ci.yaml

name: ci

on:
  push:
    branches:
      - main
      - release/**
  merge_group:
    types:
      - checks_requested
  pull_request:
    branches:
      - main
      - release/**

env:
  CARGO_TERM_COLOR: always

jobs:

  check:
    name: Check
    runs-on: ${{ matrix.os }}

    strategy:
      fail-fast: false
      matrix:
        os:
          - windows-2025
          - ubuntu-24.04
          - macos-15
        include:
          - os: windows-2025
            install: |
              git config --system core.longpaths true
              echo "VCPKG_ROOT=$env:VCPKG_INSTALLATION_ROOT" | Out-File -FilePath $env:GITHUB_ENV -Append
              vcpkg install openssl:x64-windows-static-md

    steps:
      - uses: actions/checkout@v5
      - uses: Swatinem/rust-cache@v2

      - name: Cache Theseus Postgresql Installation
        uses: actions/cache@v4
        with:
          path: ~/.theseus/postgresql
          key: ${{ runner.os }}-theseus-postgresql-${{ hashFiles('**/Cargo.lock') }}

      - name: Install dependencies
        if: matrix.install != ''
        run: ${{ matrix.install }}

      - name: Check
        env:
          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" # for embedded postgresql
        run: cargo check
      - name: Clippy
        env:
          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" # for embedded postgresql
        run: cargo clippy --all-targets --all-features -- -D warnings -D clippy::unwrap_used -D clippy::expect_used

  ci:
    needs:
      - check
    runs-on: ubuntu-24.04

    steps:
      - run: df -h
      - name: Maximize build space
        run: |
          env | sort
          sudo rm -rf /usr/share/dotnet
          sudo rm -rf /usr/local/lib/android
          sudo rm -rf /opt/az
          sudo rm -rf /opt/ghc
          sudo rm -rf /opt/hostedtoolcache/CodeQL
          sudo rm -rf /opt/hostedtoolcache/go
          sudo rm -rf /usr/local/share/powershell
          sudo rm -rf /usr/lib/jvm
          sudo rm -rf /usr/share/swift
          sudo rm -rf /usr/local/.ghcup
          sudo rm -rf /usr/local/julia*
          sudo rm -rf /usr/local/share/chromium
          sudo rm -rf /opt/microsoft /opt/google
          sudo docker image prune --all --force
          sudo rm -Rf ${JAVA_HOME_8_X64}
          sudo rm -Rf ${JAVA_HOME_11_X64}
          sudo rm -Rf ${JAVA_HOME_17_X64}
          sudo rm -Rf ${JAVA_HOME_21_X64}
          sudo rm -Rf ${JAVA_HOME_25_X64}
          sudo rm -Rf ${RUBY_PATH}
          sudo rm -Rf ${SWIFT_PATH}
          sudo rm -Rf ${GRADLE_HOME}
      - run: df -h

      - uses: actions/checkout@v5
      - uses: Swatinem/rust-cache@v2

      - name: Cache Theseus Postgresql Installation
        uses: actions/cache@v4
        with:
          path: ~/.theseus/postgresql
          key: ${{ runner.os }}-theseus-postgresql-${{ hashFiles('**/Cargo.lock') }}

      - name: Format
        run: cargo fmt --check

      - name: Start minio
        run: |
          docker compose -f etc/deploy/compose/compose-minio.yaml up -d --wait

      - name: Create tmp dir
        run: |
          sudo mkdir /mnt/trustify
          sudo chmod a+rwx /mnt/trustify

      - name: Test
        run: cargo test --all-features
        env:
          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" # for embedded postgresql
          RUST_LOG: info,sqlx=error,sea_orm=error
          TRUSTIFY_S3_AWS_REGION: eu-west-1
          TRUSTIFY_S3_AWS_BUCKET: guacsec-migration-dumps
          TMPDIR: /mnt/trustify

      - name: Export and Validate Generated Openapi Spec
        run: |
          cargo xtask openapi
          if ! git diff --quiet; then
              echo "::error::Uncommitted changes (run 'cargo xtask openapi' after making api changes)"
              exit 1
          fi
      - name: Ensure schemas are up-to-date
        run: |
          cargo xtask generate-schemas
          if ! git diff --quiet; then
              echo "::error::Uncommitted changes (run 'cargo xtask generate-schemas' after making changes to the models)"
              exit 1
          fi
      - name: Check the docs
        run: |
          cd docs/book
          npm ci
          make all