1 # see https://docs.gitlab.com/ce/ci/yaml/README.html for all available options
5 # images: Build the images with the bootstrap script
6 # build_first: Build a few things first to find silly errors (fast job)
7 # (don't pay for 35 machines until something compiles)
8 # build: The main parallel job
9 # (keep these to 1hour as we are billed per hour)
10 # test_only: Tests using the build from prior stages, these typically
11 # have an explicit dependency defined to a specific build job,
12 # which means that start as soon as the build job finished.
13 # test_private: Like test_only, but running on private runners
14 # report: Code coverage reporting
25 # We want to be resilient to runner failures
26 ARTIFACT_DOWNLOAD_ATTEMPTS: "3"
27 EXECUTOR_JOB_SECTION_ATTEMPTS: "3"
28 GET_SOURCES_ATTEMPTS: "3"
29 RESTORE_CACHE_ATTEMPTS: "3"
34 # we run autobuild.py inside a samba CI docker image located on gitlab's registry
35 # overwrite this variable if you want use your own image registry.
37 # Or better ask for access to the shared development repository, see
38 # https://wiki.samba.org/index.php/Samba_CI_on_gitlab#Getting_Access
40 SAMBA_CI_CONTAINER_REGISTRY: registry.gitlab.com/samba-team/devel/samba
42 # Set this to the contents of bootstrap/sha1sum.txt
43 # which is generated by bootstrap/template.py --render
45 SAMBA_CI_CONTAINER_TAG: 70150480b61ebdec7ec9b4c1214461c88d6de6d6
47 # We use the ubuntu1804 image as default as
48 # it matches what we have on sn-devel-184.
50 SAMBA_CI_CONTAINER_IMAGE: ubuntu1804
52 # The following images are available
53 # Please see the samba-o3 sections at the end of this file!
54 # We should run that for each available image
56 SAMBA_CI_CONTAINER_IMAGE_ubuntu1804: ubuntu1804
57 SAMBA_CI_CONTAINER_IMAGE_ubuntu2004: ubuntu2004
58 SAMBA_CI_CONTAINER_IMAGE_debian11: debian11
59 SAMBA_CI_CONTAINER_IMAGE_opensuse153: opensuse153
60 SAMBA_CI_CONTAINER_IMAGE_fedora35: fedora35
61 SAMBA_CI_CONTAINER_IMAGE_f35mit120: f35mit120
62 SAMBA_CI_CONTAINER_IMAGE_centos7: centos7
63 SAMBA_CI_CONTAINER_IMAGE_centos8s: centos8s
66 # The image creation details are specified in a separate file
67 # See bootstrap/README.md for details
68 - 'bootstrap/.gitlab-ci.yml'
70 .shared_runner_build_image:
71 extends: .shared_runner_build
73 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE}
74 image: ${SAMBA_CI_CONTAINER_REGISTRY}/samba-ci-${SAMBA_CI_JOB_IMAGE}:${SAMBA_CI_CONTAINER_TAG}
77 extends: .shared_runner_build_image
78 # All Samba jobs are interruptible, this avoids burning CPU when a
79 # newer branch is pushed.
