emo/shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity
0bce9c9808
shadow/.travis.yml

53 lines
1.2 KiB
YAML
Raw Normal View History

travis: add more architectures and Coverity support Now that travis supports more architectures let's make sure we test on all of them and that we enable Coverity too. Signed-off-by: Christian Brauner <christian@brauner.io>
2020-04-25 16:13:53 +05:30
dist: bionic
run travis
2016-12-06 04:00:17 +05:30
sudo: false
language: c
compiler:
travis: add more architectures and Coverity support Now that travis supports more architectures let's make sure we test on all of them and that we enable Coverity too. Signed-off-by: Christian Brauner <christian@brauner.io>
2020-04-25 16:13:53 +05:30
- gcc
- clang
arch:
- amd64
- arm64
- ppc64le
- s390x
before_install:
- sudo apt-get update -qq
Create a new libsubid Closes #154 Currently this has three functions: one which returns the list of subuid ranges for a user, one returning the subgids, and one which frees the ranges lists. I might be mistaken about what -disable-man means; some of the code suggests it means just don't re-generate them, but not totally ignore them. But that doesn't seem to really work, so let's just ignore man/ when -disable-man. Remove --disable-shared. I'm not sure why it was there, but it stems from long, long ago, and I suspect it comes from some ancient toolchain bug. Create a tests/run_some, a shorter version of run_all. I'll slowly add tests to this as I verify they work, then I can work on fixing the once which don't. Also, don't touch man/ if not -enable-man. Changelog: Apr 22: change the subid list api as recomended by Dan Walsh. Apr 23: implement get_subid_owner Apr 24: implement range add/release Apr 25: finish tests and rebase May 10: make @owner const Signed-off-by: Serge Hallyn <serge@hallyn.com>
2020-04-19 04:33:54 +05:30
- sudo apt-get -y install -qq automake autopoint xsltproc libselinux1-dev gettext expect
subids: support nsswitch Closes #154 When starting any operation to do with subuid delegation, check nsswitch for a module to use. If none is specified, then use the traditional /etc/subuid and /etc/subgid files. Currently only one module is supported, and there is no fallback to the files on errors. Several possibilities could be considered: 1. in case of connection error, fall back to files 2. in case of unknown user, also fall back to files etc... When non-files nss module is used, functions to edit the range are not supported. It may make sense to support it, but it also may make sense to require another tool to be used. libsubordinateio also uses the nss_ helpers. This is how for instance lxc could easily be converted to supporting nsswitch. Add a set of test cases, including a dummy libsubid_zzz module. This hardcodes values such that: 'ubuntu' gets 200000 - 300000 'user1' gets 100000 - 165536 'error' emulates an nss module error 'unknown' emulates a user unknown to the nss module 'conn' emulates a connection error ot the nss module Changes to libsubid: Change the list_owner_ranges api: return a count instead of making the array null terminated. This is a breaking change, so bump the libsubid abi major number. Rename free_subuid_range and free_subgid_range to ungrant_subuid_range, because otherwise it's confusing with free_subid_ranges which frees memory. Run libsubid tests in jenkins Switch argument order in find_subid_owners Move the db locking into subordinateio.c Signed-off-by: Serge Hallyn <serge@hallyn.com>
2021-02-01 05:08:20 +05:30
- sudo apt-get -y install -qq byacc libtool
travis: reorder sections and add regenerated coverity token Also remove the openssl section since both lxc and lxcfs don't need it either. Signed-off-by: Christian Brauner <christian@brauner.io>
2020-04-25 22:15:24 +05:30
script:
- ./autogen.sh --without-selinux --disable-man
- grep ENABLE_ config.status
- make
env:
global:
- secure: "G47VYFrtzqalrVjixTqBG9Qsa8EZRcaqsh1k6fq5JgEyHmMQActpvTUDs9FXf1MEqiY5XX3VDVfBsZgKPHgmHsMzD1bX11xpnpGByB8g7gr8I3u2ZkCREqgi77a5l3LeBh+seWiambe/DYOgvPCNa6pCynLgR9advqtgKhpCruU="
run travis
2016-12-06 04:00:17 +05:30
addons:
travis: add more architectures and Coverity support Now that travis supports more architectures let's make sure we test on all of them and that we enable Coverity too. Signed-off-by: Christian Brauner <christian@brauner.io>
