150 lines
5 KiB
YAML
150 lines
5 KiB
YAML
---
|
|
image: python:3.9-bullseye
|
|
|
|
stages:
|
|
- test
|
|
- coverage
|
|
- build
|
|
- deploy
|
|
|
|
|
|
|
|
before_script:
|
|
- pip3 install coverage pycodestyle mypy aiosmtpd deepdiff
|
|
- export MULTISCHLEUDER_VERSION=$(python -c 'import multischleuder; print(multischleuder.__version__)')
|
|
|
|
|
|
|
|
test:
|
|
stage: test
|
|
script:
|
|
- pip3 install -e .
|
|
- python3 -m coverage run --rcfile=setup.cfg -m unittest discover multischleuder
|
|
artifacts:
|
|
paths:
|
|
- ".coverage*"
|
|
|
|
codestyle:
|
|
stage: test
|
|
script:
|
|
- pip3 install -e .
|
|
- pycodestyle multischleuder
|
|
|
|
mypy:
|
|
stage: test
|
|
script:
|
|
- pip3 install -e .
|
|
- mypy --install-types --non-interactive multischleuder
|
|
- mypy multischleuder
|
|
|
|
sast:
|
|
stage: test
|
|
bandit-sast:
|
|
before_script: ['']
|
|
include:
|
|
- template: Security/SAST.gitlab-ci.yml
|
|
- template: Security/Dependency-Scanning.gitlab-ci.yml
|
|
|
|
schleuder:
|
|
stage: test
|
|
script:
|
|
- debconf-set-selections <<<"postfix postfix/mailname string example.org"
|
|
- debconf-set-selections <<<"postfix postfix/main_mailer_type string 'Local only'"
|
|
- apt update; apt install --yes schleuder schleuder-cli postfix
|
|
- /usr/lib/postfix/configure-instance.sh -
|
|
- echo "virtual_alias_maps = static:root" >> /etc/postfix/main.cf
|
|
- /usr/sbin/postmulti -i - -p start
|
|
- schleuder-cli lists list || true
|
|
- export CERT_FPR=$(schleuder cert fingerprint | cut -d' ' -f4)
|
|
- echo " - '00000000000000000000000000000000'" >> /etc/schleuder/schleuder.yml
|
|
- |
|
|
cat > ~/.schleuder-cli/schleuder-cli.yml <<EOF
|
|
host: localhost
|
|
port: 4443
|
|
tls_fingerprint: ${CERT_FPR}
|
|
api_key: '00000000000000000000000000000000'
|
|
EOF
|
|
- /usr/bin/schleuder-api-daemon &
|
|
- sleep 5 # wait for daemons to start
|
|
- export API_DAEMON_PID=$!
|
|
- test/prepare-schleuder.sh
|
|
- pip3 install -e .
|
|
- python3 -c 'import os; print(os.listdir(".")); print(); print(os.listdir("test/"))'
|
|
- python3 -m coverage run --rcfile=setup.cfg -m multischleuder --config test/multischleuder.yml --verbose
|
|
# Run a second time - should be idempotent and not trigger any new mails
|
|
- python3 -m coverage run --rcfile=setup.cfg -m multischleuder --config test/multischleuder.yml --verbose
|
|
- sleep 5 # wait for mail delivery
|
|
- test/report.py
|
|
- kill -9 ${API_DAEMON_PID} || true
|
|
- /usr/sbin/postmulti -i - -p stop
|
|
- sleep 5 # wait for daemons to terminate
|
|
artifacts:
|
|
paths:
|
|
- ".coverage*"
|
|
|
|
|
|
|
|
coverage:
|
|
stage: coverage
|
|
script:
|
|
- python3 -m coverage combine
|
|
- python3 -m coverage report --rcfile=setup.cfg
|
|
|
|
|
|
|
|
build_wheel:
|
|
stage: build
|
|
script:
|
|
- python3 setup.py egg_info bdist_wheel
|
|
- cd dist
|
|
- sha256sum *.whl > SHA256SUMS
|
|
artifacts:
|
|
paths:
|
|
- "dist/*.whl"
|
|
- dist/SHA256SUMS
|
|
only:
|
|
- tags
|
|
|
|
build_debian:
|
|
stage: build
|
|
script:
|
|
- apt update && apt install --yes lintian rsync sudo
|
|
- echo -n > package/debian/multischleuder/usr/share/doc/multischleuder/changelog
|
|
- |
|
|
for version in "$(cat CHANGELOG.md | grep '<!-- BEGIN CHANGES' | cut -d ' ' -f 4)"; do
|
|
echo "multischleuder (${version}-1); urgency=medium\n" >> package/debian/multischleuder/usr/share/doc/multischleuder/changelog
|
|
cat CHANGELOG.md | grep -A 1000 "<"'!'"-- BEGIN CHANGES ${version} -->" | grep -B 1000 "<"'!'"-- END CHANGES ${version} -->" | tail -n +2 | head -n -1 | sed -re 's/^-/ */g' >> package/debian/multischleuder/usr/share/doc/multischleuder/changelog
|
|
echo "\n -- ${PACKAGE_AUTHOR} $(date -R)\n" >> package/debian/multischleuder/usr/share/doc/multischleuder/changelog
|
|
done
|
|
- gzip -9n package/debian/multischleuder/usr/share/doc/multischleuder/changelog
|
|
- python3 setup.py egg_info install --root=package/debian/multischleuder/ --prefix=/usr --optimize=1
|
|
- cd package/debian
|
|
- sed -re "s/__MULTISCHLEUDER_VERSION__/${MULTISCHLEUDER_VERSION}/g" -i multischleuder/DEBIAN/control
|
|
- mkdir -p multischleuder/usr/lib/python3/dist-packages/
|
|
- rsync -a multischleuder/usr/lib/python3.9/site-packages/ multischleuder/usr/lib/python3/dist-packages/
|
|
- rm -rf multischleuder/usr/lib/python3.9/site-packages
|
|
- find multischleuder/usr/lib/python3/dist-packages -name __pycache__ -exec rm -r {} \; 2>/dev/null || true
|
|
- find multischleuder/usr/lib/python3/dist-packages -name '*.pyc' -exec rm {} \;
|
|
- find multischleuder/usr/lib/python3/dist-packages -name '*.pyo' -exec rm {} \;
|
|
- sed -re 's$#!/usr/local/bin/python3$#!/usr/bin/python3$' -i multischleuder/usr/bin/multischleuder
|
|
- find multischleuder -type f -exec chmod 0644 {} \;
|
|
- find multischleuder -type d -exec chmod 755 {} \;
|
|
- chmod +x multischleuder/usr/bin/multischleuder multischleuder/DEBIAN/postinst multischleuder/DEBIAN/prerm multischleuder/DEBIAN/postrm
|
|
- dpkg-deb --build multischleuder
|
|
- mv multischleuder.deb "multischleuder_${MULTISCHLEUDER_VERSION}-1_all.deb"
|
|
- sudo -u nobody lintian "multischleuder_${MULTISCHLEUDER_VERSION}-1_all.deb"
|
|
- sha256sum *.deb > SHA256SUMS
|
|
artifacts:
|
|
paths:
|
|
- "package/debian/*.deb"
|
|
- package/debian/SHA256SUMS
|
|
only:
|
|
- tags
|
|
|
|
|
|
release:
|
|
stage: deploy
|
|
script:
|
|
- python3 package/release.py
|
|
only:
|
|
- tags
|