83 # Otherwise we run twice, once on push and once on MR
84 # https://forum.gitlab.com/t/new-rules-syntax-and-detached-pipelines/37292
86 - if: $CI_MERGE_REQUEST_ID
91 AUTOBUILD_JOB_NAME: $CI_JOB_NAME
94 key: ccache.${CI_JOB_NAME}.${SAMBA_CI_JOB_IMAGE}.${SAMBA_CI_FLAVOR}
98 # This is overridden in many cases, but ensures none of the other
99 # main jobs start until and unless this build finishes. However
100 # this also ensures we do not download artifacts from any build
101 # unless we specifically depend on it, saving bandwidth
104 - job: samba-def-build
110 - cat /etc/os-release
117 # ld will fail if coverage enabled, force link ld to ld.bfd
118 - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then sudo ln -sf $(which ld.bfd) $(which ld); fi
119 # See bootstrap/.gitlab-ci.yml how to generate a new image
120 - echo "SAMBA_CI_CONTAINER_REGISTRY[${SAMBA_CI_CONTAINER_REGISTRY}]"
121 - echo "SAMBA_CI_CONTAINER_TAG[${SAMBA_CI_CONTAINER_TAG}]"
122 - echo "SAMBA_CI_JOB_IMAGE[${SAMBA_CI_JOB_IMAGE}]"
123 - echo "CI_JOB_IMAGE[${CI_JOB_IMAGE}]"
124 - bootstrap/template.py --sha1sum > /tmp/sha1sum-template.txt
125 - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-template.txt
126 - echo "${SAMBA_CI_CONTAINER_TAG}" > /tmp/sha1sum-tag.txt
127 - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-tag.txt
128 - diff -u bootstrap/sha1sum.txt /sha1sum.txt
129 - echo "${CI_COMMIT_SHA} ${CI_COMMIT_TITLE}" > /tmp/commit.txt
130 - export CCACHE_BASEDIR="${PWD}"
131 - export CCACHE_DIR="${PWD}/ccache" && mkdir -pv "$CCACHE_DIR"
132 - export CC="ccache cc"
133 - export CXX="ccache c++"
141 - CCACHE_BASEDIR="${PWD}" CCACHE_DIR="${PWD}/ccache" ccache -s -c
153 - runner_system_failure
154 - stuck_or_timeout_failure
160 - data_integrity_failure
163 # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
164 # autobuild name, which means we can define a default template that runs most autobuild jobs
165 - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
167 # Ensure when adding a new job below that you also add it to
168 # the dependencies for 'pages' below for the code coverage page
172 extends: .shared_template
174 - script/autobuild.py ldb $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/ldb
175 - script/autobuild.py pidl $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/pidl
176 - script/autobuild.py replace $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/replace
177 - script/autobuild.py talloc $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/talloc
178 - script/autobuild.py tdb $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tdb
179 - script/autobuild.py tevent $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tevent
180 - script/autobuild.py samba-xc $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/samba-xc
181 - script/autobuild.py docs-xml $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/docs-xml
183 .shared_template_build_only:
184 extends: .shared_template
194 - samba-testbase.tar.gz
196 # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
197 # autobuild name, which means we can define a default template that runs most autobuild jobs
198 - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
199 # On success we need to pack everything into an artifacts file
200 # which needs to be in the git checkout.
201 # As tar doesn't handle hardlink of read-only files,
202 # we remember the acls and add write permissions
203 # before creating the archive. The consumer will apply
205 - cp -a /sha1sum.txt /tmp/samba-testbase/image-sha1sum.txt
206 - cp -a /tmp/commit.txt /tmp/samba-testbase/commit.txt
207 - ln -s /tmp/samba-testbase/${AUTOBUILD_JOB_NAME}/ /tmp/samba-testbase/build_subdir_link
208 - pushd /tmp && getfacl -R samba-testbase > samba-testbase.acl.dump && popd
209 - chmod -R +w /tmp/samba-testbase
210 - mv /tmp/samba-testbase.acl.dump /tmp/samba-testbase/
211 - tar cfz samba-testbase.tar.gz /tmp/samba-testbase
212 - ls -la samba-testbase.tar.gz
213 - sha1sum samba-testbase.tar.gz
215 .shared_template_test_only:
218 - .shared_runner_test
221 # Print the Kerberos version to check we ended up with the right one
222 # in the runner. We do not have configure output to recognize it
224 - if [ -x "$(command -v krb5-config)" ]; then krb5-config --version; fi
225 # We unpack the artifacts file created by the .shared_template_build_only
227 - ls -la samba-testbase.tar.gz
228 - sha1sum samba-testbase.tar.gz
229 - tar xfz samba-testbase.tar.gz -C /
230 - diff -u /tmp/samba-testbase/image-sha1sum.txt /sha1sum.txt