2020-04-25 16:13:53 +05:30
coverity_scan:
travis: reorder sections and add regenerated coverity token Also remove the openssl section since both lxc and lxcfs don't need it either. Signed-off-by: Christian Brauner <christian@brauner.io>
2020-04-25 22:15:24 +05:30
travis: add more architectures and Coverity support Now that travis supports more architectures let's make sure we test on all of them and that we enable Coverity too. Signed-off-by: Christian Brauner <christian@brauner.io>
2020-04-25 16:13:53 +05:30
project:
name: "shadow-maint/shadow"
description: "Upstream shadow utils tree"
travis: reorder sections and add regenerated coverity token Also remove the openssl section since both lxc and lxcfs don't need it either. Signed-off-by: Christian Brauner <christian@brauner.io>
2020-04-25 22:15:24 +05:30
travis: add more architectures and Coverity support Now that travis supports more architectures let's make sure we test on all of them and that we enable Coverity too. Signed-off-by: Christian Brauner <christian@brauner.io>
2020-04-25 16:13:53 +05:30
notification_email: christian.brauner@ubuntu.com,serge@hallyn.com
travis: reorder sections and add regenerated coverity token Also remove the openssl section since both lxc and lxcfs don't need it either. Signed-off-by: Christian Brauner <christian@brauner.io>
2020-04-25 22:15:24 +05:30
travis: add more architectures and Coverity support Now that travis supports more architectures let's make sure we test on all of them and that we enable Coverity too. Signed-off-by: Christian Brauner <christian@brauner.io>
2020-04-25 16:13:53 +05:30
build_command_prepend: "./autogen.sh --without-selinux --disable-man"
CI: Make build logs more readable If make fails in a multi-process invocation, the log is pretty much unreadable. To make it readable, build as much as can be built without failing. Then run a single-process make again. If we succeeded previously, this should be a no-op. If not, this run will stop at the first error, which should be more readable, and will only print the few lines we're interested in. This has some side effects: Now we build as much as we can, instead of failing as early as possible; this may make CI a bit slower. However, it also has the benefit that you see _all_ the error messages that could be given, instead of needing to fix the first error to see the next and so on. Cc: Iker Pedrosa <ipedrosa@redhat.com> Signed-off-by: Alejandro Colomar <alx@kernel.org>
2023-04-06 01:20:28 +05:30
build_command: "make -kj4 || make"
travis: add more architectures and Coverity support Now that travis supports more architectures let's make sure we test on all of them and that we enable Coverity too. Signed-off-by: Christian Brauner <christian@brauner.io>
2020-04-25 16:13:53 +05:30
branch_pattern: master
run travis
2016-12-06 04:00:17 +05:30
Create a new libsubid Closes #154 Currently this has three functions: one which returns the list of subuid ranges for a user, one returning the subgids, and one which frees the ranges lists. I might be mistaken about what -disable-man means; some of the code suggests it means just don't re-generate them, but not totally ignore them. But that doesn't seem to really work, so let's just ignore man/ when -disable-man. Remove --disable-shared. I'm not sure why it was there, but it stems from long, long ago, and I suspect it comes from some ancient toolchain bug. Create a tests/run_some, a shorter version of run_all. I'll slowly add tests to this as I verify they work, then I can work on fixing the once which don't. Also, don't touch man/ if not -enable-man. Changelog: Apr 22: change the subid list api as recomended by Dan Walsh. Apr 23: implement get_subid_owner Apr 24: implement range add/release Apr 25: finish tests and rebase May 10: make @owner const Signed-off-by: Serge Hallyn <serge@hallyn.com>
2020-04-19 04:33:54 +05:30
script:
- cat /proc/self/uid_map
- cat /proc/self/status
- systemd-detect-virt
- ./autogen.sh --without-selinux --disable-man
- grep ENABLE_ config.status
- make
- sudo make install
- (cd tests; sudo ./run_some; cat testsuite.log)
run travis
2016-12-06 04:00:17 +05:30
# vim:et:ts=2:sw=2
Reference in New Issue Copy Permalink