1# Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al. 2# 3# SPDX-License-Identifier: curl 4 5name: Linux 6 7'on': 8 push: 9 branches: 10 - master 11 - '*/ci' 12 paths-ignore: 13 - '**/*.md' 14 - '.circleci/**' 15 - 'appveyor.*' 16 - 'packages/**' 17 - 'plan9/**' 18 - 'projects/**' 19 - 'winbuild/**' 20 pull_request: 21 branches: 22 - master 23 paths-ignore: 24 - '**/*.md' 25 - '.circleci/**' 26 - 'appveyor.*' 27 - 'packages/**' 28 - 'plan9/**' 29 - 'projects/**' 30 - 'winbuild/**' 31 32concurrency: 33 group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }} 34 cancel-in-progress: true 35 36permissions: {} 37 38env: 39 MAKEFLAGS: -j 5 40 # unhandled 41 bearssl-version: 0.6 42 # renovate: datasource=github-tags depName=libressl-portable/portable versioning=semver registryUrl=https://github.com 43 libressl-version: 3.9.2 44 # renovate: datasource=github-tags depName=ARMmbed/mbedtls versioning=semver registryUrl=https://github.com 45 mbedtls-version: 3.6.0 46 # renovate: datasource=github-tags depName=icing/mod_h2 versioning=semver registryUrl=https://github.com 47 mod_h2-version: 2.0.29 48 # renovate: datasource=github-tags depName=nibanks/msh3 versioning=semver registryUrl=https://github.com 49 msh3-version: 0.6.0 50 # renovate: datasource=github-tags depName=awslabs/aws-lc versioning=semver registryUrl=https://github.com 51 awslc-version: 1.34.2 52 # handled in renovate.json 53 openssl3-version: openssl-3.1.3 54 # unhandled 55 quictls-version: 3.1.4+quic 56 # renovate: datasource=github-tags depName=rustls/rustls-ffi versioning=semver registryUrl=https://github.com 57 rustls-version: 0.14.0 58 59jobs: 60 linux: 61 name: ${{ matrix.build.generate && 'CM' || 'AM' }} ${{ matrix.build.name }} 62 runs-on: 'ubuntu-latest' 63 container: ${{ matrix.build.container }} 64 timeout-minutes: 90 65 strategy: 66 fail-fast: false 67 matrix: 68 build: 69 - name: bearssl 70 install_packages: zlib1g-dev 71 install_steps: bearssl pytest 72 configure: LDFLAGS="-Wl,-rpath,$HOME/bearssl/lib" --with-bearssl=$HOME/bearssl --enable-debug 73 singleuse: --unit 74 75 - name: bearssl clang 76 install_packages: zlib1g-dev clang 77 install_steps: bearssl 78 configure: CC=clang LDFLAGS="-Wl,-rpath,$HOME/bearssl/lib" --with-bearssl=$HOME/bearssl --enable-debug 79 singleuse: --unit 80 81 - name: libressl heimdal 82 install_packages: zlib1g-dev heimdal-dev 83 install_steps: libressl pytest 84 configure: LDFLAGS="-Wl,-rpath,$HOME/libressl/lib" --with-openssl=$HOME/libressl --with-gssapi --enable-debug 85 singleuse: --unit 86 87 - name: libressl heimdal valgrind 88 install_packages: zlib1g-dev heimdal-dev valgrind 89 install_steps: libressl pytest 90 generate: -DOPENSSL_ROOT_DIR=$HOME/libressl -DCURL_USE_GSSAPI=ON -DENABLE_DEBUG=ON -DCURL_LIBCURL_VERSIONED_SYMBOLS=ON 91 singleuse: --unit 92 93 - name: libressl clang 94 install_packages: zlib1g-dev clang 95 install_steps: libressl 96 configure: CC=clang LDFLAGS="-Wl,-rpath,$HOME/libressl/lib" --with-openssl=$HOME/libressl --enable-debug 97 singleuse: --unit 98 99 - name: wolfssl-all 100 install_packages: zlib1g-dev 101 install_steps: wolfssl-all 102 configure: LDFLAGS="-Wl,-rpath,$HOME/wolfssl-all/lib" --with-wolfssl=$HOME/wolfssl-all --enable-debug 103 singleuse: --unit 104 105 - name: wolfssl-opensslextra valgrind 106 install_packages: zlib1g-dev valgrind 107 install_steps: wolfssl-opensslextra 108 configure: LDFLAGS="-Wl,-rpath,$HOME/wolfssl-opensslextra/lib" --with-wolfssl=$HOME/wolfssl-opensslextra --enable-debug 109 singleuse: --unit 110 111 - name: mbedtls valgrind 112 install_packages: libnghttp2-dev valgrind 113 install_steps: mbedtls pytest 114 configure: LDFLAGS="-Wl,-rpath,$HOME/mbedtls/lib" --with-mbedtls=$HOME/mbedtls --enable-debug 115 singleuse: --unit 116 117 - name: mbedtls clang 118 install_packages: libnghttp2-dev clang 119 install_steps: mbedtls 120 configure: CC=clang LDFLAGS="-Wl,-rpath,$HOME/mbedtls/lib" --with-mbedtls=$HOME/mbedtls --enable-debug 121 singleuse: --unit 122 123 - name: msh3 124 install_packages: zlib1g-dev 125 install_steps: quictls msh3 126 configure: LDFLAGS="-Wl,-rpath,$HOME/msh3/lib -Wl,-rpath,$HOME/quictls/lib" --with-msh3=$HOME/msh3 --with-openssl=$HOME/quictls --enable-debug 127 singleuse: --unit 128 129 - name: awslc 130 install_packages: zlib1g-dev 131 install_steps: awslc 132 configure: LDFLAGS="-Wl,-rpath,$HOME/awslc/lib" --with-openssl=$HOME/awslc 133 singleuse: --unit 134 135 - name: awslc 136 install_packages: zlib1g-dev 137 install_steps: awslc 138 generate: -DOPENSSL_ROOT_DIR=$HOME/awslc 139 singleuse: --unit 140 141 - name: openssl default 142 install_steps: pytest 143 configure: --with-openssl --enable-debug 144 singleuse: --unit 145 146 - name: openssl libssh2 sync-resolver valgrind 147 install_packages: zlib1g-dev libssh2-1-dev valgrind 148 install_steps: pytest 149 configure: --with-openssl --enable-debug --disable-threaded-resolver --with-libssh2 150 singleuse: --unit 151 152 - name: openssl3 153 install_packages: zlib1g-dev 154 install_steps: gcc-11 openssl3 pytest 155 configure: CFLAGS=-std=gnu89 LDFLAGS="-Wl,-rpath,$HOME/openssl3/lib" --with-openssl=$HOME/openssl3 --enable-debug --enable-websockets 156 singleuse: --unit 157 158 - name: openssl3 -O3 valgrind 159 install_packages: zlib1g-dev valgrind 160 install_steps: gcc-11 openssl3 161 configure: CPPFLAGS=-DCURL_WARN_SIGN_CONVERSION CFLAGS=-O3 LDFLAGS="-Wl,-rpath,$HOME/openssl3/lib" --with-openssl=$HOME/openssl3 --enable-debug --enable-websockets 162 singleuse: --unit 163 164 - name: openssl3 clang krb5 165 install_packages: zlib1g-dev libkrb5-dev clang 166 install_steps: openssl3 167 configure: CC=clang LDFLAGS="-Wl,-rpath,$HOME/openssl3/lib" --with-openssl=$HOME/openssl3 --with-gssapi --enable-debug --enable-websockets 168 singleuse: --unit 169 170 - name: openssl3 clang krb5 171 install_packages: zlib1g-dev libkrb5-dev clang 172 install_steps: openssl3 173 generate: -DOPENSSL_ROOT_DIR=$HOME/openssl3 -DCURL_USE_GSSAPI=ON -DENABLE_DEBUG=ON -DENABLE_WEBSOCKETS=ON 174 singleuse: --unit 175 176 - name: openssl3 !ipv6 177 install_steps: gcc-11 openssl3 178 configure: LDFLAGS="-Wl,-rpath,$HOME/openssl3/lib" --with-openssl=$HOME/openssl3 --enable-debug --disable-ipv6 179 singleuse: --unit 180 181 - name: openssl3 https-only 182 install_steps: gcc-11 openssl3 183 configure: > 184 LDFLAGS="-Wl,-rpath,$HOME/openssl3/lib" --with-openssl=$HOME/openssl3 --enable-debug 