workflows/test: build FFmpeg once per TLS backend and reuse via artifacts

Signed-off-by: Jack Lau <jacklau1222gm@gmail.com>

Author: JackLau1222

.github/workflows/test.yml

@@ -62,23 +62,92 @@ jobs:
           make fate -j$(nproc) SAMPLES=$(pwd)/fate-suite
     runs-on: ubuntu-22.04
 
-  srs:
-    name: "FFmpeg with SRS"
+  build:
+    name: "Build FFmpeg (${{ matrix.tls }})"
+    strategy:
+      fail-fast: false
+      matrix:
+        tls: [openssl, gnutls, mbedtls]
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
+      - name: Install dependencies
+        run: |
+          set -euxo pipefail
+          sudo apt-get update
+          sudo apt-get install -y nasm pkg-config jq libopus-dev libx264-dev
+          if [[ "${{ matrix.tls }}" == "openssl" ]]; then
+            sudo apt-get install -y libssl-dev
+          elif [[ "${{ matrix.tls }}" == "gnutls" ]]; then
+            sudo apt-get install -y gnutls-bin libgnutls28-dev
+          elif [[ "${{ matrix.tls }}" == "mbedtls" ]]; then
+            sudo apt-get install -y cmake
+          fi
+      - name: Build mbedTLS
+        if: matrix.tls == 'mbedtls'
+        run: |
+          set -euxo pipefail
+          curl -s -L https://github.com/Mbed-TLS/mbedtls/releases/download/mbedtls-3.6.2/mbedtls-3.6.2.tar.bz2 | tar xj
+          cd mbedtls-3.6.2
+          scripts/config.py set MBEDTLS_SSL_DTLS_SRTP
+          mkdir build && cd build
+          cmake -DCMAKE_INSTALL_PREFIX=$HOME/.release/mbedtls \
+            -DUSE_SHARED_MBEDTLS_LIBRARY=Off -DENABLE_SHARED=Off -DENABLE_STATIC=On ..
+          make -j$(nproc) && make install
       - name: Build FFmpeg
         run: |
           set -euxo pipefail
+          if [[ "${{ matrix.tls }}" == "openssl" ]]; then
+            ./configure --enable-muxer=whip --enable-openssl --enable-version3 \
+              --enable-libx264 --enable-gpl --enable-libopus
+          elif [[ "${{ matrix.tls }}" == "gnutls" ]]; then
+            ./configure --enable-muxer=whip --enable-gnutls \
+              --enable-libx264 --enable-gpl --enable-libopus
+          elif [[ "${{ matrix.tls }}" == "mbedtls" ]]; then
+            PKG_CONFIG_PATH="$HOME/.release/mbedtls/lib/pkgconfig" \
+              ./configure --enable-muxer=whip --enable-mbedtls --enable-version3 \
+              --extra-cflags="-I$HOME/.release/mbedtls/include" \
+              --extra-ldflags="-L$HOME/.release/mbedtls/lib" \
+              --pkg-config-flags="--static" \
+              --enable-libx264 --enable-gpl --enable-libopus
+          fi
+          make -j$(nproc)
+          ./ffmpeg -version && ./ffmpeg -muxers 2>/dev/null |grep whip
+      - name: Upload FFmpeg binary
+        uses: actions/upload-artifact@v4
+        with:
+          name: ffmpeg-${{ matrix.tls }}
+          path: ./ffmpeg
+          retention-days: 1
+    runs-on: ubuntu-22.04
 
