mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2024-12-28 15:17:21 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
32f977e820
mbedtls/.travis.yml

154 lines
5.6 KiB
YAML
Raw Normal View History

Declare all jobs as Python This way we get our chosen Python version everywhere, and pip is available. Travis doesn't support the python job type on Windows, however, so keep installing Python manually there. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-11-17 20:13:01 +00:00
# Declare python as our language. This way we get our chosen Python version,
# and pip is available. Gcc and clang are available anyway.
language: python
python: 3.5
Migrate to Travis' new infrastructure
2015-08-04 13:59:34 +00:00
sudo: false
Enable ccache on Travis
2015-08-04 16:06:02 +00:00
cache: ccache
Create a block list for Travis CI, and fix the Coverity email
2018-11-22 10:14:03 +00:00
Travis: split the build into three parallel jobs Split the build between: * Basic checks * A build in the default configuration with extensive tests * Builds in other configurations with less testing The intent is to have one shorter job with basic tests, and two longer jobs that take roughly the same amount of time (split as evenly as possible while keeping an easy-to-understand separation). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-21 20:18:58 +00:00
jobs:
include:
Travis: rebalance the Linux builds Make the running time more even. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-26 19:26:42 +00:00
- name: basic checks and reference configurations
Travis: move doxygen dependencies into the "sanity" job Only this job uses doxygen and graphviz. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-23 21:45:55 +00:00
addons:
apt:
packages:
Travis: install gnutls-bin for all jobs Some jobs don't actually test against GnuTLS, but all.sh checks its presence in all test jobs, so it needs to be installed regardless. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-25 21:36:00 +00:00
- gnutls-bin
Travis: move doxygen dependencies into the "sanity" job Only this job uses doxygen and graphviz. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-23 21:45:55 +00:00
- doxygen
- graphviz
Travis: add a baremetal build Add a baremetal build to Travis, to catch inadvertent dependencies on platform functions. The exact choice of target platform doesn't matter for this purpose. Pick one that's present in all.sh, that uses a compiler that's available in the Travis build environment (Ubuntu 16.04), and that happens to be close to the Debian "armel" distribution. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-25 20:30:31 +00:00
- gcc-arm-none-eabi
- libnewlib-arm-none-eabi
Enable arm-linux-gnueabi-gcc build on Travis Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-08-18 08:31:36 +00:00
- gcc-arm-linux-gnueabi
Fix missing dependency on Travis Was getting errors like: In file included from /usr/include/limits.h:25:0, from /usr/lib/gcc-cross/arm-linux-gnueabi/5/include-fixed/limits.h:168, from /usr/lib/gcc-cross/arm-linux-gnueabi/5/include-fixed/syslimits.h:7, from /usr/lib/gcc-cross/arm-linux-gnueabi/5/include-fixed/limits.h:34, from ../include/mbedtls/check_config.h:30, from ../include/mbedtls/build_info.h:81, from common.h:26, from asn1write.c:20: /usr/include/features.h:367:25: fatal error: sys/cdefs.h: No such file or directory There are two packages to choose from: armhf or armel. Since the comment in all.sh says we're trying to be close to Debian's "armel" architecture, choose that, and fix a comment that was mentioning gnueabihf for no apparent reason. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2021-07-06 07:44:59 +00:00
- libc6-dev-armel-cross
Travis: split the build into three parallel jobs Split the build between: * Basic checks * A build in the default configuration with extensive tests * Builds in other configurations with less testing The intent is to have one shorter job with basic tests, and two longer jobs that take roughly the same amount of time (split as evenly as possible while keeping an easy-to-understand separation). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-21 20:18:58 +00:00
script:
Travis: call all.sh for sanity checks Different releases have different sets of sanity checks. Keep the list in one place, namely all.sh. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-21 20:23:35 +00:00
- tests/scripts/all.sh -k 'check_*'
Travis: replace "default configuration by "full configuration" For the one long job with ASan, use the full configuration. We get more coverage this way, at the cost of a slightly longer runtime which we can afford since the "enumerated configurations" job is slower. Add a default-configuration build to the "basic checks" job. This job is fairly quick (no ASan, no SSL testing). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-25 19:31:04 +00:00
- tests/scripts/all.sh -k test_default_out_of_box
