CVE-2023-3961:s3: smbd: Remove the SMB_ASSERT() that crashes on bad pipenames.
[Samba.git] / .gitlab-ci-main.yml
blobce30e044335515270d2ad5661675b6302c269502
1 # see https://docs.gitlab.com/ce/ci/yaml/README.html for all available options
3 # Stages explained
5 # images: Build the images with the bootstrap script
6 # build_first: Build a few things first to find silly errors (fast job)
7 #              (don't pay for 35 machines until something compiles)
8 # build: The main parallel job
9 #              (keep these to 1hour as we are billed per hour)
10 # test_only: Tests using the build from prior stages, these typically
11 #            have an explicit dependency defined to a specific build job,
12 #            which means that start as soon as the build job finished.
13 # test_private: Like test_only, but running on private runners
14 # report: Code coverage reporting
16 stages:
17   - images
18   - build_first
19   - build
20   - test_only
21   - test_private
22   - report
24 variables:
25   # We want to be resilient to runner failures
26   ARTIFACT_DOWNLOAD_ATTEMPTS: "3"
27   EXECUTOR_JOB_SECTION_ATTEMPTS: "3"
28   GET_SOURCES_ATTEMPTS: "3"
29   RESTORE_CACHE_ATTEMPTS: "3"
30   #
31   GIT_STRATEGY: fetch
32   GIT_DEPTH: "3"
33   #
34   # Use GZip by default, it is fast and is good enough.  Other options include --xz
36   SAMBA_TESTBASE_TAR_OPTIONS: -z
38   #
39   # we run autobuild.py inside a samba CI docker image located on gitlab's registry
40   # overwrite this variable if you want use your own image registry.
41   #
42   # Or better ask for access to the shared development repository, see
43   # https://wiki.samba.org/index.php/Samba_CI_on_gitlab#Getting_Access
44   #
45   SAMBA_CI_CONTAINER_REGISTRY: registry.gitlab.com/samba-team/devel/samba
46   #
47   # Set this to the contents of bootstrap/sha1sum.txt
48   # which is generated by bootstrap/template.py --render
49   #
50   SAMBA_CI_CONTAINER_TAG: b62662cd85b10ca4767b9ead4e9b0482ad98ddb2
51   #
52   # We use the ubuntu1804 image as default as
53   # it matches what we have on sn-devel-184.
54   #
55   SAMBA_CI_CONTAINER_IMAGE: ubuntu1804
56   #
57   # The following images are available
58   # Please see the samba-o3 sections at the end of this file!
59   # We should run that for each available image
60   #
61   SAMBA_CI_CONTAINER_IMAGE_ubuntu1804: ubuntu1804
62   SAMBA_CI_CONTAINER_IMAGE_ubuntu2004: ubuntu2004
63   SAMBA_CI_CONTAINER_IMAGE_debian11: debian11
64   SAMBA_CI_CONTAINER_IMAGE_opensuse153: opensuse153
65   SAMBA_CI_CONTAINER_IMAGE_fedora36: fedora36
66   SAMBA_CI_CONTAINER_IMAGE_f36mit120: f36mit120
67   SAMBA_CI_CONTAINER_IMAGE_centos7: centos7
68   SAMBA_CI_CONTAINER_IMAGE_centos8s: centos8s
70 include:
71   # The image creation details are specified in a separate file
72   # See bootstrap/README.md for details
73   - 'bootstrap/.gitlab-ci.yml'
75 .shared_runner_build_image:
76   extends: .shared_runner_build
77   variables:
78     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE}
79   image: ${SAMBA_CI_CONTAINER_REGISTRY}/samba-ci-${SAMBA_CI_JOB_IMAGE}:${SAMBA_CI_CONTAINER_TAG}
81 .shared_template:
82   extends: .shared_runner_build_image
83   # All Samba jobs are interruptible, this avoids burning CPU when a
84   # newer branch is pushed.
