.gitlab-ci-main.yml

   1 # see https://docs.gitlab.com/ce/ci/yaml/README.html for all available options
   2
   3 # Stages explained
   4 #
   5 # images: Build the images with the bootstrap script
   6 # build_first: Build a few things first to find silly errors (fast job)
   7 #              (don't pay for 35 machines until something compiles)
   8 # build: The main parallel job
   9 #              (keep these to 1hour as we are billed per hour)
  10 # test_only: Tests using the build from prior stages, these typically
  11 #            have an explicit dependency defined to a specific build job,
  12 #            which means that start as soon as the build job finished.
  13 # test_private: Like test_only, but running on private runners
  14 # report: Code coverage reporting
  15
  16 stages:
  17   - images
  18   - build_first
  19   - build
  20   - test_only
  21   - test_private
  22   - report
  23
  24 variables:
  25   # We want to be resilient to runner failures
  26   ARTIFACT_DOWNLOAD_ATTEMPTS: "3"
  27   EXECUTOR_JOB_SECTION_ATTEMPTS: "3"
  28   GET_SOURCES_ATTEMPTS: "3"
  29   RESTORE_CACHE_ATTEMPTS: "3"
  30   #
  31   GIT_STRATEGY: fetch
  32   GIT_DEPTH: "3"
  33   #
  34   # we run autobuild.py inside a samba CI docker image located on gitlab's registry
  35   # overwrite this variable if you want use your own image registry.
  36   #
  37   # Or better ask for access to the shared development repository, see
  38   # https://wiki.samba.org/index.php/Samba_CI_on_gitlab#Getting_Access
  39   #
  40   SAMBA_CI_CONTAINER_REGISTRY: registry.gitlab.com/samba-team/devel/samba
  41   #
  42   # Set this to the contents of bootstrap/sha1sum.txt
  43   # which is generated by bootstrap/template.py --render
  44   #
  45   SAMBA_CI_CONTAINER_TAG: 70150480b61ebdec7ec9b4c1214461c88d6de6d6
  46   #
  47   # We use the ubuntu1804 image as default as
  48   # it matches what we have on sn-devel-184.
  49   #
  50   SAMBA_CI_CONTAINER_IMAGE: ubuntu1804
  51   #
  52   # The following images are available
  53   # Please see the samba-o3 sections at the end of this file!
  54   # We should run that for each available image
  55   #
  56   SAMBA_CI_CONTAINER_IMAGE_ubuntu1804: ubuntu1804
  57   SAMBA_CI_CONTAINER_IMAGE_ubuntu2004: ubuntu2004
  58   SAMBA_CI_CONTAINER_IMAGE_debian11: debian11
  59   SAMBA_CI_CONTAINER_IMAGE_opensuse153: opensuse153
  60   SAMBA_CI_CONTAINER_IMAGE_fedora35: fedora35
  61   SAMBA_CI_CONTAINER_IMAGE_f35mit120: f35mit120
  62   SAMBA_CI_CONTAINER_IMAGE_centos7: centos7
  63   SAMBA_CI_CONTAINER_IMAGE_centos8s: centos8s
  64
  65 include:
  66   # The image creation details are specified in a separate file
  67   # See bootstrap/README.md for details
  68   - 'bootstrap/.gitlab-ci.yml'
  69
  70 .shared_runner_build_image:
  71   extends: .shared_runner_build
  72   variables:
  73     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE}
  74   image: ${SAMBA_CI_CONTAINER_REGISTRY}/samba-ci-${SAMBA_CI_JOB_IMAGE}:${SAMBA_CI_CONTAINER_TAG}
  75
  76 .shared_template:
  77   extends: .shared_runner_build_image
  78   # All Samba jobs are interruptible, this avoids burning CPU when a
  79   # newer branch is pushed.
