Skip veristat validation with Meta objects for PRs from forks #513
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: bpf-ci | |
| on: | |
| pull_request: | |
| push: | |
| branches: | |
| - bpf_base | |
| - bpf-next_base | |
| env: | |
| veristat_arch: x86_64 | |
| veristat_toolchain: gcc | |
| concurrency: | |
| group: ci-test-${{ github.ref_name }} | |
| cancel-in-progress: true | |
| jobs: | |
| set-matrix: | |
| # FIXME: set-matrix is lightweight, run it on any self-hosted machines for kernel-patches org | |
| # so we do not wait for GH hosted runners when there potentially all are busy because of bpf-rc | |
| # repo for instance. | |
| # This could be somehow fixed long term by making this action/workflow re-usable and letting the called | |
| # specify what to run on. | |
| runs-on: ${{ github.repository_owner == 'kernel-patches' && 'x86_64' || 'ubuntu-latest' }} | |
| outputs: | |
| build-matrix: ${{ steps.set-matrix-impl.outputs.build_matrix }} | |
| test-matrix: ${{ steps.set-matrix-impl.outputs.test_matrix }} | |
| veristat-runs-on: ${{ steps.set-matrix-impl.outputs.veristat_runs_on }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - id: set-matrix-impl | |
| run: | | |
| python3 .github/scripts/matrix.py | |
| build: | |
| name: build for ${{ matrix.arch }} with ${{ matrix.toolchain_full }} | |
| needs: set-matrix | |
| runs-on: ${{ matrix.runs_on }} | |
| timeout-minutes: 100 | |
| strategy: | |
| fail-fast: false | |
| matrix: ${{ fromJSON(needs.set-matrix.outputs.build-matrix) }} | |
| env: | |
| KERNEL: ${{ matrix.kernel }} | |
| REPO_ROOT: ${{ github.workspace }} | |
| REPO_PATH: "" | |
| KBUILD_OUTPUT: kbuild-output/ | |
| steps: | |
| - uses: actions/checkout@v3 | |
| # We fetch an actual bit of history here to facilitate incremental | |
| # builds (which may check out some earlier upstream change). | |
| with: | |
| fetch-depth: 50 | |
| - if: ${{ github.repository == 'kernel-patches/vmtest' }} | |
| name: Download bpf-next tree | |
| uses: libbpf/ci/get-linux-source@main | |
| with: | |
| dest: '.kernel' | |
| - if: ${{ github.repository == 'kernel-patches/vmtest' }} | |
| name: Move linux source in place | |
| shell: bash | |
| run: | | |
| rm -rf .kernel/.git | |
| cp -rf .kernel/. . | |
| rm -rf .kernel | |
| - name: Get commit meta-data | |
| id: get-commit-metadata | |
| run: | | |
| bash .github/scripts/get-commit-metadata.sh | |
| - name: Pull recent KBUILD_OUTPUT contents | |
| uses: actions/cache@v3 | |
| with: | |
| path: ${{ env.KBUILD_OUTPUT }} | |
| key: kbuild-output-${{ matrix.arch }}-${{ matrix.toolchain_full }}-${{ steps.get-commit-metadata.outputs.branch }}-${{ steps.get-commit-metadata.outputs.timestamp }}-${{ steps.get-commit-metadata.outputs.commit }} | |
| restore-keys: | | |
| kbuild-output-${{ matrix.arch }}-${{ matrix.toolchain_full }}-${{ steps.get-commit-metadata.outputs.branch }}-${{ steps.get-commit-metadata.outputs.timestamp }}- | |
| kbuild-output-${{ matrix.arch }}-${{ matrix.toolchain_full }}-${{ steps.get-commit-metadata.outputs.branch }}- | |
| kbuild-output-${{ matrix.arch }}-${{ matrix.toolchain_full }}- | |
| - name: Prepare incremental build | |
| shell: bash | |
| run: | | |
