CI: added basic set of workflows.

Author: bavshin-f5

.github/workflows/cargo-deny.yaml

@@ -0,0 +1,24 @@
+name: cargo-deny
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        checks:
+          - advisories
+          - bans licenses sources
+
+    # Prevent sudden announcement of a new advisory from failing ci:
+    continue-on-error: ${{ matrix.checks == 'advisories' }}
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: EmbarkStudios/cargo-deny-action@34899fc7ba81ca6268d5947a7a16b4649013fea1 # v2.0.11
+        with:
+          command: check ${{ matrix.checks }}

.github/workflows/nginx.yaml

@@ -0,0 +1,109 @@
+name: NGINX
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+env:
+  CARGO_TERM_COLOR: 'always'
+  RUST_BACKTRACE: '1'
+  NGX_CONFIGURE_CMD: >-
+    auto/configure
+    --with-compat
+    --with-debug
+    --with-http_realip_module
+    --with-http_ssl_module
+    --with-http_v2_module
+    --with-stream
+    --with-stream_realip_module
+    --with-stream_ssl_module
+
+  NGX_CONFIGURE_UNIX: >-
+    --with-http_v3_module
+    --with-threads
+
+  NGX_CONFIGURE_DYNAMIC_MODULES: >-
+    --add-dynamic-module=${{ github.workspace }}
+  NGX_CONFIGURE_STATIC_MODULES: >-
+    --add-module=${{ github.workspace }}
+
+  NGX_TEST_FILES: t
+  NGX_TEST_GLOBALS_DYNAMIC: >-
+    load_module ${{ github.workspace }}/nginx/objs/ngx_http_acme_module.so;
+
+jobs:
+  linux:
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        nginx-ref:
+          - master
+          - stable-1.28
+        module:
+          - static
+          - dynamic
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ matrix.nginx-ref }}
+          repository: 'nginx/nginx'
+          path: 'nginx'
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          repository: 'nginx/nginx-tests'
+          path: 'nginx/tests'
+          sparse-checkout: |
+            lib
+
+      - uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
+        with:
+          toolchain: stable
+
+      - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        with:
+          path: |
+            ~/.cargo/bin/
+            ~/.cargo/registry/index/
+            ~/.cargo/registry/cache/
+            ~/.cargo/git/db/
+            nginx/objs/**/CACHEDIR.TAG
+            nginx/objs/**/ngx-debug
+            nginx/objs/**/ngx-release
+          key: ${{ runner.os }}-nginx-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: ${{ runner.os }}-nginx-
+
+      - name: Configure nginx with static modules
+        if: matrix.module == 'static'
+        working-directory: nginx
+        run: |
+          ${NGX_CONFIGURE_CMD} \
+              ${NGX_CONFIGURE_UNIX} \
+              ${NGX_CONFIGURE_STATIC_MODULES}
+
+      - name: Configure nginx with dynamic modules
+        if: matrix.module != 'static'
+        working-directory: nginx
+        run: |
+          ${NGX_CONFIGURE_CMD} \
+              ${NGX_CONFIGURE_UNIX} \
+              ${NGX_CONFIGURE_DYNAMIC_MODULES}
+          echo TEST_NGINX_GLOBALS="$NGX_TEST_GLOBALS_DYNAMIC" >> "$GITHUB_ENV"
+
+      - name: Build nginx
+        working-directory: nginx
+        run: make -j$(nproc)
+
+      - name: Run tests
+        env:
+          PERL5LIB: ${{ github.workspace }}/nginx/tests/lib
+          TEST_NGINX_BINARY: ${{ github.workspace }}/nginx/objs/nginx
+          TEST_NGINX_MODULES: ${{ github.workspace }}/nginx/objs
+          TEST_NGINX_VERBOSE: 1
+        run: |
+          prove -j$(nproc) --state=save ${NGX_TEST_FILES} || prove -v --state=failed

deny.toml

@@ -0,0 +1,22 @@
+[bans]
+multiple-versions = "warn"
+
+[graph]
+all-features = true
+
+[licenses]
+allow = [
+    "Apache-2.0",
+    "BSD-3-Clause",
+    "ISC",
+    "MIT",
+    "Unicode-3.0",
+]
+confidence-threshold = 0.8
+
+[[licenses.clarify]]
+crate = "ring"
+expression = "MIT AND ISC AND OpenSSL"
+license-files = [
+    { path = "LICENSE", hash = 0xbd0eed23 }
+]