-          # Install dependencies
+  srs:
+    name: "SRS with FFmpeg (${{ matrix.tls }})"
+    needs: build
+    strategy:
+      fail-fast: false
+      matrix:
+        tls: [openssl, gnutls, mbedtls]
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Install runtime dependencies
+        run: |
+          set -euxo pipefail
           sudo apt-get update
-          sudo apt-get install -y nasm pkg-config jq libssl-dev libopus-dev libx264-dev
-
-          # Build FFmpeg with WebRTC support
-          ./configure --enable-muxer=whip --enable-openssl --enable-version3 \
-            --enable-libx264 --enable-gpl --enable-libopus
-          make -j$(nproc)
+          sudo apt-get install -y jq libopus-dev libx264-dev
+          if [[ "${{ matrix.tls }}" == "openssl" ]]; then
+            sudo apt-get install -y libssl-dev
+          elif [[ "${{ matrix.tls }}" == "gnutls" ]]; then
+            sudo apt-get install -y libgnutls28-dev
+          fi
+      - name: Download FFmpeg binary
+        uses: actions/download-artifact@v4
+        with:
+          name: ffmpeg-${{ matrix.tls }}
+      - name: Verify FFmpeg
+        run: |
+          chmod +x ./ffmpeg
           ./ffmpeg -version && ./ffmpeg -muxers 2>/dev/null |grep whip
       - name: Start SRS Docker container
         run: |
@@ -133,22 +202,32 @@ jobs:
     runs-on: ubuntu-22.04
 
   pion:
-    name: "FFmpeg with Pion"
+    name: "Pion with FFmpeg (${{ matrix.tls }})"
+    needs: build
+    strategy:
+      fail-fast: false
+      matrix:
+        tls: [openssl, gnutls, mbedtls]
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-      - name: Build FFmpeg
+      - name: Install runtime dependencies
         run: |
           set -euxo pipefail
-
-          # Install dependencies
           sudo apt-get update
-          sudo apt-get install -y nasm pkg-config jq libssl-dev libopus-dev libx264-dev
-
-          # Build FFmpeg with WebRTC support
-          ./configure --enable-muxer=whip --enable-openssl --enable-version3 \
-            --enable-libx264 --enable-gpl --enable-libopus
-          make -j$(nproc)
+          sudo apt-get install -y jq libopus-dev libx264-dev
+          if [[ "${{ matrix.tls }}" == "openssl" ]]; then
+            sudo apt-get install -y libssl-dev
+          elif [[ "${{ matrix.tls }}" == "gnutls" ]]; then
+            sudo apt-get install -y libgnutls28-dev
+          fi
+      - name: Download FFmpeg binary
+        uses: actions/download-artifact@v4
+        with:
+          name: ffmpeg-${{ matrix.tls }}
+      - name: Verify FFmpeg
+        run: |
+          chmod +x ./ffmpeg
           ./ffmpeg -version && ./ffmpeg -muxers 2>/dev/null |grep whip
       - name: Set up Go
         uses: actions/setup-go@v4
@@ -198,22 +277,32 @@ jobs:
     runs-on: ubuntu-22.04
 
   janus:
-    name: "FFmpeg with Janus"
+    name: "Janus with FFmpeg (${{ matrix.tls }})"
+    needs: build
+    strategy:
+      fail-fast: false
+      matrix:
+        tls: [openssl, gnutls, mbedtls]
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-      - name: Build FFmpeg
+      - name: Install runtime dependencies
         run: |
           set -euxo pipefail
-
-          # Install dependencies
           sudo apt-get update
-          sudo apt-get install -y nasm pkg-config jq libssl-dev libopus-dev libx264-dev
-
-          # Build FFmpeg with WebRTC support
-          ./configure --enable-muxer=whip --enable-openssl --enable-version3 \
-            --enable-libx264 --enable-gpl --enable-libopus
-          make -j$(nproc)
+          sudo apt-get install -y jq libopus-dev libx264-dev
+          if [[ "${{ matrix.tls }}" == "openssl" ]]; then
+            sudo apt-get install -y libssl-dev
+          elif [[ "${{ matrix.tls }}" == "gnutls" ]]; then
+            sudo apt-get install -y libgnutls28-dev
+          fi
+      - name: Download FFmpeg binary
+        uses: actions/download-artifact@v4
+        with:
+          name: ffmpeg-${{ matrix.tls }}
+      - name: Verify FFmpeg
+        run: |
+          chmod +x ./ffmpeg
           ./ffmpeg -version && ./ffmpeg -muxers 2>/dev/null |grep whip
       - name: Start Janus
         run: |
@@ -591,173 +680,17 @@ jobs:
         run: exit 1
     runs-on: ubuntu-22.04
 
