ci.yml

name: "CI"

on:
  push:
    branches: [main]
  pull_request:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  DOCKER_BUILDKIT: 1 # https://docs.docker.com/develop/develop-images/build_enhancements/

jobs:
  build-and-test:
    runs-on: ubuntu-20.04
    container: mcr.microsoft.com/ccf/app/dev:4.0.7-virtual

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Make sure github workspace is git safe
        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"

      - name: Build app
        run: make build-virtual

      - name: Install go
        run: curl -L -o go1.19.1.linux-amd64.tar.gz https://go.dev/dl/go1.19.1.linux-amd64.tar.gz && tar -C /usr/local -xzf go1.19.1.linux-amd64.tar.gz

      - name: Install pip
        run: sudo apt-get update && sudo apt install -y python3-pip

      - name: Upgrade pip
        run: pip3 install --upgrade pip

      - name: Test app
        run: make tests

      - name: Test app (etcd integration tests)
        run: export PATH=$PATH:/usr/local/go/bin && make test-virtual
        continue-on-error: true

  build-docker-virtual:
    runs-on: ubuntu-20.04

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Build container
        run: docker build -t lskv:latest-virtual -f Dockerfile.virtual .

  build-docker-sgx:
    runs-on: ubuntu-20.04

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Build container
        run: docker build -t lskv:latest-sgx -f Dockerfile.sgx .

  checks:
    runs-on: ubuntu-latest
    container: ccfmsrc.azurecr.io/ccf/ci:16-08-2023-1-virtual-clang15

    steps:
      - name: Make sure github workspace is git safe
        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"

      - name: Checkout repository
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Run checks
        run: ./scripts/ci-checks.sh

  check-issues:
    runs-on: ubuntu-20.04

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Check issues
        run: ./scripts/check-issues.sh
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  nix:
    runs-on: ubuntu-22.04

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Install nix
        uses: cachix/install-nix-action@v18

      - name: Run ci checks
        run: nix build .#ci-check-all -L