variables:

  BUILD_IMAGES_PROJECT: libssh/build-images

  FEDORA_BUILD: buildenv-fedora

  CENTOS7_BUILD: buildenv-centos7

  TUMBLEWEED_BUILD: buildenv-tumbleweed

  MINGW_BUILD: buildenv-mingw

  DEBIAN_CROSS_BUILD: buildenv-debian-cross

# pkd tests fail on CentOS7 docker images, so we don't use -DSERVER_TESTING=ON

centos7/openssl_1.0.x/x86_64:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$CENTOS7_BUILD

  script:

  - mkdir -p obj && cd obj && cmake3

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

fedora/openssl_1.1.x/x86_64:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_BLOWFISH_CIPHER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DWITH_DEBUG_PACKET=ON -DWITH_DEBUG_CALLTRACE=ON

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DSERVER_TESTING=ON .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

fedora/openssl_1.1.x/x86_64/fips:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD

  script:

  - echo 1 > /etc/system-fips

  - update-crypto-policies --set FIPS

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_BLOWFISH_CIPHER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DWITH_DEBUG_CRYPTO=ON -DWITH_DEBUG_PACKET=ON -DWITH_DEBUG_CALLTRACE=ON

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DSERVER_TESTING=ON .. &&

    make -j$(nproc) && OPENSSL_FORCE_FIPS_MODE=1 ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

fedora/openssl_1.1.x/x86_64/minimal:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=OFF -DWITH_SERVER=OFF -DWITH_ZLIB=OFF -DWITH_PCAP=OFF

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DWITH_GEX=OFF .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

# Address sanitizer doesn't mix well with LD_PRELOAD used in the testsuite

# so, this is only enabled for unit tests right now.

# TODO: add -DCLIENT_TESTING=ON -DSERVER_TESTING=ON

fedora/address-sanitizer:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=AddressSanitizer

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

# This is disabled as it report OpenSSL issues

# It also has ethe same issues with cwrap as AddressSanitizer

.fedora/memory-sanitizer:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=MemorySanitizer

    -DCMAKE_C_COMPILER=clang -DCMAKE_CXX_COMPILER=clang++

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON ..

    && make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

fedora/undefined-sanitizer:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=UndefinedSanitizer

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DSERVER_TESTING=ON ..

    && make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

fedora/csbuild:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD

  script:

  - |

    if [[ -z "$CI_COMMIT_BEFORE_SHA" ]]; then

        export CI_COMMIT_BEFORE_SHA=$(git rev-parse "${CI_COMMIT_SHA}~20")

    fi

    # Check if the commit exists in this branch

    # This is not the case for a force push

    git branch --contains $CI_COMMIT_BEFORE_SHA 2>/dev/null || export CI_COMMIT_BEFORE_SHA=$(git rev-parse "${CI_COMMIT_SHA}~20")

    export CI_COMMIT_RANGE="$CI_COMMIT_BEFORE_SHA..$CI_COMMIT_SHA"

  - csbuild

    --build-dir=obj-csbuild

    --prep-cmd="rm -rf CMakeFiles CMakeCache.txt && cmake -DCMAKE_BUILD_TYPE=Debug -DPICKY_DEVELOPER=ON -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DSERVER_TESTING=ON -DFUZZ_TESTING=ON @SRCDIR@"

    --build-cmd "make clean && make -j$(nproc)"

    --git-commit-range $CI_COMMIT_RANGE

    --color

    --print-current --print-fixed

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj-csbuild/

# That is a specific runner that we cannot enable universally.

# We restrict it to builds under the $BUILD_IMAGES_PROJECT project.

freebsd/x86_64:

  image:

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON .. &&

    make && ctest --output-on-failure

  tags:

  - freebsd

  except:

  - tags

  only:

  - branches@libssh/libssh-mirror

  - branches@cryptomilk/libssh-mirror

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

fedora/libgcrypt/x86_64:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DSERVER_TESTING=ON

    -DWITH_GCRYPT=ON .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

fedora/mbedtls/x86_64:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DSERVER_TESTING=ON

    -DWITH_MBEDTLS=ON .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

# Unit testing only, no client and pkd testing, because cwrap is not available

# for MinGW

fedora/mingw64:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$MINGW_BUILD

  script:

  - export WINEPATH=/usr/x86_64-w64-mingw32/sys-root/mingw/bin

  - export WINEDEBUG=-all

  - mkdir -p obj && cd obj && mingw64-cmake

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON .. &&

    make -j$(nproc) &&

    ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

# Unit testing only, no client and pkd testing, because cwrap is not available

# for MinGW

fedora/mingw32:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$MINGW_BUILD

  script:

  - export WINEPATH=/usr/i686-w64-mingw32/sys-root/mingw/bin

  - export WINEDEBUG=-all

  - mkdir -p obj && cd obj && mingw32-cmake

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON .. &&

    make -j$(nproc) &&

    ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

.Debian.cross.template: &Debian_cross_template

  stage: test

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$DEBIAN_CROSS_BUILD

  script:

