* 5a476a92de Use Path.relative_to instead of Path.parts * 03f41faf9f Update doc for mkosi ssh to mention sd v256 sshd-vsock * e054976d18 Rewrite note on fw deps of kernel modules in manpage * a046243a50 Add python3-pefile to fedora tools conf * 0bab54087e Fix truthy condition * 01c38544b2 code review * 563dca41da code review * 6074d14c0e code review * 7e842db3b1 Don't discard ordering of include/exclude entries in KernelModules= * 0047b64785 build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 * f13325bc4b build(deps): bump actions/checkout from 5.0.0 to 6.0.0 * 9ac31d1795 Add zram and nfnetlink to default initrd * 4bdb47b6da verity: copy signing certificate to /usr/lib/verity.d/ * 8865afde9e Improve manpage output using pandoc lua filter (#4005) * a425313c58 Pass environment to systemd-sysusers invocation * 23f09d5de7 Make Ruff check for dangling whitespace * abeed73d13 qemu: Add missing sandbox * a05872e523 Ssh=yes maps to Ssh=always, update the manpage * 79489534ca Warn of mkosi's sshd lacking support in distros' SElinux policy * 696f99da43 Manpage: Update supported output formats * 21675c4822 Silence swtpm SHA1 signature deprecation warning * df53510982 DOC: update Ssh= to note sd-v256+ already generates sshd-vsock * 50ccef7926 Configure default tools tree with ToolsTree=yes * 0b701c690d opensuse: do not install openSUSE-release for Leap >= 16.0 * 4bababf421 opensuse: fix mirror URL for Leap >= 16.0 * c43123398c config.py: add config_default_proxy_exclude() * 07a0a2be67 installer: Only mount configured state subdirs into sandbox * d5efbf6f8c build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 * 2912ed20d5 PTY forward fixes * 66dab75259 sandbox: Drop all capabilities that don't make sense in userns * 8fe5df4400 Respect SYSTEMD_TINT_BACKGROUND and SYSTEMD_ADJUST_TERMINAL_TITLE * b9d208789d log: Drop konsole hack * 7fa6eac65c Clarify that mkosi.images is not picked up in mkosi.conf.d * 08a0f768dd vmspawn: Support BindUser= * c7c3eaee4e mkosi-vm: Enable universe repository for ubuntu in mkosi-vm * 688e77f1a8 vmspawn: Use --grow-image * c47b7fe57b arch: Switch to the newly established fastly mirror * 7db8f2cda3 Match compressed pacman packages too * e3b3b93c50 Prevent using Overlay=yes with Format=portable * 83a25324b3 Make sure apt sources are installed when BaseTrees= is in the mix * f6fa2fd6a0 test: add unit tests for parents_below() utility function * 1eafbd8d03 Don't print newlines in stash_terminal_title() * bbaf92b50e Don't print newline after ansi sequences * d1b84f5fb3 Look for .sdmagic before we consider a PE binary a UKI/addon * b4efdbf14e Treat /opt the same as /usr for the sandbox * 71ffced0f1 Rework PACKAGE_GLOBS to be a PackageManager classmethod * 29605c2757 Various SPDX and whitespace fixes
87 lines
3.2 KiB
YAML
87 lines
3.2 KiB
YAML
---
|
|
# vi: ts=2 sw=2 et:
|
|
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
# https://github.com/marketplace/actions/super-linter
|
|
name: Lint Code Base
|
|
|
|
on:
|
|
pull_request:
|
|
branches:
|
|
- main
|
|
- v[0-9]+-stable
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
build:
|
|
name: Lint Code Base
|
|
runs-on: ubuntu-24.04
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
steps:
|
|
- name: Repo checkout
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
|
|
with:
|
|
# We need a full repo clone
|
|
fetch-depth: 0
|
|
|
|
- name: Lint Code Base
|
|
uses: super-linter/super-linter/slim@502f4fe48a81a392756e173e39a861f8c8efe056
|
|
env:
|
|
DEFAULT_BRANCH: main
|
|
MULTI_STATUS: false
|
|
VALIDATE_ALL_CODEBASE: false
|
|
VALIDATE_GITHUB_ACTIONS: true
|
|
LINTER_RULES_PATH: .github/linters
|
|
GITHUB_ACTIONS_CONFIG_FILE: actionlint.yml
|
|
|
|
- uses: systemd/mkosi@5a476a92deca8ad54869e5d416217aa1bb137b25
|
|
|
|
- name: Check that tabs are not used in Python code
|
|
run: sh -c '! git grep -P "\\t" -- src/core/generate-bpf-delegate-configs.py src/boot/generate-hwids-section.py src/ukify/ukify.py test/integration-tests/integration-test-wrapper.py'
|
|
|
|
- name: Build tools tree
|
|
run: |
|
|
tee mkosi/mkosi.local.conf <<EOF
|
|
[Build]
|
|
ToolsTreeDistribution=fedora
|
|
ToolsTreeRelease=rawhide
|
|
ToolsTreePackages=
|
|
libgcrypt-devel
|
|
libgpg-error-devel
|
|
musl-gcc
|
|
EOF
|
|
|
|
mkosi -f box -- true
|
|
|
|
- name: Run mypy
|
|
run: |
|
|
mkosi box -- mypy --version
|
|
mkosi box -- mypy src/core/generate-bpf-delegate-configs.py src/boot/generate-hwids-section.py src/test/generate-sym-test.py src/ukify/ukify.py test/integration-tests/integration-test-wrapper.py
|
|
|
|
- name: Run ruff format
|
|
run: |
|
|
mkosi box -- ruff --version
|
|
if ! mkosi box -- ruff format --check src/core/generate-bpf-delegate-configs.py src/boot/generate-hwids-section.py src/test/generate-sym-test.py src/ukify/ukify.py test/integration-tests/integration-test-wrapper.py
|
|
then
|
|
echo "Please run 'ruff format' on the above files or apply the diffs below manually"
|
|
mkosi box -- ruff format --check --quiet --diff src/core/generate-bpf-delegate-configs.py src/boot/generate-hwids-section.py src/test/generate-sym-test.py src/ukify/ukify.py test/integration-tests/integration-test-wrapper.py
|
|
fi
|
|
|
|
- name: Run ruff check
|
|
run: |
|
|
mkosi box -- ruff --version
|
|
mkosi box -- ruff check src/core/generate-bpf-delegate-configs.py src/boot/generate-hwids-section.py src/test/generate-sym-test.py src/ukify/ukify.py test/integration-tests/integration-test-wrapper.py
|
|
|
|
- name: Configure meson
|
|
run: mkosi box -- env CC=clang CXX=clang++ meson setup -Dlocalegen-path=/usr/bin/locale-gen -Dcompat-mutable-uid-boundaries=true build
|
|
|
|
- name: Run clang-tidy
|
|
run: mkosi box -- meson test -C build --suite=clang-tidy --print-errorlogs --no-stdsplit
|
|
|
|
- name: Build with musl
|
|
run: mkosi box -- .github/workflows/build-test-musl.sh
|