summaryrefslogtreecommitdiff
path: root/.github
Commit message (Collapse)AuthorAgeFilesLines
* ci: make the concurrency group identifier unique once againFrantisek Sumsal2022-03-071-1/+1
| | | | | | | Otherwise we end up randomly cancelling once of the two centos_epel jobs. Follow-up to da637c8fcad1baa530578982d41a6ecb1440f7c5.
* mkosi: Add CentOS Stream 9Daan De Meyer2022-03-071-3/+2
| | | | | | The blocker causing Stream 9 builds to fail was fixed (https://bugzilla.redhat.com/show_bug.cgi?id=2056276) so we can add CentOS Stream 9 builds as well now.
* test: check systemd RPM macrosFrantisek Sumsal2022-03-061-0/+1
| | | | | | | Make sure our RPM macros work as intended. Based on the original PR (#16464) by Mikhail Novosyolov. Co-authored-by: Mikhail Novosyolov <m.novosyolov@rosalinux.ru>
* build(deps): bump meson from 0.60.3 to 0.61.2 in /.github/workflowsdependabot[bot]2022-03-021-3/+3
| | | | | | | | | | | | | | Bumps [meson](https://github.com/mesonbuild/meson) from 0.60.3 to 0.61.2. - [Release notes](https://github.com/mesonbuild/meson/releases) - [Commits](https://github.com/mesonbuild/meson/compare/0.60.3...0.61.2) --- updated-dependencies: - dependency-name: meson dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump github/codeql-action from 1.0.29 to 1.1.3dependabot[bot]2022-03-021-3/+3
| | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.29 to 1.1.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/384cfc42b2131df01c009d3d2eed7b78d8e8556e...75f07e7ab2ee63cba88752d8c696324e4df67466) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump actions/labeler from 3.0.2 to 3.1.0dependabot[bot]2022-03-021-1/+1
| | | | | | | | | | | | | | Bumps [actions/labeler](https://github.com/actions/labeler) from 3.0.2 to 3.1.0. - [Release notes](https://github.com/actions/labeler/releases) - [Commits](https://github.com/actions/labeler/compare/69da01b8e0929f147b8943611bee75ee4175a49e...3d612d72e6784a1a65365cc6d33b5a001c12bf10) --- updated-dependencies: - dependency-name: actions/labeler dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* mkosi: Add centos_epel configDaan De Meyer2022-02-251-9/+36
| | | | | | | | | | | | | | Now that mkosi has centos-stream 9 support, let's add a config in the repo so that the mkosi CI tests that configuration as well. Centos doesn't support btrfs so we use xfs instead. For some reason, building --hostonly-initrd centos images breaks the qemu boot so I disabled that option for centos. We update the mkosi commit hash to https://github.com/systemd/mkosi/commit/0dd39c20a4b3a2fab6efdc54da92bffad7c7b7ca which adds the PowerTools repo to CentOS Stream 8 which is required to make all the necessary packages required to build systemd on CentOS Stream 8 available.
* mkosi: Remove Arch nspawn workaroundDaan De Meyer2022-02-251-13/+0
| | | | This has been fixed so the workaround can be removed.
* Merge pull request #22591 from evverx/no-depsFrantisek Sumsal2022-02-232-3/+7
|\ | | | | ci: build systemd without optional dependencies
| * ci: build systemd without optional dependenciesEvgeny Vereshchagin2022-02-222-3/+7
| | | | | | | | to catch issues like https://github.com/systemd/systemd/pull/22585#issuecomment-1047640155
* | ci: fix clang-13 installationFrantisek Sumsal2022-02-221-2/+2
|/ | | | | | | | | | | | | | | | | | | | | | | | | For some reason Ubuntu Focal repositories now have `llvm-13` virtual package which can't be installed, but successfully fools our check, resulting in no clang/llvm being installed... ``` $ apt show llvm-13 Package: llvm-13 State: not a real package (virtual) N: Can't select candidate version from package llvm-13 as it has no candidate N: Can't select versions from package 'llvm-13' as it is purely virtual N: No packages found $ apt install --dry-run llvm-13 Reading package lists... Done Building dependency tree Reading state information... Done Package llvm-13 is not available, but is referred to by another package. This may mean that the package is missing, has been obsoleted, or is only available from another source E: Package 'llvm-13' has no installation candidate ```
* mkosi CI: mask isc-dhcp-server unitsLuca Boccassi2022-02-191-2/+11
| | | | | | | | | | | | | | | | The packages are installed to provide the dhcpd binary, used by test/test-network/systemd-networkd-tests.py, but we don't need the units to run, and in fact in some cases the image fails to boot because of them: Spawning container image on /home/runner/work/systemd/systemd/image.raw. Press ^] three times within 1s to kill container. ● isc-dhcp-server.service loaded failed failed ISC DHCP IPv4 server ● isc-dhcp-server6.service loaded failed failed ISC DHCP IPv6 server Container image failed with error code 1. Error: Process completed with exit code 1. Mask the units with an --extra-tree.