185 --disable-dict --disable-gopher --disable-ldap --disable-telnet 186 --disable-imap --disable-pop3 --disable-smtp 187 --disable-rtmp --disable-rtsp 188 --disable-scp --disable-sftp --disable-tftp --disable-ftp --disable-file --disable-smb 189 singleuse: --unit 190 191 - name: '!ssl !http !smtp !imap' 192 install_steps: gcc-11 193 configure: --without-ssl --enable-debug --disable-http --disable-smtp --disable-imap 194 singleuse: --unit 195 196 - name: scanbuild 197 install_packages: clang-tools clang libssl-dev libssh2-1-dev 198 install_steps: skipall 199 configure: --with-openssl --enable-debug --with-libssh2 --disable-unity 200 configure-prefix: CC=clang scan-build 201 make-prefix: scan-build --status-bugs 202 singleuse: --unit 203 204 - name: address-sanitizer 205 install_packages: zlib1g-dev libssh2-1-dev clang libssl-dev libubsan1 libasan8 libtsan2 206 install_steps: pytest 207 configure: > 208 CC=clang 209 CFLAGS="-fsanitize=address,undefined,signed-integer-overflow -fno-sanitize-recover=undefined,integer -Wformat -Werror=format-security -Werror=array-bounds -g" 210 LDFLAGS="-fsanitize=address,undefined -fno-sanitize-recover=undefined,integer" 211 LIBS="-ldl -lubsan" 212 --with-openssl --enable-debug --enable-websockets 213 singleuse: --unit 214 215 - name: thread-sanitizer 216 install_packages: zlib1g-dev clang libtsan2 217 install_steps: pytest openssltsan3 218 configure: > 219 CC=clang 220 CFLAGS="-fsanitize=thread -g" 221 LDFLAGS="-fsanitize=thread -Wl,-rpath,$HOME/openssl3/lib" 222 --with-openssl=$HOME/openssl3 --enable-debug --enable-websockets 223 singleuse: --unit 224 225 - name: memory-sanitizer 226 install_packages: clang 227 configure: > 228 CC=clang 229 CFLAGS="-fsanitize=memory -Wformat -Werror=format-security -Werror=array-bounds -g" 230 LDFLAGS="-fsanitize=memory" 231 LIBS="-ldl" 232 --without-ssl --without-zlib --without-brotli --without-zstd --without-libpsl --without-nghttp2 --enable-debug --enable-websockets 233 singleuse: --unit 234 235 - name: event-based 236 install_packages: libssh-dev 237 configure: --enable-debug --disable-shared --disable-threaded-resolver --with-libssh --with-openssl 238 tflags: -n -e '!TLS-SRP' 239 singleuse: --unit 240 241 - name: hyper 242 install_steps: rust hyper 243 configure: LDFLAGS="-Wl,-rpath,$HOME/hyper/target/debug" --with-openssl --with-hyper=$HOME/hyper --enable-debug --enable-websockets 244 singleuse: --unit 245 246 - name: rustls valgrind 247 install_packages: libpsl-dev valgrind 248 install_steps: rust rustls pytest 249 configure: --with-rustls=$HOME/rustls --enable-debug 250 singleuse: --unit 251 252 - name: IntelC !SSL 253 install_packages: zlib1g-dev 254 install_steps: intel 255 configure: CC=icc --enable-debug --without-ssl 256 singleuse: --unit 257 258 - name: IntelC openssl valgrind 259 install_packages: zlib1g-dev libssl-dev valgrind 260 install_steps: intel 261 configure: CC=icc --enable-debug --with-openssl 262 singleuse: --unit 263 264 - name: Slackware openssl gssapi gcc 265 # These are essentially the same flags used to build the curl Slackware package 266 # https://ftpmirror.infania.net/slackware/slackware64-current/source/n/curl/curl.SlackBuild 267 configure: --with-openssl --with-libssh2 --with-gssapi --enable-ares --enable-static=no --without-ca-bundle --with-ca-path=/etc/ssl/certs 268 # Docker Hub image that `container-job` executes in 269 container: 'andy5995/slackware-build-essential:15.0' 270 271 - name: Alpine MUSL 272 configure: --enable-debug --enable-websockets --with-ssl --with-libssh2 --with-libidn2 --with-gssapi --enable-ldap --with-libpsl 273 container: 'alpine:3.18' 274 singleuse: --unit 275 276 steps: 277 - if: matrix.build.container == null 278 run: | 279 sudo apt-get install libtool autoconf automake ninja-build pkgconf stunnel4 libpsl-dev libbrotli-dev libzstd-dev \ 280 ${{ matrix.build.install_packages }} 281 sudo python3 -m pip install impacket 282 name: 'install prereqs and impacket' 283 284 - if: startsWith(matrix.build.container, 'alpine') 285 run: | 286 apk add --no-cache build-base autoconf automake libtool perl openssl-dev libssh2-dev zlib-dev brotli-dev zstd-dev libidn2-dev openldap-dev heimdal-dev libpsl-dev py3-impacket py3-asn1 py3-six py3-pycryptodomex perl-time-hires openssh stunnel sudo git 287 name: 'install dependencies' 288 289 - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 290 291 - name: Fix kernel mmap rnd bits 292 # Asan in llvm 14 provided in ubuntu 22.04 is incompatible with 293 # high-entropy ASLR in much newer kernels that GitHub runners are 294 # using leading to random crashes: https://reviews.llvm.org/D148280 295 # See https://github.com/actions/runner-images/issues/9491 296 continue-on-error: true 297 run: sudo sysctl vm.mmap_rnd_bits=28 298 299 - if: contains(matrix.build.install_steps, 'gcc-11') 300 run: | 301 sudo add-apt-repository ppa:ubuntu-toolchain-r/ppa 302 sudo apt-get update 303 sudo apt-get install gcc-11 304 sudo update-alternatives --install /usr/bin/gcc gcc /usr/bin/gcc-11 100 305 sudo update-alternatives --set gcc /usr/bin/gcc-11 306 gcc --version 307 name: 'install gcc-11' 308 309 - name: cache bearssl 310 if: contains(matrix.build.install_steps, 'bearssl') 311 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 312 id: cache-bearssl 313 env: 314 cache-name: cache-bearssl 315 with: 316 path: /home/runner/bearssl 317 key: ${{ runner.os }}-build-${{ env.cache-name }}-bearssl-${{ env.bearssl-version }} 318 319 - name: 'build bearssl' 320 if: contains(matrix.build.install_steps, 'bearssl') && steps.cache-bearssl.outputs.cache-hit != 'true' 321 run: | 322 curl -LOsSf --retry 6 --retry-connrefused --max-time 999 https://bearssl.org/bearssl-${{ env.bearssl-version }}.tar.gz 323 tar -xzf bearssl-${{ env.bearssl-version }}.tar.gz 324 cd bearssl-${{ env.bearssl-version }} 325 make 326 mkdir -p $HOME/bearssl/lib $HOME/bearssl/include 327 cp inc/*.h $HOME/bearssl/include 328 cp build/libbearssl.