-  gnutls:
-    name: "With GnuTLS"
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-      - name: Install GnuTLS and Download Test File
-        run: |
-          set -euxo pipefail
-          sudo apt-get update
-          sudo apt-get install -y nasm pkg-config jq gnutls-bin libgnutls28-dev
-          curl -s -L -O https://github.com/ossrs/ffmpeg-webrtc/releases/download/pre-release/bbb-4mbps-baseline-opus.mp4
-      - name: Build FFmpeg
-        run: |
-          set -euxo pipefail
-
-          # Build FFmpeg with WebRTC support using GnuTLS
-          ./configure --enable-muxer=whip --enable-gnutls
-          make -j$(nproc)
-          ./ffmpeg -version && ./ffmpeg -muxers 2>/dev/null |grep whip
-      - name: Start SRS Docker container
-        run: |
-          set -euxo pipefail
-          ip=$(ifconfig eth0 | grep 'inet ' | awk '{print $2}')
-          docker run --rm -d -p 1935:1935 -p 1985:1985 -p 8080:8080 \
-              --env CANDIDATE=$ip -p 8000:8000/udp \
-              ossrs/srs:5 ./objs/srs -c conf/rtc2rtmp.conf
-      - name: Streaming with FFmpeg
-        run: |
-          set -euxo pipefail
-          nohup ./ffmpeg -t 30 -re -i bbb-4mbps-baseline-opus.mp4 -c copy \
-            -f whip "http://localhost:1985/rtc/v1/whip/?app=live&stream=livestream" \
-            1>ffstdout.log 2>ffstderr.log &
-      - name: Check SRS Streaming
-        id: streaming
-        run: |
-          set -euxo pipefail
-
-          # Check streams in SRS.
-          for ((i=0; i<10; i++)); do
-            STREAM=$(curl -s http://localhost:1985/api/v1/streams/ | jq -r '.streams[].name')
-            if [[ "$STREAM" == "livestream" ]]; then
-              echo 'Test OK';
-              echo "has_stream=true" >> $GITHUB_OUTPUT
-              break;
-            fi
-            sleep 3
-          done
-
-          if [[ "$STREAM" != "livestream" ]]; then
-            echo "Stream not found: $STREAM"
-            echo "has_stream=false" >> $GITHUB_OUTPUT
-          fi
-      - name: Stop FFmpeg normally
-        run: |
-          pkill -SIGINT ffmpeg && sleep 3 ||
-            echo "FFmpeg process not found or already stopped."
-      - name: Show FFmpeg Stdout Log
-        run: cat ffstdout.log
-      - name: Show FFmpeg Stderr Log
-        run: cat ffstderr.log
-      - name: Check FFmpeg Exit Log
-        run: |
-          set -euxo pipefail
-          cat ffstderr.log |grep 'Exiting normally' && exit 0
-          echo "Exiting normally not found in ffstderr.log" && exit 1
-      - name: Check Stream Existence
-        if: ${{ steps.streaming.outputs.has_stream == 'false' }}
-        run: exit 1
-    runs-on: ubuntu-22.04
-
-  mbedtls:
-    name: "With mbedTLS 3.6.2"
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-      - name: Build mbedTLS
-        run: |
-          set -euxo pipefail
-          sudo apt-get update
-          sudo apt-get install -y nasm pkg-config jq cmake
-          curl -s -L https://github.com/Mbed-TLS/mbedtls/releases/download/mbedtls-3.6.2/mbedtls-3.6.2.tar.bz2 | tar xj
-          cd mbedtls-3.6.2
-          scripts/config.py set MBEDTLS_SSL_DTLS_SRTP
-          mkdir build && cd build
