mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 06:06:02 -06:00
15e40e9ae4
General changes: * Use a single -q on update, as the output is not too long * Use a single -q on install, to show all packages at once GitLab-specific changes: * Use `DEBIAN_FRONTEND=noninteractive` to reduce noise * Use --no-install-recommends to avoid installing unnecessary packages * Filter out uninteresting lines on install Note: `DEBIAN_FRONTEND` does not appear to be needed in the default GitHub runner container and not many packages are currently being downloaded/installed in them, so do the above changes only jobs that use custom Docker images.
132 lines
4.6 KiB
YAML
132 lines
4.6 KiB
YAML
# Basic notes: builds firejail on 5 different systems for 2 package systems:
|
|
# 1. Debian-based systems. Use debian:jessie to ensure reasonable backwards
|
|
# compat and ubuntu:rolling for new setups
|
|
# 2. Redhat-based systems. Use centos:latest for reasonable backwards compat
|
|
# and fedora:latest for new setups
|
|
# 3. Alpine for installing directly from source
|
|
# Also builds apparmor package for Ubuntu LTS
|
|
|
|
build_ubuntu_package:
|
|
image: ubuntu:rolling
|
|
variables:
|
|
DEBIAN_FRONTEND: noninteractive
|
|
script:
|
|
- apt-get update -qy
|
|
- >
|
|
apt-get install --no-install-recommends -qy
|
|
build-essential fakeroot lintian libapparmor-dev pkg-config gawk
|
|
| grep -Ev '^(Selecting|Preparing to unpack|Unpacking)'
|
|
- ./ci/printenv.sh
|
|
- ./configure || (cat config.log; exit 1)
|
|
- make deb
|
|
- dpkg -i firejail*.deb
|
|
- command -V firejail && firejail --version
|
|
|
|
build_debian_package:
|
|
image: debian:buster
|
|
variables:
|
|
DEBIAN_FRONTEND: noninteractive
|
|
script:
|
|
- apt-get update -qy
|
|
- >
|
|
apt-get install --no-install-recommends -qy
|
|
build-essential fakeroot lintian libapparmor-dev pkg-config gawk
|
|
| grep -Ev '^(Selecting|Preparing to unpack|Unpacking)'
|
|
- ./ci/printenv.sh
|
|
- ./configure || (cat config.log; exit 1)
|
|
- make deb
|
|
- dpkg -i firejail*.deb
|
|
- command -V firejail && firejail --version
|
|
|
|
build_redhat_package:
|
|
image: almalinux:latest
|
|
script:
|
|
- dnf update -y
|
|
- dnf install -y rpm-build gcc make
|
|
- ./ci/printenv.sh
|
|
- ./configure --prefix=/usr || (cat config.log; exit 1)
|
|
- make rpms
|
|
- rpm -i firejail*.rpm
|
|
- command -V firejail && firejail --version
|
|
|
|
build_fedora_package:
|
|
image: fedora:latest
|
|
script:
|
|
- dnf update -y
|
|
- dnf install -y rpm-build gcc make
|
|
- ./ci/printenv.sh
|
|
- ./configure --prefix=/usr || (cat config.log; exit 1)
|
|
- make rpms
|
|
- rpm -i firejail*.rpm
|
|
- command -V firejail && firejail --version
|
|
|
|
build_src_package:
|
|
image: alpine:latest
|
|
script:
|
|
- apk update
|
|
- apk upgrade
|
|
- apk add build-base linux-headers gawk
|
|
- ./ci/printenv.sh
|
|
- ./configure --prefix=/usr || (cat config.log; exit 1)
|
|
- make
|
|
- make install-strip
|
|
- command -V firejail && firejail --version
|
|
|
|
build_no_apparmor:
|
|
image: ubuntu:latest
|
|
variables:
|
|
DEBIAN_FRONTEND: noninteractive
|
|
script:
|
|
- apt-get update -qy
|
|
- >
|
|
apt-get install --no-install-recommends -qy
|
|
build-essential fakeroot lintian pkg-config gawk
|
|
| grep -Ev '^(Selecting|Preparing to unpack|Unpacking)'
|
|
- ./ci/printenv.sh
|
|
- ./configure || (cat config.log; exit 1)
|
|
- make dist
|
|
- ./mkdeb.sh --disable-apparmor
|
|
- dpkg -i firejail*.deb
|
|
- command -V firejail && firejail --version
|
|
- firejail --version | grep -F 'AppArmor support is disabled'
|
|
|
|
debian_ci:
|
|
image: registry.salsa.debian.org/salsa-ci-team/ci-image-git-buildpackage:latest
|
|
variables:
|
|
DEBFULLNAME: "$GITLAB_USER_NAME"
|
|
DEBEMAIL: "$GITLAB_USER_EMAIL"
|
|
DEBIAN_FRONTEND: noninteractive
|
|
before_script:
|
|
- git checkout -B ci_build "$CI_COMMIT_SHA"
|
|
- gitlab-ci-enable-sid
|
|
- gitlab-ci-enable-experimental
|
|
- |
|
|
cat >>/etc/apt/sources.list <<EOF
|
|
deb-src http://deb.debian.org/debian sid main
|
|
deb-src http://deb.debian.org/debian experimental main
|
|
EOF
|
|
- apt-get update -qy
|
|
- git config user.name "$DEBFULLNAME"
|
|
- git config user.email "$DEBEMAIL"
|
|
- |
|
|
cd "$CI_PROJECT_DIR/.."
|
|
apt-get source --download-only -t experimental firejail ||
|
|
apt-get source --download-only firejail
|
|
- |
|
|
cd "$CI_PROJECT_DIR"
|
|
tar xf ../firejail_*.debian.tar.*
|
|
- rm -rf debian/patches/
|
|
- |
|
|
VERSION="$(grep ^PACKAGE_VERSION= configure | cut -d "'" -f 2)"
|
|
dch -v "${VERSION}-0.1~ci" 'Non-maintainer upload.'
|
|
git archive -o "../firejail_${VERSION}.orig.tar.gz" HEAD
|
|
pristine-tar commit "../firejail_${VERSION}.orig.tar.gz" ci_build
|
|
git branch -m pristine-tar origin/pristine-tar
|
|
- git add debian
|
|
- git commit -m 'add debian/'
|
|
- export CI_COMMIT_SHA="$(git rev-parse HEAD)"
|
|
script:
|
|
- apt-get install --no-install-recommends -qy gawk
|
|
- ./ci/printenv.sh
|
|
- gitlab-ci-git-buildpackage
|
|
- gitlab-ci-lintian
|