  80   interruptible: true
  81   timeout: 2h
  82
  83   # Otherwise we run twice, once on push and once on MR
  84   # https://forum.gitlab.com/t/new-rules-syntax-and-detached-pipelines/37292
  85   rules:
  86     - if: $CI_MERGE_REQUEST_ID
  87       when: never
  88     - when: on_success
  89
  90   variables:
  91     AUTOBUILD_JOB_NAME: $CI_JOB_NAME
  92   stage: build
  93   cache:
  94     key: ccache.${CI_JOB_NAME}.${SAMBA_CI_JOB_IMAGE}.${SAMBA_CI_FLAVOR}
  95     paths:
  96       - ccache
  97
  98   # This is overridden in many cases, but ensures none of the other
  99   # main jobs start until and unless this build finishes.  However
 100   # this also ensures we do not download artifacts from any build
 101   # unless we specifically depend on it, saving bandwidth
 102
 103   needs:
 104     - job: samba-def-build
 105       artifacts: false
 106
 107   before_script:
 108     - uname -a
 109     - lsb_release -a
 110     - cat /etc/os-release
 111     - lscpu
 112     - cat /proc/cpuinfo
 113     - mount
 114     - df -h
 115     - cat /proc/swaps
 116     - free -h
 117       # ld will fail if coverage enabled, force link ld to ld.bfd
 118     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then sudo ln -sf $(which ld.bfd) $(which ld); fi
 119       # See bootstrap/.gitlab-ci.yml how to generate a new image
 120     - echo "SAMBA_CI_CONTAINER_REGISTRY[${SAMBA_CI_CONTAINER_REGISTRY}]"
 121     - echo "SAMBA_CI_CONTAINER_TAG[${SAMBA_CI_CONTAINER_TAG}]"
 122     - echo "SAMBA_CI_JOB_IMAGE[${SAMBA_CI_JOB_IMAGE}]"
 123     - echo "CI_JOB_IMAGE[${CI_JOB_IMAGE}]"
 124     - bootstrap/template.py --sha1sum > /tmp/sha1sum-template.txt
 125     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-template.txt
 126     - echo "${SAMBA_CI_CONTAINER_TAG}" > /tmp/sha1sum-tag.txt
 127     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-tag.txt
 128     - diff -u bootstrap/sha1sum.txt /sha1sum.txt
 129     - echo "${CI_COMMIT_SHA} ${CI_COMMIT_TITLE}" > /tmp/commit.txt
 130     - export CCACHE_BASEDIR="${PWD}"
 131     - export CCACHE_DIR="${PWD}/ccache" && mkdir -pv "$CCACHE_DIR"
 132     - export CC="ccache cc"
 133     - export CXX="ccache c++"
 134     - ccache -z -M 500M
 135     - ccache -s
 136   after_script:
 137     - mount
 138     - df -h
 139     - cat /proc/swaps
 140     - free -h
 141     - CCACHE_BASEDIR="${PWD}" CCACHE_DIR="${PWD}/ccache" ccache -s -c
 142   artifacts:
 143     expire_in: 1 week
 144     paths:
 145       - "*.stdout"
 146       - "*.stderr"
 147       - "*.info"
 148       - public
 149       - system-info.txt
 150   retry:
 151     max: 2
 152     when:
 153       - runner_system_failure
 154       - stuck_or_timeout_failure
 155       - api_failure
 156       - runner_unsupported
 157       - stale_schedule
 158       - archived_failure
 159       - scheduler_failure
 160       - data_integrity_failure
 161
 162   script:
 163     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 164     # autobuild name, which means we can define a default template that runs most autobuild jobs
 165     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 166
 167 # Ensure when adding a new job below that you also add it to
 168 # the dependencies for 'pages' below for the code coverage page
 169 # generation.
