aboutsummaryrefslogtreecommitdiffstats
path: root/.gitlab-ci.yml
blob: c0d39099896522572acd72192cd0a0fa5763355a (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
# Basic notes: builds firejail on 5 different systems for 2 package systems:
# 1. Debian-based systems. Use debian:jessie to ensure reasonable backwards
# compat and ubuntu:rolling for new setups
# 2. Redhat-based systems. Use centos:latest for reasonable backwards compat
# and fedora:latest for new setups
# 3. Alpine for installing directly from source
# Also builds apparmor package for Ubuntu LTS

build_ubuntu_package:
    image: ubuntu:rolling
    script:
        - apt-get update -qq
        - >
            DEBIAN_FRONTEND=noninteractive apt-get install -y -qq
            build-essential lintian libapparmor-dev pkg-config gawk
        - ./ci/printenv.sh
        - ./configure || (cat config.log; exit 1)
        - make deb
        - dpkg -i firejail*.deb
        - command -V firejail && firejail --version

build_debian_package:
    image: debian:buster
    script:
        - apt-get update -qq
        - >
            apt-get install -y -qq
            build-essential lintian libapparmor-dev pkg-config gawk
        - ./ci/printenv.sh
        - ./configure || (cat config.log; exit 1)
        - make deb
        - dpkg -i firejail*.deb
        - command -V firejail && firejail --version

build_redhat_package:
    image: almalinux:latest
    script:
        - dnf update -y
        - dnf install -y rpm-build gcc make
        - ./ci/printenv.sh
        - ./configure --prefix=/usr || (cat config.log; exit 1)
        - make rpms
        - rpm -i firejail*.rpm
        - command -V firejail && firejail --version

build_fedora_package:
    image: fedora:latest
    script:
        - dnf update -y
        - dnf install -y rpm-build gcc make
        - ./ci/printenv.sh
        - ./configure --prefix=/usr || (cat config.log; exit 1)
        - make rpms
        - rpm -i firejail*.rpm
        - command -V firejail && firejail --version

build_src_package:
    image: alpine:latest
    script:
        - apk update
        - apk upgrade
        - apk add build-base linux-headers gawk
        - ./ci/printenv.sh
        - ./configure --prefix=/usr || (cat config.log; exit 1)
        - make
        - make install-strip
        - command -V firejail && firejail --version

build_no_apparmor:
    image: ubuntu:latest
    script:
        - apt-get update -qq
        - >
            DEBIAN_FRONTEND=noninteractive apt-get install -y -qq
            build-essential lintian pkg-config gawk
        - ./ci/printenv.sh
        - ./configure || (cat config.log; exit 1)
        - make dist
        - ./mkdeb.sh --disable-apparmor
        - dpkg -i firejail*.deb
        - command -V firejail && firejail --version
        - firejail --version | grep -F 'AppArmor support is disabled'

debian_ci:
    image: registry.salsa.debian.org/salsa-ci-team/ci-image-git-buildpackage:latest
    variables:
        DEBFULLNAME: "$GITLAB_USER_NAME"
        DEBEMAIL: "$GITLAB_USER_EMAIL"
    before_script:
        - git checkout -B ci_build "$CI_COMMIT_SHA"
        - gitlab-ci-enable-sid
        - gitlab-ci-enable-experimental
        - |
            cat >>/etc/apt/sources.list <<EOF
            deb-src http://deb.debian.org/debian sid main
            deb-src http://deb.debian.org/debian experimental main
            EOF
        - apt-get update
        - git config user.name "$DEBFULLNAME"
        - git config user.email "$DEBEMAIL"
        - |
            cd "$CI_PROJECT_DIR/.."
            apt-get source --download-only -t experimental firejail ||
            apt-get source --download-only firejail
        - |
            cd "$CI_PROJECT_DIR"
            tar xf ../firejail_*.debian.tar.*
        - rm -rf debian/patches/
        - |
            VERSION="$(grep ^PACKAGE_VERSION= configure | cut -d "'" -f 2)"
            dch -v "${VERSION}-0.1~ci" 'Non-maintainer upload.'
            git archive -o "../firejail_${VERSION}.orig.tar.gz" HEAD
            pristine-tar commit "../firejail_${VERSION}.orig.tar.gz" ci_build
            git branch -m pristine-tar origin/pristine-tar
        - git add debian
        - git commit -m 'add debian/'
        - export CI_COMMIT_SHA="$(git rev-parse HEAD)"
    script:
        - apt-get --no-install-recommends install -y -qq gawk
        - ./ci/printenv.sh
        - gitlab-ci-git-buildpackage
        - gitlab-ci-lintian