Create codeql.yml #4
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| 'on': | |
| pull_request: | |
| push: | |
| branches: | |
| - master | |
| - develop | |
| - feature/** | |
| env: | |
| UBSAN_OPTIONS: print_stacktrace=1 | |
| ASAN_OPTIONS: detect_odr_violation=2 | |
| jobs: | |
| posix: | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - cmake-flags: >- | |
| -DCMAKE_CXX_COMPILER=clang++-14 | |
| -DCMAKE_C_COMPILER=clang-14 | |
| -DUSERVER_SANITIZE="ub addr" | |
| -DCMAKE_BUILD_TYPE=Debug | |
| -DUSERVER_NO_WERROR=OFF | |
| -DUSERVER_NAMESPACE=userver_ns | |
| -DUSERVER_NAMESPACE_BEGIN="namespace userver_ns { inline namespace | |
| v1 {" | |
| -DUSERVER_NAMESPACE_END="}}" | |
| -DUSERVER_PG_SERVER_INCLUDE_DIR=/usr/include/postgresql/15/server | |
| -DUSERVER_PG_SERVER_LIBRARY_DIR=/usr/lib/postgresql/15/lib | |
| os: ubuntu-22.04 | |
| info: clang-14 + debug + sanitize addr+ub | |
| tests-flags: '' | |
| - cmake-flags: >- | |
| -DUSERVER_FEATURE_CRYPTOPP_BLAKE2=0 | |
| -DUSERVER_FEATURE_REDIS_HI_MALLOC=1 | |
| -DUSERVER_NO_WERROR=1 | |
| -DCMAKE_BUILD_TYPE=Release | |
| os: ubuntu-20.04 | |
| info: g++-9 + release | |
| tests-flags: '--gtest_filter=-HttpClient.RedirectHeaders:HttpClient.TestUseIPv4v6' | |
| # GCC-8 - testing minimal required compiler | |
| - cmake-flags: >- | |
| -DCMAKE_CXX_COMPILER=g++-8 | |
| -DCMAKE_C_COMPILER=gcc-8 | |
| -DUSERVER_FEATURE_CRYPTOPP_BLAKE2=0 | |
| -DUSERVER_FEATURE_REDIS_HI_MALLOC=1 | |
| -DUSERVER_NO_WERROR=1 | |
| -DCMAKE_BUILD_TYPE=Debug | |
| os: ubuntu-20.04 | |
| info: g++-8 + debug | |
| tests-flags: '--gtest_filter=-HttpClient.RedirectHeaders:HttpClient.TestUseIPv4v6' | |
| name: '${{matrix.os}}: ${{matrix.info}}' | |
| runs-on: ${{matrix.os}} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - name: Reuse ccache directory | |
| uses: actions/cache@v2 | |
| with: | |
| path: ~/.ccache | |
| key: '${{matrix.os}} ${{matrix.info}} ccache-dir ${{github.ref}} run-${{github.run_number}}' | |
| restore-keys: | | |
| ${{matrix.os}} ${{matrix.info}} ccache-dir ${{github.ref}} run-' | |
| ${{matrix.os}} ${{matrix.info}} ccache- | |
| - name: Free disk space | |
| run: | | |
| df -h | |
| # See https://stackoverflow.com/questions/75536771/github-runner-out-of-disk-space-after-building-docker-image | |
| sudo rm -rf /usr/share/dotnet /usr/local/lib/android /usr/lib/php* /opt/ghc \ | |
| /usr/local/share/powershell /usr/share/swift /usr/local/.ghcup || true | |
| df -h | |
| - name: Install packages | |
| run: | | |
| # Instructions from https://clickhouse.com/docs/en/getting-started/install/ | |
| sudo apt-get install -y apt-transport-https ca-certificates dirmngr | |
| sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 8919F6BD2B48D754 | |
| echo "deb https://packages.clickhouse.com/deb stable main" | sudo tee /etc/apt/sources.list.d/clickhouse.list | |
| # Adding mariadb repositories (from https://www.linuxcapable.com/how-to-install-mariadb-on-ubuntu-linux/ ) | |
| curl -fsSL http://mirror.mariadb.org/PublicKey_v2 | sudo gpg --dearmor -o "/usr/share/keyrings/mariadb.gpg" | |
| sudo chmod a+r "/usr/share/keyrings/mariadb.gpg" | |
| # Restore the correct URL after https://jira.mariadb.org/browse/MDBF-651 | |
| #echo "deb [arch=amd64,arm64,ppc64el signed-by=/usr/share/keyrings/mariadb.gpg] https://deb.mariadb.org/10.11/ubuntu $(lsb_release -cs) main" \ | |
| # | tee /etc/apt/sources.list.d/mariadb.list | |
| echo "deb [arch=amd64,arm64,ppc64el signed-by=/usr/share/keyrings/mariadb.gpg] https://mirror.kumi.systems/mariadb/repo/10.11/ubuntu $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/mariadb.list | |
| # Adding librdkafka confluent repositories as in https://docs.confluent.io/platform/current/installation/installing_cp/deb-ubuntu.html#get-the-software | |
| gpg_retrieve_keyserver() { | |
| GNUPGHOME=$(mktemp -d) | |
| GNUPGHOME="$GNUPGHOME" gpg --no-default-keyring --keyring "/usr/share/keyrings/$2.gpg" --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys $1 | |
| rm -rf "$GNUPGHOME" | |
| chmod a+r "/usr/share/keyrings/$2.gpg" | |
| } | |
| gpg_retrieve_keyserver 8B1DA6120C2BF624 confluent | |
| printf "\ | |
