Add GitHub CI configuration

Run Rust and JSON schema tests against all commits.

Set Rust MSRV to 1.63

Imported from
https://github.com/landlock-lsm/rust-landlock/blob/main/.github/workflows/rust.yml

Signed-off-by: Mickaël Salaün <mic@digikod.net>

Author: l0kod

.github/workflows/rust.yml

@@ -0,0 +1,130 @@
+name: Rust checks
+
+permissions: {}
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+env:
+  CARGO_TERM_COLOR: always
+  RUSTDOCFLAGS: -D warnings
+  RUSTFLAGS: -D warnings
+
+# Ubuntu versions: https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners#supported-runners-and-hardware-resources
+
+jobs:
+  commit_list:
+    runs-on: ubuntu-22.04
+    steps:
+
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+
+    - name: Get commit list (push)
+      id: get_commit_list_push
+      if: ${{ github.event_name == 'push' }}
+      run: |
+        echo "id0=$GITHUB_SHA" > $GITHUB_OUTPUT
+        echo "List of tested commits:" > $GITHUB_STEP_SUMMARY
+        sed -n 's,^id[0-9]\+=\(.*\),- https://github.com/landlock-lsm/landlockconfig/commit/\1,p' -- $GITHUB_OUTPUT >> $GITHUB_STEP_SUMMARY
+
+    - name: Get commit list (PR)
+      id: get_commit_list_pr
+      if: ${{ github.event_name == 'pull_request' }}
+      run: |
+        git rev-list --reverse refs/remotes/origin/${{ github.base_ref }}..${{ github.event.pull_request.head.sha }} | awk '{ print "id" NR "=" $1 }' > $GITHUB_OUTPUT
+        git diff --quiet ${{ github.event.pull_request.head.sha }} ${{ github.sha }} || echo "id0=$GITHUB_SHA" >> $GITHUB_OUTPUT
+        echo "List of tested commits:" > $GITHUB_STEP_SUMMARY
+        sed -n 's,^id[0-9]\+=\(.*\),- https://github.com/landlock-lsm/landlockconfig/commit/\1,p' -- $GITHUB_OUTPUT >> $GITHUB_STEP_SUMMARY
+
+    outputs:
+      commits: ${{ toJSON(steps.*.outputs.*) }}
+
+  ubuntu_22_schema:
+    runs-on: ubuntu-22.04
+    needs: commit_list
+    strategy:
+      fail-fast: false
+      matrix:
+        commit: ${{ fromJSON(needs.commit_list.outputs.commits) }}
+    steps:
+
+    - uses: actions/checkout@v4
+      with:
+        ref: ${{ matrix.commit }}
+
+    - name: Check JSON schema
+      run: ./schema/check.sh examples/mini-write-tmp.json
+
+  ubuntu_22_rust_msrv:
+    runs-on: ubuntu-22.04
+    needs: commit_list
+    strategy:
+      fail-fast: false
+      matrix:
+        commit: ${{ fromJSON(needs.commit_list.outputs.commits) }}
+    steps:
+
+    - uses: actions/checkout@v4
+      with:
+        ref: ${{ matrix.commit }}
+
+    - name: Get MSRV
+      run: sed -n 's/^rust-version = "\([0-9.]\+\)"$/RUST_TOOLCHAIN=\1/p' Cargo.toml >> $GITHUB_ENV
+
+    - name: Install Rust MSRV
+      run: |
+        rm ~/.cargo/bin/{cargo-fmt,rustfmt} || :
+        rustup default ${{ env.RUST_TOOLCHAIN }}
+        rustup update ${{ env.RUST_TOOLCHAIN }}
+
+    - name: Build
+      run: rustup run ${{ env.RUST_TOOLCHAIN }} cargo build --verbose
+
+    - name: Build tests
+      run: rustup run ${{ env.RUST_TOOLCHAIN }} cargo build --tests --verbose
+
+    - name: Run tests
+      run: rustup run ${{ env.RUST_TOOLCHAIN }} cargo test --verbose
+
+  ubuntu_22_rust_stable:
+    runs-on: ubuntu-22.04
+    needs: commit_list
+    strategy:
+      fail-fast: false
+      matrix:
+        commit: ${{ fromJSON(needs.commit_list.outputs.commits) }}
+    steps:
+
+    - name: Install Rust stable
+      run: |
+        rm ~/.cargo/bin/{cargo-fmt,rustfmt} || :
+        rustup default stable
+        rustup component add rustfmt clippy
+        rustup update
+
+    - uses: actions/checkout@v4
+      with:
+        ref: ${{ matrix.commit }}
+
+    - name: Build
+      run: rustup run stable cargo build --verbose
+
+    - name: Run tests
+      run: rustup run stable cargo test --verbose
+
+    - name: Check format
+      run: rustup run stable cargo fmt --all -- --check
+
+    - name: Check source with Clippy
+      run: rustup run stable cargo clippy -- --deny warnings
+
+    - name: Check tests with Clippy
+      run: rustup run stable cargo clippy --tests -- --deny warnings
+
+    - name: Check documentation
+      run: rustup run stable cargo doc --no-deps

Cargo.toml

@@ -2,6 +2,7 @@
 name = "landlockconfig"
 version = "0.1.0"
 edition = "2021"
+rust-version = "1.63"
 description = "Sandboxer library leveraging Landlock with JSON configuration"
 homepage = "https://landlock.io"
 repository = "https://github.com/landlock-lsm/island"