.gitlab-ci-main.yml

   1 # see https://docs.gitlab.com/ce/ci/yaml/README.html for all available options
   2
   3 # Stages explained
   4 #
   5 # images: Build the images with the bootstrap script
   6 # build_first: Build a few things first to find silly errors (fast job)
   7 #              (don't pay for 35 machines until something compiles)
   8 # build: The main parallel job
   9 #              (keep these to 1hour as we are billed per hour)
  10 # test_only: Tests using the build from prior stages, these typically
  11 #            have an explicit dependency defined to a specific build job,
  12 #            which means that start as soon as the build job finished.
  13 # test_private: Like test_only, but running on private runners
  14 # report: Code coverage reporting
  15
  16 stages:
  17   - images
  18   - build_first
  19   - build
  20   - test_only
  21   - test_private
  22   - report
  23
  24 variables:
  25   # We want to be resilient to runner failures
  26   ARTIFACT_DOWNLOAD_ATTEMPTS: "3"
  27   EXECUTOR_JOB_SECTION_ATTEMPTS: "3"
  28   GET_SOURCES_ATTEMPTS: "3"
  29   RESTORE_CACHE_ATTEMPTS: "3"
  30   #
  31   GIT_STRATEGY: fetch
  32   GIT_DEPTH: "3"
  33   #
  34   # Use GZip by default, it is fast and is good enough.  Other options include --xz
  35
  36   SAMBA_TESTBASE_TAR_OPTIONS: -z
  37
  38   #
  39   # we run autobuild.py inside a samba CI docker image located on gitlab's registry
  40   # overwrite this variable if you want use your own image registry.
  41   #
  42   # Or better ask for access to the shared development repository, see
  43   # https://wiki.samba.org/index.php/Samba_CI_on_gitlab#Getting_Access
  44   #
  45   SAMBA_CI_CONTAINER_REGISTRY: registry.gitlab.com/samba-team/devel/samba
  46   #
  47   # Set this to the contents of bootstrap/sha1sum.txt
  48   # which is generated by bootstrap/template.py --render
  49   #
  50   SAMBA_CI_CONTAINER_TAG: 1e06877f1afbb3dbd4283e00310d63216a274333
  51   #
  52   # We use the ubuntu1804 image as default as
  53   # it matches what we have on sn-devel-184.
  54   #
  55   SAMBA_CI_CONTAINER_IMAGE: ubuntu1804
  56   #
  57   # The following images are available
  58   # Please see the samba-o3 sections at the end of this file!
  59   # We should run that for each available image
  60   #
  61   SAMBA_CI_CONTAINER_IMAGE_ubuntu1804: ubuntu1804
  62   SAMBA_CI_CONTAINER_IMAGE_ubuntu2004: ubuntu2004
  63   SAMBA_CI_CONTAINER_IMAGE_debian11: debian11
  64   SAMBA_CI_CONTAINER_IMAGE_opensuse153: opensuse153
  65   SAMBA_CI_CONTAINER_IMAGE_fedora36: fedora36
  66   SAMBA_CI_CONTAINER_IMAGE_f36mit120: f36mit120
  67   SAMBA_CI_CONTAINER_IMAGE_centos7: centos7
  68   SAMBA_CI_CONTAINER_IMAGE_centos8s: centos8s
  69
  70 include:
  71   # The image creation details are specified in a separate file
  72   # See bootstrap/README.md for details
  73   - 'bootstrap/.gitlab-ci.yml'
  74
  75 .shared_runner_build_image:
  76   extends: .shared_runner_build
  77   variables:
  78     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE}
  79   image: ${SAMBA_CI_CONTAINER_REGISTRY}/samba-ci-${SAMBA_CI_JOB_IMAGE}:${SAMBA_CI_CONTAINER_TAG}
  80
  81 .shared_template:
  82   extends: .shared_runner_build_image
  83   # All Samba jobs are interruptible, this avoids burning CPU when a
  84   # newer branch is pushed.