85   interruptible: true
86   timeout: 2h
88   # Otherwise we run twice, once on push and once on MR
89   # https://forum.gitlab.com/t/new-rules-syntax-and-detached-pipelines/37292
90   rules:
91     - if: $CI_MERGE_REQUEST_ID
92       when: never
93     - when: on_success
95   variables:
96     AUTOBUILD_JOB_NAME: $CI_JOB_NAME
97   stage: build
98   cache:
99     key: ccache.${CI_JOB_NAME}.${SAMBA_CI_JOB_IMAGE}.${SAMBA_CI_FLAVOR}
100     paths:
101       - ccache
103   # This is overridden in many cases, but ensures none of the other
104   # main jobs start until and unless this build finishes.  However
105   # this also ensures we do not download artifacts from any build
106   # unless we specifically depend on it, saving bandwidth
108   needs:
109     - job: samba-def-build
110       artifacts: false
112   before_script:
113     - uname -a
114     - lsb_release -a
115     - cat /etc/os-release
116     - lscpu
117     - cat /proc/cpuinfo
118     - mount
119     - df -h
120     - cat /proc/swaps
121     - free -h
122       # ld will fail if coverage enabled, force link ld to ld.bfd
123     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then sudo ln -sf $(which ld.bfd) $(which ld); fi
124       # See bootstrap/.gitlab-ci.yml how to generate a new image
125     - echo "SAMBA_CI_CONTAINER_REGISTRY[${SAMBA_CI_CONTAINER_REGISTRY}]"
126     - echo "SAMBA_CI_CONTAINER_TAG[${SAMBA_CI_CONTAINER_TAG}]"
127     - echo "SAMBA_CI_JOB_IMAGE[${SAMBA_CI_JOB_IMAGE}]"
128     - echo "CI_JOB_IMAGE[${CI_JOB_IMAGE}]"
129     - bootstrap/template.py --sha1sum > /tmp/sha1sum-template.txt
130     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-template.txt
131     - echo "${SAMBA_CI_CONTAINER_TAG}" > /tmp/sha1sum-tag.txt
132     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-tag.txt
133     - diff -u bootstrap/sha1sum.txt /sha1sum.txt
134     - echo "${CI_COMMIT_SHA} ${CI_COMMIT_TITLE}" > /tmp/commit.txt
135     - export CCACHE_BASEDIR="${PWD}"
136     - export CCACHE_DIR="${PWD}/ccache" && mkdir -pv "$CCACHE_DIR"
137     - export CC="ccache cc"
138     - export CXX="ccache c++"
139     - ccache -z -M 500M
140     - ccache -s
141       # We are already running .gitlab-ci directives from this repo, remove additional checks that break our CI
142     - git config --global --add safe.directory `pwd`
143   after_script:
144     - mount
145     - df -h
146     - cat /proc/swaps
147     - free -h
148     - CCACHE_BASEDIR="${PWD}" CCACHE_DIR="${PWD}/ccache" ccache -s -c
149   artifacts:
150     expire_in: 1 week
151     paths:
152       - "*.stdout"
153       - "*.stderr"
154       - "*.info"
155       - public
156       - system-info.txt
157   retry:
158     max: 2
159     when:
160       - runner_system_failure
161       - stuck_or_timeout_failure
162       - api_failure
163       - runner_unsupported
164       - stale_schedule
165       - archived_failure
166       - scheduler_failure
167       - data_integrity_failure
169   script:
170     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
171     # autobuild name, which means we can define a default template that runs most autobuild jobs
172     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
174 # Ensure when adding a new job below that you also add it to
175 # the dependencies for 'pages' below for the code coverage page
176 # generation.
178 others:
179   extends: .shared_template
180   script:
181     - script/autobuild.py ldb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/ldb
182     - script/autobuild.py pidl     $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/pidl
183     - script/autobuild.py replace  $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/replace
184     - script/autobuild.py talloc   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/talloc
185     - script/autobuild.py tdb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tdb
186     - script/autobuild.py tevent   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tevent
187     - script/autobuild.py samba-xc $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/samba-xc
188     - script/autobuild.py docs-xml $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/docs-xml
190 .shared_template_build_only:
191   extends: .shared_template
192   timeout: 2h
193   needs:
194   artifacts:
195     expire_in: 1 week
196     paths:
197       - "*.stdout"
198       - "*.stderr"
199       - "*.info"
200       - system-info.txt
201       - samba-testbase.tar
202   script:
203     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
204     # autobuild name, which means we can define a default template that runs most autobuild jobs
205     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
206     # On success we need to pack everything into an artifacts file
207     # which needs to be in the git checkout.
208     # As tar doesn't handle hardlink of read-only files,
209     # we remember the acls and add write permissions
210     # before creating the archive. The consumer will apply
211     # the acls again.