* ci: explicitly disable multi-status for Super-LinterFrantisek Sumsal2022-02-131-0/+1
| | | | | | | | | | to, hopefully, get rid of the following error: ``` 2022-02-13 13:32:12 [ERROR] Failed to get [GITHUB_TOKEN]! 2022-02-13 13:32:12 [ERROR] [] 2022-02-13 13:32:12 [ERROR] Please set a [GITHUB_TOKEN] from the main workflow environment to take advantage of multiple status reports! ```
* ci: use the 'slim' version of Super-LinterFrantisek Sumsal2022-02-131-1/+1
| | | | | | | | The 'slim' version drops certain storage-heavy linters[0] which we don't use anyway, so let's make the job a bit faster by downloading and using a smaller image. [0] https://github.com/github/super-linter#slim-image
* ci: run all fuzz targets on CIFuzzEvgeny Vereshchagin2022-02-111-0/+2
| | | | | | | | | | CIFuzz has been kind of broken for a couple months because coverage reports downloaded from OSS-Fuzz contain absolute paths while paths to files changed in PRs are relative and they don't match. It makes it kind of hard for CIFuzz to figure out what it should run so it runs either all fuzz targets or just new fuzz targets. Until that issue is fixed let's just always predictably run all fuzz targets.
* ci: remove MULTI_STATUS from superlinterEvgeny Vereshchagin2022-02-091-2/+0
| | | | | | | | | Judging by ERROR! Failed to call GitHub Status API! it doesn't seem to work. Even if it did it would just clutter the status checks I think so let's just remove MULTI_STATUS along with GITHUB_TOKEN.
* ci: validate actions and fix actionlint warningsEvgeny Vereshchagin2022-02-093-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | some actions like Coverity and CFLite aren't run on every PR so to make sure they are more or less fine when they are changed it makes sense to at least check them with superlinter/actionlint: https://github.com/rhysd/actionlint The following warnings were fixed along the way: ``` .github/workflows/mkosi.yml:55:7: shellcheck reported issue in this script: SC2086:info:6:14: Double quote to prevent globbing and word splitting [shellcheck] | 55 | run: | | ^~~~ .github/workflows/mkosi.yml:55:7: shellcheck reported issue in this script: SC2046:warning:6:40: Quote this to prevent word splitting [shellcheck] | 55 | run: | | ^~~~ .github/workflows/mkosi.yml:55:7: shellcheck reported issue in this script: SC2006:style:6:40: Use $(...) notation instead of legacy backticked `...` [shellcheck] | 55 | run: | | ^~~~ ``` ``` .github/workflows/coverity.yml:31:9: shellcheck reported issue in this script: SC2086:info:1:93: Double quote to prevent globbing and word splitting [shellcheck] | 31 | run: echo "COVERITY_SCAN_NOTIFICATION_EMAIL=$(git log -1 ${{ github.sha }} --pretty=\"%aE\")" >> $GITHUB_ENV | ^~~~ ```
* ci: no longer upload the latest builds on commitsEvgeny Vereshchagin2022-01-301-31/+0
| | | | | | | | | | | | | The idea behind this action is to make it possible to compare the latest fuzz targets with PRs to figure out whether bugs are really reproducible in PRs only. Since forks (including systemd-stable) are usually based on the upstream repository where almost all the bugs are fixed before releases are cut it should be safe to assume that if CFLite finds bugs in PRs they are most likely introduced in those PRs. It should probably be brought back once https://github.com/google/clusterfuzzlite/issues/84 is fixed.
