Blob: .github/workflows/ci.yml
Raw · Blame
name: CI
on:
pull_request:
push:
permissions:
contents: read
jobs:
quality:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- run: cargo --version
- run: cargo install --locked cargo-deny --version 0.20.2
- run: cargo fmt --check
- run: cargo clippy --all-targets --all-features -- -D warnings
- run: cargo test --locked --all-targets --all-features
- run: cargo deny check advisories licenses sources
- run: cargo build --locked --release
release:
name: release (${{ matrix.platform.target }})
strategy:
fail-fast: false
matrix:
platform:
- runner: ubuntu-24.04
target: x86_64-unknown-linux-gnu
- runner: ubuntu-24.04-arm
target: aarch64-unknown-linux-gnu
- runner: macos-15-intel
target: x86_64-apple-darwin
- runner: macos-15
target: aarch64-apple-darwin
runs-on: ${{ matrix.platform.runner }}
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- run: cargo --version
- name: Verify the Rust host target
run: |
test "$(rustc -vV | awk '/^host: / { print $2 }')" = \
"${{ matrix.platform.target }}"
- run: cargo test --locked --all-targets --all-features
- run: cargo test --locked --release --lib
- run: cargo test --locked --release --lib git_reads_tests::measures_bounded_search_without_an_index -- --ignored --nocapture
- run: "cargo test --locked --release --lib sqlite_workload_tests:: -- --ignored --nocapture"
- run: cargo build --locked --release
- run: wc -c target/release/tit
- run: ./scripts/package-release target/release/tit dist ${{ matrix.platform.target }}
- name: Verify the release artifact
run: |
set -- dist/*.tar.gz
./scripts/verify-release-artifact "$1" "$1.sha256"
mkdir release-test
tar -xzf "$1" -C release-test
set -- release-test/tit-*/bin/tit
TIT_RELEASE_BINARY="$(pwd)/$1" cargo test --locked --release --test serve
- name: Store the release artifact
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
with:
name: tit-${{ matrix.platform.target }}
path: dist/*
if-no-files-found: error
linux-armv7:
name: release (armv7-unknown-linux-gnueabihf)
runs-on: ubuntu-24.04
timeout-minutes: 90
env:
CARGO_TARGET_ARMV7_UNKNOWN_LINUX_GNUEABIHF_LINKER: arm-linux-gnueabihf-gcc
CARGO_TARGET_ARMV7_UNKNOWN_LINUX_GNUEABIHF_RUNNER: scripts/run-linux-armv7
QEMU_LD_PREFIX: /usr/arm-linux-gnueabihf
TARGET: armv7-unknown-linux-gnueabihf
TIT_RELEASE_RUNNER: ${{ github.workspace }}/scripts/run-linux-armv7
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- name: Install the ARMv7 tools
run: |
sudo apt-get update
sudo apt-get install --no-install-recommends \
gcc-arm-linux-gnueabihf \
libc6-dev-armhf-cross \
qemu-user
rustup target add "$TARGET"
- run: cargo --version
- run: cargo test --locked --all-targets --all-features --target "$TARGET" --no-run
- run: cargo test --locked --lib --all-features --target "$TARGET"
- run: cargo test --locked --release --lib --target "$TARGET"
- run: cargo build --locked --release --target "$TARGET"
- run: wc -c "target/$TARGET/release/tit"
- run: ./scripts/package-release "target/$TARGET/release/tit" dist "$TARGET"
- name: Verify the release artifact
run: |
set -- dist/*.tar.gz
./scripts/verify-release-artifact "$1" "$1.sha256"
- name: Store the release artifact
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
with:
name: tit-armv7-unknown-linux-gnueabihf
path: dist/*
if-no-files-found: error
bsd:
name: release (${{ matrix.platform.name }})
runs-on: ubuntu-latest
timeout-minutes: 60
continue-on-error: ${{ matrix.platform.experimental }}
strategy:
fail-fast: false
matrix:
platform:
- name: FreeBSD 15.1
os: freebsd
version: '15.1'
target: x86_64-unknown-freebsd
install: sudo pkg install -y git rust
experimental: false
- name: OpenBSD 7.9
os: openbsd
version: '7.9'
target: x86_64-unknown-openbsd
install: sudo pkg_add git rust
experimental: true
- name: NetBSD 10.1
os: netbsd
version: '10.1'
target: x86_64-unknown-netbsd
install: sudo pkgin -y install git-base rust
experimental: false
env:
CARGO_INCREMENTAL: 0
CARGO_PROFILE_TEST_DEBUG: 0
defaults:
run:
shell: cpa.sh {0}
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- name: Start ${{ matrix.platform.name }}
uses: cross-platform-actions/action@5ea7e8e4677bd726033a10b094ba1c5762b15dee # v1.3.0
with:
operating_system: ${{ matrix.platform.os }}
version: ${{ matrix.platform.version }}
cpu_count: 4
memory: 6G
- name: Install build and test tools
run: ${{ matrix.platform.install }}
- run: cargo --version
- name: Verify the Rust host target
run: |
test "$(rustc -vV | awk '/^host: / { print $2 }')" = \
"${{ matrix.platform.target }}"
- run: cargo test --locked --release --all-targets --all-features
- run: cargo build --locked --release
- run: wc -c target/release/tit
- run: ./scripts/package-release target/release/tit dist ${{ matrix.platform.target }}
- name: Verify the release artifact
run: |
set -- dist/*.tar.gz
./scripts/verify-release-artifact "$1" "$1.sha256"
- name: Store the release artifact
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
with:
name: tit-${{ matrix.platform.target }}
path: dist/*
if-no-files-found: error
publish:
if: startsWith(github.ref, 'refs/tags/v')
needs: [quality, release, linux-armv7, bsd]
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- name: Download release artifacts
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
with:
path: release-artifacts
- name: Publish the GitHub release
env:
GH_TOKEN: ${{ github.token }}
RELEASE_NOTES: |
## Setup
Download the archive and checksum file for your target. Verify the
checksum before you extract the archive.
Install the executable and create a private instance:
```text
install -m 755 tit-*/bin/tit /usr/local/bin/tit
install -d -m 700 /srv/tit
install -m 600 tit-*/etc/tit/config.toml /srv/tit/config.toml
```
Set the public URL, HTTP listener, and SSH listener in
`/srv/tit/config.toml`. Create the first administrator and start the
server:
```text
tit --config /srv/tit/config.toml setup admin alice "SSH_PUBLIC_KEY"
tit --config /srv/tit/config.toml serve
```
The archive includes the README, manual page, service files, and
Caddy examples for complete setup instructions.
run: |
set -- release-artifacts/tit-x86_64-unknown-linux-gnu/*.tar.gz
case "$(basename "$1")" in
"tit-${GITHUB_REF_NAME#v}-"*) ;;
*) echo "The tag does not match the package version." >&2; exit 1 ;;
esac
gh release create "$GITHUB_REF_NAME" release-artifacts/*/* \
--verify-tag --generate-notes --notes "$RELEASE_NOTES"