  85   interruptible: true
  86   timeout: 2h
  87
  88   # Otherwise we run twice, once on push and once on MR
  89   # https://forum.gitlab.com/t/new-rules-syntax-and-detached-pipelines/37292
  90   rules:
  91     - if: $CI_MERGE_REQUEST_ID
  92       when: never
  93     - when: on_success
  94
  95   variables:
  96     AUTOBUILD_JOB_NAME: $CI_JOB_NAME
  97   stage: build
  98   cache:
  99     key: ccache.${CI_JOB_NAME}.${SAMBA_CI_JOB_IMAGE}.${SAMBA_CI_FLAVOR}
 100     paths:
 101       - ccache
 102
 103   # This is overridden in many cases, but ensures none of the other
 104   # main jobs start until and unless this build finishes.  However
 105   # this also ensures we do not download artifacts from any build
 106   # unless we specifically depend on it, saving bandwidth
 107
 108   needs:
 109     - job: samba-def-build
 110       artifacts: false
 111
 112   before_script:
 113     - uname -a
 114     - lsb_release -a
 115     - cat /etc/os-release
 116     - lscpu
 117     - cat /proc/cpuinfo
 118     - mount
 119     - df -h
 120     - cat /proc/swaps
 121     - free -h
 122       # ld will fail if coverage enabled, force link ld to ld.bfd
 123     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then sudo ln -sf $(which ld.bfd) $(which ld); fi
 124       # See bootstrap/.gitlab-ci.yml how to generate a new image
 125     - echo "SAMBA_CI_CONTAINER_REGISTRY[${SAMBA_CI_CONTAINER_REGISTRY}]"
 126     - echo "SAMBA_CI_CONTAINER_TAG[${SAMBA_CI_CONTAINER_TAG}]"
 127     - echo "SAMBA_CI_JOB_IMAGE[${SAMBA_CI_JOB_IMAGE}]"
 128     - echo "CI_JOB_IMAGE[${CI_JOB_IMAGE}]"
 129     - bootstrap/template.py --sha1sum > /tmp/sha1sum-template.txt
 130     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-template.txt
 131     - echo "${SAMBA_CI_CONTAINER_TAG}" > /tmp/sha1sum-tag.txt
 132     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-tag.txt
 133     - diff -u bootstrap/sha1sum.txt /sha1sum.txt
 134     - echo "${CI_COMMIT_SHA} ${CI_COMMIT_TITLE}" > /tmp/commit.txt
 135     - export CCACHE_BASEDIR="${PWD}"
 136     - export CCACHE_DIR="${PWD}/ccache" && mkdir -pv "$CCACHE_DIR"
 137     - export CC="ccache cc"
 138     - export CXX="ccache c++"
 139     - ccache -z -M 500M
 140     - ccache -s
 141       # We are already running .gitlab-ci directives from this repo, remove additional checks that break our CI
 142     - git config --global --add safe.directory `pwd`
 143   after_script:
 144     - mount
 145     - df -h
 146     - cat /proc/swaps
 147     - free -h
 148     - CCACHE_BASEDIR="${PWD}" CCACHE_DIR="${PWD}/ccache" ccache -s -c
 149   artifacts:
 150     expire_in: 1 week
 151     paths:
 152       - "*.stdout"
 153       - "*.stderr"
 154       - "*.info"
 155       - public
 156       - system-info.txt
 157   retry:
 158     max: 2
 159     when:
 160       - runner_system_failure
 161       - stuck_or_timeout_failure
 162       - api_failure
 163       - runner_unsupported
 164       - stale_schedule
 165       - archived_failure
 166       - scheduler_failure
 167       - data_integrity_failure
 168
 169   script:
 170     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 171     # autobuild name, which means we can define a default template that runs most autobuild jobs
 172     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 173
 174 # Ensure when adding a new job below that you also add it to
 175 # the dependencies for 'pages' below for the code coverage page
 176 # generation.
