAGES_PATH: /tmp/wolfssl-packages | ||
| OPENSSL_PACKAGES_PATH: /tmp/openssl-packages | ||
| WOLFPROV_PACKAGES_PATH: /tmp/wolfprov-packages | ||
| steps: | ||
| # Checkout the source so we can run the check-workflow-result script. | ||
| - name: Checkout wolfProvider | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| fetch-depth: 1 | ||
| - name: Download packages from build job | ||
| uses: actions/download-artifact@v4 | ||
| with: | ||
| name: debian-packages-${{ matrix.fips_ref }}${{ matrix.replace_default && '-replace-default' || '' }}-${{ matrix.wolfssl_ref }}-${{ matrix.openssl_ref }} | ||
| path: /tmp | ||
| - name: Install wolfSSL/OpenSSL/wolfprov packages | ||
| run: | | ||
| apt install --reinstall -y --allow-downgrades --allow-change-held-packages \ | ||
| ${{ env.WOLFSSL_PACKAGES_PATH }}/libwolfssl_*.deb | ||
| apt install --reinstall -y --allow-downgrades --allow-change-held-packages \ | ||
| ${{ env.OPENSSL_PACKAGES_PATH }}/openssl_*.deb \ | ||
| ${{ env.OPENSSL_PACKAGES_PATH }}/libssl3_*.deb \ | ||
| ${{ env.OPENSSL_PACKAGES_PATH }}/libssl-dev_*.deb | ||
| apt install --reinstall -y --allow-downgrades --allow-change-held-packages \ | ||
| ${{ env.WOLFPROV_PACKAGES_PATH }}/libwolfprov_*.deb | ||
| # Prevent later 'apt-get install' of test dependencies from | ||
| # replacing the wolfprov-patched libssl3, which breaks | ||
| # replace-default mode. | ||
| apt-mark hold libssl3 libssl-dev openssl libwolfssl libwolfprov | ||
| - name: Verify wolfProvider is properly installed | ||
| run: | | ||
| $GITHUB_WORKSPACE/scripts/verify-install.sh \ | ||
| ${{ matrix.replace_default && '--replace-default' || '' }} \ | ||
| ${{ matrix.fips_ref == 'FIPS' && '--fips' || '' }} | ||
| - name: Checkout openpace | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| repository: frankmorgner/openpace | ||
| ref: ${{ matrix.openpace_ref }} | ||
| path: openpace | ||
| fetch-depth: 1 | ||
| - name: Checkout OSP | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| repository: aidangarske/osp | ||
| ref: 5.9.1-wolfprov-patches | ||
| path: osp | ||
| fetch-depth: 1 | ||
| - run: | | ||
| cd openpace | ||
| PATCH=$($GITHUB_WORKSPACE/scripts/resolve-osp-patch.sh $GITHUB_WORKSPACE/osp openpace ${{ matrix.openpace_ref }} ${{ matrix.wolfssl_ref }} ${{ matrix.fips_ref == 'FIPS' && '--fips' || '' }}) | ||
| patch -p1 < "$PATCH" | ||
| - name: Build openpace | ||
| working-directory: openpace | ||
| run: | | ||
| autoreconf --verbose --install | ||
| ./configure | ||
| make | ||
| make install | ||
| - name: Run libeac3 tests | ||
| working-directory: openpace | ||
| run: | | ||
| export ${{ matrix.force_fail }} | ||
| ./src/eactest > libeac3-test.log || echo "eactest failed with exit code $?" | ||
| cat libeac3-test.log | ||
| if grep -q "Everything works as expected." libeac3-test.log; then | ||
| TEST_RESULT=0 | ||
| else | ||
| TEST_RESULT=1 | ||
| fi | ||
| $GITHUB_WORKSPACE/.github/scripts/check-workflow-result.sh $TEST_RESULT ${{ matrix.force_fail }} libeac3 | ||
