diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml index b6b25ae2..82efe205 100644 --- a/.github/workflows/integration.yml +++ b/.github/workflows/integration.yml @@ -9,26 +9,89 @@ on: jobs: test: + name: Integration tests runs-on: ubuntu-22.04 - strategy: - fail-fast: false - matrix: - test: [libssh, httpd] - name: ${{ matrix.test }} container: fedora:rawhide - env: - PKCS11_MODULE: /usr/lib64/ossl-modules/pkcs11.so steps: + - name: Get Date for DNF cache entry + id: get-date + run: | + echo "date=$(/bin/date -u "+%Y%V")" >> $GITHUB_OUTPUT + shell: bash + + - name: DNF cache + uses: actions/cache@v4 + with: + path: | + /var/cache/dnf + key: ${{ runner.os }}-dnf-${{ steps.get-date.outputs.date }} + + - name: Install Dependencies + run: | + dnf -y install clang git meson cargo expect \ + pkgconf-pkg-config openssl-devel openssl opensc \ + p11-kit-devel p11-kit-server gnutls-utils \ + gcc g++ perl-interpreter zlib-devel sqlite-devel \ + httpd bind9-next softhsm \ + 'perl(Module::Load::Conditional)' 'perl(File::Temp)' \ + 'perl(IPC::Cmd)' 'perl(FindBin)' 'perl(lib)' \ + 'perl(File::Compare)' 'perl(File::Copy)' + - name: Checkout Repository uses: actions/checkout@v4 - - name: Install Build Requirements - run: dnf -y install gcc git meson openssl-devel + + - name: Get Kryoptic + id: kryoptic_setup + run: | + git clone https://github.com/latchset/kryoptic.git + cd kryoptic + git submodule update --init + echo "KRYOPTIC=${PWD}" >> "$GITHUB_OUTPUT" + + - name: OpenSSL build cache + uses: actions/cache@v4 + id: cache + with: + path: | + kryoptic/openssl/ + key: ${{ runner.os }}-ossl-${{ hashFiles('kryoptic/.git/modules/openssl/HEAD') }} + + - name: Generate lock file + run: | + cd kryoptic + cargo generate-lockfile + + - name: Cache Rust dependencies + uses: actions/cache@v4 + with: + path: | + ~/.cargo/bin/ + ~/.cargo/registry/index/ + ~/.cargo/registry/cache/ + ~/.cargo/git/db/ + kryoptic/target/ + key: ${{ runner.os }}-cargo-${{ hashFiles('kryoptic/**/Cargo.lock') }} + + - name: Build Kryoptic + run: | + cd kryoptic + cargo build + - name: Setup, Build and Install pkcs11-provider run: | meson setup -Dlibdir=/usr/lib64 builddir meson compile -C builddir meson install -C builddir - - name: Test + + - name: Test httpd with softhsm + env: + PKCS11_MODULE: /usr/lib64/ossl-modules/pkcs11.so + run: | + pushd tests/integration && bash -e httpd.sh ; popd + + - name: Test bind with kryoptic + env: + PKCS11_MODULE: /usr/lib64/ossl-modules/pkcs11.so + KRYOPTIC: ${{ steps.kryoptic_setup.outputs.KRYOPTIC }} run: | - pushd tests/integration - bash -e ${{ matrix.test }}.sh + pushd tests/integration && bash -e bind.sh kryoptic ; popd