heimdal/.github/workflows/linux.yml

name: Linux Build

on:
    push:
      branches:
         - 'master'
         - 'heimdal-7-1-branch'
      paths:
         - '!docs/**'
         - '!**.md'
         - '!**.[1-9]'
         - '**.[chly]'
         - '**.hin'
         - '**.in'
         - '**.am'
         - '**.m4'
         - '**.ac'
         - '**.pl'
         - '**.py'
         - '**.asn1'
         - '**.opt'
         - '**.map'
         - '**/COPYING'
         - '**/INSTALL'
         - '**/README*'
         - '.github/workflows/linux.yml'

    pull_request:
      paths:
         - '!docs/**'
         - '!**.md'
         - '!**.[1-9]'
         - '**.[chly]'
         - '**.hin'
         - '**.in'
         - '**.am'
         - '**.m4'
         - '**.ac'
         - '**.pl'
         - '**.py'
         - '**.asn1'
         - '**.opt'
         - '**/COPYING'
         - '**/INSTALL'
         - '**/README*'
         - '.github/workflows/linux.yml'

jobs:
    unix:
        # Run if no [only X] tag, or if [only linux] is present (check both push commits and PR titles)
        if: >-
            (!contains(github.event.head_commit.message, '[only ') &&
             !contains(github.event.pull_request.title, '[only ')) ||
            contains(github.event.head_commit.message, '[only linux]') ||
            contains(github.event.pull_request.title, '[only linux]')
        runs-on: ${{ matrix.os }}
        strategy:
            fail-fast: false
            matrix:
                name: [linux-gcc]
                include:
                    - name: linux-gcc
                      os: ubuntu-22.04
                      compiler: gcc
                      cflags: '-Wnonnull'
        steps:
            - name: Clone repository
              uses: actions/checkout@v4
            - name: Install packages
              if: startsWith(matrix.os, 'ubuntu')
              run: |
                sudo apt-get update -qq
                sudo apt-get install -y bison comerr-dev flex doxygen
                sudo apt-get install -y libcap-ng-dev libdb-dev libedit-dev libjson-perl
                sudo apt-get install -y libldap2-dev libncurses5-dev libperl4-corelibs-perl
                sudo apt-get install -y libsqlite3-dev libkeyutils-dev pkg-config python3
                sudo apt-get install -y ss-dev texinfo unzip netbase keyutils ldap-utils
                sudo apt-get install -y gdb apport curl libmicrohttpd-dev jq valgrind
                # Temporary workaround for:
                # https://github.com/actions/virtual-environments/issues/3185
                sudo hostname localhost
            - name: Build
              env:
                CC: ${{ matrix.compiler }}
                MAKEVARS: ${{ matrix.makevars }}
              run: |
                /bin/sh ./autogen.sh
                mkdir build
                cd build
                ../configure --srcdir=`dirname "$PWD"` --enable-maintainer-mode --enable-developer --with-ldap $CONFIGURE_OPTS --prefix=$HOME/inst CFLAGS="${{ matrix.cflags }} -Wno-error=shadow -Wno-error=bad-function-cast -Wno-error=unused-function -Wno-error=unused-result -Wno-error=deprecated-declarations"
                make -j4
            - name: Test
              timeout-minutes: 40
              env:
                CC: ${{ matrix.compiler }}
                MAKEVARS: ${{ matrix.makevars }}
              run: |
                cd build
                sudo sysctl kernel.core_pattern=core.%p || true
                ulimit -c unlimited
                make check
            - name: Make Install
              env:
                CC: ${{ matrix.compiler }}
                MAKEVARS: ${{ matrix.makevars }}
              run: |
                cd build || true
                make DESTDIR=/tmp/h5l install
                cd /tmp/h5l
                tar czf $HOME/heimdal-install-linux-${{ matrix.compiler }}.tgz .
            - name: Interrupted/timed out test diagnostics
              if: ${{ cancelled() || failure() }}
              run: |
                set -x
                # Show any test-related processes still running
                ps auxww | grep -E 'kdc|test_context|kinit|kadmin|check-' | grep -v grep || true
                # Show who's on the test port
                ss -tlnp sport = :49188 || true
                # Show the newest .log file (the one likely interrupted)
                newest=$(find build/tests -name '*.log' -newer build/tests/gss/Makefile -printf '%T@ %p\n' 2>/dev/null | sort -rn | head -1 | cut -d' ' -f2-)
                if [ -n "$newest" ]; then
                  echo "=== Newest test log: $newest ==="
                  cat "$newest"
                fi
                # Also show KDC messages.log if any exist
                for f in build/tests/gss/messages.log build/tests/kdc/messages.log; do
                  if [ -f "$f" ]; then
                    echo "=== $f ==="
                    tail -100 "$f"
                  fi
                done
            - name: Core dump stacks
              if: ${{ always() }}
              run: |
                find . -name '*core*' -print
                echo "thread apply all bt" > /tmp/x
                find . -name core\* -print | while read core; do gdb -batch -x x `file "$core"|sed -e "s/^[^']*'//" -e "s/[ '].*$//"` "$core"; done
                if [ "$(find . -name core -print | wc -l)" -gt 0 ]; then false; fi
            - name: Test logs
              if: ${{ always() }}
              run: |
                find build -depth -name \*.trs | xargs grep -lw FAIL | sed -e 's/trs$/log/' | tar -czf $HOME/logs-linux-${{ matrix.compiler }}.tgz --verbatim-files-from --files-from -
                find build -name \*.trs | xargs grep -lw FAIL | sed -e 's/trs$/log/' | xargs cat
            - name: Failed Test logs
              if: ${{ failure() }}
              run: |
                find build -name \*.trs | xargs grep -lw FAIL | sed -e 's/trs$/log/' | xargs cat
            - name: Make Dist
              run: |
                cd build
                make dist
                make distclean
                if [ "$(git ls-files -o|grep -v ^build/ | wc -l)" -ne 0 ]; then
                  echo "Files not removed by make distclean:"
                  git ls-files -o|grep -v ^build/
                fi
            - name: Upload Install Tarball
              uses: actions/upload-artifact@v4
              with:
                name: Install Tarball (${{ matrix.name }})
                path: '~/heimdal-install-linux-${{ matrix.compiler }}.tgz'
            - name: Upload Dist Tarball
              uses: actions/upload-artifact@v4
              with:
                name: Dist Tarball (${{ matrix.name }})
                path: 'build/heimdal-*.tar.gz'
            - name: Upload Logs Tarball
              uses: actions/upload-artifact@v4
              with:
                name: Test Logs (${{ matrix.name }})
                path: '~/logs-linux-${{ matrix.compiler }}.tgz'