| deb [arch=amd64 signed-by=/usr/share/keyrings/confluent.gpg] https://packages.confluent.io/deb/7.6 stable main\n\ | |
| deb [signed-by=/usr/share/keyrings/confluent.gpg] https://packages.confluent.io/clients/deb $(lsb_release -cs) main\n" \ | |
| | sudo tee /etc/apt/sources.list.d/confluent.list | |
| sudo apt update | |
| sudo apt install --allow-downgrades -y clickhouse-common-static redis-server postgresql $(cat scripts/docs/en/deps/${{matrix.os}}.md | tr '\n' ' ') | |
| if [ "${{matrix.os}}" = "ubuntu-22.04" ]; then | |
| # GH Ubuntu image has libpq version 15+ from pg's repo that is API incompatible with postgresql-14. | |
| sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 7FCC7D46ACCC4CF8 | |
| echo "deb https://apt-archive.postgresql.org/pub/repos/apt jammy-pgdg-archive main" | sudo tee /etc/apt/sources.list.d/pgdg.list | |
| sudo apt update | |
| sudo apt install -y postgresql-15 postgresql-client-15 postgresql-server-dev-15 | |
| fi | |
| if [ "${{matrix.info}}" = "g++-8 + debug" ]; then | |
| sudo apt install --allow-downgrades -y g++-8 | |
| fi | |
| - name: Install RabbitMQ packages | |
| run: | | |
| ./scripts/rabbitmq/ubuntu_install_rabbitmq_server.sh | |
| - name: Setup ccache | |
| run: | | |
| ccache -M 2.0GB | |
| ccache -s | |
| - name: Run cmake | |
| run: | | |
| mkdir build_debug | |
| cd build_debug | |
| cmake ${{matrix.cmake-flags}} .. | |
| - name: Run clang-tidy | |
| if: matrix.info == 'clang-14 + debug + sanitize addr+ub' | |
| run: | | |
| [[ -z "${GITHUB_BASE_REF}" ]] && BRANCH_VAR=HEAD~1 || BRANCH_VAR=origin/${GITHUB_BASE_REF} | |
| echo "${BRANCH_VAR}" | |
| echo "$(git diff --name-only ${BRANCH_VAR})" | |
| EXCLUDE_PATTERNS="-e '.pb.cc' -e '.pb.cpp' -e 'benchmark.cpp' -e '/pq-extra/' -e '/tools/' -e 'third_party' " | |
| LIST_CHECK_FILES=$(git diff --name-only ${BRANCH_VAR} | grep --color=never '.cpp' | grep -v ${EXCLUDE_PATTERNS} | tr '\n' ' ') | |
| if [[ -n ${LIST_CHECK_FILES} ]] | |
| then | |
| sudo apt install -y clang-tidy-14 | |
| curl -o tools/run-clang-tidy https://raw.githubusercontent.com/llvm-mirror/clang-tools-extra/release_90/clang-tidy/tool/run-clang-tidy.py | |
| python3 ./tools/run-clang-tidy -clang-tidy-binary clang-tidy-14 -p build_debug -q -j$(nproc) ${LIST_CHECK_FILES} | |
| else | |
| echo "Nothing check in clang-tidy" | |
| fi | |
| - name: Compile | |
| run: | | |
| pwd | |
| cd build_debug | |
| make -j$(nproc) | |
| - name: Run tests (universal) | |
| run: | | |
| echo "UBSAN_OPTIONS=${UBSAN_OPTIONS} ASAN_OPTIONS=${ASAN_OPTIONS}" | |
| cd build_debug | |
| ./universal/userver-universal-unittest ${{matrix.tests-flags}} | |
| - name: Run tests (core) | |
| run: | | |
| cd build_debug | |
| ./core/userver-core-unittest ${{matrix.tests-flags}} | |
| - name: Run tests (clickhouse) | |
| run: | | |
| cd build_debug | |
| mkdir clickhouse || : | |
| cd clickhouse | |
| ctest -V | |
| - name: Run tests (rabbitmq) | |
| run: | | |
| cd build_debug | |
| mkdir rabbitmq || : | |
| cd rabbitmq | |
| ctest -V | |
| - name: Run tests (mysql) | |
| run: | | |
| sudo apt install mariadb-server | |
| cd build_debug | |
| mkdir mysql || : | |
| cd mysql | |
| ctest -V | |
| - name: Run tests (postgresql) | |
| run: | | |
| cd build_debug | |
| mkdir postgresql || : | |
| cd postgresql | |
| ctest -V | |
| - name: Run tests (redis) | |
| run: | | |
| cd build_debug/redis/ | |
| ctest -V | |
| - name: Run tests (mongo) | |
| # libbson unnecessarily overaligns structures and GCC-9 does not support overaligned new | |
| if: matrix.info != 'g++-9 + debug + sanitize addr+ub' | |
| run: | | |
| cd build_debug | |
| mkdir mongo || : | |
| cd mongo | |
| if [ -f ./userver-mongo-unittest ]; then ./userver-mongo-unittest ; fi | |
| # Mongo is not available on Ubuntu 22.04 from default repos | |
| if [ "${{matrix.os}}" != "ubuntu-22.04" ]; then ctest -V -R userver-mongo-mongotest ; fi | |
| - name: Run tests (gRPC) | |
| # TODO: Sanitizer detects bool with value other than 1 or 0 | |
| if: matrix.info != 'clang-14 + debug + sanitize addr+ub' | |
| run: | | |
| cd build_debug | |
| mkdir grpc || : | |
| cd grpc | |
| ctest -V |