* ci: update GHActions once a monthEvgeny Vereshchagin2022-01-291-1/+1
| | | | | Apparently some actions like CodeQL are released a few times a week so let's just update them once a month in one fell swoop.
* ci: use CFLite to test forks (including systemd-stable)Evgeny Vereshchagin2022-01-293-0/+75
| | | | | | | It's like CIFuzz but unlike CIFuzz it's compatible with forks and it should make it possible to run the fuzzers to make sure that patches backported to them are backported correctly without introducing new bugs and regressions.
* build(deps): bump github/codeql-action from 1.0.27 to 1.0.29dependabot[bot]2022-01-241-3/+3
| | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.27 to 1.0.29. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cd783c8a29bdcf5a5c79c5137889e24651fa626c...384cfc42b2131df01c009d3d2eed7b78d8e8556e) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* github: point to "tags" instead of "releases" in systemd-stableFrantisek Sumsal2022-01-241-1/+1
| | | | | | since we don't do releases there. Mentioned in https://github.com/systemd/systemd/issues/22230#issue-1111991271.
* ci: point mkosi to commit where "testing" is fixedEvgeny Vereshchagin2022-01-181-1/+1
| | | | https://github.com/systemd/mkosi/pull/886
* Merge pull request #22142 from evverx/libxkbcommon-devEvgeny Vereshchagin2022-01-182-0/+3
|\ | | | | ci: get Coverity and CodeQL to analyze the "libxkbcommon" part
| * ci: trigger CodeQL on PRs when its dependencies changeEvgeny Vereshchagin2022-01-171-0/+2
| |
| * ci: get Coverity and CodeQL to analyze the "libxkbcommon" partEvgeny Vereshchagin2022-01-161-0/+1
| | | | | | | | | | | | By analogy with https://github.com/systemd/systemd/pull/22138, to get the static analyzers to analyze that part of code that package should be installed there as well.
* | build(deps): bump github/codeql-action from 1.0.26 to 1.0.27dependabot[bot]2022-01-171-3/+3
|/ | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.26 to 1.0.27. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5f532563584d71fdef14ee64d17bafb34f751ce5...cd783c8a29bdcf5a5c79c5137889e24651fa626c) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* ci: install libbpf-dev in the unit_tests workflowEvgeny Vereshchagin2022-01-161-0/+1
| | | | | | | | Those dependencies are also used by Coverity and Codeql so it should be installed there to get them to analyze that code. Judging by https://github.com/systemd/systemd/pull/22137 it seems to be working.
* ci: switch to requirements.txt in the unit tests workflowEvgeny Vereshchagin2022-01-141-0/+1
|
* ci: turn meson warnings into errorsEvgeny Vereshchagin2022-01-142-2/+11
|
* {build|unit}-test: show meson-log.txt when meson failsEvgeny Vereshchagin2022-01-132-3/+11
| | | | | | | | | | | | | | | to make it easier to figure out why it fails. For example in https://github.com/systemd/systemd/runs/4799774735?check_suite_focus=true it failed with ``` meson.build:1003:8: ERROR: Command "/usr/bin/clang -print-targets" failed with status 1. A full log can be found at /home/runner/work/systemd/systemd/build/meson-logs/meson-log.txt Error: Process completed with exit code 1. ``` and it wasn't clear what exactly happened there.
