]>
git.ipfire.org Git - thirdparty/pdns.git/blob - tasks.py
d6b0c670fbd893440f8902c7cdf93648d11fd5dc
1 from invoke
import task
2 from invoke
.exceptions
import Failure
, UnexpectedExit
31 auth_build_deps
= [ # FIXME: perhaps we should be stealing these from the debian (Ubuntu) control file
32 'default-libmysqlclient-dev',
34 'libcurl4-openssl-dev',
70 dnsdist_build_deps
= [
82 auth_test_deps
= [ # FIXME: we should be generating some of these from shlibdeps in build
87 'default-jre-headless',
94 'libboost-serialization1.71.0',
143 'texlive-formats-extra',
144 'texlive-latex-extra',
149 c
.sudo('sed -i \'s/azure\.//\' /etc/apt/sources.list')
150 c
.sudo('apt-get update')
151 c
.sudo('apt-get -qq -y --allow-downgrades dist-upgrade')
154 def install_clang(c
):
156 install clang-12 and llvm-12
158 c
.sudo('apt-get -qq -y --no-install-recommends install clang-12 llvm-12')
161 def install_clang_runtime(c
):
162 # this gives us the symbolizer, for symbols in asan/ubsan traces
163 c
.sudo('apt-get -qq -y --no-install-recommends install clang-12')
165 def install_libdecaf(c
, product
):
166 c
.run('git clone https://git.code.sf.net/p/ed448goldilocks/code /tmp/libdecaf')
167 with c
.cd('/tmp/libdecaf'):
168 c
.run('git checkout 41f349')
169 c
.run('cmake -B build '
170 '-DCMAKE_INSTALL_PREFIX=/usr/local '
171 '-DCMAKE_INSTALL_LIBDIR=lib '
172 '-DENABLE_STATIC=OFF '
173 '-DENABLE_TESTS=OFF '
174 '-DCMAKE_C_FLAGS="-Wno-sizeof-array-div -Wno-array-parameter" .')
175 c
.run('make -C build')
176 c
.run('sudo make -C build install')
177 c
.sudo(f
'mkdir -p /opt/{product}/libdecaf')
178 c
.sudo(f
'cp /usr/local/lib/libdecaf.so* /opt/{product}/libdecaf/.')
181 def install_doc_deps(c
):
182 c
.sudo('apt-get install -qq -y ' + ' '.join(doc_deps
))
185 def install_doc_deps_pdf(c
):
186 c
.sudo('apt-get install -qq -y ' + ' '.join(doc_deps_pdf
))
189 def install_auth_build_deps(c
):
190 c
.sudo('apt-get install -qq -y --no-install-recommends ' + ' '.join(all_build_deps
+ git_build_deps
+ auth_build_deps
))
191 install_libdecaf(c
, 'pdns-auth')
193 def setup_authbind(c
):
194 c
.sudo('touch /etc/authbind/byport/53')
195 c
.sudo('chmod 755 /etc/authbind/byport/53')
197 auth_backend_test_deps
= dict(
198 gsqlite3
=['sqlite3'],
199 gmysql
=['default-libmysqlclient-dev'],
200 gpgsql
=['libpq-dev'],
208 godbc_sqlite3
=['libsqliteodbc'],
209 godbc_mssql
=['freetds-bin','tdsodbc'],
214 @task(help={'backend': 'Backend to install test deps for, e.g. gsqlite3; can be repeated'}, iterable
=['backend'], optional
=['backend'])
215 def install_auth_test_deps(c
, backend
): # FIXME: rename this, we do way more than apt-get
218 extra
.extend(auth_backend_test_deps
[b
])
219 c
.sudo('apt-get -y -qq install ' + ' '.join(extra
+auth_test_deps
))
221 c
.run('chmod +x /opt/pdns-auth/bin/* /opt/pdns-auth/sbin/*')
222 # c.run('''if [ ! -e $HOME/bin/jdnssec-verifyzone ]; then
223 # wget https://github.com/dblacka/jdnssec-tools/releases/download/0.14/jdnssec-tools-0.14.tar.gz
224 # tar xfz jdnssec-tools-0.14.tar.gz -C $HOME
225 # rm jdnssec-tools-0.14.tar.gz
227 # echo 'export PATH=$HOME/jdnssec-tools-0.14/bin:$PATH' >> $BASH_ENV''') # FIXME: why did this fail with no error?
228 c
.run('touch regression-tests/tests/verify-dnssec-zone/allow-missing regression-tests.nobackend/rectify-axfr/allow-missing') # FIXME: can this go?
229 # FIXME we may want to start a background recursor here to make ALIAS tests more robust
233 c
.sudo('mkdir -p /usr/local/lib')
234 c
.sudo('cp /opt/pdns-auth/libdecaf/libdecaf.so* /usr/local/lib/.')