231 - diff -u /tmp/samba-testbase/commit.txt /tmp/commit.txt
232 - mv /tmp/samba-testbase/samba-testbase.acl.dump /tmp/samba-testbase.acl.dump
233 - pushd /tmp && setfacl --restore=/tmp/samba-testbase.acl.dump && popd
234 - ls -la /tmp/samba-testbase/
235 - ls -la /tmp/samba-testbase/build_subdir_link
236 - ls -la /tmp/samba-testbase/build_subdir_link/
237 - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then find /tmp/samba-testbase/build_subdir_link/ -type d -printf "'%p'\n" | xargs chmod u+w; fi
238 - ls -la /tmp/samba-testbase/build_subdir_link/
239 # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
240 # autobuild name, which means we can define a default template that runs most autobuild jobs
241 - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --skip-dependencies --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
244 extends: .shared_template_build_only
247 .needs_samba-def-build:
248 extends: .shared_template_test_only
250 - job: samba-def-build
254 extends: .shared_template_build_only
256 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
260 extends: .shared_template_build_only
262 AUTOBUILD_JOB_NAME: samba-mit-build
263 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_f35mit120}
266 .needs_samba-mit-build:
267 extends: .shared_template_test_only
269 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
271 - job: samba-mit-build
274 .needs_samba-mit120-build:
275 extends: .shared_template_test_only
277 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_f35mit120}
279 - job: samba-mit120-build
283 extends: .shared_template_build_only
285 .needs_samba-h5l-build:
286 extends: .shared_template_test_only
288 - job: samba-h5l-build
291 samba-without-smb1-build:
292 extends: .shared_template_build_only
294 .needs_samba-without-smb1-build:
295 extends: .shared_template_test_only
297 - job: samba-without-smb1-build
301 extends: .shared_template_build_only
303 .needs_samba-nt4-build:
304 extends: .shared_template_test_only
306 - job: samba-nt4-build
309 samba-no-opath-build:
310 extends: .shared_template_build_only
312 .needs_samba-no-opath-build:
313 extends: .shared_template_test_only
315 - job: samba-no-opath-build
319 extends: .shared_template
322 extends: .shared_template
324 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
327 extends: .shared_template
330 extends: .shared_template
333 extends: .needs_samba-def-build
336 extends: .needs_samba-def-build
339 extends: .needs_samba-def-build
342 extends: .needs_samba-def-build
345 extends: .needs_samba-def-build
348 extends: .needs_samba-def-build
351 extends: .needs_samba-def-build
354 extends: .needs_samba-def-build
357 extends: .needs_samba-def-build
360 extends: .needs_samba-def-build
363 extends: .shared_template
366 extends: .shared_template
368 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
371 extends: .shared_template
374 extends: .shared_template
377 extends: .needs_samba-def-build
380 extends: .needs_samba-mit-build
383 extends: .needs_samba-mit-build
386 extends: .needs_samba-mit-build
388 # This task is run first to ensure we compile before we start the
389 # main run as it is the fastest full compile of Samba.
391 extends: .shared_template
393 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
396 extends: .private_runner_test
399 # See above, to avoid a duplicate CI on the MR (these rules override the others)
400 - if: $CI_MERGE_REQUEST_ID
403 # These jobs are only run if the gitlab repo has private runners available.
404 # To enable private jobs, you must add the following var and value to
405 # your gitlab repo by navigating to:
406 # settings -> CI/CD -> Environment variables
407 - if: $SUPPORT_PRIVATE_TEST == "yes"
409 .needs_samba-def-build-private:
411 - .needs_samba-def-build
414 .needs_samba-mit-build-private:
416 - .needs_samba-mit-build
419 .needs_samba-mit120-build-private:
421 - .needs_samba-mit120-build
424 .needs_samba-h5l-build-private:
426 - .needs_samba-h5l-build
429 .needs_samba-without-smb1-build-private:
431 - .needs_samba-without-smb1-build
434 .needs_samba-nt4-build-private:
436 - .needs_samba-nt4-build
439 .needs_samba-no-opath-build-private:
441 - .needs_samba-no-opath-build
445 extends: .needs_samba-h5l-build-private
447 samba-fileserver-without-smb1:
448 extends: .needs_samba-without-smb1-build-private
450 # This is a full build without the AD DC so we test the build with MIT
451 # Kerberos from the default system (Ubuntu 18.04 at this stage).