| bash .github/scripts/prepare-incremental-builds.sh ${{ steps.get-commit-metadata.outputs.commit }} | |
| - uses: libbpf/ci/patch-kernel@main | |
| with: | |
| patches-root: '${{ github.workspace }}/ci/diffs' | |
| repo-root: '${{ github.workspace }}' | |
| - name: Setup build environment | |
| uses: libbpf/ci/setup-build-env@main | |
| with: | |
| llvm-version: ${{ matrix.llvm-version }} | |
| - name: Build kernel image | |
| uses: libbpf/ci/build-linux@main | |
| with: | |
| arch: ${{ matrix.arch }} | |
| toolchain: ${{ matrix.toolchain }} | |
| kbuild-output: ${{ env.KBUILD_OUTPUT }} | |
| max-make-jobs: 32 | |
| llvm-version: ${{ matrix.llvm-version }} | |
| - name: Build selftests | |
| uses: libbpf/ci/build-selftests@main | |
| with: | |
| toolchain: ${{ matrix.toolchain }} | |
| kbuild-output: ${{ env.KBUILD_OUTPUT }} | |
| max-make-jobs: 32 | |
| llvm-version: ${{ matrix.llvm-version }} | |
| - if: ${{ github.event_name != 'push' }} | |
| name: Build samples | |
| uses: libbpf/ci/build-samples@main | |
| with: | |
| toolchain: ${{ matrix.toolchain }} | |
| kbuild-output: ${{ env.KBUILD_OUTPUT }} | |
| max-make-jobs: 32 | |
| llvm-version: ${{ matrix.llvm-version }} | |
| - name: Tar artifacts | |
| run: | | |
| bash .github/scripts/tar-artifact.sh ${{ matrix.arch }} ${{ matrix.toolchain_full }} | |
| - if: ${{ github.event_name != 'push' }} | |
| name: Remove KBUILD_OUTPUT content | |
| shell: bash | |
| run: | | |
| # Remove $KBUILD_OUTPUT to prevent cache creation for pull requests. | |
| # Only on pushed changes are build artifacts actually cached, because | |
| # of github.com/actions/cache's cache isolation logic. | |
| rm -rf "${KBUILD_OUTPUT}" | |
| - uses: actions/upload-artifact@v3 | |
| with: | |
| name: vmlinux-${{ matrix.arch }}-${{ matrix.toolchain_full }} | |
| if-no-files-found: error | |
| path: vmlinux-${{ matrix.arch }}-${{ matrix.toolchain_full }}.tar.zst | |
| test: | |
| if: ${{ github.event_name != 'push' }} | |
| name: ${{ matrix.test }} on ${{ matrix.arch }} with ${{ matrix.toolchain_full }} | |
| needs: [set-matrix, build] | |
| strategy: | |
| fail-fast: false | |
| matrix: ${{ fromJSON(needs.set-matrix.outputs.test-matrix) }} | |
| runs-on: ${{ matrix.runs_on }} | |
| timeout-minutes: 100 | |
| env: | |
| KERNEL: ${{ matrix.kernel }} | |
| REPO_ROOT: ${{ github.workspace }} | |
| REPO_PATH: "" | |
| KBUILD_OUTPUT: kbuild-output/ | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/download-artifact@v3 | |
| with: | |
| name: vmlinux-${{ matrix.arch }}-${{ matrix.toolchain_full }} | |
| path: . | |
| - name: Untar artifacts | |
| # zstd is installed by default in the runner images. | |
| run: zstd -d -T0 vmlinux-${{ matrix.arch }}-${{ matrix.toolchain_full }}.tar.zst --stdout | tar -xf - | |
| - name: Prepare rootfs | |
| uses: libbpf/ci/prepare-rootfs@main | |
| with: | |
| project-name: 'libbpf' | |
| arch: ${{ matrix.arch }} | |
| kernel: ${{ matrix.kernel }} | |
| kernel-root: '.' | |
| kbuild-output: ${{ env.KBUILD_OUTPUT }} | |
| image-output: '/tmp/root.img' | |
| test: ${{ matrix.test }} | |
| - name: Run selftests | |
| uses: libbpf/ci/run-qemu@main | |
| continue-on-error: ${{ matrix.continue_on_error }} | |
| timeout-minutes: ${{ matrix.timeout_minutes }} | |
| with: | |