 177
 178 others:
 179   extends: .shared_template
 180   script:
 181     - script/autobuild.py ldb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/ldb
 182     - script/autobuild.py pidl     $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/pidl
 183     - script/autobuild.py replace  $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/replace
 184     - script/autobuild.py talloc   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/talloc
 185     - script/autobuild.py tdb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tdb
 186     - script/autobuild.py tevent   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tevent
 187     - script/autobuild.py samba-xc $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/samba-xc
 188     - script/autobuild.py docs-xml $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/docs-xml
 189
 190 .shared_template_build_only:
 191   extends: .shared_template
 192   timeout: 2h
 193   needs:
 194   artifacts:
 195     expire_in: 1 week
 196     paths:
 197       - "*.stdout"
 198       - "*.stderr"
 199       - "*.info"
 200       - system-info.txt
 201       - samba-testbase.tar
 202   script:
 203     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 204     # autobuild name, which means we can define a default template that runs most autobuild jobs
 205     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 206     # On success we need to pack everything into an artifacts file
 207     # which needs to be in the git checkout.
 208     # As tar doesn't handle hardlink of read-only files,
 209     # we remember the acls and add write permissions
 210     # before creating the archive. The consumer will apply
 211     # the acls again.
 212     - cp -a /sha1sum.txt /tmp/samba-testbase/image-sha1sum.txt
 213     - cp -a /tmp/commit.txt /tmp/samba-testbase/commit.txt
 214     - ln -s /tmp/samba-testbase/${AUTOBUILD_JOB_NAME}/ /tmp/samba-testbase/build_subdir_link
 215     - pushd /tmp && getfacl -R samba-testbase > samba-testbase.acl.dump && popd
 216     - chmod -R +w /tmp/samba-testbase
 217     - mv /tmp/samba-testbase.acl.dump /tmp/samba-testbase/
 218     - tar $SAMBA_TESTBASE_TAR_OPTIONS -cf samba-testbase.tar /tmp/samba-testbase
 219     - ls -la samba-testbase.tar
 220     - sha1sum samba-testbase.tar
 221
 222 .shared_template_test_only:
 223   extends:
 224     - .shared_template
 225     - .shared_runner_test
 226   stage: test_only
 227   script:
 228     # Print the Kerberos version to check we ended up with the right one
 229     # in the runner. We do not have configure output to recognize it
 230     # otherwise.
 231     - if [ -x "$(command -v krb5-config)" ]; then krb5-config --version; fi
 232     # We unpack the artifacts file created by the .shared_template_build_only
 233     # run we depend on
 234     - ls -la samba-testbase.tar
 235     - sha1sum samba-testbase.tar
 236     - tar $SAMBA_TESTBASE_TAR_OPTIONS -xf samba-testbase.tar -C /
 237     - diff -u /tmp/samba-testbase/image-sha1sum.txt /sha1sum.txt
 238     - diff -u /tmp/samba-testbase/commit.txt /tmp/commit.txt
 239     - mv /tmp/samba-testbase/samba-testbase.acl.dump /tmp/samba-testbase.acl.dump
 240     - pushd /tmp && setfacl --restore=/tmp/samba-testbase.acl.dump && popd
 241     - ls -la /tmp/samba-testbase/
 242     - ls -la /tmp/samba-testbase/build_subdir_link
 243     - ls -la /tmp/samba-testbase/build_subdir_link/
 244     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then find /tmp/samba-testbase/build_subdir_link/ -type d -printf "'%p'\n" | xargs chmod u+w; fi
 245     - ls -la /tmp/samba-testbase/build_subdir_link/
 246     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 247     # autobuild name, which means we can define a default template that runs most autobuild jobs
 248     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --skip-dependencies --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 249
 250 samba-def-build:
 251   extends: .shared_template_build_only
 252   stage: build_first
 253
 254 .needs_samba-def-build:
 255   extends: .shared_template_test_only
 256   needs:
 257     - job: samba-def-build
 258       artifacts: true
 259     - job: samba-shellcheck
