Feat/bls poc #649
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| workflow_dispatch: | |
| push: | |
| pull_request: | |
| branches: | |
| - main | |
| - develop | |
| jobs: | |
| configure: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| uid_gid: ${{ steps.get-user.outputs.uid_gid }} | |
| steps: | |
| - id: get-user | |
| run: echo "uid_gid=$(id -u):$(id -g)" >> $GITHUB_OUTPUT | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: true | |
| - name: Install deps | |
| run: | | |
| sudo update-alternatives --install /usr/bin/python python /usr/bin/python3 10 | |
| make deps | |
| - run: make cpp_test | |
| build_ledger: | |
| needs: configure | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/ledger-app-builder:latest | |
| options: --user ${{ needs.configure.outputs.uid_gid }} | |
| env: | |
| BOLOS_SDK: /opt/nanos-secure-sdk | |
| outputs: | |
| size: ${{steps.build.outputs.size}} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: true | |
| - name: Build Standard app | |
| id: build | |
| shell: bash -l {0} | |
| run: | | |
| make | |
| echo "size=$(python3 deps/ledger-zxlib/scripts/getSize.py s)" >> $GITHUB_OUTPUT | |
| clippy: | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/rust-ci:latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: true | |
| - name: Cache/restore Cargo dependencies | |
| uses: actions/cache@v3 | |
| with: | |
| path: ./app/rust/.cargo | |
| key: ${{ runner.os }}-${{ hashFiles('./Cargo.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-${{ github.sha }} | |
| - name: clippy | |
| run: | | |
| cd ./app/rust | |
| cargo clippy --all-targets --features "clippy" | |
| rust_tests: | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/rust-ci:latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: true | |
| - name: Cache/restore Cargo dependencies | |
| uses: actions/cache@v3 | |
| with: | |
| path: ./app/rust/.cargo | |
| key: ${{ runner.os }}-${{ hashFiles('./Cargo.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-${{ github.sha }} | |
| - name: run rust tests | |
| run: make rust_test | |
| size_nano_s: | |
| needs: build_ledger | |
| runs-on: ubuntu-latest | |
| env: | |
| NANOS_LIMIT_SIZE: 136 | |
| steps: | |
| - run: | | |
| echo "LNS app size: ${{needs.build_ledger.outputs.size}} KiB" | |
| [ ${{needs.build_ledger.outputs.size}} -le $NANOS_LIMIT_SIZE ] | |
| tests_zemu_setup: | |
| if: ${{ !contains(toJSON(github.event.commits[*].message), '[skip-zemu]') }} | |
| runs-on: ubuntu-latest | |
| outputs: | |
| tests: ${{ steps.get-tests.outputs.tests }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: true | |
| - name: Install node | |
| uses: actions/setup-node@v3 | |
| - name: Install yarn | |
| run: npm install -g yarn | |
| - name: Build/Install build js deps | |
| run: | | |
| export PATH=~/.cargo/bin:$PATH | |
| make zemu_install | |
| - name: Get test files | |
| id: get-tests | |
| run: | | |
| cd tests_zemu | |
| TESTS=`yarn test --listTests --json | head -n 3 | tail -n 1 | jq -cM 'to_entries | map({id: .key, file: .value})'` | |
| echo "tests=$TESTS" >> "$GITHUB_OUTPUT" | |
| test_zemu: | |
| needs: [configure, tests_zemu_setup] | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| test: ${{ fromJson(needs.tests_zemu_setup.outputs['tests']) }} | |
| steps: | |
| - name: Debug needs context | |
| run: echo "${{ toJson(needs) }}" | |
| - name: Test | |
| run: | | |
| id | |
| echo $HOME | |
| echo $DISPLAY | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| - run: sudo apt-get update -y && sudo apt-get install -y libusb-1.0.0 libudev-dev | |
| - name: Install node | |
| uses: actions/setup-node@v3 | |
| - name: Install yarn | |
| run: | | |
| npm install -g yarn | |
| - name: Build Ledger app | |
| run: make PRODUCTION_BUILD=1 | |
| - name: Build/Install build js deps | |
| run: make zemu_install | |
| - name: Run zemu tests | |
| run: | | |
| cd tests_zemu | |
| yarn jest ${{ matrix.test.file }} --maxConcurrency 2 \ | |
| --reporters='@matteoh2o1999/github-actions-jest-reporter' | |