 170
 171 others:
 172   extends: .shared_template
 173   script:
 174     - script/autobuild.py ldb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/ldb
 175     - script/autobuild.py pidl     $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/pidl
 176     - script/autobuild.py replace  $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/replace
 177     - script/autobuild.py talloc   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/talloc
 178     - script/autobuild.py tdb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tdb
 179     - script/autobuild.py tevent   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tevent
 180     - script/autobuild.py samba-xc $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/samba-xc
 181     - script/autobuild.py docs-xml $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/docs-xml
 182
 183 .shared_template_build_only:
 184   extends: .shared_template
 185   timeout: 2h
 186   needs:
 187   artifacts:
 188     expire_in: 1 week
 189     paths:
 190       - "*.stdout"
 191       - "*.stderr"
 192       - "*.info"
 193       - system-info.txt
 194       - samba-testbase.tar.gz
 195   script:
 196     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 197     # autobuild name, which means we can define a default template that runs most autobuild jobs
 198     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 199     # On success we need to pack everything into an artifacts file
 200     # which needs to be in the git checkout.
 201     # As tar doesn't handle hardlink of read-only files,
 202     # we remember the acls and add write permissions
 203     # before creating the archive. The consumer will apply
 204     # the acls again.
 205     - cp -a /sha1sum.txt /tmp/samba-testbase/image-sha1sum.txt
 206     - cp -a /tmp/commit.txt /tmp/samba-testbase/commit.txt
 207     - ln -s /tmp/samba-testbase/${AUTOBUILD_JOB_NAME}/ /tmp/samba-testbase/build_subdir_link
 208     - pushd /tmp && getfacl -R samba-testbase > samba-testbase.acl.dump && popd
 209     - chmod -R +w /tmp/samba-testbase
 210     - mv /tmp/samba-testbase.acl.dump /tmp/samba-testbase/
 211     - tar cfz samba-testbase.tar.gz /tmp/samba-testbase
 212     - ls -la samba-testbase.tar.gz
 213     - sha1sum samba-testbase.tar.gz
 214
 215 .shared_template_test_only:
 216   extends:
 217     - .shared_template
 218     - .shared_runner_test
 219   stage: test_only
 220   script:
 221     # Print the Kerberos version to check we ended up with the right one
 222     # in the runner. We do not have configure output to recognize it
 223     # otherwise.
 224     - if [ -x "$(command -v krb5-config)" ]; then krb5-config --version; fi
 225     # We unpack the artifacts file created by the .shared_template_build_only
 226     # run we depend on
 227     - ls -la samba-testbase.tar.gz
 228     - sha1sum samba-testbase.tar.gz
 229     - tar xfz samba-testbase.tar.gz -C /
 230     - diff -u /tmp/samba-testbase/image-sha1sum.txt /sha1sum.txt
 231     - diff -u /tmp/samba-testbase/commit.txt /tmp/commit.txt
 232     - mv /tmp/samba-testbase/samba-testbase.acl.dump /tmp/samba-testbase.acl.dump
 233     - pushd /tmp && setfacl --restore=/tmp/samba-testbase.acl.dump && popd
 234     - ls -la /tmp/samba-testbase/
 235     - ls -la /tmp/samba-testbase/build_subdir_link
 236     - ls -la /tmp/samba-testbase/build_subdir_link/
 237     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then find /tmp/samba-testbase/build_subdir_link/ -type d -printf "'%p'\n" | xargs chmod u+w; fi
 238     - ls -la /tmp/samba-testbase/build_subdir_link/
 239     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 240     # autobuild name, which means we can define a default template that runs most autobuild jobs
 241     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --skip-dependencies --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 242
 243 samba-def-build:
 244   extends: .shared_template_build_only
 245   stage: build_first
 246
 247 .needs_samba-def-build:
 248   extends: .shared_template_test_only
 249   needs:
 250     - job: samba-def-build
 251       artifacts: true
 252
 253 samba-mit-build:
 254   extends: .shared_template_build_only
 255   variables:
 256     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 257   stage: build_first
 258
 259 samba-mit120-build:
 260   extends: .shared_template_build_only
 261   variables:
 262     AUTOBUILD_JOB_NAME: samba-mit-build
 263     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_f35mit120}
 264   stage: build_first
 265
 266 .needs_samba-mit-build:
 267   extends: .shared_template_test_only
 268   variables:
 269     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 270   needs:
 271     - job: samba-mit-build
 272       artifacts: true
 273
 274 .needs_samba-mit120-build:
 275   extends: .shared_template_test_only
 276   variables:
 277     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_f35mit120}
 278   needs:
 279     - job: samba-mit120-build
 280       artifacts: true
 281
 282 samba-h5l-build:
 283   extends: .shared_template_build_only
 284
 285 .needs_samba-h5l-build:
 286   extends: .shared_template_test_only
 287   needs:
 288     - job: samba-h5l-build
 289       artifacts: true
 290
 291 samba-nt4-build:
 292   extends: .shared_template_build_only
 293
 294 .needs_samba-nt4-build:
 295   extends: .shared_template_test_only
 296   needs:
 297     - job: samba-nt4-build
 298       artifacts: true
 299
 300 samba-no-opath-build:
 301   extends: .shared_template_build_only
 302
 303 .needs_samba-no-opath-build:
 304   extends: .shared_template_test_only
 305   needs:
 306     - job: samba-no-opath-build
 307       artifacts: true
 308
 309 samba:
 310   extends: .shared_template
 311
 312 samba-mitkrb5:
 313   extends: .shared_template
 314   variables:
 315     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 316
 317 samba-minimal-smbd:
 318   extends: .shared_template
 319
 320 samba-nopython:
 321   extends: .shared_template
 322
 323 samba-admem:
 324   extends: .needs_samba-def-build
 325
 326 samba-ad-dc-2:
 327   extends: .needs_samba-def-build
 328
 329 samba-ad-dc-3:
 330   extends: .needs_samba-def-build
 331
 332 samba-ad-dc-4a:
 333   extends: .needs_samba-def-build
 334
 335 samba-ad-dc-4b:
 336   extends: .needs_samba-def-build
 337
 338 samba-ad-dc-5:
 339   extends: .needs_samba-def-build
 340
 341 samba-ad-dc-6:
 342   extends: .needs_samba-def-build
 343
 344 samba-ad-back1:
 345   extends: .needs_samba-def-build
 346
 347 samba-ad-back2:
 348   extends: .needs_samba-def-build
 349
 350 samba-schemaupgrade:
 351   extends: .needs_samba-def-build
 352
 353 samba-libs:
 354   extends: .shared_template
 355
 356 samba-fuzz:
 357   extends: .shared_template
 358   variables:
 359     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 360
 361 ctdb:
 362   extends: .shared_template
 363
 364 samba-ctdb:
 365   extends: .shared_template
 366
 367 samba-ad-dc-ntvfs:
 368   extends: .needs_samba-def-build
 369
 370 samba-admem-mit:
 371   extends: .needs_samba-mit-build
 372
 373 samba-addc-mit-4a:
 374   extends: .needs_samba-mit-build
 375
 376 samba-addc-mit-4b:
 377   extends: .needs_samba-mit-build
 378
 379 # This task is run first to ensure we compile before we start the
 380 # main run as it is the fastest full compile of Samba.
 381 samba-fips:
 382   extends: .shared_template
 383   variables:
 384     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 385
 386 .private_test_only:
 387   extends: .private_runner_test
 388   stage: test_private
 389   rules:
 390       # See above, to avoid a duplicate CI on the MR (these rules override the others)
 391     - if: $CI_MERGE_REQUEST_ID
 392       when: never
 393
 394       # These jobs are only run if the gitlab repo has private runners available.
