Echo
a5b3f9b05a
Completed Phase 1 foundation tasks: - CI/CD pipeline (.github/workflows/ci.yml) - Format check (rustfmt) - Clippy lints - Unit tests with codecov - Security audit (cargo-audit) - Build release artifacts - Ubuntu package build - Systemd service file (configs/linux-patch-api.service) - Security hardening (ProtectSystem, SystemCallFilter) - Journal logging integration - Resource limits - Test framework structure (tests/unit/, tests/integration/) - Initial unit test template - Test framework verified with cargo test Rust toolchain 1.94.1 installed and verified.
112 lines
2.9 KiB
YAML
112 lines
2.9 KiB
YAML
name: CI/CD Pipeline
|
|
|
|
on:
|
|
push:
|
|
branches: [ master, develop ]
|
|
pull_request:
|
|
branches: [ master ]
|
|
|
|
env:
|
|
CARGO_TERM_COLOR: always
|
|
RUST_BACKTRACE: 1
|
|
|
|
jobs:
|
|
fmt:
|
|
name: Code Format
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
with:
|
|
components: rustfmt
|
|
- name: Check formatting
|
|
run: cargo fmt --all -- --check
|
|
|
|
clippy:
|
|
name: Clippy Lints
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
with:
|
|
components: clippy
|
|
- name: Cache cargo
|
|
uses: Swatinem/rust-cache@v2
|
|
- name: Run clippy
|
|
run: cargo clippy --all-targets --all-features -- -D warnings
|
|
|
|
test:
|
|
name: Unit Tests
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
- name: Cache cargo
|
|
uses: Swatinem/rust-cache@v2
|
|
- name: Run tests
|
|
run: cargo test --all-features
|
|
- name: Upload coverage
|
|
uses: codecov/codecov-action@v4
|
|
if: always()
|
|
|
|
audit:
|
|
name: Security Audit
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
- name: Run cargo-audit
|
|
run: |
|
|
cargo install cargo-audit
|
|
cargo audit
|
|
|
|
build:
|
|
name: Build Release
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
target:
|
|
- x86_64-unknown-linux-gnu
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
with:
|
|
targets: ${{ matrix.target }}
|
|
- name: Cache cargo
|
|
uses: Swatinem/rust-cache@v2
|
|
- name: Build release
|
|
run: cargo build --release --target ${{ matrix.target }}
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: linux-patch-api-${{ matrix.target }}
|
|
path: target/${{ matrix.target }}/release/linux-patch-api
|
|
retention-days: 30
|
|
|
|
build-ubuntu:
|
|
name: Build Ubuntu Package
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
- name: Install packaging tools
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y cargo debhelper pkg-config libsystemd-dev
|
|
- name: Build release
|
|
run: cargo build --release
|
|
- name: Create Debian package
|
|
run: |
|
|
mkdir -p debian/usr/bin
|
|
mkdir -p debian/etc/linux_patch_api
|
|
mkdir -p debian/lib/systemd/system
|
|
cp target/release/linux-patch-api debian/usr/bin/
|
|
# Add systemd service file
|
|
# Add conffiles for config
|
|
- name: Upload .deb
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: linux-patch-api.deb
|
|
path: debian/*.deb
|
|
retention-days: 30
|