ci: Update newt to r0.52.25 #701
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: next | |
| on: | |
| push: | |
| branches-ignore: | |
| - 'master' | |
| # keep as path to test exclusions | |
| - 'ci/ignore-master' | |
| env: | |
| SHELLCHECK_VERSION: v0.10.0 | |
| SHELLCHECK_SHA256: 6c881ab0698e4e6ea235245f22832860544f17ba386442fe7e9d629f8cbedf87 | |
| NEWT_REVISION: 9b9e7e8936f51f83a7259c5f0a9b4ff909cbd39a # r0.52.25 | |
| jobs: | |
| codestyle: | |
| name: Code style | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Check out repo | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| - name: Install Checkcode dependencies | |
| run: | | |
| pip install flake8 pycodestyle doc8 Pygments | |
| - name: Install recent shellcheck | |
| run: | | |
| wget -q https://github.com/koalaman/shellcheck/releases/download/$SHELLCHECK_VERSION/shellcheck-$SHELLCHECK_VERSION.linux.x86_64.tar.xz | |
| echo "$SHELLCHECK_SHA256 shellcheck-$SHELLCHECK_VERSION.linux.x86_64.tar.xz" | sha256sum -c | |
| tar -xJf shellcheck-$SHELLCHECK_VERSION.linux.x86_64.tar.xz | |
| sudo cp shellcheck-$SHELLCHECK_VERSION/shellcheck /usr/local/bin/ | |
| - name: Check code | |
| run: scripts/checkcode.sh . | |
| perform_tests: | |
| name: Modern Python | |
| runs-on: ubuntu-24.04 | |
| strategy: | |
| matrix: | |
| python-version: ["3.9", "3.10", "3.11", "3.12", "3.13", "3.14"] | |
| steps: | |
| - name: Check out repo | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| - name: PyTest | |
| uses: ./.github/actions/perform-tests | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| build_containers: | |
| name: Build, test and deploy container images | |
| needs: | |
| - codestyle | |
| - perform_tests | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| id-token: write | |
| packages: write | |
| contents: read | |
| attestations: write | |
| artifact-metadata: write | |
| strategy: | |
| matrix: | |
| image-name: ["kas", "kas-isar"] | |
| distro-release: ["debian-bookworm", "debian-trixie"] | |
| steps: | |
| - name: Check out repo | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| - name: Set up docker build | |
| uses: ./.github/actions/docker-init | |
| with: | |
| deploy-user: ${{ github.actor }} | |
| deploy-token: ${{ secrets.GITHUB_TOKEN }} | |
| image-name: ${{ matrix.image-name }} | |
| distro-release: ${{ matrix.distro-release }} | |
| - name: Build ${{ matrix.image-name }} image | |
| uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 | |
| with: | |
| context: /home/runner/kas-clone | |
| target: ${{ matrix.image-name }} | |
| platforms: linux/amd64 | |
| build-args: | | |
| SOURCE_DATE_EPOCH=${{ env.SOURCE_DATE_EPOCH }} | |
| DEBIAN_TAG=${{ env.DEBIAN_TAG }} | |
| outputs: type=docker,rewrite-timestamp=true | |
| tags: ghcr.io/${{ github.repository }}/${{ matrix.image-name }}:next-${{ matrix.distro-release }} | |
| - name: Cache downloads | |
| id: cache-downloads | |
| uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 | |
| with: | |
| path: | | |
| image-tests/${{ matrix.image-name }}/build/downloads | |
| key: cache-downloads-${{ matrix.image-name }}-${{ matrix.distro-release }} | |
| - name: Test ${{ matrix.image-name }} image | |
| env: | |