Generate source files before doing builds on Travis On Linux, all.sh takes care of it. On Windows, run make_generated_files.bat. Perl is now required on Windows. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-04-22 09:55:48 +00:00
- tests/scripts/all.sh -k test_ref_configs
Enable arm-linux-gnueabi-gcc build on Travis Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2020-08-18 08:31:36 +00:00
- tests/scripts/all.sh -k build_arm_linux_gnueabi_gcc_arm5vte build_arm_none_eabi_gcc_m0plus
Travis: split the build into three parallel jobs Split the build between: * Basic checks * A build in the default configuration with extensive tests * Builds in other configurations with less testing The intent is to have one shorter job with basic tests, and two longer jobs that take roughly the same amount of time (split as evenly as possible while keeping an easy-to-understand separation). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-21 20:18:58 +00:00
Travis: replace "default configuration by "full configuration" For the one long job with ASan, use the full configuration. We get more coverage this way, at the cost of a slightly longer runtime which we can afford since the "enumerated configurations" job is slower. Add a default-configuration build to the "basic checks" job. This job is fairly quick (no ASan, no SSL testing). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-25 19:31:04 +00:00
- name: full configuration
Update the Travis "full" build to use modern Clang Don't use an all.sh component because there isn't one that does what we want (modern Clang with ASan, and test everything). * We need to set CC explicitly or tweak PATH, because clang in $PATH on Travis focal instances is Clang 7 which is too old (we want Clang 10). * Travis lacks the array of versions of openssl and gnutls that we normally use for testing, so we need to exclude some tests (or build our own multiple versions of openssl and gnutls). The SSL test exclusions are ad hoc and based on what currently works. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2022-11-23 13:30:00 +00:00
os: linux
dist: focal
addons:
apt:
packages:
- clang-10
- gnutls-bin
Travis: split the build into three parallel jobs Split the build between: * Basic checks * A build in the default configuration with extensive tests * Builds in other configurations with less testing The intent is to have one shorter job with basic tests, and two longer jobs that take roughly the same amount of time (split as evenly as possible while keeping an easy-to-understand separation). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-21 20:18:58 +00:00
script:
Update the Travis "full" build to use modern Clang Don't use an all.sh component because there isn't one that does what we want (modern Clang with ASan, and test everything). * We need to set CC explicitly or tweak PATH, because clang in $PATH on Travis focal instances is Clang 7 which is too old (we want Clang 10). * Travis lacks the array of versions of openssl and gnutls that we normally use for testing, so we need to exclude some tests (or build our own multiple versions of openssl and gnutls). The SSL test exclusions are ad hoc and based on what currently works. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2022-11-23 13:30:00 +00:00
# Do a manual build+test sequence rather than using all.sh,
# because there's no all.sh component that does what we want,
# which is a build with Clang >= 10 and ASan, running all the SSL
# testing.
# - The clang executable in the default PATH is Clang 7 on
# Travis's focal instances, but we want Clang >= 10.
# - Running all the SSL testing requires a specific set of
# OpenSSL and GnuTLS versions and we don't want to bother
# with those on Travis.
# So we explicitly select clang-10 as the compiler, and we
# have ad hoc restrictions on SSL testing based on what is
# passing at the time of writing. We will remove these limitations
# gradually.
- make generated_files
- make CC=clang-10 CFLAGS='-Werror -Wall -Wextra -fsanitize=address,undefined -fno-sanitize-recover=all -O2' LDFLAGS='-Werror -Wall -Wextra -fsanitize=address,undefined -fno-sanitize-recover=all'
- make test
- programs/test/selftest
- tests/scripts/test_psa_constant_names.py
- tests/ssl-opt.sh
# Modern OpenSSL does not support fixed ECDH or null ciphers.
Fix failure in Travis CI Signed-off-by: Yanray Wang <yanray.wang@arm.com>
2023-01-17 02:07:22 +00:00
- tests/compat.sh -p OpenSSL -e 'NULL\|ECDH_'
Update the Travis "full" build to use modern Clang Don't use an all.sh component because there isn't one that does what we want (modern Clang with ASan, and test everything). * We need to set CC explicitly or tweak PATH, because clang in $PATH on Travis focal instances is Clang 7 which is too old (we want Clang 10). * Travis lacks the array of versions of openssl and gnutls that we normally use for testing, so we need to exclude some tests (or build our own multiple versions of openssl and gnutls). The SSL test exclusions are ad hoc and based on what currently works. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2022-11-23 13:30:00 +00:00
