debian-forge/.gitlab-ci.yml
Tomáš Hozza bb406d11fe CI: set up team SSH keys in before_script, not deploy.sh
This is how it is done also in osbuild-composer. The downside of doing
this in `deploy.sh` is that team SSH keys are not set as authorized for
mock-build jobs, which make it impossible to log into the machine and
debug anything.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
2023-04-24 21:04:45 +02:00

121 lines
2.9 KiB
YAML

stages:
- init
- rpmbuild
- test
- finish
.terraform:
before_script:
- schutzbot/ci_details.sh > ci-details-before-run
- cat schutzbot/team_ssh_keys.txt | tee -a ~/.ssh/authorized_keys > /dev/null
after_script:
- schutzbot/ci_details.sh > ci-details-after-run
- schutzbot/update_github_status.sh update
tags:
- terraform
artifacts:
paths:
- ci-details-before-run
- ci-details-after-run
init:
stage: init
tags:
- shell
script:
- schutzbot/update_github_status.sh start
interruptible: true
RPM:
stage: rpmbuild
extends: .terraform
script:
- sh "schutzbot/mockbuild.sh"
interruptible: true
parallel:
matrix:
- RUNNER:
- aws/fedora-36-x86_64
- aws/fedora-36-aarch64
- aws/fedora-37-x86_64
- aws/fedora-37-aarch64
- aws/fedora-38-x86_64
- aws/fedora-38-aarch64
- aws/centos-stream-8-x86_64
- aws/centos-stream-8-aarch64
- aws/centos-stream-9-x86_64
- aws/centos-stream-9-aarch64
- aws/rhel-8.7-ga-x86_64
- aws/rhel-8.7-ga-aarch64
- aws/rhel-9.1-ga-x86_64
- aws/rhel-9.1-ga-aarch64
- RUNNER:
- aws/rhel-8.8-nightly-x86_64
- aws/rhel-8.8-nightly-aarch64
- aws/rhel-9.2-nightly-x86_64
- aws/rhel-9.2-nightly-aarch64
INTERNAL_NETWORK: "true"
OSTree Images:
stage: test
extends: .terraform
script:
- schutzbot/deploy.sh
- sudo test/cases/ostree-images
parallel:
matrix:
- RUNNER:
- aws/fedora-36-x86_64
- aws/fedora-37-x86_64
- aws/rhel-8.7-ga-x86_64
- aws/rhel-9.1-ga-x86_64
INTERNAL_NETWORK: "true"
SonarQube:
stage: test
extends: .terraform
script:
- schutzbot/sonarqube.sh
variables:
RUNNER: aws/centos-stream-8-x86_64
INTERNAL_NETWORK: "true"
GIT_DEPTH: 0
Manifests:
stage: test
extends: .terraform
script:
- schutzbot/deploy.sh
- schutzbot/manifest_tests.sh
artifacts:
when: always
paths:
- manifest-db/generated-image-infos/
parallel:
matrix:
- RUNNER:
- aws/fedora-36-x86_64
- aws/fedora-36-aarch64
- aws/fedora-37-x86_64
- aws/fedora-37-aarch64
- aws/centos-stream-8-x86_64
- aws/centos-stream-8-aarch64
- aws/centos-stream-9-x86_64
- aws/centos-stream-9-aarch64
- RUNNER:
- aws/rhel-8.7-ga-x86_64
- aws/rhel-8.7-ga-aarch64
- aws/rhel-8.8-nightly-x86_64
- aws/rhel-8.8-nightly-aarch64
- aws/rhel-9.1-ga-x86_64
- aws/rhel-9.1-ga-aarch64
- aws/rhel-9.2-nightly-x86_64
- aws/rhel-9.2-nightly-aarch64
INTERNAL_NETWORK: "true"
finish:
stage: finish
tags:
- shell
script:
- schutzbot/update_github_status.sh finish