steve
13f58537ad
The runner-provisioning script has been handed off to the infra agent, who will own it going forward. ci.yml's header comment is updated to point at "the infra team owns the script" rather than the in-repo path, but the runner expectations themselves stay the same — workflows still rely on the persistent volumes, pre-cloned actions, and host-installed golangci-lint that any compliant provisioning produces.
128 lines
4.6 KiB
YAML
128 lines
4.6 KiB
YAML
# CI workflow — runs on every PR into main.
|
|
#
|
|
# Notes for anyone editing this file:
|
|
#
|
|
# Self-hosted runner expectations
|
|
# The Gitea runners are provisioned out-of-band (the infra team owns
|
|
# the script). Each runner host bind-mounts persistent volumes for
|
|
# /root/go/pkg/mod (GOMODCACHE), /root/.cache/go-build (GOCACHE), and
|
|
# /root/.cache/act (action clones) into every job container. As a
|
|
# result:
|
|
# * `cache: true` on actions/setup-go is intentionally OMITTED — the
|
|
# action would otherwise tar/untar GOMODCACHE+GOCACHE through the
|
|
# Gitea cache backend on every job, undoing the host-volume cache
|
|
# and adding ~10s of redundant zstd round-trip per job.
|
|
# * Common GitHub actions (actions/checkout, actions/setup-go,
|
|
# actions/upload-artifact, golangci/golangci-lint-action) are
|
|
# pre-cloned into /root/.cache/act on the runner, so the per-job
|
|
# "git clone https://github.com/actions/..." step is a fetch, not
|
|
# a full clone.
|
|
# * golangci-lint is pre-installed at /usr/local/bin/golangci-lint
|
|
# on the runner (latest v2.x). The golangci-lint-action below
|
|
# still pins a specific version and re-downloads — that's fine
|
|
# (deterministic CI > marginal speed) but means the host-installed
|
|
# binary is currently unused. Drop the `version:` arg below to
|
|
# use the host-installed one if you want to trade determinism
|
|
# for speed.
|
|
#
|
|
# Build matrix
|
|
# Linux amd64 + arm64 + Windows amd64. CGO_ENABLED=0 throughout —
|
|
# modernc.org/sqlite is pure-Go so no cross-compile toolchain is
|
|
# needed. -trimpath + -ldflags="-s -w" for reproducible, smaller
|
|
# binaries.
|
|
#
|
|
# Go version
|
|
# The GO_VERSION env var anchors all three jobs. Floor is set by the
|
|
# heaviest dep (modernc.org/sqlite v1.50+ requires Go 1.23+ today;
|
|
# we run 1.25 so golangci-lint's Go-version compatibility check is
|
|
# happy — see the version pin in the lint job).
|
|
#
|
|
# upload-artifact
|
|
# Pinned at v3 historically; v3 was deprecated upstream. v4 should
|
|
# work but hasn't been validated against this runner's act_runner
|
|
# version yet. Bump when convenient.
|
|
|
|
name: CI
|
|
|
|
on:
|
|
pull_request:
|
|
branches: [main]
|
|
|
|
env:
|
|
GO_VERSION: "1.25"
|
|
|
|
jobs:
|
|
test:
|
|
name: Test (linux/amd64)
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.GO_VERSION }}
|
|
# cache: true intentionally omitted — see header notes.
|
|
- name: go vet
|
|
run: go vet ./...
|
|
- name: go test
|
|
run: go test -race -coverprofile=coverage.out ./...
|
|
- name: coverage summary
|
|
run: go tool cover -func=coverage.out | tail -1
|
|
|
|
lint:
|
|
name: Lint
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.GO_VERSION }}
|
|
# cache: true intentionally omitted — see header notes.
|
|
- uses: golangci/golangci-lint-action@v7
|
|
with:
|
|
# Must be built against the same Go release as go.mod targets,
|
|
# otherwise the linter refuses to load with "Go language
|
|
# version used to build golangci-lint is lower than the
|
|
# targeted Go version". v2.5.0 is the first v2.x line built
|
|
# with Go 1.25; bump in lockstep with go.mod.
|
|
version: v2.5.0
|
|
args: --timeout=5m
|
|
|
|
build:
|
|
name: Build (${{ matrix.goos }}/${{ matrix.goarch }})
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- goos: linux
|
|
goarch: amd64
|
|
- goos: linux
|
|
goarch: arm64
|
|
- goos: windows
|
|
goarch: amd64
|
|
ext: ".exe"
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.GO_VERSION }}
|
|
# cache: true intentionally omitted — see header notes.
|
|
- name: build server + agent
|
|
env:
|
|
GOOS: ${{ matrix.goos }}
|
|
GOARCH: ${{ matrix.goarch }}
|
|
CGO_ENABLED: "0"
|
|
run: |
|
|
mkdir -p bin
|
|
go build -trimpath -ldflags="-s -w" \
|
|
-o bin/restic-manager-server-${{ matrix.goos }}-${{ matrix.goarch }}${{ matrix.ext }} \
|
|
./cmd/server
|
|
go build -trimpath -ldflags="-s -w" \
|
|
-o bin/restic-manager-agent-${{ matrix.goos }}-${{ matrix.goarch }}${{ matrix.ext }} \
|
|
./cmd/agent
|
|
- uses: actions/upload-artifact@v3
|
|
with:
|
|
name: binaries-${{ matrix.goos }}-${{ matrix.goarch }}
|
|
path: bin/*
|
|
retention-days: 7
|