| KAS_CONTAINER_IMAGE: ghcr.io/${{ github.repository }}/${{ matrix.image-name }}:next-${{ matrix.distro-release }} | |
| KAS_CLONE_DEPTH: 1 | |
| run: | | |
| cd image-tests/${{ matrix.image-name }} | |
| ../../kas-container build kas.yml | |
| if [ "${{ matrix.image-name }}" = "kas" ]; then | |
| ../../kas-container build kas-buildtools.yml | |
| fi | |
| [ -d build/tmp ] | |
| cp -a build/downloads .cache-downloads | |
| echo "Test kas clean" | |
| ../../kas-container clean kas.yml | |
| ! [ -d build/tmp/deploy ] | |
| [ -d build/sstate-cache ] && [ -d build/downloads ] | |
| [ -d poky ] || [ -d isar ] | |
| echo "Test kas purge" | |
| ../../kas-container purge kas.yml | |
| ! [ -d poky ] && ! [ -d isar ] && ! [ -d build ] | |
| # kas only: build oe-core nodistro example | |
| if [[ "${{ matrix.image-name }}" == "kas" ]]; then | |
| echo "Test oe-core nodistro" | |
| ../../kas-container build ../../examples/oe-core-nodistro.yml | |
| ../../kas-container cleansstate ../../examples/oe-core-nodistro.yml | |
| echo "Test oe-core nodistro with upstream hash equivalence server" | |
| export BB_HASHSERVE="auto" | |
| export BB_HASHSERVE_UPSTREAM="wss://hashserv.yoctoproject.org/ws" | |
| export SSTATE_MIRRORS="file://.* https://sstate.yoctoproject.org/all/PATH;downloadfilename=PATH" | |
| ../../kas-container build ../../examples/oe-core-nodistro.yml | |
| grep -q $BB_HASHSERVE_UPSTREAM build/tmp/log/eventlog/*.json || { | |
| echo "Upstream hash equivalence server not used" | |
| exit 1 | |
| } | |
| fi | |
| mkdir -p build | |
| mv .cache-downloads build/downloads | |
| - name: Complete build and deploy ${{ matrix.image-name }} image | |
| if: github.ref == 'refs/heads/next' | |
| uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 | |
| id: push | |
| with: | |
| context: /home/runner/kas-clone | |
| target: ${{ matrix.image-name }} | |
| platforms: linux/amd64,linux/arm64 | |
| build-args: | | |
| SOURCE_DATE_EPOCH=${{ env.SOURCE_DATE_EPOCH }} | |
| DEBIAN_TAG=${{ env.DEBIAN_TAG }} | |
| provenance: false | |
| outputs: type=registry,rewrite-timestamp=true | |
| tags: | | |
| ${{ matrix.distro-release == env.DISTRO_LATEST_RELEASE && format('ghcr.io/{0}/{1}:next', github.repository, matrix.image-name) || '' }} | |
| ghcr.io/${{ github.repository }}/${{ matrix.image-name }}:next-${{ matrix.distro-release }} | |
| annotations: ${{ env.DOCKER_METADATA_OUTPUT_ANNOTATIONS }} | |
| - name: Attest ${{ matrix.image-name }} image | |
| if: github.ref == 'refs/heads/next' | |
| uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 | |
| with: | |
| subject-name: ghcr.io/${{ github.repository }}/${{ matrix.image-name }} | |
| subject-digest: ${{ steps.push.outputs.digest }} | |
| push-to-registry: true | |
| cleanup_ghcr_containers: | |
| name: cleanup untagged ${{ matrix.image-name }} containers | |
| if: github.ref == 'refs/heads/next' | |
| runs-on: ubuntu-24.04 | |
| needs: build_containers | |
| permissions: | |
| packages: write | |
| strategy: | |
| matrix: | |
| image-name: ["kas", "kas-isar"] | |
| steps: | |
| - uses: dataaxiom/ghcr-cleanup-action@d52806a0dc70b430571a37da1fde39733ffd640f # v1.2.2 | |
| with: | |
| dry-run: false | |
| validate: true | |
| package: kas/${{ matrix.image-name }} | |
| token: ${{ secrets.GITHUB_TOKEN }} |