forked from eclipse/steady
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Jenkinsfile
143 lines (143 loc) · 4.62 KB
/
Jenkinsfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
pipeline {
agent {
kubernetes {
label 'my-agent-pod'
yaml """
apiVersion: v1
kind: Pod
spec:
containers:
- name: maven
image: eclipse/steady-pipeline:latest
command:
- cat
tty: true
env:
- name: "MAVEN_OPTS"
value: "-Duser.home=/home/jenkins -Xmx4096m -Xms4096m"
- name: "MAVEN_CONFIG"
value: "/home/jenkins/.m2"
- name: "GNUPGHOME"
value: "/home/jenkins/.gnupg"
volumeMounts:
- name: settings-xml
mountPath: /home/jenkins/.m2/settings.xml
subPath: settings.xml
readOnly: true
- name: toolchains-xml
mountPath: /home/jenkins/.m2/toolchains.xml
subPath: toolchains.xml
readOnly: true
- name: settings-security-xml
mountPath: /home/jenkins/.m2/settings-security.xml
subPath: settings-security.xml
readOnly: true
- name: m2-repo
mountPath: /home/jenkins/.m2/repository
- name: gnupg-vol
mountPath: /home/jenkins/.gnupg
resources:
limits:
memory: "8Gi"
cpu: "2"
requests:
memory: "8Gi"
cpu: "2"
volumes:
- name: settings-xml
secret:
secretName: m2-secret-dir
items:
- key: settings.xml
path: settings.xml
- name: toolchains-xml
configMap:
name: m2-dir
items:
- key: toolchains.xml
path: toolchains.xml
- name: settings-security-xml
secret:
secretName: m2-secret-dir
items:
- key: settings-security.xml
path: settings-security.xml
- name: m2-repo
emptyDir: {}
- name: gnupg-vol
emptyDir: {}
"""
}
}
stages {
// Verifies compliance with Google's Java Style Guide (cf.
// https://eclipse.github.io/steady/contributor/#contribution-content-guidelines).
stage('Verify Coding Style and REUSE compliance') {
steps {
container('maven') {
sh 'reuse lint'
sh 'bash .travis/check_code_style.sh'
}
}
}
// Verifies that the -javadoc and -sources artifacts can be generated (by enabling the
// javadoc profile contained in three pom.xml files). Also verifies that the build
// is reproducible, and that Spotbugs checks do not fail (cf.
// https://eclipse.github.io/steady/contributor/#contribution-content-guidelines).
stage('Create javadoc + sources, Verify Spotbugs and Reproducibility') {
steps {
container('maven') {
sh 'export MAVEN_OPTS="-Xms4g -Xmx8g"'
sh 'mvn -B -e -P gradle,javadoc \
-Dspring.standalone \
-DskipTests \
-Dvulas.shared.m2Dir=/home/jenkins/agent/workspace \
-Dspotbugs.excludeFilterFile=findbugs-exclude.xml \
-Dspotbugs.includeFilterFile=findbugs-include.xml \
-Dspotbugs.failOnError=true \
clean install com.github.spotbugs:spotbugs-maven-plugin:4.2.3:check'
// sh 'mvn -B -e -P javadoc \
// -Dspring.standalone \
// -DskipTests \
// -Dreference.repo=https://repo.maven.apache.org/maven2 \
// clean verify'
// sh 'cat target/root-*.buildinfo.compare'
// sh 'grep ko=0 target/root-*.buildinfo.compare' // Fail if JARs are different
}
}
}
// Verifies that all tests pass (except for expensive patch analyses).
stage('Test') {
steps {
container('maven') {
sh 'mvn -B -e -P gradle \
-Dspring.standalone \
-Dvulas.shared.m2Dir=/home/jenkins/agent/workspace \
-Dit.test="!IT01_PatchAnalyzerIT,IT*,*IT" \
-DfailIfNoTests=false \
clean test'
}
}
}
// GPG signs all artifacts and deploys them on Maven Central. See here for
// additional info: https://www.jenkins.io/doc/book/pipeline/syntax/,
// https://wiki.eclipse.org/Jenkins
stage('Release on Central') {
// when { branch "sign-releases" }
when { tag "release-*" }
steps {
container('maven') {
echo "Branch [${env.BRANCH_NAME}], tag [${env.TAG_NAME}]"
withCredentials([file(credentialsId: 'secret-subkeys.asc', variable: 'KEYRING')]) {
sh 'gpg --batch --import "${KEYRING}"'
sh 'for fpr in $(gpg --list-keys --with-colons | awk -F: \'/fpr:/ {print $10}\' | sort -u); do echo -e "5\ny\n" | gpg --batch --command-fd 0 --expert --edit-key ${fpr} trust; done'
}
sh 'mvn -B -e -P gradle,javadoc,release \
-Dspring.standalone \
-DskipTests \
clean deploy'
}
}
}
}
}