230 lines
7.8 KiB
YAML
230 lines
7.8 KiB
YAML
name: Build and release
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- '**'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
test:
|
|
name: Test (${{ matrix.os }})
|
|
strategy:
|
|
matrix:
|
|
os:
|
|
- ubuntu-24.04
|
|
- macos-14
|
|
runs-on: ${{ matrix.os }}
|
|
steps:
|
|
- name: Check out source
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Run kernel correctness tests
|
|
run: make test
|
|
|
|
build:
|
|
name: Build ${{ matrix.target }}
|
|
permissions:
|
|
contents: write
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- target: linux-amd64
|
|
os: ubuntu-24.04
|
|
openssl_target: linux-x86_64
|
|
cross_prefix: ''
|
|
- target: linux-i386
|
|
os: ubuntu-24.04
|
|
openssl_target: linux-x86
|
|
cross_prefix: ''
|
|
- target: linux-arm64
|
|
os: ubuntu-24.04-arm
|
|
openssl_target: linux-aarch64
|
|
cross_prefix: ''
|
|
openssl_options: no-asm
|
|
- target: linux-ppc32be
|
|
os: ubuntu-24.04
|
|
openssl_target: linux-ppc
|
|
cross_prefix: powerpc-linux-gnu-
|
|
- target: macos-amd64
|
|
os: macos-14
|
|
openssl_target: darwin64-x86_64-cc
|
|
cross_prefix: ''
|
|
- target: macos-arm64
|
|
os: macos-14
|
|
openssl_target: darwin64-arm64-cc
|
|
cross_prefix: ''
|
|
- target: windows-amd64
|
|
os: ubuntu-24.04
|
|
openssl_target: ''
|
|
cross_prefix: ''
|
|
- target: windows-i386
|
|
os: ubuntu-24.04
|
|
openssl_target: ''
|
|
cross_prefix: ''
|
|
runs-on: ${{ matrix.os }}
|
|
steps:
|
|
- name: Check out source
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install the Linux i386 multilib compiler
|
|
if: matrix.target == 'linux-i386'
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install --yes gcc-multilib
|
|
|
|
- name: Install the Linux PPC32 big-endian cross-compiler
|
|
if: matrix.target == 'linux-ppc32be'
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install --yes gcc-powerpc-linux-gnu
|
|
|
|
- name: Install the Windows/AMD64 cross-compiler
|
|
if: matrix.target == 'windows-amd64'
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install --yes gcc-mingw-w64-x86-64
|
|
|
|
- name: Install the Windows/i386 cross-compiler
|
|
if: matrix.target == 'windows-i386'
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install --yes gcc-mingw-w64-i686
|
|
|
|
- name: Build static OpenSSL
|
|
if: matrix.openssl_target != ''
|
|
env:
|
|
OPENSSL_VERSION: 3.5.7
|
|
OPENSSL_TARGET: ${{ matrix.openssl_target }}
|
|
CROSS_PREFIX: ${{ matrix.cross_prefix }}
|
|
OPENSSL_OPTIONS: ${{ matrix.openssl_options }}
|
|
MACOSX_DEPLOYMENT_TARGET: ${{ matrix.target == 'macos-amd64' && '10.5' || '' }}
|
|
run: |
|
|
curl --fail --location --retry 3 \
|
|
"https://www.openssl.org/source/openssl-${OPENSSL_VERSION}.tar.gz" \
|
|
--output openssl.tar.gz
|
|
tar -xzf openssl.tar.gz
|
|
cd "openssl-${OPENSSL_VERSION}"
|
|
CROSS_COMPILE="$CROSS_PREFIX" ./Configure "$OPENSSL_TARGET" \
|
|
no-shared no-tests no-module no-dso $OPENSSL_OPTIONS \
|
|
--prefix="$GITHUB_WORKSPACE/openssl-static" \
|
|
--openssldir=/etc/ssl
|
|
make -j3 build_sw
|
|
make install_sw
|
|
|
|
- name: Build Linux executable with static OpenSSL
|
|
if: startsWith(matrix.target, 'linux-')
|
|
run: |
|
|
OPENSSL_LIBDIR="$(find "$GITHUB_WORKSPACE/openssl-static" -type f -name libssl.a -exec dirname {} \;)"
|
|
EXTRA_STATIC_LIBS='-ldl'
|
|
if [ "${{ matrix.target }}" = linux-ppc32be ]; then
|
|
EXTRA_STATIC_LIBS="$EXTRA_STATIC_LIBS -latomic"
|
|
fi
|
|
make "${{ matrix.target }}" \
|
|