-          cmake -DCMAKE_INSTALL_PREFIX=$HOME/.release/mbedtls \
-            -DUSE_SHARED_MBEDTLS_LIBRARY=Off -DENABLE_SHARED=Off -DENABLE_STATIC=On ..
-          make -j$(nproc) && make install
-      - name: Download Test File
-        run: |
-          set -euxo pipefail
-          curl -s -L -O https://github.com/ossrs/ffmpeg-webrtc/releases/download/pre-release/bbb-4mbps-baseline-opus.mp4
-      - name: Build FFmpeg
-        run: |
-          set -euxo pipefail
-
-          # Build FFmpeg with WebRTC support using mbedTLS
-          PKG_CONFIG_PATH="$HOME/.release/mbedtls/lib/pkgconfig" \
-            ./configure --enable-muxer=whip --enable-mbedtls --enable-version3 \
-            --extra-cflags="-I$HOME/.release/mbedtls/include" \
-            --extra-ldflags="-L$HOME/.release/mbedtls/lib" \
-            --pkg-config-flags="--static"
-          make -j$(nproc)
-          ./ffmpeg -version && ./ffmpeg -muxers 2>/dev/null |grep whip
-
-      - name: Start SRS Docker container
-        run: |
-          set -euxo pipefail
-          ip=$(ifconfig eth0 | grep 'inet ' | awk '{print $2}')
-          docker run --rm -d -p 1935:1935 -p 1985:1985 -p 8080:8080 \
-              --env CANDIDATE=$ip -p 8000:8000/udp \
-              ossrs/srs:5 ./objs/srs -c conf/rtc2rtmp.conf
-      - name: Streaming with FFmpeg
-        run: |
-          set -euxo pipefail
-          nohup ./ffmpeg -t 30 -re -i bbb-4mbps-baseline-opus.mp4 -c copy \
-            -f whip "http://localhost:1985/rtc/v1/whip/?app=live&stream=livestream" \
-            1>ffstdout.log 2>ffstderr.log &
-      - name: Check SRS Streaming
-        id: streaming
-        run: |
-          set -euxo pipefail
-
-          # Check streams in SRS.
-          for ((i=0; i<10; i++)); do
-            STREAM=$(curl -s http://localhost:1985/api/v1/streams/ | jq -r '.streams[].name')
-            if [[ "$STREAM" == "livestream" ]]; then
-              echo 'Test OK';
-              echo "has_stream=true" >> $GITHUB_OUTPUT
-              break;
-            fi
-            sleep 3
-          done
-
-          if [[ "$STREAM" != "livestream" ]]; then
-            echo "Stream not found: $STREAM"
-            echo "has_stream=false" >> $GITHUB_OUTPUT
-          fi
-      - name: Stop FFmpeg normally
-        run: |
-          pkill -SIGINT ffmpeg && sleep 3 ||
-            echo "FFmpeg process not found or already stopped."
-      - name: Show FFmpeg Stdout Log
-        run: cat ffstdout.log
-      - name: Show FFmpeg Stderr Log
-        run: cat ffstderr.log
-      - name: Check FFmpeg Exit Log
-        run: |
-          set -euxo pipefail
-          cat ffstderr.log |grep 'Exiting normally' && exit 0
-          echo "Exiting normally not found in ffstderr.log" && exit 1
-      - name: Check Stream Existence
-        if: ${{ steps.streaming.outputs.has_stream == 'false' }}
-        run: exit 1
-    runs-on: ubuntu-22.04
-
   test-done:
     needs:
       - fate
+      - build
       - srs
       - pion
       - janus
       - asan
       - openssl-1-1-1
       - openssl-3-0
       - openssl-latest
-      - gnutls
-      - mbedtls
     steps:
       - run: echo 'All done'
     runs-on: ubuntu-22.04