chore: build deps using Bazel #1679
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: test | |
| on: | |
| pull_request: | |
| schedule: | |
| - cron: '0 0 * * SUN' | |
| workflow_dispatch: | |
| defaults: | |
| run: | |
| shell: bash | |
| # cancel previous runs if new commits are pushed to the PR, but run for each commit on master | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} | |
| cancel-in-progress: true | |
| jobs: | |
| self-trigger: | |
| runs-on: ubuntu-latest | |
| if: ${{ github.event_name == 'schedule' }} | |
| steps: | |
| - name: Trigger | |
| run: | | |
| curl -H "Authorization: token ${{ secrets.ACCESS_TOKEN }}" \ | |
| -X POST \ | |
| -H "Accept: application/vnd.github.v3+json" \ | |
| https://api.github.com/repos/ADD-SP/ngx_waf/actions/workflows/${{ github.workflow }}.yml/dispatches \ | |
| -d '{"ref":"refs/heads/lts"}' | |
| curl -H "Authorization: token ${{ secrets.ACCESS_TOKEN }}" \ | |
| -X POST \ | |
| -H "Accept: application/vnd.github.v3+json" \ | |
| https://api.github.com/repos/ADD-SP/ngx_waf/actions/workflows/${{ github.workflow }}.yml/dispatches \ | |
| -d '{"ref":"refs/heads/current"}' | |
| native: | |
| runs-on: ubuntu-latest | |
| if: ${{ github.event_name != 'schedule' }} | |
| strategy: | |
| matrix: | |
| nginx-version: ['stable nginx', 'mainline nginx'] | |
| install-type: ['static module', 'dynamic module'] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ github.ref }} | |
| - uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.x' | |
| architecture: 'x64' | |
| - name: Install dependencies | |
| run: | | |
| sudo apt-get --yes update | |
| # https://github.com/actions/runner-images/issues/2139 | |
| sudo apt-get remove \ | |
| libgd3 \ | |
| nginx-core \ | |
| nginx-full \ | |
| nginx-light \ | |
| nginx-extras | |
| sudo apt-get install --yes \ | |
| build-essential \ | |
| zlib1g-dev \ | |
| libpcre3 \ | |
| libpcre3-dev \ | |
| libssl-dev \ | |
| libxslt1-dev \ | |
| libxml2-dev \ | |
| libgeoip-dev \ | |
| libgd-dev \ | |
| libperl-dev \ | |
| flex \ | |
| bison \ | |
| autoconf \ | |
| libtool \ | |
| automake | |
| sudo pip install lastversion | |
| - name: Download ${{ matrix.nginx-version }} | |
| run: | | |
| make parser | |
| if [ '${{ matrix.nginx-version }}' = 'stable nginx' ] ; then \ | |
| version='stable' ;\ | |
| else \ | |
| version='mainline' ;\ | |
| fi | |
| lastversion download nginx:${version} | |
| mkdir nginx-src | |
| tar zxf nginx-*.tar.gz --directory nginx-src --strip-components=1 | |
| - name: Configure ${{ matrix.install-type }} | |
| run: | | |
| bazel build --config release //:dependencies --verbose_failures | |
| pushd bazel-bin | |
| tar -zxf ngx_waf_deps.tar.gz | |
| bash ngx_waf_deps/set-envs.sh | |
| popd | |
| cd nginx-src | |
| if [ '${{ matrix.install-type }}' = 'static module' ] ; then \ | |
| opt='--add-module' ;\ | |
| else \ | |
| opt='--add-dynamic-module' ;\ | |
| fi | |
| ./configure ${opt}=.. --with-cc-opt='-Wno-unused-but-set-variable -Wno-unused-function -fstack-protector-strong -Wno-sign-compare' --with-http_realip_module | |
| - name: Install ${{ matrix.nginx-version }} | |
| run: | | |
| cd nginx-src | |
| make | |
| sudo make install | |
| sudo useradd nginx -s /sbin/nologin -M | |
| sudo chmod 777 -R /usr/local/nginx | |
| sudo ln -s /usr/local/nginx/sbin/nginx /usr/local/bin/nginx | |
| - name: Install Test::Nginx | |
| run: | | |
| sudo cpan Test::Nginx | |
| - name: Test | |
| run: | | |
| sudo chmod 777 -R /tmp | |
| cd test/test-nginx | |
| export MODULE_TEST_PATH=/tmp/module_test | |
| sh ./init.sh | |
| exec sudo sh start.sh t/*.t | |
| docker: | |
| runs-on: ubuntu-latest | |
| if: ${{ false && github.event_name != 'schedule' }} | |
| strategy: | |
| matrix: | |
| version: ['stable', 'mainline'] | |
| target: ['glibc', 'musl'] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ github.ref }} | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v3 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Build module | |
| run: docker build --file docker/Dockerfile.${{ matrix.target }} --build-arg=VERSION=${{ matrix.version }} . | |
| triger: | |
| runs-on: ubuntu-latest | |
| if: ${{ github.event_name == 'workflow_dispatch' || (github.event_name == 'push' && (github.ref == 'refs/heads/lts' || github.ref == 'refs/heads/current')) }} | |
| needs: ['native', 'docker'] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ github.ref }} | |
| - uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.x' | |
| - name: Set up lastversion | |
| run: pip3 install lastversion | |
| - name: 'Trigger workflow: docker' | |
| if: ${{ github.ref == 'refs/heads/lts' || github.ref == 'refs/heads/current' }} | |
| run: | | |
| curl -H "Authorization: token ${{ secrets.ACCESS_TOKEN }}" \ | |
| -X POST \ | |
| -H "Accept: application/vnd.github.v3+json" \ | |
| https://api.github.com/repos/ADD-SP/ngx_waf/actions/workflows/docker.yml/dispatches \ | |
| -d "{ \ | |
| \"ref\":\"${{ github.ref }}\", \ | |
| \"inputs\": { \ | |
| \"ngx_stable_version_number\": \"`lastversion https://nginx.org --major stable`\", \ | |
| \"ngx_mainline_version_number\": \"`lastversion https://nginx.org --major mainline`\", \ | |
| \"module_version_number\": \"`cat assets/version.txt`\" \ | |
| } \ | |
| }" |