Amin Faez
88e7d1d1cb
feat(docker): remove additional labels from Dockerfile
...
feat(docker): rename the docker usage guide
feat(docker): reference the usage guide
feat(docker): change the github workflow to build the arm images natively
2025-02-25 12:09:18 +01:00
Amin Faez
43a930d3f7
feat(docker): fix docker image names
...
feat(docker): add tag based on commit hash,
feat(docker): add arm64 platform for docker images
2025-02-25 12:09:18 +01:00
Amin Faez
b5f6d07650
feat(docker): add .docker/Dockerfile, .docker/README.md and workflow building and publishing docker images
2025-02-25 12:09:18 +01:00
Jacek Galowicz
e35955f99c
fix release workflow
2025-02-09 15:19:55 +00:00
Jacek Galowicz
87587399ed
Drop nix channels as we're not using channels anyway.
2025-02-09 21:39:24 +07:00
Jacek Galowicz
9fdba31b32
Build and upload DEB and RPM artefacts
2025-02-09 21:39:24 +07:00
David Niehues
6ab4e1152c
chore(ci): add cargo-vet to the CI for supply-chain protection.
2025-02-06 08:18:17 +01:00
David Niehues
2c64da23f1
chore(ci): add cargo-supply-chain to the CI for supply-chain protection.
2025-02-06 08:18:17 +01:00
David Niehues
03cc609a1e
chore(ci): add cargo-deny to the CI for supply-chain protection.
2025-02-06 08:18:17 +01:00
Karolin Varner
3109cf1ffc
chore: Fix CI
2025-02-03 19:58:14 +01:00
Karolin Varner
d3c52fdf64
chore(coverage): Use CodeCov token
2024-12-07 15:26:47 +01:00
Karolin Varner
d8839ba341
feat(coverage): Reduce coverage false-negatives using grcov
...
Previously, we would report some tag style macros such as
`#[repr(packed)]` as being uncovered.
We are now also including doctests in our coverage reports.
Finally, a new script `coverage_report.sh` makes coverage checking
easier.
2024-12-07 15:26:47 +01:00
dependabot[bot]
85eca49a5b
build(deps): bump codecov/codecov-action from 4 to 5
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 4 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-28 21:11:19 +01:00
dependabot[bot]
d3ff19bdb9
build(deps): bump actions/checkout from 3 to 4
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-07 23:45:49 +00:00
Paul Spooren
533afea129
Merge pull request #453 from aparcar/boot_race
2024-11-07 15:13:38 +01:00
Paul Spooren
da5b281b96
ci: add regression test for boot race condition
...
If two instances start up at the same time, they end up with different
keys on both ends. Test this with different delays of 2 (working), 1
(flaky) and 0 (broken) seconds.
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-11-07 14:38:31 +01:00
dependabot[bot]
a3b339b180
build(deps): bump actions/checkout from 3 to 4
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-07 14:33:23 +01:00
dependabot[bot]
2369006342
build(deps): bump actionsx/prettier from 2 to 3
...
Bumps [actionsx/prettier](https://github.com/actionsx/prettier ) from 2 to 3.
- [Release notes](https://github.com/actionsx/prettier/releases )
- [Commits](https://github.com/actionsx/prettier/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actionsx/prettier
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-07 14:17:32 +01:00
dependabot[bot]
5731272844
build(deps): bump actions/cache from 3 to 4
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3 to 4.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-06 15:13:43 +01:00
dependabot[bot]
bc7cef9de0
build(deps): bump peaceiris/actions-gh-pages from 3 to 4
...
Bumps [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages ) from 3 to 4.
- [Release notes](https://github.com/peaceiris/actions-gh-pages/releases )
- [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md )
- [Commits](https://github.com/peaceiris/actions-gh-pages/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: peaceiris/actions-gh-pages
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-06 15:13:22 +01:00
dependabot[bot]
4cdcc35c3e
build(deps): bump cachix/install-nix-action from 21 to 30
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 21 to 30.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Commits](https://github.com/cachix/install-nix-action/compare/v21...v30 )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-06 15:12:58 +01:00
dependabot[bot]
a8f1292cbf
build(deps): bump cachix/cachix-action from 12 to 15
...
Bumps [cachix/cachix-action](https://github.com/cachix/cachix-action ) from 12 to 15.
- [Release notes](https://github.com/cachix/cachix-action/releases )
- [Commits](https://github.com/cachix/cachix-action/compare/v12...v15 )
---
updated-dependencies:
- dependency-name: cachix/cachix-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-06 15:12:38 +01:00
dependabot[bot]
ae5c5ed2b4
build(deps): bump softprops/action-gh-release from 1 to 2
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 1 to 2.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-06 15:12:11 +01:00
Paul Spooren
3f9926e353
feat(cli): Automatically generate man page
...
Instead of using a static one, generate it via clap_mangen. To generate
the manpage run `rosenpass --generate-manpage <folder>`.
Right now clap does not support flattening of generated manpages,
meaning that each subcommand is explained in its own file. To add extra
sections to the main file `rosenpass.1`, it's rewritten after the
initial creation.
Once clap support flattened Man pages, the `generate_to` call can be
removed and all subcommand are added to the `rosenpass.1` file.
This implementation allows downstream manpage generation to stay
unchanged even after switching from multiple manpages to a flattened
one.
