add verify_upstream_tls support #341
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| env: | |
| DEBUG: napi:* | |
| APP_NAME: ngrok | |
| MACOSX_DEPLOYMENT_TARGET: '10.13' | |
| 'on': | |
| push: | |
| branches: | |
| - main | |
| tags-ignore: | |
| - '**' | |
| paths-ignore: | |
| - '**/*.md' | |
| - LICENSE | |
| - '**/*.gitignore' | |
| - .editorconfig | |
| - docs/** | |
| pull_request: null | |
| jobs: | |
| udeps: | |
| name: Udeps | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - uses: jrobsonchase/direnv-action@v0.7 | |
| - uses: ./.github/workflows/rust-cache | |
| - uses: actions-rs/cargo@v1 | |
| with: | |
| command: udeps | |
| args: '--workspace --all-targets --all-features' | |
| fmt: | |
| name: Rustfmt | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - uses: jrobsonchase/direnv-action@v0.7 | |
| - uses: actions-rs/cargo@v1 | |
| with: | |
| command: fmt | |
| args: '--all -- --check' | |
| clippy: | |
| name: Clippy | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - uses: jrobsonchase/direnv-action@v0.7 | |
| - uses: ./.github/workflows/rust-cache | |
| - uses: actions-rs/cargo@v1 | |
| with: | |
| command: clippy | |
| args: '--all-targets --all-features --workspace -- -D warnings' | |
| build: | |
| uses: ./.github/workflows/build.yml | |
| with: | |
| app-name: ngrok | |
| build: ${{ matrix.settings.build }} | |
| docker: ${{ matrix.settings.docker }} | |
| host: ${{ matrix.settings.host }} | |
| if: ${{ matrix.settings.if }} | |
| setup: ${{ matrix.settings.setup }} | |
| target: ${{ matrix.settings.target }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| settings: | |
| - host: macos-latest | |
| target: x86_64-apple-darwin | |
| if: true | |
| build: | | |
| yarn build | |
| strip -x *.node | |
| - host: windows-latest | |
| build: yarn build | |
| target: x86_64-pc-windows-msvc | |
| if: true | |
| - host: windows-latest | |
| build: | | |
| yarn build --target i686-pc-windows-msvc | |
| target: i686-pc-windows-msvc | |
| if: true | |
| - host: ubuntu-latest | |
| target: x86_64-unknown-linux-gnu | |
| if: true | |
| docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-debian | |
| build: |- | |
| set -e && | |
| yarn build --target x86_64-unknown-linux-gnu && | |
| strip *.node | |
| - host: ubuntu-latest | |
| target: x86_64-unknown-linux-musl | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine | |
| build: set -e && yarn build && strip *.node | |
| - host: macos-latest | |
| target: aarch64-apple-darwin | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| build: | | |
| yarn build --target aarch64-apple-darwin | |
| strip -x *.node | |
| - host: ubuntu-latest | |
| target: aarch64-unknown-linux-gnu | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-debian-aarch64 | |
| build: |- | |
| set -e && | |
| yarn build --target aarch64-unknown-linux-gnu && | |
| aarch64-unknown-linux-gnu-strip *.node | |
| - host: ubuntu-latest | |
| target: armv7-unknown-linux-gnueabihf | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| setup: | | |
| sudo apt-get update | |
| sudo apt-get install gcc-arm-linux-gnueabihf -y | |
| build: | | |
| yarn build --target=armv7-unknown-linux-gnueabihf | |
| arm-linux-gnueabihf-strip *.node | |
| - host: ubuntu-latest | |
| target: aarch64-linux-android | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| build: | | |
| yarn build --target aarch64-linux-android | |
| ${ANDROID_NDK_LATEST_HOME}/toolchains/llvm/prebuilt/linux-x86_64/bin/llvm-strip *.node | |
| - host: ubuntu-latest | |
| target: armv7-linux-androideabi | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| build: | | |
| yarn build --target armv7-linux-androideabi | |
| ${ANDROID_NDK_LATEST_HOME}/toolchains/llvm/prebuilt/linux-x86_64/bin/llvm-strip *.node | |