212     - cp -a /sha1sum.txt /tmp/samba-testbase/image-sha1sum.txt
213     - cp -a /tmp/commit.txt /tmp/samba-testbase/commit.txt
214     - ln -s /tmp/samba-testbase/${AUTOBUILD_JOB_NAME}/ /tmp/samba-testbase/build_subdir_link
215     - pushd /tmp && getfacl -R samba-testbase > samba-testbase.acl.dump && popd
216     - chmod -R +w /tmp/samba-testbase
217     - mv /tmp/samba-testbase.acl.dump /tmp/samba-testbase/
218     - tar $SAMBA_TESTBASE_TAR_OPTIONS -cf samba-testbase.tar /tmp/samba-testbase
219     - ls -la samba-testbase.tar
220     - sha1sum samba-testbase.tar
222 .shared_template_test_only:
223   extends:
224     - .shared_template
225     - .shared_runner_test
226   stage: test_only
227   script:
228     # Print the Kerberos version to check we ended up with the right one
229     # in the runner. We do not have configure output to recognize it
230     # otherwise.
231     - if [ -x "$(command -v krb5-config)" ]; then krb5-config --version; fi
232     # We unpack the artifacts file created by the .shared_template_build_only
233     # run we depend on
234     - ls -la samba-testbase.tar
235     - sha1sum samba-testbase.tar
236     - tar $SAMBA_TESTBASE_TAR_OPTIONS -xf samba-testbase.tar -C /
237     - diff -u /tmp/samba-testbase/image-sha1sum.txt /sha1sum.txt
238     - diff -u /tmp/samba-testbase/commit.txt /tmp/commit.txt
239     - mv /tmp/samba-testbase/samba-testbase.acl.dump /tmp/samba-testbase.acl.dump
240     - pushd /tmp && setfacl --restore=/tmp/samba-testbase.acl.dump && popd
241     - ls -la /tmp/samba-testbase/
242     - ls -la /tmp/samba-testbase/build_subdir_link
243     - ls -la /tmp/samba-testbase/build_subdir_link/
244     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then find /tmp/samba-testbase/build_subdir_link/ -type d -printf "'%p'\n" | xargs chmod u+w; fi
245     - ls -la /tmp/samba-testbase/build_subdir_link/
246     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
247     # autobuild name, which means we can define a default template that runs most autobuild jobs
248     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --skip-dependencies --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
250 samba-def-build:
251   extends: .shared_template_build_only
252   stage: build_first
254 .needs_samba-def-build:
255   extends: .shared_template_test_only
256   needs:
257     - job: samba-def-build
258       artifacts: true
260 samba-mit-build:
261   extends: .shared_template_build_only
262   variables:
263     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora36}
264   stage: build_first
266 samba-mit120-build:
267   extends: .shared_template_build_only
268   variables:
269     AUTOBUILD_JOB_NAME: samba-mit-build
270     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_f36mit120}
271   stage: build_first
273 .needs_samba-mit-build:
274   extends: .shared_template_test_only
275   variables:
276     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora36}
277   needs:
278     - job: samba-mit-build
279       artifacts: true
281 .needs_samba-mit120-build:
282   extends: .shared_template_test_only
283   variables:
284     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_f36mit120}
285   needs:
286     - job: samba-mit120-build
287       artifacts: true
289 samba-h5l-build:
290   extends: .shared_template_build_only
292 .needs_samba-h5l-build:
293   extends: .shared_template_test_only
294   needs:
295     - job: samba-h5l-build
296       artifacts: true
298 samba-without-smb1-build:
299   extends: .shared_template_build_only
301 .needs_samba-without-smb1-build:
302   extends: .shared_template_test_only
303   needs:
304     - job: samba-without-smb1-build
305       artifacts: true
307 samba-nt4-build:
308   extends: .shared_template_build_only
310 .needs_samba-nt4-build:
311   extends: .shared_template_test_only
312   needs:
313     - job: samba-nt4-build
314       artifacts: true
316 samba-no-opath-build:
317   extends: .shared_template_build_only
319 .needs_samba-no-opath-build:
320   extends: .shared_template_test_only
321   needs:
322     - job: samba-no-opath-build
323       artifacts: true
325 samba:
326   extends: .shared_template
328 samba-mitkrb5:
329   extends: .shared_template
330   variables:
331     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora36}
333 samba-minimal-smbd:
334   extends: .shared_template
336 samba-nopython:
337   extends: .shared_template
339 samba-admem:
340   extends: .needs_samba-def-build
342 samba-ad-dc-2:
343   extends: .needs_samba-def-build
345 samba-ad-dc-3:
346   extends: .needs_samba-def-build
348 samba-ad-dc-4a:
349   extends: .needs_samba-def-build
351 samba-ad-dc-4b:
352   extends: .needs_samba-def-build
354 samba-ad-dc-5:
355   extends: .needs_samba-def-build
357 samba-ad-dc-6:
358   extends: .needs_samba-def-build
360 samba-ad-back1:
361   extends: .needs_samba-def-build
363 samba-ad-back2:
364   extends: .needs_samba-def-build
366 samba-schemaupgrade:
367   extends: .needs_samba-def-build
369 samba-libs:
370   extends: .shared_template
372 samba-fuzz:
373   extends: .shared_template
374   variables:
375     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
377 ctdb:
378   extends: .shared_template
380 samba-ctdb:
381   extends: .shared_template
383 samba-ad-dc-ntvfs:
384   extends: .needs_samba-def-build
386 samba-admem-mit:
387   extends: .needs_samba-mit-build
389 samba-addc-mit-4a:
390   extends: .needs_samba-mit-build
392 samba-addc-mit-4b:
393   extends: .needs_samba-mit-build
395 # This task is run first to ensure we compile before we start the
396 # main run as it is the fastest full compile of Samba.