452 # Runtime behaviour checked via the ktest (static ccache and keytab)
455 extends: .shared_template
458 extends: .needs_samba-def-build-private
461 extends: .needs_samba-nt4-build-private
464 extends: .needs_samba-mit-build-private
467 extends: .needs_samba-mit120-build-private
469 AUTOBUILD_JOB_NAME: samba-addc-mit-1
472 extends: .needs_samba-no-opath-build-private
475 extends: .needs_samba-no-opath-build-private
477 # 'pages' is a special job which can publish artifacts in `public` dir to gitlab pages
479 extends: .shared_runner_build_image
481 dependencies: # tell gitlab to download artifacts for these jobs
505 - samba-fileserver-without-smb1
508 - samba-schemaupgrade
513 - ubuntu1804-samba-o3
516 - ./configure.developer
519 - lcov $(ls *.info | xargs -I{} echo -n "-a {} ") -o all.info
521 - genhtml all.info --ignore-errors source --output-directory public --prefix=$(pwd) --title "coverage report for $CI_COMMIT_REF_NAME $CI_COMMIT_SHORT_SHA"
528 - $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == "--enable-coverage"
532 extends: .shared_runner_build_image
534 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
537 - wget https://scan.coverity.com/download/linux64 --post-data "token=$COVERITY_SCAN_TOKEN&project=$COVERITY_SCAN_PROJECT_NAME" -O /tmp/coverity_tool.tgz
538 - tar xf /tmp/coverity_tool.tgz
539 - ./configure.developer --with-cluster-support --with-system-mitkrb5 --with-experimental-mit-ad-dc
540 - cov-analysis-linux64-*/bin/cov-build --dir cov-int make -j$(nproc)
541 - tar czf cov-int.tar.gz cov-int
543 --form token=$COVERITY_SCAN_TOKEN
544 --form email=$COVERITY_SCAN_EMAIL
545 --form file=@cov-int.tar.gz
546 --form version="`git describe --tags`"
547 --form description="CI build"
548 https://scan.coverity.com/builds?project=$COVERITY_SCAN_PROJECT_NAME
554 - $COVERITY_SCAN_TOKEN != null
555 - $COVERITY_SCAN_PROJECT_NAME != null
556 - $COVERITY_SCAN_EMAIL != null
564 # We build samba-o3 on all supported distributions
567 # This job, which matches the main CI, needs to still do coverage so
568 # we show the coverage on the "none" environment tests
570 # We want --enable-coverage specified here otherwise we will have a
571 # different set of build options on the coverage build and can fail
572 # when -O3 gets combined with --enable-coverage in the scheduled
576 extends: .shared_template
578 AUTOBUILD_JOB_NAME: samba-o3
579 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu1804}
580 SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE: "--enable-coverage"
582 # See above, to avoid a duplicate CI on the MR (these rules override the others)
583 - if: $CI_MERGE_REQUEST_ID
585 # do not run o3 builds (which run a lot of VMs) if told not to
586 # (this uses the same variable as autobuild.py)
587 - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
590 # All other jobs do not want code coverage.
592 extends: .shared_template
594 AUTOBUILD_JOB_NAME: samba-o3
596 # See above, to avoid a duplicate CI on the MR (these rules override the others)
597 - if: $CI_MERGE_REQUEST_ID
599 # do not run o3 builds (which run a lot of VMs) if told not to
600 # (this uses the same variable as autobuild.py)
601 - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
603 # do not run o3 for coverage since they are using different images
604 - if: $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == ""
607 extends: .samba-o3-template
609 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
612 extends: .samba-o3-template
614 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian11}
616 opensuse153-samba-o3:
617 extends: .samba-o3-template
619 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse153}
622 extends: .samba-o3-template
624 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos7}
625 # Git on CentOS doesn't support shallow git cloning
627 # We need a newer GnuTLS version on CentOS7
628 PKG_CONFIG_PATH: "/usr/lib64/compat-gnutls37/pkgconfig:/usr/lib64/compat-nettle32/pkgconfig"
631 extends: .samba-o3-template
633 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos8s}
636 extends: .samba-o3-template
638 SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
641 # Keep the samba-o3 sections at the end ...