build.yml

name: Build

on: push

jobs:
  build:

    runs-on: ubuntu-latest

    steps:
    - name: Checkout repository
      uses: actions/checkout@v2
      with:
        submodules: true
    - name: Cache LLVM and Clang
      id: cache-llvm
      uses: actions/cache@v2
      with:
        path: |
          C:/Program Files/LLVM
          ./llvm
        key: llvm-11.0
    - name: ModSecurity Cache
      id: cache-modsec
      uses: actions/cache@v2
      with:
        path: ./modsec-src
        key: modsec-v3
    - name: Bazel cache
      uses: actions/cache@v2
      with:
        path: "/home/runner/.cache/bazel"
        key: bazel
    - name: Install deps
      shell: bash
      run: |
       sudo apt-get update --error-on=any
       sudo apt-get install --yes libtool cmake automake autoconf make ninja-build curl unzip virtualenv openjdk-11-jdk build-essential libc++1 \
        pkg-config flex bison libcurl4-gnutls-dev libfuzzy-dev libgeoip-dev liblua5.3-dev libmaxminddb-dev libpcre3-dev libxml2-dev libyajl-dev
    - name: Setup bazel
      uses: jwlawson/actions-setup-bazel@v1
      with:
        bazel-version: "4.1.0"
    - name: Install LLVM and Clang
      uses: KyleMayes/install-llvm-action@v1
      with:
        version: "11.0"
        cached: ${{ steps.cache-llvm.outputs.cache-hit }}
    - name: Build ModSecurity
      if: steps.cache-modsec.outputs.cache-hit != 'true'
      run: |
        git clone --recursive https://github.com/SpiderLabs/ModSecurity.git -b v3/master modsec-src
        cd modsec-src
        ./build.sh
        ./configure
        make
        cd ..
    - name: Install ModSecurity
      run: |
        cd modsec-src
        sudo make install
        cd ..
    - name: Build envoy
      run: |
        ./build.sh set-clang ${{ env.LLVM_PATH }}
        ./build.sh release --config=clang --define tcmalloc=gperftools
        zip binaries.zip bazel-bin/envoy bazel-bin/envoy.stripped
    - uses: actions/upload-artifact@v2
      with:
        name: envoy-binary
        path: binaries.zip