397 samba-fips:
398   extends: .shared_template
399   variables:
400     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora36}
402 .private_test_only:
403   extends: .private_runner_test
404   stage: test_private
405   rules:
406       # See above, to avoid a duplicate CI on the MR (these rules override the others)
407     - if: $CI_MERGE_REQUEST_ID
408       when: never
410       # These jobs are only run if the gitlab repo has private runners available.
411       # To enable private jobs, you must add the following var and value to
412       # your gitlab repo by navigating to:
413       # settings -> CI/CD -> Environment variables
414     - if: $SUPPORT_PRIVATE_TEST == "yes"
416 .needs_samba-def-build-private:
417   extends:
418     - .needs_samba-def-build
419     - .private_test_only
421 .needs_samba-mit-build-private:
422   extends:
423     - .needs_samba-mit-build
424     - .private_test_only
426 .needs_samba-mit120-build-private:
427   extends:
428     - .needs_samba-mit120-build
429     - .private_test_only
431 .needs_samba-h5l-build-private:
432   extends:
433     - .needs_samba-h5l-build
434     - .private_test_only
436 .needs_samba-without-smb1-build-private:
437   extends:
438     - .needs_samba-without-smb1-build
439     - .private_test_only
441 .needs_samba-nt4-build-private:
442   extends:
443     - .needs_samba-nt4-build
444     - .private_test_only
446 .needs_samba-no-opath-build-private:
447   extends:
448     - .needs_samba-no-opath-build
449     - .private_test_only
451 samba-fileserver:
452   extends: .needs_samba-h5l-build-private
454 samba-fileserver-without-smb1:
455   extends: .needs_samba-without-smb1-build-private
457 # This is a full build without the AD DC so we test the build with MIT
458 # Kerberos from the default system (Ubuntu 18.04 at this stage).
459 # Runtime behaviour checked via the ktest (static ccache and keytab)
460 # environment
461 samba-ktest-mit:
462  extends: .shared_template
464 samba-ad-dc-1:
465   extends: .needs_samba-def-build-private
467 samba-nt4:
468   extends: .needs_samba-nt4-build-private
470 samba-addc-mit-1:
471   extends: .needs_samba-mit-build-private
473 samba-addc-mit120:
474   extends: .needs_samba-mit120-build-private
475   variables:
476     AUTOBUILD_JOB_NAME: samba-addc-mit-1
478 samba-no-opath1:
479   extends: .needs_samba-no-opath-build-private
481 samba-no-opath2:
482   extends: .needs_samba-no-opath-build-private
484 # 'pages' is a special job which can publish artifacts in `public` dir to gitlab pages
485 pages:
486   extends: .shared_runner_build_image
487   stage: report
488   dependencies:  # tell gitlab to download artifacts for these jobs
489     - others
490     - samba
491     - samba-mitkrb5
492     - samba-admem
493     - samba-ad-dc-2
494     - samba-ad-dc-3
495     - samba-ad-dc-4a
496     - samba-ad-dc-4b
497     - samba-ad-dc-5
498     - samba-ad-dc-6
499     - samba-libs
500     - samba-minimal-smbd
501     - samba-nopython
502     - samba-fuzz
503     # - ctdb  # TODO
504     - samba-ctdb
505     - samba-ad-dc-ntvfs
506     - samba-admem-mit
507     - samba-addc-mit-4a
508     - samba-addc-mit-4b
509     - samba-ad-back1
510     - samba-ad-back2
511     - samba-fileserver
512     - samba-fileserver-without-smb1
513     - samba-ad-dc-1
514     - samba-nt4
515     - samba-schemaupgrade
516     - samba-addc-mit-1
517     - samba-fips
518     - samba-no-opath1
519     - samba-no-opath2
520     - ubuntu1804-samba-o3
521   script:
522     - ls -la *.info
523     - ./configure.developer
524     - make -j
525     - ls -la *.info
526     - lcov $(ls *.info | xargs -I{} echo -n "-a {} ") -o all.info
527     - ls -la *.info
528     - genhtml all.info --ignore-errors source --output-directory public --prefix=$(pwd) --title "coverage report for $CI_COMMIT_REF_NAME $CI_COMMIT_SHORT_SHA"
529   artifacts:
530     expire_in: 30 days
531     paths:
532       - public
533   only:
534     variables:
535       - $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == "--enable-coverage"
537 # Coverity Scan
538 coverity:
539   extends: .shared_runner_build_image
540   variables:
541     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse153}
542   stage: build
543   script:
544     - wget https://scan.coverity.com/download/linux64 --post-data "token=$COVERITY_SCAN_TOKEN&project=$COVERITY_SCAN_PROJECT_NAME" -O /tmp/coverity_tool.tgz
545     - tar xf /tmp/coverity_tool.tgz
546     - ./configure.developer --with-cluster-support --with-system-mitkrb5 --with-experimental-mit-ad-dc
547     - cov-analysis-linux64-*/bin/cov-build --dir cov-int make -j$(nproc)
548     - tar czf cov-int.tar.gz cov-int
549     - curl
550       --form token=$COVERITY_SCAN_TOKEN
551       --form email=$COVERITY_SCAN_EMAIL
552       --form file=@cov-int.tar.gz
553       --form version="`git describe --tags`"
554       --form description="CI build"
555       https://scan.coverity.com/builds?project=$COVERITY_SCAN_PROJECT_NAME
556   only:
557     refs:
558       - master
559       - schedules
560     variables:
561       - $COVERITY_SCAN_TOKEN != null
562       - $COVERITY_SCAN_PROJECT_NAME != null
563       - $COVERITY_SCAN_EMAIL != null
564   artifacts:
565     expire_in: 1 week
566     when: on_failure
567     paths:
568       - cov-int/*.txt
571 # We build samba-o3 on all supported distributions
574 # This job, which matches the main CI, needs to still do coverage so
575 # we show the coverage on the "none" environment tests
577 # We want --enable-coverage specified here otherwise we will have a
578 # different set of build options on the coverage build and can fail
579 # when -O3 gets combined with --enable-coverage in the scheduled
580 # builds.
582 ubuntu1804-samba-o3:
583   extends: .shared_template
584   variables:
585     AUTOBUILD_JOB_NAME: samba-o3
586     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu1804}
587     SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE: "--enable-coverage"
588   rules:
589     # See above, to avoid a duplicate CI on the MR (these rules override the others)
590     - if: $CI_MERGE_REQUEST_ID
591       when: never
592     # do not run o3 builds (which run a lot of VMs) if told not to
593     # (this uses the same variable as autobuild.py)
594     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
595       when: never
597 # All other jobs do not want code coverage.
598 .samba-o3-template:
599   extends: .shared_template
600   variables:
601     AUTOBUILD_JOB_NAME: samba-o3
602   rules:
603     # See above, to avoid a duplicate CI on the MR (these rules override the others)
604     - if: $CI_MERGE_REQUEST_ID
605       when: never
606     # do not run o3 builds (which run a lot of VMs) if told not to
607     # (this uses the same variable as autobuild.py)
608     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
609       when: never
610     # do not run o3 for coverage since they are using different images
611     - if: $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == ""
613 ubuntu2004-samba-o3:
614   extends: .samba-o3-template
615   variables:
616     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
618 debian11-samba-o3:
619   extends: .samba-o3-template
620   variables:
621     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian11}
623 opensuse153-samba-o3:
624   extends: .samba-o3-template
625   variables:
626     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse153}
628 centos7-samba-o3:
629   extends: .samba-o3-template
630   variables:
631     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos7}
632     # Git on CentOS doesn't support shallow git cloning
633     GIT_DEPTH: ""
634     # We need a newer GnuTLS version on CentOS7
635     PKG_CONFIG_PATH: "/usr/lib64/compat-gnutls37/pkgconfig:/usr/lib64/compat-nettle32/pkgconfig"
637 centos8s-samba-o3:
638   extends: .samba-o3-template
639   variables:
640     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos8s}
642 fedora36-samba-o3:
643   extends: .samba-o3-template
644   variables:
645     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora36}
648 # Keep the samba-o3 sections at the end ...