* $HOME/bearssl/lib 329 330 - name: cache libressl 331 if: contains(matrix.build.install_steps, 'libressl') 332 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 333 id: cache-libressl 334 env: 335 cache-name: cache-libressl 336 with: 337 path: /home/runner/libressl 338 key: ${{ runner.os }}-build-${{ env.cache-name }}-libressl-${{ env.libressl-version }} 339 340 - name: 'build libressl' 341 if: contains(matrix.build.install_steps, 'libressl') && steps.cache-libressl.outputs.cache-hit != 'true' 342 run: | 343 git clone --quiet --depth=1 -b v${{ env.libressl-version }} https://github.com/libressl-portable/portable.git libressl-git 344 cd libressl-git 345 ./autogen.sh 346 ./configure --disable-dependency-tracking --prefix=$HOME/libressl 347 make install 348 349 - name: cache wolfssl (all) 350 if: contains(matrix.build.install_steps, 'wolfssl-all') 351 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 352 id: cache-wolfssl-all 353 env: 354 cache-name: cache-wolfssl-all 355 with: 356 path: /home/runner/wolfssl-all 357 key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ env.libressl-version }} 358 359 - name: 'build wolfssl (all)' 360 if: contains(matrix.build.install_steps, 'wolfssl-all') && steps.cache-wolfssl-all.outputs.cache-hit != 'true' 361 run: | 362 source .github/scripts/VERSIONS 363 curl -LOsSf --retry 6 --retry-connrefused --max-time 999 https://github.com/wolfSSL/wolfssl/archive/v$WOLFSSL_VER-stable.tar.gz 364 tar -xzf v$WOLFSSL_VER-stable.tar.gz 365 cd wolfssl-$WOLFSSL_VER-stable 366 ./autogen.sh 367 ./configure --disable-dependency-tracking --enable-tls13 --enable-harden --prefix=$HOME/wolfssl-all --enable-all 368 make install 369 370 - name: cache wolfssl (opensslextra) 371 if: contains(matrix.build.install_steps, 'wolfssl-opensslextra') 372 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 373 id: cache-wolfssl-opensslextra 374 env: 375 cache-name: cache-wolfssl-opensslextra 376 with: 377 path: /home/runner/wolfssl-opensslextra 378 key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ env.libressl-version }} 379 380 - name: 'build wolfssl (opensslextra)' 381 if: contains(matrix.build.install_steps, 'wolfssl-opensslextra') && steps.cache-wolfssl-opensslextra.outputs.cache-hit != 'true' 382 run: | 383 source .github/scripts/VERSIONS 384 curl -LOsSf --retry 6 --retry-connrefused --max-time 999 https://github.com/wolfSSL/wolfssl/archive/v$WOLFSSL_VER-stable.tar.gz 385 tar -xzf v$WOLFSSL_VER-stable.tar.gz 386 cd wolfssl-$WOLFSSL_VER-stable 387 ./autogen.sh 388 ./configure --disable-dependency-tracking --enable-tls13 --enable-harden --prefix=$HOME/wolfssl-opensslextra --enable-opensslextra 389 make install 390 391 - name: cache mbedtls 392 if: contains(matrix.build.install_steps, 'mbedtls') 393 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 394 id: cache-mbedtls 395 env: 396 cache-name: cache-mbedtls 397 with: 398 path: /home/runner/mbedtls 399 key: ${{ runner.os }}-build-${{ env.cache-name }}-mbedtls-${{ env.mbedtls-version }} 400 401 - name: 'build mbedtls' 402 if: contains(matrix.build.install_steps, 'mbedtls') && steps.cache-mbedtls.outputs.cache-hit != 'true' 403 run: | 404 git clone --quiet --depth=1 -b v${{ env.mbedtls-version }} https://github.com/ARMmbed/mbedtls 405 cd mbedtls 406 git submodule update --init 407 make DESTDIR=$HOME/mbedtls install 408 409 - name: cache openssl3 410 if: contains(matrix.build.install_steps, 'openssl3') 411 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 412 id: cache-openssl3 413 env: 414 cache-name: cache-openssl3 415 with: 416 path: /home/runner/openssl3 417 key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ env.openssl3-version }} 418 419 - name: 'install openssl3' 420 if: contains(matrix.build.install_steps, 'openssl3') && steps.cache-openssl3.outputs.cache-hit != 'true' 421 run: | 422 git clone --quiet --depth=1 -b ${{ env.openssl3-version }} https://github.com/openssl/openssl 423 cd openssl 424 ./config --prefix=$HOME/openssl3 --libdir=lib 425 make -j1 install_sw 426 427 - name: cache openssltsan3 428 if: contains(matrix.build.install_steps, 'openssltsan3') 429 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 430 id: cache-openssltsan3 431 env: 432 cache-name: cache-openssltsan3 433 with: 434 path: /home/runner/openssl3 435 key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ env.openssl3-version }}-d8def798 436 437 - name: 'install openssltsan3' 438 if: contains(matrix.build.install_steps, 'openssltsan3') && steps.cache-openssltsan3.outputs.cache-hit != 'true' 439 # There are global data race in openssl: 440 # Cherry-Pick the fix for testing https://github.com/openssl/openssl/pull/24782 441 run: | 442 git clone --quiet --depth=1 -b ${{ env.openssl3-version }} https://github.com/openssl/openssl 443 cd openssl 444 git fetch --quiet --depth=2 origin d8def79838cd0d5e7c21d217aa26edb5229f0ab4 445 git cherry-pick -n d8def79838cd0d5e7c21d217aa26edb5229f0ab4 446 CC="clang" CFLAGS="-fsanitize=thread" LDFLAGS="-fsanitize=thread" ./config --prefix=$HOME/openssl3 --libdir=lib 447 make -j1 install_sw 448 449 - name: cache quictls 450 if: contains(matrix.build.install_steps, 'quictls') 451 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 452 id: cache-quictls 453 env: 454 cache-name: cache-quictls 455 with: 456 path: /home/runner/quictls 457 key: ${{ runner.os }}-build-${{ env.cache-name }}-quictls-${{ env.quictls-version }} 458 459 - name: 'build quictls' 460 if: contains(matrix.build.install_steps, 'quictls') && steps.cache-quictls.outputs.cache-hit != 'true' 461 run: | 462 git clone --quiet --depth=1 -b openssl-${{ env.quictls-version }} https://github.com/quictls/openssl 463 cd openssl 464 ./config --prefix=$HOME/quictls --libdir=lib 465 make -j1 install_sw 466 467 - name: cache msh3 468 if: contains(matrix.build.install_steps, 'msh3') 469 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 470 id: cache-msh3 471 env: 472 cache-name: cache-msh3 473 with: 474 path: /home/runner/msh3 475 key: ${{ runner.os }}-build-${{ env.cache-name }}-msh3-${{ env.msh3-version }} 476 477 - name: 'build msh3' 478 if: contains(matrix.build.install_steps, 'msh3') && steps.cache-msh3.outputs.cache-hit != 'true' 479 run: | 480 git clone --quiet --depth=1 -b v${{ env.msh3-version }} --recursive https://github.com/nibanks/msh3 481 cd msh3 482 cmake -B . -DCMAKE_BUILD_TYPE=RelWithDebInfo -DCMAKE_INSTALL_PREFIX=$HOME/msh3 483 cmake --build . 484 cmake --install . 