 395       # To enable private jobs, you must add the following var and value to
 396       # your gitlab repo by navigating to:
 397       # settings -> CI/CD -> Environment variables
 398     - if: $SUPPORT_PRIVATE_TEST == "yes"
 399
 400 .needs_samba-def-build-private:
 401   extends:
 402     - .needs_samba-def-build
 403     - .private_test_only
 404
 405 .needs_samba-mit-build-private:
 406   extends:
 407     - .needs_samba-mit-build
 408     - .private_test_only
 409
 410 .needs_samba-mit120-build-private:
 411   extends:
 412     - .needs_samba-mit120-build
 413     - .private_test_only
 414
 415 .needs_samba-h5l-build-private:
 416   extends:
 417     - .needs_samba-h5l-build
 418     - .private_test_only
 419
 420 .needs_samba-nt4-build-private:
 421   extends:
 422     - .needs_samba-nt4-build
 423     - .private_test_only
 424
 425 .needs_samba-no-opath-build-private:
 426   extends:
 427     - .needs_samba-no-opath-build
 428     - .private_test_only
 429
 430 samba-fileserver:
 431   extends: .needs_samba-h5l-build-private
 432
 433 # This is a full build without the AD DC so we test the build with MIT
 434 # Kerberos from the default system (Ubuntu 18.04 at this stage).
 435 # Runtime behaviour checked via the ktest (static ccache and keytab)
 436 # environment
 437 samba-ktest-mit:
 438  extends: .shared_template
 439
 440 samba-ad-dc-1:
 441   extends: .needs_samba-def-build-private
 442
 443 samba-nt4:
 444   extends: .needs_samba-nt4-build-private
 445
 446 samba-addc-mit-1:
 447   extends: .needs_samba-mit-build-private
 448
 449 samba-addc-mit120:
 450   extends: .needs_samba-mit120-build-private
 451   variables:
 452     AUTOBUILD_JOB_NAME: samba-addc-mit-1
 453
 454 samba-no-opath1:
 455   extends: .needs_samba-no-opath-build-private
 456
 457 samba-no-opath2:
 458   extends: .needs_samba-no-opath-build-private
 459
 460 # 'pages' is a special job which can publish artifacts in `public` dir to gitlab pages
 461 pages:
 462   extends: .shared_runner_build_image
 463   stage: report
 464   dependencies:  # tell gitlab to download artifacts for these jobs
 465     - others
 466     - samba
 467     - samba-mitkrb5
 468     - samba-admem
 469     - samba-ad-dc-2
 470     - samba-ad-dc-3
 471     - samba-ad-dc-4a
 472     - samba-ad-dc-4b
 473     - samba-ad-dc-5
 474     - samba-ad-dc-6
 475     - samba-libs
 476     - samba-minimal-smbd
 477     - samba-nopython
 478     - samba-fuzz
 479     # - ctdb  # TODO
 480     - samba-ctdb
 481     - samba-ad-dc-ntvfs
 482     - samba-admem-mit
 483     - samba-addc-mit-4a
 484     - samba-addc-mit-4b
 485     - samba-ad-back1
 486     - samba-ad-back2
 487     - samba-fileserver
 488     - samba-ad-dc-1
 489     - samba-nt4
 490     - samba-schemaupgrade
 491     - samba-addc-mit-1
 492     - samba-fips
 493     - samba-no-opath1
 494     - samba-no-opath2
 495     - ubuntu1804-samba-o3
 496   script:
 497     - ls -la *.info
 498     - ./configure.developer
 499     - make -j
 500     - ls -la *.info
 501     - lcov $(ls *.info | xargs -I{} echo -n "-a {} ") -o all.info
 502     - ls -la *.info
 503     - genhtml all.info --ignore-errors source --output-directory public --prefix=$(pwd) --title "coverage report for $CI_COMMIT_REF_NAME $CI_COMMIT_SHORT_SHA"
 504   artifacts:
 505     expire_in: 30 days
 506     paths:
 507       - public
 508   only:
 509     variables:
 510       - $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == "--enable-coverage"
 511
 512 # Coverity Scan
 513 coverity:
 514   extends: .shared_runner_build_image
 515   variables:
 516     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 517   stage: build
 518   script:
 519     - wget https://scan.coverity.com/download/linux64 --post-data "token=$COVERITY_SCAN_TOKEN&project=$COVERITY_SCAN_PROJECT_NAME" -O /tmp/coverity_tool.tgz
 520     - tar xf /tmp/coverity_tool.tgz
