mirror of
https://github.com/libssh2/libssh2.git
synced 2026-01-27 00:18:12 +03:00
- add Linux jobs with old OpenSSL versions: 1.1.1, 1.1.0, 1.0.2, with tests. (Meaning we test these again after losing them in AppVeyor CI) - add LibreSSL Linux job with tests. - cache most dependency packages built from source. (exception: wolfSSL, which would have added too much complexity due to the multiple versions, and it's fast to build anyway.) - change source tarball sources to GitHub for better stability and performance. - move dependency versions to the env. - set `persist-credentials: false` for checkout steps for security. - pin actions to hash for security. - checkout repo later, right before use. - skip building BoringSSL tests to finish quicker. - set `fail-fast: false` in the BSD build matrix. - cmake: move UWP workaround from GHA to `CMakeLists.txt`, making it available for everyone. - list installed packages in OpenBSD job. - bump BoringSSL, mbedTLS, wolfSSL, OpenSSL. - bump cross-platform-actions to v0.26. - bump docker/build-push-action to v6. - bump actions/upload-artifact to v4. - bump NetBSD to 10.1. - drop `--quiet 2` `apt-get` option to keep useful output. - drop `--no-install-suggests --no-install-recommends` `apt-get` options. They are the defaults with the `ubuntu-24.04` image. - tidy up quotes. Cherry-picked from #1484 Closes #1528
71 lines
2.8 KiB
YAML
71 lines
2.8 KiB
YAML
# Copyright (C) Marc Hoersken
|
|
# All rights reserved.
|
|
#
|
|
# Redistribution and use in source and binary forms, with or without
|
|
# modification, are permitted provided that the following conditions are met:
|
|
#
|
|
# * Redistributions of source code must retain the above copyright notice, this
|
|
# list of conditions and the following disclaimer.
|
|
#
|
|
# * Redistributions in binary form must reproduce the above copyright notice,
|
|
# this list of conditions and the following disclaimer in the documentation
|
|
# and/or other materials provided with the distribution.
|
|
#
|
|
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
|
# DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
|
|
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
|
# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
|
|
# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
|
# OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
|
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
#
|
|
# SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
name: OpenSSH Server Docker Image
|
|
|
|
on:
|
|
push:
|
|
branches: [ master ]
|
|
|
|
jobs:
|
|
build-and-push:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.repository_owner }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- shell: bash
|
|
id: hash
|
|
run: echo "::set-output name=hash::$(git rev-parse --short=20 HEAD:tests/openssh_server)"
|
|
|
|
- shell: bash
|
|
id: poll
|
|
run: docker manifest inspect ghcr.io/${{ github.repository_owner }}/ci_tests_openssh_server:${{ steps.hash.outputs.hash }}
|
|
continue-on-error: true
|
|
|
|
- uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v5
|
|
id: meta
|
|
with:
|
|
images: ghcr.io/${{ github.repository_owner }}/ci_tests_openssh_server
|
|
tags: |
|
|
type=raw,value=${{ steps.hash.outputs.hash }}
|
|
if: ${{ steps.poll.outcome == 'failure' }}
|
|
|
|
- uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
|
|
with:
|
|
context: ./tests/openssh_server
|
|
push: true
|
|
tags: ${{ steps.meta.outputs.tags }}
|
|
labels: ${{ steps.meta.outputs.labels }}
|
|
if: ${{ steps.poll.outcome == 'failure' }}
|