237 def install_rec_bulk_deps(c
): # FIXME: rename this, we do way more than apt-get
238 c
.sudo('apt-get --no-install-recommends -qq -y install ' + ' '.join(rec_bulk_deps
))
239 c
.run('chmod +x /opt/pdns-recursor/bin/* /opt/pdns-recursor/sbin/*')
242 def install_rec_test_deps(c
): # FIXME: rename this, we do way more than apt-get
243 c
.sudo('apt-get --no-install-recommends install -qq -y ' + ' '.join(rec_bulk_deps
) + ' \
244 pdns-server pdns-backend-bind daemontools \
245 jq libfaketime lua-posix lua-socket bc authbind \
246 python3-venv python3-dev default-libmysqlclient-dev libpq-dev \
247 protobuf-compiler snmpd prometheus')
249 c
.run('chmod +x /opt/pdns-recursor/bin/* /opt/pdns-recursor/sbin/*')
253 c
.run('sed "s/agentxperms 0700 0755 recursor/agentxperms 0777 0755/g" regression-tests.recursor-dnssec/snmpd.conf | sudo tee /etc/snmp/snmpd.conf')
254 c
.sudo('systemctl restart snmpd')
256 c
.sudo('chmod 755 /var/agentx')
259 def install_dnsdist_test_deps(c
): # FIXME: rename this, we do way more than apt-get
260 c
.sudo('apt-get install -qq -y \
265 libcurl4-openssl-dev \
278 python3-venv snmpd prometheus')
279 c
.run('sed "s/agentxperms 0700 0755 dnsdist/agentxperms 0777 0755/g" regression-tests.dnsdist/snmpd.conf | sudo tee /etc/snmp/snmpd.conf')
280 c
.sudo('systemctl restart snmpd')
282 c
.sudo('chmod 755 /var/agentx')
285 def install_rec_build_deps(c
):
286 c
.sudo('apt-get install -qq -y --no-install-recommends ' + ' '.join(all_build_deps
+ git_build_deps
+ rec_build_deps
))
289 def install_dnsdist_build_deps(c
):
290 c
.sudo('apt-get install -qq -y --no-install-recommends ' + ' '.join(all_build_deps
+ git_build_deps
+ dnsdist_build_deps
))
294 c
.run('BUILDER_VERSION=0.0.0-git1 autoreconf -vfi')
297 def ci_docs_build(c
):
298 c
.run('make -f Makefile.sphinx -C docs html')
301 def ci_docs_build_pdf(c
):
302 c
.run('make -f Makefile.sphinx -C docs latexpdf')
305 def ci_docs_upload_master(c
, docs_host
, pdf
, username
, product
, directory
=""):
306 rsync_cmd
= " ".join([
315 c
.run(f
"{rsync_cmd} --delete ./docs/_build/{product}-html-docs/ {username}@{docs_host}:{directory}")
316 c
.run(f
"{rsync_cmd} ./docs/_build/{product}-html-docs.tar.bz2 {username}@{docs_host}:{directory}/html-docs.tar.bz2")
317 c
.run(f
"{rsync_cmd} ./docs/_build/latex/{pdf} {username}@{docs_host}:{directory}")
320 def ci_docs_add_ssh(c
, ssh_key
, host_key
):
321 c
.run('mkdir -m 700 -p ~/.ssh')
322 c
.run(f
'echo "{ssh_key}" > ~/.ssh/id_ed25519')
323 c
.run('chmod 600 ~/.ssh/id_ed25519')
324 c
.run(f
'echo "{host_key}" > ~/.ssh/known_hosts')
327 def get_sanitizers():
328 sanitizers
= os
.getenv('SANITIZERS')
330 sanitizers
= sanitizers
.split('+')
331 sanitizers
= ['--enable-' + sanitizer
for sanitizer
in sanitizers
]
332 sanitizers
= ' '.join(sanitizers
)
342 "-Werror=format-security",
343 "-Werror=string-plus-int",
350 "-Wp,-D_GLIBCXX_ASSERTIONS",
354 def get_base_configure_cmd():
356 f
'CFLAGS="{get_cflags()}"',
357 f
'CXXFLAGS="{get_cxxflags()}"',
361 "--enable-option-checking=fatal",
364 "--enable-fortify-source=auto",
365 "--enable-auto-var-init=pattern",
370 def ci_auth_configure(c
):
371 sanitizers
= get_sanitizers()
373 unittests
= os
.getenv('UNIT_TESTS')
374 if unittests
== 'yes':
375 unittests
= '--enable-unit-tests --enable-backend-unit-tests'
379 fuzz_targets
= os
.getenv('FUZZING_TARGETS')
380 fuzz_targets
= '--enable-fuzz-targets' if fuzz_targets
== 'yes' else ''
396 configure_cmd
= " ".join([
397 get_base_configure_cmd(),
398 "LDFLAGS='-L/usr/local/lib -Wl,-rpath,/usr/local/lib'",
399 f
"--with-modules='{modules}'",