| arch: ${{ matrix.arch}} | |
| img: '/tmp/root.img' | |
| vmlinuz: '${{ github.workspace }}/vmlinuz' | |
| kernel-root: '.' | |
| max-cpu: 8 | |
| kernel-test: ${{ matrix.test }} | |
| veristat: | |
| name: veristat | |
| needs: [set-matrix, build] | |
| runs-on: ${{ fromJSON(needs.set-matrix.outputs.veristat-runs-on) }} | |
| timeout-minutes: 100 | |
| env: | |
| KERNEL: LATEST | |
| REPO_ROOT: ${{ github.workspace }} | |
| REPO_PATH: "" | |
| KBUILD_OUTPUT: kbuild-output/ | |
| permissions: | |
| id-token: write | |
| contents: read | |
| steps: | |
| - name: Setup environment variables | |
| run: | | |
| echo ARCH_AND_TOOL=${{ env.veristat_arch }}-${{ env.veristat_toolchain }} >> \ | |
| ${GITHUB_ENV} | |
| - uses: actions/checkout@v3 | |
| - uses: actions/download-artifact@v3 | |
| with: | |
| name: vmlinux-${{ env.ARCH_AND_TOOL }} | |
| path: . | |
| - name: Untar artifacts | |
| # zstd is installed by default in the runner images. | |
| run: zstd -d -T0 vmlinux-${{ env.ARCH_AND_TOOL }}.tar.zst --stdout | tar -xf - | |
| - name: Prepare rootfs | |
| uses: libbpf/ci/prepare-rootfs@main | |
| with: | |
| project-name: 'libbpf' | |
| arch: x86_64 | |
| kernel: LATEST | |
| kernel-root: '.' | |
| kbuild-output: ${{ env.KBUILD_OUTPUT }} | |
| image-output: '/tmp/root.img' | |
| - name: Configure AWS Credentials | |
| # Disabling BPF objects download and veristat-meta benchmark for PRs | |
| # created from fork repositories. These won't have access to required | |
| # enviroment variables and secrets, and otherwise would consistently fail | |
| if: ${{ github.event.pull_request.head.repo.full_name == github.repository }} | |
| uses: aws-actions/configure-aws-credentials@v2 | |
| with: | |
| aws-region: ${{ vars.AWS_REGION }} | |
| role-to-assume: ${{ secrets.AWS_ROLE_ARN }} | |
| role-session-name: github-action-bpf-ci | |
| - name: Download BPF objects | |
| if: ${{ github.event.pull_request.head.repo.full_name == github.repository }} | |
| run: | | |
| set -eux | |
| if [ -n "$AWS_ROLE_ARN" ]; then | |
| mkdir /tmp/bpf_objects | |
| aws s3 sync s3://veristat-bpf-binaries /tmp/bpf_objects | |
| fi | |
| env: | |
| AWS_ROLE_ARN: ${{ secrets.AWS_ROLE_ARN }} | |
| - name: Add BPF objects to rootfs | |
| if: ${{ github.event.pull_request.head.repo.full_name == github.repository }} | |
| shell: bash | |
| run: ./.github/scripts/bpf-objects-rootfs.sh | |
| - name: Run veristat | |
| uses: libbpf/ci/run-qemu@main | |
| with: | |
| arch: x86_64 | |
| img: '/tmp/root.img' | |
| vmlinuz: '${{ github.workspace }}/vmlinuz' | |
| kernel-root: '.' | |
| max-cpu: 8 | |
| kernel-test: run_veristat_kernel,run_veristat_meta | |
| output-dir: '${{ github.workspace }}' | |
| - name: Compare and save veristat.kernel.csv | |
| uses: ./.github/actions/veristat_baseline_compare | |
| with: | |
| veristat_output: veristat-kernel | |
| baseline_name: ${{ env.ARCH_AND_TOOL}}-baseline-veristat-kernel | |
| - name: Compare and save veristat.meta.csv | |
| if: ${{ github.event.pull_request.head.repo.full_name == github.repository }} | |
| uses: ./.github/actions/veristat_baseline_compare | |
| with: | |
| veristat_output: veristat-meta | |
| baseline_name: ${{ env.ARCH_AND_TOOL}}-baseline-veristat-meta |