  - build=$(dpkg-architecture -qDEB_HOST_GNU_TYPE)

  - host="${CI_JOB_NAME#*.cross.}"

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_C_COMPILER="$(which $host-gcc)"

    -DCMAKE_CXX_COMPILER="$(which $host-g++)"

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DUNIT_TESTING=ON -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON

    -DWITH_PCAP=ON .. &&

    make -j$(nproc) &&

    ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

.Debian.cross.mips-linux-gnu:

  <<: *Debian_cross_template

tumbleweed/openssl_1.1.x/x86_64/gcc:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$TUMBLEWEED_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DKRB5_CONFIG=/usr/lib/mit/bin/krb5-config

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DSERVER_TESTING=ON .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

tumbleweed/openssl_1.1.x/x86/gcc:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$TUMBLEWEED_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_TOOLCHAIN_FILE=../cmake/Toolchain-cross-m32.cmake

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

tumbleweed/openssl_1.1.x/x86_64/gcc7:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$TUMBLEWEED_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_C_COMPILER=gcc-7 -DCMAKE_CXX_COMPILER=g++-7

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DKRB5_CONFIG=/usr/lib/mit/bin/krb5-config

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DSERVER_TESTING=ON .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

tumbleweed/openssl_1.1.x/x86/gcc7:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$TUMBLEWEED_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_TOOLCHAIN_FILE=../cmake/Toolchain-cross-m32.cmake

    -DCMAKE_C_COMPILER=gcc-7 -DCMAKE_CXX_COMPILER=g++-7

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

tumbleweed/openssl_1.1.x/x86_64/clang:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$TUMBLEWEED_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=RelWithDebInfo

    -DCMAKE_C_COMPILER=clang -DCMAKE_CXX_COMPILER=clang++

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DKRB5_CONFIG=/usr/lib/mit/bin/krb5-config

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DSERVER_TESTING=ON .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

tumbleweed/docs:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$TUMBLEWEED_BUILD

  script:

  - mkdir -p obj && cd obj && cmake .. && make docs

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

tumbleweed/undefined-sanitizer:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$TUMBLEWEED_BUILD

  script:

  - mkdir -p obj && cd obj && cmake

    -DCMAKE_BUILD_TYPE=UndefinedSanitizer

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DSERVER_TESTING=ON .. &&

    make -j$(nproc) && ctest --output-on-failure

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

tumbleweed/static-analysis:

  image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$TUMBLEWEED_BUILD

  script:

  - export CCC_CC=clang

  - export CCC_CXX=clang++

  - mkdir -p obj && cd obj && scan-build cmake

    -DCMAKE_BUILD_TYPE=Debug

    -DCMAKE_C_COMPILER=clang -DCMAKE_CXX_COMPILER=clang++

    -DPICKY_DEVELOPER=ON

    -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

    -DUNIT_TESTING=ON -DCLIENT_TESTING=ON -DSERVER_TESTING=ON .. &&

    scan-build --status-bugs -o scan make -j$(nproc)

  tags:

  - shared

  except:

  - tags

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/scan

visualstudio/x86_64:

  script:

  - $env:VCPKG_DEFAULT_TRIPLET="x64-windows"

  - cd obj

  - cmake

      -A x64

      -DCMAKE_TOOLCHAIN_FILE="$env:VCPKG_TOOLCHAIN_FILE"

      -DPICKY_DEVELOPER=ON

      -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

      -DUNIT_TESTING=ON ..

  - cmake --build .

  - ctest --output-on-failure

  tags:

  - vs2017

  - windows

  except:

  - tags

  only:

  - branches@libssh/libssh-mirror

  - branches@ansasaki/libssh-mirror

  - branches@cryptomilk/libssh-mirror

  - branches@jjelen/libssh-mirror

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/

visualstudio/x86:

  script:

  - $env:VCPKG_DEFAULT_TRIPLET="x86-windows"

  - cd obj

  - cmake

      -DCMAKE_TOOLCHAIN_FILE="$env:VCPKG_TOOLCHAIN_FILE"

      -DPICKY_DEVELOPER=ON

      -DWITH_SFTP=ON -DWITH_SERVER=ON -DWITH_ZLIB=ON -DWITH_PCAP=ON

      -DUNIT_TESTING=ON ..

  - cmake --build .

  - ctest --output-on-failure

  tags:

  - vs2017

  - windows

  except:

  - tags

  only:

  - branches@libssh/libssh-mirror

  - branches@ansasaki/libssh-mirror

  - branches@cryptomilk/libssh-mirror

  - branches@jjelen/libssh-mirror

  artifacts:

    expire_in: 1 week

    when: on_failure

    paths:

      - obj/