| - host: ubuntu-latest | |
| target: aarch64-unknown-linux-musl | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine | |
| build: |- | |
| set -e && | |
| rustup target add aarch64-unknown-linux-musl && | |
| yarn build --target aarch64-unknown-linux-musl && | |
| /aarch64-linux-musl-cross/bin/aarch64-linux-musl-strip *.node | |
| - host: windows-latest | |
| target: aarch64-pc-windows-msvc | |
| # target not supported by the 'ring' rust dependency (ssl library partially built by gcc) | |
| # https://github.com/briansmith/ring/issues/1167 | |
| if: false | |
| build: yarn build --target aarch64-pc-windows-msvc | |
| build-freebsd: | |
| if: github.ref == 'refs/heads/main' | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 30 | |
| name: Build FreeBSD | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Build | |
| id: build | |
| uses: vmactions/freebsd-vm@v1 | |
| env: | |
| DEBUG: napi:* | |
| RUSTUP_HOME: /usr/local/rustup | |
| CARGO_HOME: /usr/local/cargo | |
| RUSTUP_IO_THREADS: 1 | |
| with: | |
| envs: DEBUG RUSTUP_HOME CARGO_HOME RUSTUP_IO_THREADS | |
| usesh: true | |
| mem: 3000 | |
| prepare: | | |
| pkg install -y -f curl node libnghttp2 | |
| alias curl="curl --retry 5 --retry-all-errors" | |
| curl -qL https://www.npmjs.com/install.sh | sh | |
| npm install --location=global --ignore-scripts yarn | |
| curl https://sh.rustup.rs -sSf --output rustup.sh | |
| sh rustup.sh -y --profile minimal --default-toolchain beta | |
| export PATH="/usr/local/cargo/bin:$PATH" | |
| echo "~~~~ rustc --version ~~~~" | |
| rustc --version | |
| echo "~~~~ node -v ~~~~" | |
| node -v | |
| echo "~~~~ yarn --version ~~~~" | |
| yarn --version | |
| run: | | |
| export PATH="/usr/local/cargo/bin:$PATH" | |
| pwd | |
| ls -lah | |
| whoami | |
| env | |
| freebsd-version | |
| yarn install | |
| yarn build | |
| strip -x *.node | |
| NGROK_AUTHTOKEN=${{ secrets.NGROK_AUTHTOKEN }} yarn test -m smoke | |
| rm -rf examples | |
| rm -rf node.core | |
| rm -rf node_modules | |
| rm -rf target | |
| rm -rf .yarn/cache | |
| - name: Upload artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: bindings-freebsd | |
| path: ${{ env.APP_NAME }}.*.node | |
| if-no-files-found: error | |
| test-windows-msvc-binding: | |
| name: Test bindings on ${{ matrix.settings.target }} - node@${{ matrix.node }} | |
| needs: | |
| - build | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| settings: | |
| - host: windows-latest | |
| target: x86_64-pc-windows-msvc | |
| - host: windows-latest | |
| target: i686-pc-windows-msvc | |
| node: | |
| - '14' | |
| - '16' | |
| - '18' | |
| runs-on: ${{ matrix.settings.host }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Setup node x86_64 | |
| uses: actions/setup-node@v3 | |
| if: matrix.settings.target == 'x86_64-pc-windows-msvc' | |
| with: | |
| node-version: ${{ matrix.node }} | |
| check-latest: true | |
| cache: yarn | |
| - name: Setup node x86 | |
| uses: actions/setup-node@v3 | |
| if: matrix.settings.target == 'i686-pc-windows-msvc' | |
| with: | |
| node-version: 18 | |
| check-latest: true | |
| cache: yarn | |
| architecture: x86 | |
| - name: yarn config x86 | |
| if: matrix.settings.target == 'i686-pc-windows-msvc' | |
| run: yarn config set supportedArchitectures.cpu "ia32" | |
| shell: bash | |
| - name: Install dependencies | |
| run: yarn install | |
| - name: Download artifacts | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: bindings-${{ matrix.settings.target }} | |
| path: . | |
| - name: List packages | |
| run: ls -R . | |
| shell: bash | |
| - name: Test bindings | |
| env: | |
| NGROK_AUTHTOKEN: ${{ secrets.NGROK_AUTHTOKEN }} | |
| run: | | |
| yarn test -m smoke | |
| test-linux-x64-gnu-binding: | |
| name: Test bindings on Linux-x64-gnu - node@${{ matrix.node }} | |
| needs: | |