485 486 - name: cache awslc 487 if: contains(matrix.build.install_steps, 'awslc') 488 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 489 id: cache-awslc 490 env: 491 cache-name: cache-awslc 492 with: 493 path: /home/runner/awslc 494 key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ env.awslc-version }} 495 496 - name: build awslc 497 if: contains(matrix.build.install_steps, 'awslc') && steps.cache-awslc.outputs.cache-hit != 'true' 498 run: | 499 curl -LOsSf --retry 6 --retry-connrefused --max-time 999 \ 500 https://github.com/awslabs/aws-lc/archive/refs/tags/v${{ env.awslc-version }}.tar.gz 501 tar xzf v${{ env.awslc-version }}.tar.gz 502 mkdir aws-lc-${{ env.awslc-version }}-build 503 cd aws-lc-${{ env.awslc-version }}-build 504 cmake -G Ninja -DCMAKE_INSTALL_PREFIX=$HOME/awslc ../aws-lc-${{ env.awslc-version }} 505 cmake --build . --parallel 5 506 cmake --install . 507 508 - if: contains(matrix.build.install_steps, 'rust') 509 run: | 510 cd $HOME 511 curl -sSf --compressed https://sh.rustup.rs/ | sh -s -- -y 512 source $HOME/.cargo/env 513 rustup toolchain install nightly 514 name: 'install rust' 515 516 - name: cache rustls 517 if: contains(matrix.build.install_steps, 'rustls') 518 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 519 id: cache-rustls 520 env: 521 cache-name: cache-rustls 522 with: 523 path: /home/runner/rustls 524 key: ${{ runner.os }}-build-${{ env.cache-name }}-rustls-${{ env.rustls-version }} 525 526 - name: 'build rustls' 527 if: contains(matrix.build.install_steps, 'rustls') && steps.cache-rustls.outputs.cache-hit != 'true' 528 run: | 529 git clone --quiet --depth=1 -b v${{ env.rustls-version }} --recursive https://github.com/rustls/rustls-ffi.git 530 cd rustls-ffi 531 make DESTDIR=$HOME/rustls install 532 533 - if: contains(matrix.build.install_steps, 'hyper') 534 run: | 535 cd $HOME 536 git clone --quiet --depth=1 https://github.com/hyperium/hyper.git 537 cd $HOME/hyper 538 RUSTFLAGS="--cfg hyper_unstable_ffi" cargo +nightly rustc --features client,http1,http2,ffi -Z unstable-options --crate-type cdylib 539 echo "LD_LIBRARY_PATH=$HOME/hyper/target/debug:/usr/local/lib" >> $GITHUB_ENV 540 name: 'install hyper' 541 542 - if: contains(matrix.build.install_steps, 'intel') 543 run: | 544 cd /tmp 545 curl -sSf --compressed https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB | sudo apt-key add - 546 sudo add-apt-repository "deb https://apt.repos.intel.com/oneapi all main" 547 sudo apt install --no-install-recommends intel-oneapi-compiler-dpcpp-cpp-and-cpp-classic 548 source /opt/intel/oneapi/setvars.sh 549 printenv >> $GITHUB_ENV 550 name: 'install Intel compilers' 551 552 - if: contains(matrix.build.install_steps, 'pytest') 553 run: | 554 sudo apt-get install apache2 apache2-dev libnghttp2-dev vsftpd 555 sudo python3 -m pip install -r tests/http/requirements.txt 556 name: 'install pytest and apach2-dev' 557 558 - name: cache mod_h2 559 if: contains(matrix.build.install_steps, 'pytest') 560 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 561 id: cache-mod_h2 562 env: 563 cache-name: cache-mod_h2 564 with: 565 path: /home/runner/mod_h2 566 key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ env.mod_h2-version }} 567 568 - name: 'build mod_h2' 569 if: contains(matrix.build.install_steps, 'pytest') && steps.cache-mod_h2.outputs.cache-hit != 'true' 570 run: | 571 cd $HOME 572 git clone --quiet --depth=1 -b v${{ env.mod_h2-version }} https://github.com/icing/mod_h2 573 cd mod_h2 574 autoreconf -fi 575 ./configure 576 make 577 578 - name: 'install mod_h2' 579 if: contains(matrix.build.install_steps, 