NLnetLabs-krill/.github/workflows/ci.yml

name: CI

on:
  # permit manual invocation of the workflow via the GitHub Actions web UI
  workflow_dispatch: 

  # run the tests for any direct push to main
  push:
    branches: ['main']
    paths-ignore:
      - '.dockerignore'
      - '.github/workflow/e2e.yml'
      - '.github/workflow/pkg.yml'
      - '.github/workflow/e2e test cache rebuild.yml'
      - 'Changelog.md'
      - 'Dockerfile'
      - 'doc/**'
      - 'docker/**'
      - 'LICENSE'
      - 'README.md'
      - 'tests/e2e/**'

  # run the tests on creation or update of any pull request
  pull_request:
    paths-ignore:
      - '.dockerignore'
      - '.github/workflow/e2e.yml'
      - '.github/workflow/pkg.yml'
      - '.github/workflow/e2e test cache rebuild.yml'
      - 'Changelog.md'
      - 'Dockerfile'
      - 'doc/**'
      - 'docker/**'
      - 'LICENSE'
      - 'README.md'
      - 'tests/e2e/**'

jobs:
  build:
    name: build
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest]

        # Test against Rust 1.56.0 because in build.rs we say that is the oldest supported version.
        # Test against beta Rust to get early warning of any problems that might occur with the upcoming Rust release.
        # Order: oldest Rust to newest Rust.
        rust: [1.56.0, stable, beta]

        # Test with no features, default features ("") and all except UI tests.
        # Order: fewest features to most features.
        args: ["--no-default-features", "", "--features all-except-ui-tests"]
    steps:
    - name: Checkout repository
      uses: actions/checkout@v2
    - name: Install Rust
      uses: hecrj/setup-rust-action@v1
      with:
        rust-version: ${{ matrix.rust }}
    - run: cargo build --verbose ${{ matrix.args }} --locked
    - run: cargo test --verbose ${{ matrix.args }} -- --test-threads=1 2>&1
    - name: Archive Cypress UI test image & video captures
      if: ${{ always() }}
      uses: actions/upload-artifact@v2
      with:
        name: cypress-ui-test-captures ${{ matrix.os }} ${{ matrix.rust }}
        path: target/ui/
        if-no-files-found: ignore

  pykmip-test:
    name: pykmip-test
    runs-on: ubuntu-20.04
    strategy:
      matrix:
        rust: [1.56.0, stable, beta]
        features: ["hsm", "hsm,hsm-tests-kmip"]
    steps:
    - name: Checkout repository
      uses: actions/checkout@v1

    - name: Install Rust
      uses: hecrj/setup-rust-action@v1
      with:
        rust-version: ${{ matrix.rust }}

    - uses: actions/setup-python@v2
      with:
        python-version: '3.x'

    - name: Install PyKMIP
      uses: BSFishy/pip-action@v1
      with:
        packages: pykmip

    - name: Compile the tests
      run: |
        cargo build --tests --no-default-features --features ${{ matrix.features }}

    - name: Run the tests against the PyKMIP server
      run: |
        cd test-resources/pykmip
        python run-server.py &
        sleep 5s
        openssl s_client -connect 127.0.0.1:5696 || true
        cd -
        cargo test --no-default-features --features ${{ matrix.features }} -- --test-threads=1 2>&1

    - name: Dump the PyKMIP log
      if: always()
      working-directory: test-resources/pykmip
      run: |
        ls -la
        cat server.log

  softhsm2-test:
    name: softhsm2-test
    runs-on: ubuntu-20.04
    strategy:
      matrix:
        rust: [1.56.0, stable, beta]
        features: ["hsm,hsm-tests-pkcs11"]
    steps:
    - name: Checkout repository
      uses: actions/checkout@v1

    - name: Install Rust
      uses: hecrj/setup-rust-action@v1
      with:
        rust-version: ${{ matrix.rust }}

    - name: Install SoftHSM2
      run: |
        sudo apt update
        sudo apt install -y softhsm2
        sudo usermod -aG softhsm $(whoami)
        sg softhsm -c "softhsm2-util --init-token --slot 0 --label \"My token 1\" --pin 1234 --so-pin 1234"

    - name: Compile the tests
      run: |
        cargo build --tests --no-default-features --features ${{ matrix.features }}

    - name: Run the tests against SoftHSM2
      run: |
        sg softhsm -c "cargo test --no-default-features --features ${{ matrix.features }} -- --test-threads=1 2>&1"

    - name: Dump the SoftHSM2 log
      if: always()
      run: |
        cat /var/log/syslog