- tests/scripts/travis-log-failure.sh
# GnuTLS supports CAMELLIA but compat.sh doesn't properly enable it.
- tests/compat.sh -p GnuTLS -e 'CAMELLIA'
- tests/scripts/travis-log-failure.sh
- tests/context-info.sh
Travis: split the build into three parallel jobs Split the build between: * Basic checks * A build in the default configuration with extensive tests * Builds in other configurations with less testing The intent is to have one shorter job with basic tests, and two longer jobs that take roughly the same amount of time (split as evenly as possible while keeping an easy-to-understand separation). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-21 20:18:58 +00:00
Travis: add a build with Visual Studio on Windows Travis now offers a Windows environment. Do a build with Visual Studio. This brings diversity into the Travis CI which otherwise only uses GCC and Clang. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-25 21:25:10 +00:00
- name: Windows
os: windows
Declare all jobs as Python This way we get our chosen Python version everywhere, and pip is available. Travis doesn't support the python job type on Windows, however, so keep installing Python manually there. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-11-17 20:13:01 +00:00
# The language 'python' is currently unsupported on the
# Windows Build Environment. And 'generic' causes the job to get stuck
# on "Booting virtual machine".
language: c
Travis: Windows: install Python 3 and run generate_psa_constants.py Travis Windows machines currently don't have Python 3 preinstalled. We need it to run scripts/generate_psa_constants.py which is needed to build mbedTLS.sln. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-26 12:09:09 +00:00
before_install:
- choco install python --version=3.5.4
env:
Generate source files before doing builds on Travis On Linux, all.sh takes care of it. On Windows, run make_generated_files.bat. Perl is now required on Windows. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-04-22 09:55:48 +00:00
# Add the directory where the Choco packages go
Travis: Windows: install Python 3 and run generate_psa_constants.py Travis Windows machines currently don't have Python 3 preinstalled. We need it to run scripts/generate_psa_constants.py which is needed to build mbedTLS.sln. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-26 12:09:09 +00:00
- PATH=/c/Python35:/c/Python35/Scripts:$PATH
Reconcile python interpreter names Our shebangs use `python3`, which is the desired name on Linux (where `python` is still Python 2). But on Windows, Choco's Python only provides a `python3.exe` executable. Our build scripts deal with this, but we need to cope when invoking a Python script from Travis itself. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-11-18 16:35:01 +00:00
- PYTHON=python.exe
Travis: add a build with Visual Studio on Windows Travis now offers a Windows environment. Do a build with Visual Studio. This brings diversity into the Travis CI which otherwise only uses GCC and Clang. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-25 21:25:10 +00:00
script:
Generate source files before doing builds on Travis On Linux, all.sh takes care of it. On Windows, run make_generated_files.bat. Perl is now required on Windows. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-04-22 09:55:48 +00:00
- type perl; perl --version
Travis: Windows: install Python 3 and run generate_psa_constants.py Travis Windows machines currently don't have Python 3 preinstalled. We need it to run scripts/generate_psa_constants.py which is needed to build mbedTLS.sln. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-26 12:09:09 +00:00
- type python; python --version
Generate source files before doing builds on Travis On Linux, all.sh takes care of it. On Windows, run make_generated_files.bat. Perl is now required on Windows. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-04-22 09:55:48 +00:00
- scripts/make_generated_files.bat
Travis: Windows: install Python 3 and run generate_psa_constants.py Travis Windows machines currently don't have Python 3 preinstalled. We need it to run scripts/generate_psa_constants.py which is needed to build mbedTLS.sln. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-26 12:09:09 +00:00
# Logs appear out of sequence on Windows. Give time to catch up.
- sleep 5
Travis: Windows: target Visual Studio 2017 Only the Visual Studio 2017 toolset is currently preinstalled on Travis. Use this, instead of our solution's default which is VS 2010. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-26 11:12:55 +00:00
- scripts/windows_msbuild.bat v141 # Visual Studio 2017
Travis: add a build with Visual Studio on Windows Travis now offers a Windows environment. Do a build with Visual Studio. This brings diversity into the Travis CI which otherwise only uses GCC and Clang. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-25 21:25:10 +00:00
Add arm64 tests on travis ci Due to time limitation of travis, the job is spited into two job Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2023-01-11 14:48:51 +00:00
- name: full configuration on arm64
os: linux
dist: focal
arch: arm64
addons:
apt:
packages:
- gcc
script:
# See above
- scripts/config.py full
- scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
- scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY
- scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
- scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY
- make generated_files
- make CFLAGS='-march=armv8-a+crypto -O3 -Werror -fsanitize=address,undefined -fno-sanitize-recover=all' LDFLAGS='-Werror -fsanitize=address,undefined -fno-sanitize-recover=all'