 260
 261 samba-mit-build:
 262   extends: .shared_template_build_only
 263   variables:
 264     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora36}
 265   stage: build_first
 266
 267 samba-mit120-build:
 268   extends: .shared_template_build_only
 269   variables:
 270     AUTOBUILD_JOB_NAME: samba-mit-build
 271     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_f36mit120}
 272   stage: build_first
 273
 274 .needs_samba-mit-build:
 275   extends: .shared_template_test_only
 276   variables:
 277     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora36}
 278   needs:
 279     - job: samba-mit-build
 280       artifacts: true
 281     - job: samba-shellcheck
 282
 283 .needs_samba-mit120-build:
 284   extends: .shared_template_test_only
 285   variables:
 286     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_f36mit120}
 287   needs:
 288     - job: samba-mit120-build
 289       artifacts: true
 290
 291 samba-h5l-build:
 292   extends: .shared_template_build_only
 293
 294 .needs_samba-h5l-build:
 295   extends: .shared_template_test_only
 296   needs:
 297     - job: samba-h5l-build
 298       artifacts: true
 299
 300 samba-without-smb1-build:
 301   extends: .shared_template_build_only
 302
 303 .needs_samba-without-smb1-build:
 304   extends: .shared_template_test_only
 305   needs:
 306     - job: samba-without-smb1-build
 307       artifacts: true
 308
 309 samba-nt4-build:
 310   extends: .shared_template_build_only
 311
 312 .needs_samba-nt4-build:
 313   extends: .shared_template_test_only
 314   needs:
 315     - job: samba-nt4-build
 316       artifacts: true
 317
 318 samba-no-opath-build:
 319   extends: .shared_template_build_only
 320
 321 .needs_samba-no-opath-build:
 322   extends: .shared_template_test_only
 323   needs:
 324     - job: samba-no-opath-build
 325       artifacts: true
 326
 327 samba:
 328   extends: .shared_template
 329
 330 samba-mitkrb5:
 331   extends: .shared_template
 332   variables:
 333     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora36}
 334
 335 samba-minimal-smbd:
 336   extends: .shared_template
 337
 338 samba-nopython:
 339   extends: .shared_template
 340
 341 samba-admem:
 342   extends: .needs_samba-def-build
 343
 344 samba-ad-dc-2:
 345   extends: .needs_samba-def-build
 346
 347 samba-ad-dc-3:
 348   extends: .needs_samba-def-build
 349
 350 samba-ad-dc-4a:
 351   extends: .needs_samba-def-build
 352
 353 samba-ad-dc-4b:
 354   extends: .needs_samba-def-build
 355
 356 samba-ad-dc-5:
 357   extends: .needs_samba-def-build
 358
 359 samba-ad-dc-6:
 360   extends: .needs_samba-def-build
 361
 362 samba-ad-back1:
 363   extends: .needs_samba-def-build
 364
 365 samba-ad-back2:
 366   extends: .needs_samba-def-build
 367
 368 samba-schemaupgrade:
 369   extends: .needs_samba-def-build
 370
 371 samba-libs:
 372   extends: .shared_template
 373
 374 samba-fuzz:
 375   extends: .shared_template
 376   variables:
 377     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 378
 379 ctdb:
 380   extends: .shared_template
 381
 382 samba-ctdb:
 383   extends: .shared_template
 384
 385 samba-ad-dc-ntvfs:
 386   extends: .needs_samba-def-build
 387
 388 samba-admem-mit:
 389   extends: .needs_samba-mit-build
 390
 391 samba-addc-mit-4a:
 392   extends: .needs_samba-mit-build
 393
 394 samba-addc-mit-4b:
 395   extends: .needs_samba-mit-build
 396
 397 # This task is run first to ensure we compile before we start the
 398 # main run as it is the fastest full compile of Samba.
 399 samba-fips:
 400   extends: .shared_template
 401   variables:
 402     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora36}
 403
 404 samba-shellcheck:
 405   extends: .shared_template
 406   needs:
 407   variables:
 408     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora36}
 409   stage: build_first
 410
 411 .private_test_only:
 412   extends: .private_runner_test
 413   stage: test_private
 414   rules:
 415       # See above, to avoid a duplicate CI on the MR (these rules override the others)
 416     - if: $CI_MERGE_REQUEST_ID
 417       when: never
 418
 419       # These jobs are only run if the gitlab repo has private runners available.
