fix(ci): add OpenSSL configuration for cross-compilation #12
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| env: | |
| CARGO_TERM_COLOR: always | |
| RUST_BACKTRACE: 1 | |
| RUSTFLAGS: "-D warnings" | |
| jobs: | |
| test: | |
| strategy: | |
| fail-fast: false # Continue with other builds even if one fails | |
| matrix: | |
| include: | |
| - os: ubuntu-latest | |
| name: Linux (x86_64) | |
| target: x86_64-unknown-linux-gnu | |
| - os: ubuntu-latest | |
| name: Linux (x86_64 musl) | |
| target: x86_64-unknown-linux-musl | |
| - os: ubuntu-latest | |
| name: Linux (aarch64) | |
| target: aarch64-unknown-linux-gnu | |
| - os: ubuntu-latest | |
| name: Linux (aarch64 musl) | |
| target: aarch64-unknown-linux-musl | |
| - os: ubuntu-latest | |
| name: Linux (armv7) | |
| target: armv7-unknown-linux-gnueabihf | |
| - os: macos-14 | |
| name: macOS (Apple Silicon) | |
| - os: macos-latest | |
| name: macOS (Intel x86_64) | |
| name: Test ${{ matrix.name }} | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: stable | |
| components: clippy, rustfmt | |
| targets: ${{ matrix.target }} | |
| - name: Install Linux dependencies | |
| if: runner.os == 'Linux' | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y qemu-user musl-tools pkg-config libssl-dev | |
| - name: Install macOS dependencies | |
| if: runner.os == 'macOS' | |
| run: | | |
| brew install openssl@3 | |
| - name: Setup musl build environment | |
| if: contains(matrix.target, 'musl') | |
| run: | | |
| # Install musl-gcc | |
| sudo apt-get install -y musl-tools | |
| # Install musl OpenSSL | |
| wget https://www.openssl.org/source/openssl-3.1.4.tar.gz | |
| tar xzf openssl-3.1.4.tar.gz | |
| cd openssl-3.1.4 | |
| # Configure and build OpenSSL for musl | |
| CC="musl-gcc -fPIC" ./Configure no-shared no-async --prefix=/usr/local/musl --openssldir=/usr/local/musl linux-x86_64 | |
| make -j$(nproc) | |
| sudo make install | |
| cd .. | |
| # Set environment variables for OpenSSL | |
| echo "OPENSSL_DIR=/usr/local/musl" >> $GITHUB_ENV | |
| echo "OPENSSL_STATIC=1" >> $GITHUB_ENV | |
| - name: Setup cross-compilation for ARM | |
| if: contains(matrix.target, 'aarch64') || contains(matrix.target, 'armv7') | |
| run: | | |
| sudo apt-get install -y gcc-aarch64-linux-gnu gcc-arm-linux-gnueabihf | |
| cargo install cross | |
| - name: Cache dependencies | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cargo/registry | |
| ~/.cargo/git | |
| target | |
| key: ${{ runner.os }}-${{ matrix.target }}-cargo-${{ hashFiles('**/Cargo.lock') }} | |
| - name: Check formatting | |
| run: cargo fmt --check | |
| - name: Run clippy | |
| run: | | |
| if [ -n "${{ matrix.target }}" ] && [ "${{ matrix.target }}" != "x86_64-unknown-linux-gnu" ]; then | |
| cross clippy --target ${{ matrix.target }} --all-targets --all-features -- -D warnings | |
| else | |
| cargo clippy --all-targets --all-features -- -D warnings | |
| fi | |
| - name: Build | |
| run: | | |
| if [ -n "${{ matrix.target }}" ] && [ "${{ matrix.target }}" != "x86_64-unknown-linux-gnu" ]; then | |
| cross build --target ${{ matrix.target }} --all-features --release | |
| else | |
| cargo build --all-features --release | |
| fi | |
| - name: Check binary size | |
| if: matrix.target != '' | |
| run: | | |
| ls -lh target/${{ matrix.target }}/release/strainer || ls -lh target/release/strainer | |
| - name: Run tests | |
| run: | | |
| if [ -n "${{ matrix.target }}" ] && [ "${{ matrix.target }}" != "x86_64-unknown-linux-gnu" ]; then | |
| cross test --target ${{ matrix.target }} --features testing | |
| else | |
| cargo test --features testing | |
| fi | |
| - name: Run security audit | |
| uses: actions-rs/audit-check@v1 | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| coverage: | |
| name: Code Coverage | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: stable | |
| - name: Install cargo-tarpaulin | |
| run: cargo install cargo-tarpaulin | |
| - name: Generate coverage report | |
| run: | | |
| cargo tarpaulin --features testing --out Xml --output-dir coverage --fail-under 90 | |
| - name: Upload coverage to Codecov | |
| uses: codecov/codecov-action@v5 | |
| with: | |
| files: ./coverage/cobertura.xml | |
| fail_ci_if_error: false | |
| docs: | |
| name: Documentation | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: stable | |
| - name: Build documentation | |
| run: cargo doc --no-deps --all-features | |
| env: | |
| RUSTDOCFLAGS: -D warnings | |
| - name: Deploy documentation | |
| uses: peaceiris/actions-gh-pages@v3 | |
| if: github.ref == 'refs/heads/main' | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| publish_dir: ./target/doc |