ci.yml

name: CI

on:
  push:
    branches:
      - main
      - github-actions*
  pull_request:

jobs:
  test-on-pkru-enabled-host:
    runs-on: self-hosted
    continue-on-error: ${{ matrix.ia2-tracer == 'ON' }}
    strategy:
      fail-fast: true
      matrix:
        build-type: [Release, Debug]
        c_compiler: [clang, gcc]
        linker: [lld, bfd]
        ia2-debug: [ON, OFF]
        ia2-tracer: [ON, OFF]
    steps:
      - name: Check out code
        uses: actions/checkout@v4
      - name: Build
        run: |
          LLVM_DIR=`llvm-config --cmakedir`
          Clang_DIR=`realpath $LLVM_DIR/../clang`
          mkdir build
          pushd build
          cmake ..                                                       \
            -DCMAKE_BUILD_TYPE=${{ matrix.build-type }}                  \
            -DCMAKE_C_COMPILER=${{ matrix.c_compiler }}                  \
            -DCMAKE_CXX_COMPILER=clang++                                 \
            -DCMAKE_C_FLAGS="-fuse-ld=${{ matrix.linker }}"              \
            -DClang_DIR=$Clang_DIR                                       \
            -DLLVM_DIR=$LLVM_DIR                                         \
            -DLLVM_EXTERNAL_LIT=$HOME/.local/bin/lit                     \
            -DLIBIA2_DEBUG=${{ matrix.ia2-debug }}                       \
            -DIA2_TRACER=${{ matrix.ia2-tracer }}                        \
            -G Ninja
          ninja
          popd
      - name: Check
        run: |
          pushd build
          ninja -v check
          popd
  build-nginx:
    runs-on: self-hosted
    steps:
      - name: Check out code
        uses: actions/checkout@v4
      - name: Build nginx
        run: |
          LLVM_DIR=`llvm-config --cmakedir`
          Clang_DIR=`realpath $LLVM_DIR/../clang`
          pushd external/nginx
          IA2_CMAKE_FLAGS="
            -DCMAKE_BUILD_TYPE=Release
            -DClang_DIR=$Clang_DIR
            -DLLVM_DIR=$LLVM_DIR" \
            ./reconfigure
          pushd build/nginx
          make
          popd
          popd
  aarch64-wip-test:
    runs-on: ubuntu-latest
    steps:
      - name: Install dep packages
        uses: awalsh128/cache-apt-pkgs-action@latest
        with:
          packages: |
            gcc-aarch64-linux-gnu
            g++-aarch64-linux-gnu
            libc6-arm64-cross
            libc6-dev-arm64-cross
            clang-15
            pkg-config
            cmake
            ninja-build
            llvm-15-dev
            libclang-15-dev
            zlib1g-dev
            libcapstone-dev
          version: 1.0 # version of cache to load
      - name: Check out code
        uses: actions/checkout@v4
      - name: Cache built QEMU
        id: cache-qemu
        uses: actions/cache@v4
        with:
          path: qemu/build
          key: ${{ runner.os }}-qemu
      - name: Check out QEMU
        if: steps.cache-qemu.outputs.cache-hit != 'true'
        uses: actions/checkout@v4
        with:
          repository: immunant/qemu
          path: ${{ github.workspace }}/qemu
      - name: Build QEMU
        if: steps.cache-qemu.outputs.cache-hit != 'true'
        working-directory: ${{ github.workspace }}/qemu
        run: ./build.sh
      - name: Cache built Clang
        id: cache-clang
        uses: actions/cache@v4
        with:
          path: |
            llvm-project/build/bin
            llvm-project/build/lib/clang
          key: ${{ runner.os }}-clang
      - name: Check out Clang
        if: steps.cache-clang.outputs.cache-hit != 'true'
        uses: actions/checkout@v4
        with:
          repository: immunant/llvm-project
          ref: am/mte_instrumentation
          path: ${{ github.workspace }}/llvm-project
      - name: Build Clang
        if: steps.cache-clang.outputs.cache-hit != 'true'
        working-directory: ${{ github.workspace }}/llvm-project
        run: |
          # first free up space used by unnecessary host tool cache to make room to build clang
          df -h /
          cd /opt
          find . -maxdepth 1 -mindepth 1 '!' -path ./containerd '!' -path ./actionarchivecache \
          '!' -path ./runner '!' -path ./runner-cache -exec rm -rf '{}' ';'
          df -h /
          cd -
          ./build.sh
          # free up space used by libs; our desired clang binary statically links them
          rm -rf build/lib/*.a
      - name: Test ARM build
        run: |
          LLVM_DIR=`llvm-config-15 --cmakedir`
          Clang_DIR=`realpath $LLVM_DIR/../clang`
          mkdir build
          pushd build
          cross_flags="-isystem /usr/aarch64-linux-gnu/include --gcc-toolchain=/usr -march=armv8+memtag"
          export LDFLAGS="-L/usr/aarch64-linux-gnu/lib"
          cmake .. \
            -DCMAKE_CROSSCOMPILING_EMULATOR=${{ github.workspace }}/qemu/build/qemu-aarch64 \
            -DCMAKE_TOOLCHAIN_FILE=../cmake/aarch64-toolchain.cmake \
            -DCMAKE_C_COMPILER=`pwd`/../llvm-project/build/bin/clang-19 \
            -DCMAKE_CXX_COMPILER=`pwd`/../llvm-project/build/bin/clang-19 \
            -DCMAKE_OBJCOPY=/usr/bin/llvm-objcopy-15 \
            -DCMAKE_C_FLAGS="$cross_flags" \
            -DCMAKE_CXX_FLAGS="$cross_flags" \
            -DClang_DIR=$Clang_DIR                                  \
            -DCLANG_EXE=`which clang-15`                            \
            -DLLVM_DIR=$LLVM_DIR                                    \
            -G Ninja
          ninja -v check
          popd