 420       # To enable private jobs, you must add the following var and value to
 421       # your gitlab repo by navigating to:
 422       # settings -> CI/CD -> Environment variables
 423     - if: $SUPPORT_PRIVATE_TEST == "yes"
 424
 425 .needs_samba-def-build-private:
 426   extends:
 427     - .needs_samba-def-build
 428     - .private_test_only
 429
 430 .needs_samba-mit-build-private:
 431   extends:
 432     - .needs_samba-mit-build
 433     - .private_test_only
 434
 435 .needs_samba-mit120-build-private:
 436   extends:
 437     - .needs_samba-mit120-build
 438     - .private_test_only
 439
 440 .needs_samba-h5l-build-private:
 441   extends:
 442     - .needs_samba-h5l-build
 443     - .private_test_only
 444
 445 .needs_samba-without-smb1-build-private:
 446   extends:
 447     - .needs_samba-without-smb1-build
 448     - .private_test_only
 449
 450 .needs_samba-nt4-build-private:
 451   extends:
 452     - .needs_samba-nt4-build
 453     - .private_test_only
 454
 455 .needs_samba-no-opath-build-private:
 456   extends:
 457     - .needs_samba-no-opath-build
 458     - .private_test_only
 459
 460 samba-fileserver:
 461   extends: .needs_samba-h5l-build-private
 462
 463 samba-fileserver-without-smb1:
 464   extends: .needs_samba-without-smb1-build-private
 465
 466 # This is a full build without the AD DC so we test the build with MIT
 467 # Kerberos from the default system (Ubuntu 18.04 at this stage).
 468 # Runtime behaviour checked via the ktest (static ccache and keytab)
 469 # environment
 470 samba-ktest-mit:
 471  extends: .shared_template
 472
 473 samba-ad-dc-1:
 474   extends: .needs_samba-def-build-private
 475
 476 samba-nt4:
 477   extends: .needs_samba-nt4-build-private
 478
 479 samba-addc-mit-1:
 480   extends: .needs_samba-mit-build-private
 481
 482 samba-addc-mit120:
 483   extends: .needs_samba-mit120-build-private
 484   variables:
 485     AUTOBUILD_JOB_NAME: samba-addc-mit-1
 486
 487 samba-no-opath1:
 488   extends: .needs_samba-no-opath-build-private
 489
 490 samba-no-opath2:
 491   extends: .needs_samba-no-opath-build-private
 492
 493 # 'pages' is a special job which can publish artifacts in `public` dir to gitlab pages
 494 pages:
 495   extends: .shared_runner_build_image
 496   stage: report
 497   dependencies:  # tell gitlab to download artifacts for these jobs
 498     - others
 499     - samba
 500     - samba-mitkrb5
 501     - samba-admem
 502     - samba-ad-dc-2
 503     - samba-ad-dc-3
 504     - samba-ad-dc-4a
 505     - samba-ad-dc-4b
 506     - samba-ad-dc-5
 507     - samba-ad-dc-6
 508     - samba-libs
 509     - samba-minimal-smbd
 510     - samba-nopython
 511     - samba-fuzz
 512     # - ctdb  # TODO
 513     - samba-ctdb
 514     - samba-ad-dc-ntvfs
 515     - samba-admem-mit
 516     - samba-addc-mit-4a
 517     - samba-addc-mit-4b
 518     - samba-ad-back1
 519     - samba-ad-back2
 520     - samba-fileserver
 521     - samba-fileserver-without-smb1
 522     - samba-ad-dc-1
 523     - samba-nt4
 524     - samba-schemaupgrade
 525     - samba-addc-mit-1
 526     - samba-fips
 527     - samba-no-opath1
 528     - samba-no-opath2
 529     - ubuntu1804-samba-o3
 530   script:
 531     - ls -la *.info
 532     - ./configure.developer
 533     - make -j
 534     - ls -la *.info
 535     - lcov $(ls *.info | xargs -I{} echo -n "-a {} ") -o all.info
 536     - ls -la *.info
 537     - genhtml all.info --ignore-errors source --output-directory public --prefix=$(pwd) --title "coverage report for $CI_COMMIT_REF_NAME $CI_COMMIT_SHORT_SHA"
 538   artifacts:
 539     expire_in: 30 days
 540     paths:
 541       - public
 542   only:
 543     variables:
 544       - $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == "--enable-coverage"
 545
 546 # Coverity Scan
 547 coverity:
 548   extends: .shared_runner_build_image
 549   variables:
 550     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse153}
 551   stage: build
 552   script:
 553     - wget https://scan.coverity.com/download/linux64 --post-data "token=$COVERITY_SCAN_TOKEN&project=$COVERITY_SCAN_PROJECT_NAME" -O /tmp/coverity_tool.tgz
 554     - tar xf /tmp/coverity_tool.tgz
 555     - ./configure.developer --with-cluster-support --with-system-mitkrb5 --with-experimental-mit-ad-dc
 556     - cov-analysis-linux64-*/bin/cov-build --dir cov-int make -j$(nproc)
 557     - tar czf cov-int.tar.gz cov-int
 558     - curl
 559       --form token=$COVERITY_SCAN_TOKEN
 560       --form email=$COVERITY_SCAN_EMAIL
 561       --form file=@cov-int.tar.gz
 562       --form version="`git describe --tags`"
 563       --form description="CI build"
 564       https://scan.coverity.com/builds?project=$COVERITY_SCAN_PROJECT_NAME
 565   only:
 566     refs:
 567       - master
 568       - schedules
 569     variables:
 570       - $COVERITY_SCAN_TOKEN != null
 571       - $COVERITY_SCAN_PROJECT_NAME != null
 572       - $COVERITY_SCAN_EMAIL != null
 573   artifacts:
 574     expire_in: 1 week
 575     when: on_failure
 576     paths:
 577       - cov-int/*.txt
 578
 579 #
 580 # We build samba-o3 on all supported distributions
 581 #
 582
 583 # This job, which matches the main CI, needs to still do coverage so
 584 # we show the coverage on the "none" environment tests
 585 #
 586 # We want --enable-coverage specified here otherwise we will have a
 587 # different set of build options on the coverage build and can fail
 588 # when -O3 gets combined with --enable-coverage in the scheduled
 589 # builds.
 590
 591 ubuntu1804-samba-o3:
 592   extends: .shared_template
 593   variables:
 594     AUTOBUILD_JOB_NAME: samba-o3
 595     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu1804}
 596     SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE: "--enable-coverage"
 597   rules:
 598     # See above, to avoid a duplicate CI on the MR (these rules override the others)
 599     - if: $CI_MERGE_REQUEST_ID
 600       when: never
 601     # do not run o3 builds (which run a lot of VMs) if told not to
 602     # (this uses the same variable as autobuild.py)
 603     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
 604       when: never
 605
 606 # All other jobs do not want code coverage.
 607 .samba-o3-template:
 608   extends: .shared_template
 609   variables:
 610     AUTOBUILD_JOB_NAME: samba-o3
 611   rules:
 612     # See above, to avoid a duplicate CI on the MR (these rules override the others)
 613     - if: $CI_MERGE_REQUEST_ID
 614       when: never
 615     # do not run o3 builds (which run a lot of VMs) if told not to
 616     # (this uses the same variable as autobuild.py)
 617     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
 618       when: never
 619     # do not run o3 for coverage since they are using different images
 620     - if: $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == ""
 621
 622 ubuntu2004-samba-o3:
 623   extends: .samba-o3-template
 624   variables:
 625     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 626
 627 debian11-samba-o3:
 628   extends: .samba-o3-template
 629   variables:
 630     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian11}
 631
 632 opensuse153-samba-o3:
 633   extends: .samba-o3-template
 634   variables:
 635     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse153}
 636
 637 centos7-samba-o3:
 638   extends: .samba-o3-template
 639   variables:
 640     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos7}
 641     # Git on CentOS doesn't support shallow git cloning
 642     GIT_DEPTH: ""
 643     # We need a newer GnuTLS version on CentOS7
 644     PKG_CONFIG_PATH: "/usr/lib64/compat-gnutls37/pkgconfig:/usr/lib64/compat-nettle32/pkgconfig"
 645
 646 centos8s-samba-o3:
 647   extends: .samba-o3-template
 648   variables:
 649     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos8s}
 650
 651 fedora36-samba-o3:
 652   extends: .samba-o3-template
 653   variables:
 654     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora36}
 655
 656 #
 657 # Keep the samba-o3 sections at the end ...
 658 #