| - build | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| node: | |
| - '14' | |
| - '16' | |
| - '18' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Setup node | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| check-latest: true | |
| cache: yarn | |
| - name: Install dependencies | |
| run: yarn install | |
| - name: Download artifacts | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: bindings-x86_64-unknown-linux-gnu | |
| path: . | |
| - name: List packages | |
| run: ls -R . | |
| shell: bash | |
| - name: Test bindings | |
| # run full suite of online tests | |
| run: docker run -e NGROK_AUTHTOKEN=${{ secrets.NGROK_AUTHTOKEN }} --mount type=bind,src=/etc/ssl,dst=/etc/ssl --rm -v $(pwd):/build -w /build node:${{ matrix.node }}-slim yarn test | |
| test-linux-x64-musl-binding: | |
| if: github.ref == 'refs/heads/main' | |
| name: Test bindings on x86_64-unknown-linux-musl - node@${{ matrix.node }} | |
| needs: | |
| - build | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| node: | |
| - '14' | |
| - '16' | |
| - '18' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Setup node | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| check-latest: true | |
| cache: yarn | |
| - name: Install dependencies | |
| run: | | |
| yarn config set supportedArchitectures.libc "musl" | |
| yarn install | |
| - name: Download artifacts | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: bindings-x86_64-unknown-linux-musl | |
| path: . | |
| - name: List packages | |
| run: ls -R . | |
| shell: bash | |
| - name: Test bindings | |
| run: docker run -e NGROK_AUTHTOKEN=${{ secrets.NGROK_AUTHTOKEN }} --rm -v $(pwd):/build -w /build node:${{ matrix.node }}-alpine yarn test -m smoke | |
| test-linux-aarch64-gnu-binding: | |
| if: github.ref == 'refs/heads/main' | |
| name: Test bindings on aarch64-unknown-linux-gnu - node@${{ matrix.node }} | |
| needs: | |
| - build | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| node: | |
| - '14' | |
| - '16' | |
| - '18' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - run: docker run --rm --privileged multiarch/qemu-user-static:register --reset | |
| - uses: actions/checkout@v3 | |
| - name: Download artifacts | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: bindings-aarch64-unknown-linux-gnu | |
| path: . | |
| - name: List packages | |
| run: ls -R . | |
| shell: bash | |
| - name: Install dependencies | |
| run: | | |
| yarn config set supportedArchitectures.cpu "arm64" | |
| yarn config set supportedArchitectures.libc "glibc" | |
| yarn install | |
| - name: Setup and run tests | |
| uses: addnab/docker-run-action@v3 | |
| with: | |
| image: ghcr.io/napi-rs/napi-rs/nodejs:aarch64-${{ matrix.node }} | |
| options: '-v ${{ github.workspace }}:/build -w /build' | |
| run: | | |
| set -e | |
| NGROK_AUTHTOKEN=${{ secrets.NGROK_AUTHTOKEN }} yarn test -m smoke | |
| ls -la | |
| test-linux-aarch64-musl-binding: | |
| if: github.ref == 'refs/heads/main' | |
| name: Test bindings on aarch64-unknown-linux-musl - node@${{ matrix.node }} | |
| needs: | |
| - build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - run: docker run --rm --privileged multiarch/qemu-user-static:register --reset | |
| - uses: actions/checkout@v3 | |
| - name: Download artifacts | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: bindings-aarch64-unknown-linux-musl | |
| path: . | |
| - name: List packages | |
| run: ls -R . | |
| shell: bash | |
| - name: Install dependencies | |
| run: | | |
| yarn config set supportedArchitectures.cpu "arm64" | |
| yarn config set supportedArchitectures.libc "musl" | |
| yarn install | |
| - name: Setup and run tests | |
| uses: addnab/docker-run-action@v3 | |
| with: | |
| image: multiarch/alpine:aarch64-latest-stable | |
