mirror of
https://git.code.sf.net/p/linux-ima/ima-evm-utils
synced 2025-05-01 08:03:38 +02:00
3f162e8e3d
This does not make fsverity.test working on GA CI, though. - `--device /dev/loop-control' is required for losetup(8) to work. - `--privileged' is required foo mount(8) to work, and this makes `--security-opt seccomp=unconfined' redundant. - GA container does not have `/sys/kernel/security' mounted which is needed for `/sys/kernel/security/integrity/ima/policy'. - Enable `set -x` in CI as the logs is everything we have to analyze on failures. Update: with these changes and the UML kernel support, the fsverity.test is working properly. Signed-off-by: Vitaly Chikunov <vt@altlinux.org> [zohar@linux.ibm.com: updated patch description] Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
133 lines
3.2 KiB
YAML
133 lines
3.2 KiB
YAML
# Copyright (c) 2021 Petr Vorel <pvorel@suse.cz>
|
|
name: "distros"
|
|
on: [push, pull_request]
|
|
|
|
jobs:
|
|
job:
|
|
runs-on: ubuntu-latest
|
|
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
# 32bit build
|
|
- container: "debian:stable"
|
|
env:
|
|
CC: gcc
|
|
ARCH: i386
|
|
TSS: tpm2-tss
|
|
VARIANT: i386
|
|
COMPILE_SSL: openssl-3.0.5
|
|
|
|
# cross compilation builds
|
|
- container: "debian:stable"
|
|
env:
|
|
ARCH: ppc64el
|
|
CC: powerpc64le-linux-gnu-gcc
|
|
TSS: ibmtss
|
|
VARIANT: cross-compile
|
|
|
|
- container: "debian:stable"
|
|
env:
|
|
ARCH: arm64
|
|
CC: aarch64-linux-gnu-gcc
|
|
TSS: tpm2-tss
|
|
VARIANT: cross-compile
|
|
|
|
- container: "debian:stable"
|
|
env:
|
|
ARCH: s390x
|
|
CC: s390x-linux-gnu-gcc
|
|
TSS: ibmtss
|
|
VARIANT: cross-compile
|
|
|
|
# musl (native)
|
|
- container: "alpine:latest"
|
|
env:
|
|
CC: gcc
|
|
TSS: tpm2-tss
|
|
|
|
# glibc (gcc/clang)
|
|
- container: "opensuse/tumbleweed"
|
|
env:
|
|
CC: clang
|
|
TSS: ibmtss
|
|
COMPILE_SSL: openssl-3.0.5
|
|
|
|
- container: "opensuse/leap"
|
|
env:
|
|
CC: gcc
|
|
TSS: tpm2-tss
|
|
|
|
- container: "ubuntu:jammy"
|
|
env:
|
|
CC: gcc
|
|
TSS: ibmtss
|
|
COMPILE_SSL: openssl-3.0.5
|
|
|
|
- container: "ubuntu:xenial"
|
|
env:
|
|
CC: clang
|
|
TSS: tpm2-tss
|
|
|
|
- container: "fedora:latest"
|
|
env:
|
|
CC: clang
|
|
TSS: ibmtss
|
|
|
|
- container: "centos:7"
|
|
env:
|
|
CC: gcc
|
|
TSS: tpm2-tss
|
|
|
|
- container: "debian:testing"
|
|
env:
|
|
CC: clang
|
|
TSS: tpm2-tss
|
|
|
|
- container: "debian:stable"
|
|
env:
|
|
CC: clang
|
|
TSS: ibmtss
|
|
|
|
- container: "alt:sisyphus"
|
|
env:
|
|
CC: gcc
|
|
TSS: libtpm2-tss-devel
|
|
|
|
container:
|
|
image: ${{ matrix.container }}
|
|
env: ${{ matrix.env }}
|
|
options: --privileged --device /dev/loop-control
|
|
|
|
steps:
|
|
- name: Show OS
|
|
run: cat /etc/os-release
|
|
|
|
- name: Git checkout
|
|
uses: actions/checkout@v1
|
|
|
|
- name: Install additional packages
|
|
run: |
|
|
INSTALL=${{ matrix.container }}
|
|
INSTALL="${INSTALL%%:*}"
|
|
INSTALL="${INSTALL%%/*}"
|
|
if [ "$VARIANT" ]; then ARCH="$ARCH" ./ci/$INSTALL.$VARIANT.sh; fi
|
|
ARCH="$ARCH" CC="$CC" TSS="$TSS" ./ci/$INSTALL.sh
|
|
if [ "$COMPILE_SSL" ]; then COMPILE_SSL="$COMPILE_SSL" VARIANT="$VARIANT" ./tests/install-openssl3.sh; fi
|
|
|
|
- name: Build swtpm
|
|
run: |
|
|
if [ ! "$VARIANT" ]; then
|
|
which tpm_server || which swtpm || \
|
|
if which tssstartup; then
|
|
./tests/install-swtpm.sh;
|
|
fi
|
|
fi
|
|
|
|
- name: Compiler version
|
|
run: $CC --version
|
|
|
|
- name: Compile
|
|
run: CC="$CC" VARIANT="$VARIANT" COMPILE_SSL="$COMPILE_SSL" ./build.sh
|