'pytest') 580 run: | 581 cd $HOME/mod_h2 582 sudo make install 583 584 - run: autoreconf -fi 585 if: ${{ matrix.build.configure }} 586 name: 'autoreconf' 587 588 - name: 'configure' 589 run: | 590 [[ '${{ matrix.build.install_steps }}' = *'awslc'* ]] && sudo apt remove --yes libssl-dev 591 if [ -n '${{ matrix.build.generate }}' ]; then 592 cmake -G Ninja \ 593 -DCMAKE_C_COMPILER_TARGET=$(uname -m)-pc-linux-gnu -DBUILD_STATIC_LIBS=ON \ 594 -DCMAKE_UNITY_BUILD=ON -DCURL_TEST_BUNDLES=ON -DCURL_WERROR=ON \ 595 -DCURL_BROTLI=ON -DCURL_ZSTD=ON \ 596 ${{ matrix.build.generate }} 597 else 598 ${{ matrix.build.configure-prefix }} \ 599 ./configure --disable-dependency-tracking --enable-unity --enable-test-bundles --enable-warnings --enable-werror \ 600 ${{ matrix.build.configure }} 601 fi 602 603 - name: 'configure log' 604 if: ${{ !cancelled() }} 605 run: cat config.log CMakeFiles/CMakeConfigureLog.yaml 2>/dev/null || true 606 607 - name: 'test configs' 608 run: | 609 cat tests/config || true 610 cat tests/http/config.ini || true 611 612 - name: 'build' 613 run: | 614 if [ -n '${{ matrix.build.generate }}' ]; then 615 ${{ matrix.build.make-prefix }} cmake --build . --parallel 5 --verbose 616 else 617 ${{ matrix.build.make-prefix }} make V=1 618 fi 619 620 - name: single-use function check 621 run: | 622 git config --global --add safe.directory "*" 623 if [ -n '${{ matrix.build.generate }}' ]; then 624 libcurla=lib/libcurl.a 625 else 626 libcurla=lib/.libs/libcurl.a 627 fi 628 ./scripts/singleuse.pl ${{ matrix.build.singleuse }} ${libcurla} 629 630 - run: ./src/curl -V 631 name: 'check curl -V output' 632 633 - run: cmake --install . --prefix $HOME/curl --strip 634 if: ${{ matrix.build.generate }} 635 name: 'cmake install' 636 637 - name: 'build tests' 638 if: ${{ matrix.build.install_steps != 'skipall' }} 639 run: | 640 if [ -n '${{ matrix.build.generate }}' ]; then 641 cmake --build . --parallel 5 --verbose --target testdeps 642 else 643 make V=1 -C tests 644 fi 645 646 - name: 'run tests' 647 if: ${{ matrix.build.install_steps != 'skipall' && matrix.build.install_steps != 'skiprun' }} 648 timeout-minutes: ${{ contains(matrix.build.install_packages, 'valgrind') && 30 || 15 }} 649 run: | 650 export TFLAGS='${{ matrix.build.tflags }}' 651 if [[ '${{ matrix.build.install_packages }}' = *'valgrind'* ]]; then 652 TFLAGS+=' -j4' 653 fi 654 if [[ '${{ matrix.build.install_packages }}' = *'heimdal-dev'* ]]; then 655 TFLAGS+=' ~2077 ~2078' # valgrind errors 656 fi 657 if [ -n '${{ matrix.build.generate }}' ]; then 658 cmake --build . --verbose --target test-ci 659 else 660 make V=1 test-ci 661 fi 662 663 - name: 'run pytest' 664 if: contains(matrix.build.install_steps, 'pytest') 665 env: 666 TFLAGS: "${{ matrix.build.tflags }}" 667 CURL_CI: github 668 run: | 669 if [ -n '${{ matrix.build.generate }}' ]; then 670 cmake --build . --verbose --target curl-pytest-ci 671 else 672 make V=1 pytest-ci 673 fi 674 675 - name: 'build examples' 676 run: | 677 if [ -n '${{ matrix.build.generate }}' ]; then 678 ${{ matrix.build.make-prefix }} cmake --build . --parallel 5 --verbose --target curl-examples 679 else 680 ${{ matrix.build.make-prefix }} make V=1 examples 681 fi 682