 521     - ./configure.developer --with-cluster-support --with-system-mitkrb5 --with-experimental-mit-ad-dc
 522     - cov-analysis-linux64-*/bin/cov-build --dir cov-int make -j$(nproc)
 523     - tar czf cov-int.tar.gz cov-int
 524     - curl
 525       --form token=$COVERITY_SCAN_TOKEN
 526       --form email=$COVERITY_SCAN_EMAIL
 527       --form file=@cov-int.tar.gz
 528       --form version="`git describe --tags`"
 529       --form description="CI build"
 530       https://scan.coverity.com/builds?project=$COVERITY_SCAN_PROJECT_NAME
 531   only:
 532     refs:
 533       - master
 534       - schedules
 535     variables:
 536       - $COVERITY_SCAN_TOKEN != null
 537       - $COVERITY_SCAN_PROJECT_NAME != null
 538       - $COVERITY_SCAN_EMAIL != null
 539   artifacts:
 540     expire_in: 1 week
 541     when: on_failure
 542     paths:
 543       - cov-int/*.txt
 544
 545 #
 546 # We build samba-o3 on all supported distributions
 547 #
 548
 549 # This job, which matches the main CI, needs to still do coverage so
 550 # we show the coverage on the "none" environment tests
 551 #
 552 # We want --enable-coverage specified here otherwise we will have a
 553 # different set of build options on the coverage build and can fail
 554 # when -O3 gets combined with --enable-coverage in the scheduled
 555 # builds.
 556
 557 ubuntu1804-samba-o3:
 558   extends: .shared_template
 559   variables:
 560     AUTOBUILD_JOB_NAME: samba-o3
 561     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu1804}
 562     SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE: "--enable-coverage"
 563   rules:
 564     # See above, to avoid a duplicate CI on the MR (these rules override the others)
 565     - if: $CI_MERGE_REQUEST_ID
 566       when: never
 567     # do not run o3 builds (which run a lot of VMs) if told not to
 568     # (this uses the same variable as autobuild.py)
 569     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
 570       when: never
 571
 572 # All other jobs do not want code coverage.
 573 .samba-o3-template:
 574   extends: .shared_template
 575   variables:
 576     AUTOBUILD_JOB_NAME: samba-o3
 577   rules:
 578     # See above, to avoid a duplicate CI on the MR (these rules override the others)
 579     - if: $CI_MERGE_REQUEST_ID
 580       when: never
 581     # do not run o3 builds (which run a lot of VMs) if told not to
 582     # (this uses the same variable as autobuild.py)
 583     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
 584       when: never
 585     # do not run o3 for coverage since they are using different images
 586     - if: $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == ""
 587
 588 ubuntu2004-samba-o3:
 589   extends: .samba-o3-template
 590   variables:
 591     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 592
 593 debian11-samba-o3:
 594   extends: .samba-o3-template
 595   variables:
 596     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian11}
 597
 598 opensuse153-samba-o3:
 599   extends: .samba-o3-template
 600   variables:
 601     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse153}
 602
 603 centos7-samba-o3:
 604   extends: .samba-o3-template
 605   variables:
 606     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos7}
 607     # Git on CentOS doesn't support shallow git cloning
 608     GIT_DEPTH: ""
 609     # We need a newer GnuTLS version on CentOS7
 610     PKG_CONFIG_PATH: "/usr/lib64/compat-gnutls37/pkgconfig:/usr/lib64/compat-nettle32/pkgconfig"
 611
 612 centos8s-samba-o3:
 613   extends: .samba-o3-template
 614   variables:
 615     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos8s}
 616
 617 fedora35-samba-o3:
 618   extends: .samba-o3-template
 619   variables:
 620     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 621
 622 #
 623 # Keep the samba-o3 sections at the end ...
 624 #