| options: '-v ${{ github.workspace }}:/build -w /build' | |
| run: | | |
| set -e | |
| apk add nodejs npm yarn | |
| NGROK_AUTHTOKEN=${{ secrets.NGROK_AUTHTOKEN }} yarn test -m smoke | |
| test-linux-arm-gnueabihf-binding: | |
| if: github.ref == 'refs/heads/main' | |
| name: Test bindings on armv7-unknown-linux-gnueabihf - node@${{ matrix.node }} | |
| needs: | |
| - build | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| node: | |
| - '14' | |
| - '16' | |
| - '18' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - run: docker run --rm --privileged multiarch/qemu-user-static:register --reset | |
| - uses: actions/checkout@v3 | |
| - name: Download artifacts | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: bindings-armv7-unknown-linux-gnueabihf | |
| path: . | |
| - name: List packages | |
| run: ls -R . | |
| shell: bash | |
| - name: Install dependencies | |
| run: | | |
| yarn config set supportedArchitectures.cpu "arm" | |
| yarn install | |
| - name: Setup and run tests | |
| uses: addnab/docker-run-action@v3 | |
| with: | |
| image: ghcr.io/napi-rs/napi-rs/nodejs:armhf-${{ matrix.node }} | |
| options: '-v ${{ github.workspace }}:/build -w /build' | |
| run: | | |
| set -e | |
| NGROK_AUTHTOKEN=${{ secrets.NGROK_AUTHTOKEN }} yarn test -m smoke | |
| ls -la | |
| universal-macOS: | |
| if: github.ref == 'refs/heads/main' | |
| name: Build universal macOS binary | |
| needs: | |
| - build | |
| runs-on: macos-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Setup node | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: 18 | |
| check-latest: true | |
| cache: yarn | |
| - name: Install dependencies | |
| run: yarn install | |
| - name: Download macOS x64 artifact | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: bindings-x86_64-apple-darwin | |
| path: artifacts | |
| - name: Download macOS arm64 artifact | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: bindings-aarch64-apple-darwin | |
| path: artifacts | |
| - name: Combine binaries | |
| run: yarn universal | |
| - name: Upload artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: bindings-universal-apple-darwin | |
| path: ${{ env.APP_NAME }}.*.node | |
| if-no-files-found: error | |
| publish: | |
| if: github.ref == 'refs/heads/main' && github.repository == 'ngrok/ngrok-javascript' | |
| name: Publish | |
| runs-on: ubuntu-latest | |
| needs: | |
| - udeps | |
| - fmt | |
| - clippy | |
| - build-freebsd | |
| - test-windows-msvc-binding | |
| - test-linux-x64-gnu-binding | |
| - test-linux-x64-musl-binding | |
| - test-linux-aarch64-gnu-binding | |
| - test-linux-aarch64-musl-binding | |
| - test-linux-arm-gnueabihf-binding | |
| - universal-macOS | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Setup node | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: 18 | |
| check-latest: true | |
| cache: yarn | |
| - name: Install dependencies | |
| run: yarn install | |
| - name: Download all artifacts | |
| uses: actions/download-artifact@v3 | |
| with: | |
| path: artifacts | |
| - name: Move artifacts | |
| run: yarn artifacts | |
| - name: List packages | |
| run: ls -R ./npm | |
| shell: bash | |
| - name: Publish | |
| run: | | |
| echo "git log:" | |
| git log -1 --pretty=%B | |
| if git log -1 --pretty=%B | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+$"; | |
| then | |
| echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc | |
| npm publish --access public | |
| elif git log -1 --pretty=%B | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+"; | |
| then | |
| echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc | |
| npm publish --tag next --access public | |
| else | |
| echo "Not a release, skipping publish" | |
| fi | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| NPM_TOKEN: ${{ secrets.NPM_TOKEN }} |