build-tests.yml

name: Build Tests

on: [push, pull_request]

jobs:
  build-test:
    name: Build Test
    runs-on: ubuntu-latest
    continue-on-error: true
    strategy:
      matrix:
        os:
          - 'fedora:latest'
          - 'debian:testing'
          - 'ubuntu:rolling'
          # Disable CentOS due to missing dependencies
          # - 'centos:7'
          # - 'centos:8'
    container: ${{ matrix.os }}
    steps:
    - name: Clone repository
      uses: actions/checkout@v3

    - name: Set up Java
      uses: actions/setup-java@v3
      with:
        java-version: '17'
        distribution: 'adopt'

    - name: Install Fedora/CentOS dependencies
      if: ${{ startsWith(matrix.os, 'fedora:') || startsWith(matrix.os, 'centos:') }}
      run: |
        dnf install -y dnf-plugins-core rpm-build maven
        dnf builddep -y --spec jss.spec

    - name: Install Debian/Ubuntu dependencies
      if: ${{ startsWith(matrix.os, 'debian:') || startsWith(matrix.os, 'ubuntu:') }}
      run: |
        apt-get update
        apt-get install -y \
            cmake zip unzip \
            g++ libnss3-dev libnss3-tools \
            openjdk-17-jdk libcommons-lang3-java libslf4j-java \
            junit5 libopentest4j-java maven

    - name: Build JSS with CMake
      run: ./build.sh --with-tests

    - name: Build JSS with Maven
      run: mvn package

    - name: Compare jss.jar
      run: |
        jar tvf ~/build/jss/jss.jar | awk '{print $8;}' | sort \
            | grep -v '/$' \
            | tee cmake.out
        jar tvf base/target/jss.jar | awk '{print $8;}' | sort \
            | grep -v '/$' \
            | grep -v '^META-INF/maven/' \
            | tee maven.out
        diff cmake.out maven.out

    # TODO: Run examples

  # Compare JNI symbols in the code and in the version script.
  # If there are JNI symbols in the code but not in the version script -> fail.
  symbol-test:
    name: Symbol Test
    runs-on: ubuntu-latest
    env:
      JAVA_HOME: /usr/lib/jvm/java-17-openjdk-amd64
    steps:
      - name: Clone repository
        uses: actions/checkout@v3

      - name: Get JNI symbols in the code
        run: |
          grep -iroh '^Java_org_mozilla[^(;]*' native/src/main/native/ | sort -u > /tmp/functions.txt
          cat /tmp/functions.txt

      - name: Get JNI symbols in the version script
        run: |
          grep -iroh '^Java_org_mozilla[^(;]*' lib/ | sort -u > /tmp/version.txt
          cat /tmp/version.txt

      - name: Compare JNI symbols
        run: |
          diff /tmp/functions.txt /tmp/version.txt || true
          comm -23 --check-order /tmp/functions.txt /tmp/version.txt > /tmp/diff.txt
          test ! -s /tmp/diff.txt

  rpm-test:
    name: RPM Test
    runs-on: ubuntu-latest
    container: 'fedora:latest'
    steps:
    - name: Clone repository
      uses: actions/checkout@v3

    - name: Set up Java
      uses: actions/setup-java@v3
      with:
        java-version: '17'
        distribution: 'adopt'

    - name: Install Fedora dependencies
      run: |
        dnf install -y dnf-plugins-core rpm-build maven
        dnf builddep -y --spec jss.spec

    - name: Build JSS RPMs with XMvn and CMake
      run: ./build.sh --work-dir=build rpm

    - name: Install RPMInspect
      run: |
        dnf install -y dnf-plugins-core
        dnf copr enable -y copr.fedorainfracloud.org/dcantrell/rpminspect
        dnf install -y rpminspect rpminspect-data-fedora

    - name: Run RPMInspect on SRPM and RPMs
      run: ./tests/bin/rpminspect.sh

    - name: Install RPMs
      run: dnf localinstall -y build/RPMS/*.rpm

    - name: Build JSS with Maven
      run: mvn -pl '!native,!symkey,!examples' package

    - name: Compare jss.jar
      run: |
        jar tvf /usr/share/java/jss/jss.jar | awk '{print $8;}' | sort \
            | grep -v '/$' \
            | tee jss.jar.rpm
        jar tvf base/target/jss.jar | awk '{print $8;}' | sort \
            | grep -v '/$' \
            | tee jss.jar.maven
        diff jss.jar.rpm jss.jar.maven

    - name: Compare jss-tomcat.jar
      run: |
        jar tvf /usr/share/java/jss/jss-tomcat.jar | awk '{print $8;}' | sort \
            | grep -v '/$' \
            | tee jss-tomcat.jar.rpm
        jar tvf tomcat/target/jss-tomcat.jar | awk '{print $8;}' | sort \
            | grep -v '/$' \
            | tee jss-tomcat.jar.maven
        diff jss-tomcat.jar.rpm jss-tomcat.jar.maven

    - name: Compare jss-tomcat-9.0.jar
      run: |
        jar tvf /usr/share/java/jss/jss-tomcat-9.0.jar | awk '{print $8;}' | sort \
            | grep -v '/$' \
            | tee jss-tomcat-9.0.jar.rpm
        jar tvf tomcat-9.0/target/jss-tomcat-9.0.jar | awk '{print $8;}' | sort \
            | grep -v '/$' \
            | tee jss-tomcat-9.0.jar.maven
        diff jss-tomcat-9.0.jar.rpm jss-tomcat-9.0.jar.maven

  sandbox-test:
    name: Sandbox Test
    runs-on: ubuntu-latest
    container: fedora:rawhide
    steps:
    - name: Clone repository
      uses: actions/checkout@v3

    - name: Install build dependencies
      run: |
        dnf install -y dnf-plugins-core
        dnf builddep -y nspr nss jss
        dnf builddep -y jss.spec
        dnf install -y mercurial \
            python-unversioned-command \
            gyp \
            ninja-build

    - name: Build NSPR and NSS
      run: |
        cd ..
        hg clone https://hg.mozilla.org/projects/nspr
        hg clone https://hg.mozilla.org/projects/nss
        cd nss
        ./build.sh --enable-fips --enable-libpkix

    - name: Build JSS
      run: |
        cd build
        cmake -DCMAKE_BUILD_TYPE=Debug ..
        make all
      env:
        SANDBOX: 1
        CFLAGS: -Wall -Wextra -Werror -Og -ggdb

    - name: Run JSS tests
      run: |
        cd build
        ctest --output-on-failure