| env: | |
| FORCE_COLOR: 1 | |
| - name: Upload Snapshots (only failure) | |
| if: ${{ failure() }} | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: snapshots-tmp | |
| path: tests_zemu/snapshots-tmp/ | |
| build_package_nanos: | |
| needs: [configure, build, build_ledger, test_zemu] | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/ledger-app-builder:latest | |
| options: --user ${{ needs.configure.outputs.uid_gid }} | |
| env: | |
| BOLOS_SDK: /opt/nanos-secure-sdk | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: true | |
| - name: Install deps | |
| run: pip install ledgerblue | |
| - name: Build NanoS | |
| shell: bash -l {0} | |
| run: | | |
| PRODUCTION_BUILD=0 make | |
| mv ./app/pkg/installer_s.sh ./app/pkg/installer_nanos.sh | |
| - name: Set tag | |
| id: nanos | |
| run: echo "tag_name=$(./app/pkg/installer_nanos.sh version)" >> $GITHUB_OUTPUT | |
| - name: Create or Update Release (1) | |
| id: create_release_0 | |
| uses: softprops/action-gh-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token | |
| with: | |
| files: ./app/pkg/installer_nanos.sh | |
| tag_name: ${{ steps.nanos.outputs.tag_name }} | |
| draft: false | |
| prerelease: false | |
| build_package_nanosp: | |
| needs: [configure, build, build_ledger, test_zemu] | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/ledger-app-builder:latest | |
| options: --user ${{ needs.configure.outputs.uid_gid }} | |
| env: | |
| BOLOS_SDK: /opt/nanosplus-secure-sdk | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: true | |
| - name: Install deps | |
| run: pip install ledgerblue | |
| - name: Build NanoSP | |
| shell: bash -l {0} | |
| run: | | |
| PRODUCTION_BUILD=0 make | |
| mv ./app/pkg/installer_s2.sh ./app/pkg/installer_nanos_plus.sh | |
| - name: Set tag | |
| id: nanosp | |
| run: echo "tag_name=$(./app/pkg/installer_nanos_plus.sh version)" >> $GITHUB_OUTPUT | |
| - name: Update Release | |
| id: update_release_2 | |
| uses: softprops/action-gh-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token | |
| with: | |
| files: ./app/pkg/installer_nanos_plus.sh | |
| tag_name: ${{ steps.nanosp.outputs.tag_name }} | |
| draft: false | |
| prerelease: false | |
| build_package_stax: | |
| needs: [configure, build, build_ledger, test_zemu] | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/ledger-app-builder:latest | |
| options: --user ${{ needs.configure.outputs.uid_gid }} | |
| env: | |
| BOLOS_SDK: /opt/stax-secure-sdk | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: true | |
| - name: Install deps | |
| run: pip install ledgerblue | |
| - name: Build Stax | |
| shell: bash -l {0} | |
| run: | | |
| PRODUCTION_BUILD=0 make | |
| - name: Set tag | |
| id: stax | |
| run: echo "tag_name=$(./app/pkg/installer_stax.sh version)" >> $GITHUB_OUTPUT | |
| - name: Update Release | |
| id: update_release_2 | |
| uses: softprops/action-gh-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token | |
| with: | |
| files: | | |
| ./app/pkg/installer_stax.sh | |
| tag_name: ${{ steps.stax.outputs.tag_name }} | |
| draft: false | |
| prerelease: false | |
| build_package_flex: | |
| needs: [configure, build, build_ledger, test_zemu] | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/ledger-app-builder:latest | |
| options: --user ${{ needs.configure.outputs.uid_gid }} | |
| env: | |
| BOLOS_SDK: /opt/flex-secure-sdk | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: true | |
| - name: Install deps | |
| run: pip install ledgerblue | |
| - name: Build Flex | |
| shell: bash -l {0} | |
| run: | | |
| PRODUCTION_BUILD=0 make | |
| - name: Set tag | |
| id: flex | |
| run: echo "tag_name=$(./app/pkg/installer_flex.sh version)" >> $GITHUB_OUTPUT | |
| - name: Update Release | |
| id: update_release_2 | |
| uses: softprops/action-gh-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token | |
| with: | |
| files: | | |
| ./app/pkg/installer_flex.sh | |
| tag_name: ${{ steps.flex.outputs.tag_name }} | |
| draft: false | |
| prerelease: false |