wolfProvider/.github/workflows/perf-regression.yml at master · wolfSSL/wolfProvider · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
name: Overhead Regression

on:
  schedule:
    - cron: '0 7 * * *'
  workflow_dispatch:
  workflow_call:

# No concurrency group: github.workflow is the caller's here, so any group collides with sibling calls.

jobs:
  discover_versions:
    uses: ./.github/workflows/_discover-versions.yml

  perf_nonfips:
    needs: discover_versions
    name: Overhead regression (non-FIPS)
    runs-on: ubuntu-22.04
    timeout-minutes: 30
    strategy:
      fail-fast: false
      matrix:
        openssl_ref:
          - master
          - ${{ needs.discover_versions.outputs.openssl_latest_ref }}
        wolfssl_ref: ${{ fromJson(needs.discover_versions.outputs.wolfssl_latest_ref_array) }}
    steps:
      - name: Checkout wolfProvider
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Build wolfProvider
        run: |
          OPENSSL_TAG=${{ matrix.openssl_ref }} WOLFSSL_TAG=${{ matrix.wolfssl_ref }} ./scripts/build-wolfprovider.sh

      - name: Run overhead regression
        run: |
          source scripts/env-setup
          OPENSSL_TAG=${{ matrix.openssl_ref }} WOLFSSL_TAG=${{ matrix.wolfssl_ref }} ./scripts/perf_test/do-perf-tests.sh

      - name: Upload results
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: perf-results-nonfips-${{ matrix.wolfssl_ref }}-${{ matrix.openssl_ref }}
          path: perf_outputs/results.json
          retention-days: 7

  perf_fips:
    needs: discover_versions
    name: Overhead regression (FIPS)
    runs-on: ubuntu-22.04
    timeout-minutes: 30
    strategy:
      fail-fast: false
      matrix:
        wolfssl_bundle_ref: [ '5.8.2' ]
        openssl_ref: ${{ fromJson(needs.discover_versions.outputs.openssl_latest_ref_array) }}
    steps:
      - name: Checkout wolfProvider
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Download FIPS Ready Bundle
        run: |
          BUNDLE_URL="https://www.wolfssl.com/wolfssl-${{ matrix.wolfssl_bundle_ref }}-gplv3-fips-ready.zip"
          wget -O wolfssl-fips-ready.zip "$BUNDLE_URL"
          unzip wolfssl-fips-ready.zip
          BUNDLE_DIR=$(find . -maxdepth 1 -type d -name "*fips-ready*" | head -n 1)
          if [ -z "$BUNDLE_DIR" ]; then
            echo "ERROR: Could not find FIPS ready bundle directory after extraction"
            ls -la
            exit 1
          fi
          echo "FIPS_BUNDLE_PATH=$(pwd)/$BUNDLE_DIR" >> $GITHUB_ENV

      - name: Build wolfProvider with FIPS Ready Bundle
        run: |
          OPENSSL_TAG=${{ matrix.openssl_ref }} ./scripts/build-wolfprovider.sh --fips-bundle="$FIPS_BUNDLE_PATH" \
            --fips-check=ready --wolfssl-ver=v${{ matrix.wolfssl_bundle_ref }}-stable

      - name: Run overhead regression
        run: |
          export WOLFSSL_ISFIPS=1
          source scripts/env-setup
          WOLFSSL_TAG=v${{ matrix.wolfssl_bundle_ref }}-stable OPENSSL_TAG=${{ matrix.openssl_ref }} ./scripts/perf_test/do-perf-tests.sh

      - name: Upload results
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: perf-results-fips-${{ matrix.wolfssl_bundle_ref }}-${{ matrix.openssl_ref }}
          path: perf_outputs/results.json
          retention-days: 7