.gitlab-ci.yml

---
include: integration/ci-images.yml
stages:
  - unit_test
  - integration
  - images
  - commit

go_test:
  stage: unit_test
  image: golang:1.23
  script:
    - go build ./...
    - go test -v -race ./...
    - if gofmt -d . | grep . ; then false ; else true ; fi

qemu_test:
  stage: integration
  tags:
    - longrunning
  image: debian:trixie
  before_script:
    - apt update
    - apt install -qqy qemu-system-x86 qemu-system-common qemu-system-data golang-1.24
    - apt install -qqy git python3 curl jq openssh-client make openssl unzip cpio gzip efitools uuid-runtime sbsigntool python3-virt-firmware
    - export GOPATH=$PWD/.go
    - export PATH=$PATH:/usr/lib/go-1.24/bin:$GOPATH/bin
    - export PATH=$PATH:$HOME/.local/bin/
  script:
    - ./integration/qemu.sh
    - ./integration/supermicro-x11scl.sh
  artifacts:
    when: always
    paths:
    - ./integration/saved/
    - ./integration/build/stprov.cpio.gz # for stage 'images'
    - ./integration/build/kernel.vmlinuz # for stage 'images'
    - ./integration/build/stprov.iso # for stime releng testing

# Run tests with HEAD stboot, to detect any breaking changes. One
# complication is that existence of a go.work file interacts badly
# with building u-root itself and with u-root's building of included
# commands. Instead, we create a go.work.local file, and point to it
# via the GOWORK environment variable; that way, it can be enabled
# only when building stprov, and disabled for u-root.
qemu_head_stboot_test:
  stage: integration
  tags:
    - longrunning
  image: debian:trixie
  allow_failure: true
  before_script:
    - apt update
    - apt install -qqy qemu-system-x86 qemu-system-common qemu-system-data golang-1.24
    - apt install -qqy git python3 curl jq openssh-client make openssl unzip cpio gzip efitools uuid-runtime sbsigntool python3-virt-firmware
    - export PATH=/usr/lib/go-1.24/bin:$PATH
    - export PATH=$PATH:$HOME/.local/bin/
    - git clone https://git.glasklar.is/system-transparency/core/stboot.git
    - go work init && go work use . ./stboot && mv go.work go.work.local
  script:
    - GOWORK=$(pwd)/go.work.local SINGLE_TEST=0 ./integration/qemu.sh # static
    - GOWORK=$(pwd)/go.work.local SINGLE_TEST=4 ./integration/qemu.sh # dhcp
  artifacts:
    when: always
    paths:
    - ./integration/saved/

commitlint:
  stage: commit
  image: node:alpine
  before_script:
    - apk add --no-cache git
    - npm install --save-dev @commitlint/config-conventional @commitlint/cli
  script:
    - git fetch origin "${CI_MERGE_REQUEST_TARGET_BRANCH_NAME:=main}"
    - for i in 5 10 20 40; do if git merge-base HEAD origin/"$CI_MERGE_REQUEST_TARGET_BRANCH_NAME"; then break; else git fetch --deepen=$i origin "$CI_MERGE_REQUEST_TARGET_BRANCH_NAME"; fi; done
    - base_commit_id="$(git merge-base HEAD origin/"$CI_MERGE_REQUEST_TARGET_BRANCH_NAME")"
    - commit_ids=$(git rev-list --no-merges "$base_commit_id"..)
    - for commit_id in $commit_ids; do git log --format=%B -n1 "$commit_id" | npx commitlint; done
  allow_failure: true