* Merge pull request #21990 from keszybz/indentation-and-commentsLuca Boccassi2022-01-041-2/+2
|\ | | | | Indentation and comments
| * various: fix three spelling issues found by fossiesZbigniew Jędrzejewski-Szmek2022-01-031-2/+2
| |
* | ci: bump mkosi to v12 with libsolv workaroundFrantisek Sumsal2022-01-031-1/+1
| | | | | | | | | | | | | | Replaces: https://github.com/systemd/systemd/pull/21574 Related: * https://github.com/systemd/mkosi/issues/861 * https://github.com/systemd/mkosi/pull/878
* | ci: Test efi binaries for section table gapsJan Janssen2022-01-021-0/+6
| |
* | build(deps): bump meson from 0.60.2 to 0.60.3 in /.github/workflowsdependabot[bot]2022-01-011-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [meson](https://github.com/mesonbuild/meson) from 0.60.2 to 0.60.3. - [Release notes](https://github.com/mesonbuild/meson/releases) - [Commits](https://github.com/mesonbuild/meson/compare/0.60.2...0.60.3) --- updated-dependencies: - dependency-name: meson dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | build(deps): bump github/super-linter from 4.8.4 to 4.8.5dependabot[bot]2021-12-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github/super-linter](https://github.com/github/super-linter) from 4.8.4 to 4.8.5. - [Release notes](https://github.com/github/super-linter/releases) - [Changelog](https://github.com/github/super-linter/blob/main/docs/release-process.md) - [Commits](https://github.com/github/super-linter/compare/563be7dc5568017515b9e700329e9c6d3862f2b7...b8641364ca9a79b3cf07f3c4c59a82709cd39094) --- updated-dependencies: - dependency-name: github/super-linter dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | ci: replace apt-key with signed-byEvgeny Vereshchagin2021-12-261-3/+4
| | | | | | | | | | | | to limit the scope of the key to apt.llvm.org only. This is mostly inspired by https://blog.cloudflare.com/dont-use-apt-key/
* | ci: test build with supported cryptolibs to some degreeFrantisek Sumsal2021-12-242-9/+10
| | | | | | | | | | | | | | | | Let's assign a specific -Dcryptolib= value to each job to have at least some coverage for all supported cryptolibs without unnecessarily multiplying the test matrix. Should provide coverage for #21880.
* | ci: drop build test with -O2, since it's covered by -O3 testsFrantisek Sumsal2021-12-241-1/+0
|/
* build(deps): bump actions/upload-artifact from 2.3.0 to 2.3.1dependabot[bot]2021-12-201-1/+1
| | | | | | | | | | | | | | Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2.3.0 to 2.3.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/da838ae9595ac94171fa2d4de5a2f117b3e7ac32...82c141cc518b40d92cc801eee768e7aafc9c2fa2) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump actions/upload-artifact from 2.2.4 to 2.3.0dependabot[bot]2021-12-131-1/+1
| | | | | | | | | | | | | | Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2.2.4 to 2.3.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/27121b0bdffd731efa15d66772be8dc71245d074...da838ae9595ac94171fa2d4de5a2f117b3e7ac32) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge pull request #21749 from nabijaczleweli/bashpskoLuca Boccassi2021-12-133-3/+3
|\ | | | | Shebang bash via env
| * Change all fixed-path bash shebangs to /u/b/env bash outside test/наб2021-12-123-3/+3
| |
* | build(deps): bump github/codeql-action from 1.0.25 to 1.0.26dependabot[bot]2021-12-131-3/+3
|/ | | | | | | | | | | | | | | Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.25 to 1.0.26. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/546b30f35ae5a3db0e0be1843008c2224f71c3b0...5f532563584d71fdef14ee64d17bafb34f751ce5) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* ci: Build test with different linkersJan Janssen2021-12-112-8/+14
|
* ci: run mkosi in a wrapperFrantisek Sumsal2021-12-102-7/+36
| | | | | | | | | | | So we can mitigate (to some degree) the reoccurring "dissect timeout" issue: ``` Run sudo python3 -m mkosi boot systemd.unit=mkosi-check-and-shutdown.service !quiet systemd.log_level=debug systemd.log_target=console udev.log_level=info systemd.default_standard_output=journal+console Failed to dissect image '/home/runner/work/systemd/systemd/image.raw': Connection timed out Error: Process completed with exit code 1. ```
* ci: check for failed services after bootFrantisek Sumsal2021-12-102-29/+15
| | | | | This should, hopefully, catch issues like systemd/systemd#21671 automagically.
* ci: ignore FIXME alerts in the CodeQL ActionFrantisek Sumsal2021-12-081-0/+3
| | | | | We already track them in LGTM and it unnecessarily clutters the Security page.
* github: mention the systemd-devel ML in the new issue tabFrantisek Sumsal2021-12-071-0/+9
|