- make test
- programs/test/selftest
- tests/scripts/test_psa_constant_names.py
# Modern OpenSSL does not support fixed ECDH or null ciphers.
- tests/compat.sh -p OpenSSL -e 'NULL\|ECDH-'
- tests/scripts/travis-log-failure.sh
- tests/context-info.sh
- name: full configuration(GnuTLS compat tests) on arm64
os: linux
dist: focal
arch: arm64
addons:
apt:
packages:
- clang
- gnutls-bin
script:
# See above
- scripts/config.py full
- scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
- scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY
- scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
- scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY
- make generated_files
- make CC=clang CFLAGS='-march=armv8-a+crypto -O3 -Werror -fsanitize=address,undefined -fno-sanitize-recover=all' LDFLAGS='-Werror -fsanitize=address,undefined -fno-sanitize-recover=all'
# GnuTLS supports CAMELLIA but compat.sh doesn't properly enable it.
- tests/compat.sh -p GnuTLS -e 'CAMELLIA'
- tests/scripts/travis-log-failure.sh
- tests/context-info.sh
Make Travis more chatty. Include the logs in the report after failing.
2016-03-21 09:22:58 +00:00
after_failure:
Fixes Travis post-mortem script dump following review Changes made: * Added copyright and project statement * Limited size of each file to dump to 1Mbyte * Changed name of script
2016-04-10 14:11:27 +00:00
- tests/scripts/travis-log-failure.sh
Travis: split the build into three parallel jobs Split the build between: * Basic checks * A build in the default configuration with extensive tests * Builds in other configurations with less testing The intent is to have one shorter job with basic tests, and two longer jobs that take roughly the same amount of time (split as evenly as possible while keeping an easy-to-understand separation). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-21 20:18:58 +00:00
Updated Travis-CI config with Coverity addon
2014-05-02 14:19:04 +00:00
env:
global:
Fix the proxy seed in Travis runs This is what we do in Jenkins, so it only makes sense to do it here as well. This will avoid random failures for no other reason than the proxy was dropping all the messages due to an unlucky PRNG seed. See https://docs.travis-ci.com/user/environment-variables/ for syntax
2019-02-27 09:46:56 +00:00
- SEED=1
Change coverity secret token in travis Travis stopped being able to push builds to coverity due to the token apparently being no longer valid. Rotating the token to see if that fixes things. Signed-off-by: Paul Elliott <paul.elliott@arm.com>
2022-05-04 11:43:08 +00:00
- secure: "JECCru6HASpKZ0OLfHh8f/KXhKkdrCwjquZghd/qbA4ksxsWImjR7KEPERcaPndXEilzhDbKwuFvJiQX2duVgTGoq745YGhLZIjzo1i8tySkceCVd48P8WceYGz+F/bmY7r+m6fFNuxDSoGGSVeA4Lnjvmm8PFUP45YodDV9no4="
Updated Travis-CI config with Coverity addon
2014-05-02 14:19:04 +00:00
Travis: use the in-tree Python package requirements Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-11-17 18:29:38 +00:00
install:
Reconcile python interpreter names Our shebangs use `python3`, which is the desired name on Linux (where `python` is still Python 2). But on Windows, Choco's Python only provides a `python3.exe` executable. Our build scripts deal with this, but we need to cope when invoking a Python script from Travis itself. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-11-18 16:35:01 +00:00
- $PYTHON scripts/min_requirements.py
Travis: use the in-tree Python package requirements Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-11-17 18:29:38 +00:00
Updated Travis-CI config with Coverity addon
2014-05-02 14:19:04 +00:00
addons:
Travis: install gnutls-bin for all jobs Some jobs don't actually test against GnuTLS, but all.sh checks its presence in all test jobs, so it needs to be installed regardless. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-04-25 21:36:00 +00:00
apt:
packages:
- gnutls-bin
Updated Travis-CI config with Coverity addon
2014-05-02 14:19:04 +00:00
coverity_scan:
project:
Revert Coverity project name change Although Coverity have now changed their URL to point at the new project, they did not change the project name, it would seem. Signed-off-by: Paul Elliott <paul.elliott@arm.com>
2022-05-06 13:06:09 +00:00
name: "ARMmbed/mbedtls"
Update notification e-mail address
2019-09-10 16:36:23 +00:00
notification_email: support-mbedtls@arm.com
Updated Travis-CI config with Coverity addon
2014-05-02 14:19:04 +00:00
build_command_prepend:
build_command: make
Updated Travis CI config for mbedtls project
2015-04-14 12:59:47 +00:00
branch_pattern: coverity_scan
Reference in New Issue Copy Permalink