TLS_CFLAGS="-I$GITHUB_WORKSPACE/openssl-static/include" \
|
|
TLS_LDLIBS="$OPENSSL_LIBDIR/libssl.a $OPENSSL_LIBDIR/libcrypto.a $EXTRA_STATIC_LIBS"
|
|
file "dist/fossbench-${{ matrix.target }}"
|
|
if ! file "dist/fossbench-${{ matrix.target }}" | grep -q 'dynamically linked'; then
|
|
echo 'Linux release uses static glibc, which is unsafe with NSS-based DNS' >&2
|
|
exit 1
|
|
fi
|
|
if readelf -d "dist/fossbench-${{ matrix.target }}" | grep -E 'NEEDED.*lib(ssl|crypto)'; then
|
|
echo 'Linux release uses dynamic OpenSSL' >&2
|
|
exit 1
|
|
fi
|
|
if [ "${{ matrix.target }}" != linux-ppc32be ]; then
|
|
"dist/fossbench-${{ matrix.target }}" --help
|
|
fi
|
|
|
|
- name: Build macOS executable with static OpenSSL
|
|
if: startsWith(matrix.target, 'macos-')
|
|
env:
|
|
MACOSX_DEPLOYMENT_TARGET: ${{ matrix.target == 'macos-amd64' && '10.5' || '' }}
|
|
run: |
|
|
OPENSSL_LIBDIR="$(find "$GITHUB_WORKSPACE/openssl-static" -type f -name libssl.a -exec dirname {} \;)"
|
|
build_log="$(mktemp)"
|
|
if ! make "${{ matrix.target }}" \
|
|
TLS_CFLAGS="-I$GITHUB_WORKSPACE/openssl-static/include" \
|
|
TLS_LDLIBS="$OPENSSL_LIBDIR/libssl.a $OPENSSL_LIBDIR/libcrypto.a" \
|
|
>"$build_log" 2>&1; then
|
|
cat "$build_log"
|
|
{
|
|
echo '## macOS build failure'
|
|
echo '```text'
|
|
tail -80 "$build_log"
|
|
echo '```'
|
|
} >> "$GITHUB_STEP_SUMMARY"
|
|
git config user.name github-actions
|
|
git config user.email github-actions@github.com
|
|
diagnostic_tag="diagnostic-${{ matrix.target }}-${{ github.run_id }}"
|
|
git tag -f -F "$build_log" "$diagnostic_tag"
|
|
git push --force origin "refs/tags/$diagnostic_tag"
|
|
exit 1
|
|
fi
|
|
cat "$build_log"
|
|
if otool -L "dist/fossbench-${{ matrix.target }}" | grep -E 'lib(ssl|crypto)'; then
|
|
echo 'macOS release uses dynamic OpenSSL' >&2
|
|
exit 1
|
|
fi
|
|
|
|
- name: Build Windows executable
|
|
if: startsWith(matrix.target, 'windows-')
|
|
run: |
|
|
make "${{ matrix.target }}"
|
|
file "dist/fossbench-${{ matrix.target }}.exe"
|
|
|
|
- name: Package artifact
|
|
run: |
|
|
bin="fossbench-${{ matrix.target }}"
|
|
if [[ "${{ matrix.target }}" == windows-* ]]; then
|
|
bin="$bin.exe"
|
|
fi
|
|
tar -czf "$GITHUB_WORKSPACE/fossbench-${{ matrix.target }}.tar.gz" \
|
|
-C "$GITHUB_WORKSPACE/dist" "$bin"
|
|
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: fossbench-${{ matrix.target }}
|
|
path: fossbench-${{ matrix.target }}.tar.gz
|
|
if-no-files-found: error
|
|
|
|
release:
|
|
name: Create GitHub release
|
|
needs:
|
|
- test
|
|
- build
|
|
runs-on: ubuntu-24.04
|
|
permissions:
|
|
contents: write
|
|
steps:
|
|
- name: Download build artifacts
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
pattern: fossbench-*
|
|
path: release
|
|
merge-multiple: true
|
|
|
|
- name: Create checksums
|
|
working-directory: release
|
|
run: sha256sum fossbench-*.tar.gz > SHA256SUMS
|
|
|
|
- name: Create release and attach artifacts
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
RELEASE_TAG: ${{ github.ref_name }}
|
|
run: |
|
|
gh release delete "$RELEASE_TAG" \
|
|
--repo "$GITHUB_REPOSITORY" \
|
|
--yes 2>/dev/null || true
|
|
gh release create "$RELEASE_TAG" \
|
|
release/fossbench-*.tar.gz \
|
|
release/SHA256SUMS \
|
|
--repo "$GITHUB_REPOSITORY" \
|
|
--title "Release $RELEASE_TAG" \
|
|
--notes "⚠️ **i386 (Pentium 4) support is new in this release and still being validated on real hardware.** i386 benchmark scores should not be considered accurate yet." \
|
|
--generate-notes
|