build(deps): bump serial_test from 3.5.0 to 4.0.1 #1011
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Rust CI | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| paths-ignore: | |
| - '**/*.md' | |
| permissions: {} | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| CARGO_TERM_COLOR: always | |
| jobs: | |
| kbs: | |
| name: Key Broker Service (KBS) | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - instance: ubuntu-24.04 | |
| test_features: "pkcs11,pqc-experimental" | |
| - instance: ubuntu-24.04-arm | |
| test_features: "coco-as-builtin,coco-as-grpc,intel-trust-authority-as,cca-attester,pkcs11" | |
| - instance: s390x-large | |
| test_features: "coco-as-builtin,coco-as-grpc,intel-trust-authority-as,pkcs11" | |
| runs-on: ${{ matrix.instance }} | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Code checkout | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Install Rust toolchain | |
| uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 | |
| with: | |
| components: rustfmt, clippy | |
| - name: Building dependencies installation | |
| run: | | |
| sudo apt-get update && sudo apt-get install -y protobuf-compiler libprotobuf-dev libtss2-dev | |
| - name: Install TDX dependencies | |
| if: ${{ matrix.instance == 'ubuntu-24.04' }} | |
| run: | | |
| curl -L https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | sudo gpg --dearmor --output /usr/share/keyrings/intel-sgx.gpg | |
| echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/intel-sgx.gpg] https://download.01.org/intel-sgx/sgx_repo/ubuntu noble main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list | |
| sudo apt-get update | |
| sudo apt-get install -y libsgx-dcap-quote-verify-dev | |
| - name: setup softhsm for pkcs11 tests | |
| if: contains(matrix.test_features, 'pkcs11') | |
| working-directory: kbs | |
| env: | |
| MATRIX_INSTANCE: ${{ matrix.instance }} | |
| run: | | |
| echo "SETUP tools for pkcs11 ${MATRIX_INSTANCE}" | |
| sudo apt-get install -y --no-install-recommends softhsm2 opensc | |
| mkdir -p "${RUNNER_TEMP}/softhsm/tokens" | |
| echo "directories.tokendir = ${RUNNER_TEMP}/softhsm/tokens" > "${RUNNER_TEMP}/softhsm/softhsm2.conf" | |
| export SOFTHSM2_CONF="${RUNNER_TEMP}/softhsm/softhsm2.conf" | |
| softhsm2-util --init-token --free --label "Trustee pkcs11 test" --so-pin 12345678 --pin 12345678 | |
| - name: Run KBS lint/format/test | |
| timeout-minutes: 10 | |
| env: | |
| SOFTHSM2_CONF: '${{ runner.temp }}/softhsm/softhsm2.conf' | |
| MATRIX_TEST_FEATURES: ${{ matrix.test_features }} | |
| run: make test-kbs-unit TEST_FEATURES="${MATRIX_TEST_FEATURES}" | |
| as: | |
| name: Attestation Service (AS) | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Code checkout | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| fetch-depth: 1 | |
| persist-credentials: false | |
| - name: Install OPA command line tool | |
| uses: open-policy-agent/setup-opa@b2b258e089860efaadaaf71bf6e3aecb4a3eeff1 # v2.4.0 | |
| with: | |
| version: latest | |
| - name: Install build dependencies (protoc, TPM, TDX) | |
| run: | | |
| sudo apt-get update && sudo apt-get install -y protobuf-compiler libprotobuf-dev libtss2-dev | |
| curl -L https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | sudo gpg --dearmor --output /usr/share/keyrings/intel-sgx.gpg | |
| echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/intel-sgx.gpg] https://download.01.org/intel-sgx/sgx_repo/ubuntu noble main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list | |
| sudo apt-get update | |
| sudo apt-get install -y libsgx-dcap-quote-verify-dev | |
| - name: Install Rust toolchain | |
| uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 | |
| with: | |
| components: rustfmt, clippy | |
| - name: OPA policy.rego fmt and check | |
| working-directory: attestation-service | |
| run: make opa-check | |
| - name: Run fmt/clippy/test | |
| run: make test-as-unit | |
| trustee-cli: | |
| name: Trustee CLI | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - instance: ubuntu-24.04 | |
| - instance: ubuntu-24.04-arm | |
| runs-on: ${{ matrix.instance }} | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Code checkout | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Install Rust toolchain | |
| uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 | |
| with: | |
| components: rustfmt, clippy | |
| - name: Building dependencies installation | |
| run: | | |
| sudo apt-get update && sudo apt-get install -y protobuf-compiler libprotobuf-dev libtss2-dev | |
| - name: Install TDX dependencies | |
| if: ${{ matrix.instance == 'ubuntu-24.04' }} | |
| run: | | |
| curl -L https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | sudo gpg --dearmor --output /usr/share/keyrings/intel-sgx.gpg | |
| echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/intel-sgx.gpg] https://download.01.org/intel-sgx/sgx_repo/ubuntu noble main' | sudo tee /etc/apt/sources.list.d/intel-sgx.list | |
| sudo apt-get update | |
| sudo apt-get install -y libsgx-dcap-quote-verify-dev | |
| - name: Run trustee CLI lint/format/test | |
| run: make test-trustee-cli-unit | |