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-10-22 10:06:47 +02:00
Paul Spooren
f2bc3a8b64
ci: Rename regression workflow to "Regression"
...
No magic here, this is likely a copy&paste error. Problem is that one
workflow being called "QC" (regressions.yml) cancels out the other "QC"
(qc.yaml).
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-10-03 16:47:49 +02:00
Paul Spooren
06529df2c0
ci: add concurrency option to skip in progress
...
Instead of running outdated CI jobs, skip them automatically.
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-10-03 16:47:49 +02:00
Paul Spooren
0cbcaeaf98
ci: Skip Nix build of aarch64 since it takes forever
...
More than 6 hours aka failing the CI. Drop it for now and hope to have
it enabled later again.
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-10-01 14:18:50 +02:00
Paul Spooren
7b6a9eebc1
ci: test full workspace with codecov
...
Previously only the default members were checked for coverage.
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-08-12 12:10:47 +02:00
Paul Spooren
4554dc4bb3
ci: drop codecov token
...
It's not needed to see generate results for pull requests.
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-08-12 11:44:33 +02:00
Paul Spooren
465c6beaab
ci: switch to codecov action v4 branch
...
Instead of using a specific version, use branch v4 which stays API
compatible.
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-08-12 11:43:26 +02:00
Paul Spooren
f6320c3c35
ci: fixup regression test
...
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-07-10 18:57:45 +02:00
Prabhpreet Dua
87144233da
Prettier
2024-07-08 13:54:26 +02:00
Prabhpreet Dua
d0a6e99a1f
feat: Regression CI based on misc/generate_configs.py
2024-07-08 13:54:26 +02:00
Alice Michaela Bowman
bdad414c90
Add cargo-test runner for macos x86-64 ( #348 )
...
* added cargo-test runner for macos 86-64
---------
Co-authored-by: Prabhpreet Dua <615318+prabhpreet@users.noreply.github.com >
2024-06-17 15:48:19 +02:00
Prabhpreet Dua
526c930119
Secret memory with memfd_secret ( #321 )
...
Implements:
- An additional allocator to use memfd_secret(2) and guard pages using mmap(2), implemented in quininer/memsec#16
- An allocator that abstracts away underlying allocators, and uses specified allocator set by rosenpass_secret_memory::policy functions (or a function that sets rosenpass_secret_memory::alloc::ALLOC_INIT
- Updates to tests- integration, fuzz, bench: some tests use procspawn to spawn multiple processes with different allocator policies
2024-06-10 13:12:44 +05:30
Prabhpreet Dua
70c5ec2c29
chore: Remove libsodium references in nix flake, ci ( #334 )
2024-06-06 17:10:51 +05:30
Prabhpreet Dua
06969c406d
chore: Add write permissions in dependent-issues workflow
2024-05-17 14:56:29 +05:30
Prabhpreet Dua
650110a04f
Run prettier ( #311 )
2024-05-10 19:55:29 +05:30
Prabhpreet Dua
ee669823de
Create dependent-issues.yml
2024-05-10 19:47:10 +05:30
Prabhpreet Dua
761d5730af
ci: Changes from #160- Invoke the mandoc linter ( #296 )
...
* ci: Changes from #160- Invoke the mandoc linter
* Add check.sh from #160 too
* Fix mandoc
2024-05-04 22:47:11 +02:00
Prabhpreet Dua
21e693a9da
ci: Add codecov (llvm-cov) coverage ( #297 )
...
* ci: Add codecov (llvm-cov) coverage
* Run prettier on qc.yaml
2024-05-01 18:31:46 +05:30
Gergő Móricz
cc7e8dc510
feat(rp-rust): implement rp tool in Rust ( #235 )
2024-04-19 20:44:55 +02:00
wucke13
76d5093a20
chore: apply .ci/gen-workflow-files.nu script
...
There is still hand-written stuff in the workflow file that we need to
get rid of, but now at least all autogenerated dependency fields are
sorted.
2024-04-06 17:45:34 +02:00
Paul Spooren
baa35af558
bench: exclude rosenpass-fuzzing
...
This stops fuzzing to run which takes forever and breaks the CI.
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-03-12 19:28:27 +01:00
Paul Spooren
c69fd889fb
ci: enable cargo bench again
...
It only takes a few seconds to run, enable it.
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-03-11 13:08:41 +01:00
Paul Spooren
478fadb80d
ci: Enable aarch64-linux builds again
...
Signed-off-by: Paul Spooren <mail@aparcar.org >
2024-03-05 10:39:46 +01:00
Ilka Schulz
60235dc6ea
GihHub Workflow "Quality Control": add flag "--all-features" to cargo in order to run all available tests behind feature flags
2024-02-28 17:07:40 +01:00
wucke13
1c14be38dd
fix: make benches work again
...
Somehow in the past while splitting into many crates, we broke the bench
setup. This commit both fixes it, and adds a CI job that ensures it is
still working to avoid such silent failure in the future. The benchmarks
are not actually run, they would take forever on the slow GitHub Actions
runners, but they are at least compiled.
2024-01-03 18:43:05 +01:00
Karolin Varner
e3b72487db
fix: Make sure all tests are run during CI runs
...
Had to fix the tests in util/src/result.rs.
2024-01-03 18:43:05 +01:00
Karolin Varner
85c447052e
feat: Migrate to memsec
2024-01-03 18:43:05 +01:00