qubes-mirage-firewall/.github/workflows/main.yml

name: Main workflow

on:
  pull_request:
  push:
  schedule:
    # Prime the caches every Monday
    - cron: 0 1 * * MON

jobs:
  build:
    strategy:
      fail-fast: false
      matrix:
        os:
          - ubuntu-latest

    runs-on: ${{ matrix.os }}

    steps:
      - name: Checkout code
        uses: actions/checkout@v2

      - run: ./build-with-docker.sh

      - name: Upload Artifact
        uses: actions/upload-artifact@v3
        with:
          name: mirage-firewall.tar.bz2
          path: mirage-firewall.tar.bz2
add github action to compile the firewall 2022-11-11 12:40:04 +00:00			`name: Main workflow`

			`on:`
			`pull_request:`
			`push:`
			`schedule:`
			`# Prime the caches every Monday`
			`- cron: 0 1 * * MON`

			`jobs:`
			`build:`
			`strategy:`
			`fail-fast: false`
			`matrix:`
			`os:`
			`- ubuntu-latest`

			`runs-on: ${{ matrix.os }}`

			`steps:`
			`- name: Checkout code`
			`uses: actions/checkout@v2`

Reproducible build systems: use in GitHub action the build-with-docker.sh Also upload the artifact to GitHub action, and in addition use the same setup (ubuntu 20.04 image) and build directories as done on builds.robur.coop. Also use `strip` on the resulting binary to reduce it's size (since the debug section aren't mapped into the running unikernel, there's nothing we get from them -- also they are preserved (as .debug file) and uploaded to https://builds.robur.coop if one needs them). This entails binary reproducibility between the different systems: - a developer using ./build-with-docker.sh - GitHub action (run on every PR) - builds.robur.coop with the ubuntu-20.04 worker 2022-11-13 11:22:59 +00:00			`- run: ./build-with-docker.sh`
fix github action 2022-11-11 13:32:31 +00:00
Reproducible build systems: use in GitHub action the build-with-docker.sh Also upload the artifact to GitHub action, and in addition use the same setup (ubuntu 20.04 image) and build directories as done on builds.robur.coop. Also use `strip` on the resulting binary to reduce it's size (since the debug section aren't mapped into the running unikernel, there's nothing we get from them -- also they are preserved (as .debug file) and uploaded to https://builds.robur.coop if one needs them). This entails binary reproducibility between the different systems: - a developer using ./build-with-docker.sh - GitHub action (run on every PR) - builds.robur.coop with the ubuntu-20.04 worker 2022-11-13 11:22:59 +00:00			`- name: Upload Artifact`
			`uses: actions/upload-artifact@v3`
			`with:`
			`name: mirage-firewall.tar.bz2`
			`path: mirage-firewall.tar.bz2`