401 "--enable-experimental-pkcs11",
402 "--enable-experimental-gss-tsig",
403 "--enable-remotebackend-zeromq",
406 "--prefix=/opt/pdns-auth",
412 res
= c
.run(configure_cmd
, warn
=True)
414 c
.run('cat config.log')
415 raise UnexpectedExit(res
)
419 def ci_rec_configure(c
):
420 sanitizers
= get_sanitizers()
422 unittests
= os
.getenv('UNIT_TESTS')
423 unittests
= '--enable-unit-tests' if unittests
== 'yes' else ''
425 configure_cmd
= " ".join([
426 get_base_configure_cmd(),
428 "--prefix=/opt/pdns-recursor",
432 "--enable-dns-over-tls",
436 res
= c
.run(configure_cmd
, warn
=True)
438 c
.run('cat config.log')
439 raise UnexpectedExit(res
)
443 def ci_dnsdist_configure(c
, features
):
444 additional_flags
= ''
445 if features
== 'full':
446 features_set
= '--enable-dnstap \
448 --enable-dns-over-tls \
449 --enable-dns-over-https \
451 --prefix=/opt/dnsdist \
459 features_set
= '--disable-dnstap \
467 --without-libsodium \
472 additional_flags
= '-DDISABLE_COMPLETION \
473 -DDISABLE_DELAY_PIPE \
474 -DDISABLE_DYNBLOCKS \
475 -DDISABLE_PROMETHEUS \
477 -DDISABLE_BUILTIN_HTML \
480 -DDISABLE_DEPRECATED_DYNBLOCK \
481 -DDISABLE_LUA_WEB_HANDLERS \
482 -DDISABLE_NON_FFI_DQ_BINDINGS \
483 -DDISABLE_POLICIES_BINDINGS \
484 -DDISABLE_PACKETCACHE_BINDINGS \
485 -DDISABLE_DOWNSTREAM_BINDINGS \
486 -DDISABLE_COMBO_ADDR_BINDINGS \
487 -DDISABLE_CLIENT_STATE_BINDINGS \
488 -DDISABLE_QPS_LIMITER_BINDINGS \
489 -DDISABLE_SUFFIX_MATCH_BINDINGS \
490 -DDISABLE_NETMASK_BINDINGS \
491 -DDISABLE_DNSNAME_BINDINGS \
492 -DDISABLE_DNSHEADER_BINDINGS \
494 -DDISABLE_WEB_CACHE_MANAGEMENT \
495 -DDISABLE_WEB_CONFIG \
496 -DDISABLE_RULES_ALTERING_QUERIES \
497 -DDISABLE_ECS_ACTIONS \
498 -DDISABLE_TOP_N_BINDINGS \
499 -DDISABLE_OCSP_STAPLING \
500 -DDISABLE_HASHED_CREDENTIALS \
501 -DDISABLE_FALSE_SHARING_PADDING \
503 unittests
= ' --enable-unit-tests' if os
.getenv('UNIT_TESTS') == 'yes' else ''
504 sanitizers
= ' '.join('--enable-'+x
for x
in os
.getenv('SANITIZERS').split('+')) if os
.getenv('SANITIZERS') != '' else ''
505 cflags
= '-O1 -Werror=vla -Werror=shadow -Wformat=2 -Werror=format-security -Werror=string-plus-int'
506 cxxflags
= cflags
+ ' -Wp,-D_GLIBCXX_ASSERTIONS ' + additional_flags
507 res
= c
.run('''CFLAGS="%s" \
510 RANLIB=llvm-ranlib-12 \
514 --enable-option-checking=fatal \
515 --enable-fortify-source=auto \
516 --enable-auto-var-init=pattern \
518 --prefix=/opt/dnsdist %s %s %s''' % (cflags
, cxxflags
, features_set
, sanitizers
, unittests
), warn
=True)
520 c
.run('cat config.log')
521 raise UnexpectedExit(res
)
525 c
.run('make -j8 -k V=1')
529 c
.run('make -j8 -k V=1')
532 def ci_dnsdist_make(c
):
533 c
.run('make -j4 -k V=1')
536 def ci_auth_install_remotebackend_test_deps(c
):
537 with c
.cd('modules/remotebackend'):
538 # c.run('bundle config set path vendor/bundle')
539 c
.run('sudo ruby -S bundle install')
540 c
.sudo('apt-get install -qq -y socat')
543 def ci_auth_run_unit_tests(c
):
544 res
= c
.run('make check', warn
=True)
546 c
.run('cat pdns/test-suite.log', warn
=True)
547 c
.run('cat modules/remotebackend/test-suite.log', warn
=True)
548 raise UnexpectedExit(res
)
551 def ci_rec_run_unit_tests(c
):
552 res
= c
.run('make check', warn
=True)
554 c
.run('cat test-suite.log')
555 raise UnexpectedExit(res
)
558 def ci_dnsdist_run_unit_tests(c
):
559 res
= c
.run('make check', warn
=True)
561 c
.run('cat test-suite.log')
562 raise UnexpectedExit(res
)
565 def ci_make_install(c
):
566 res
= c
.run('make install') # FIXME: this builds auth docs - again
569 def add_auth_repo(c
):
570 dist
= 'ubuntu' # FIXME take these from the caller?
574 c
.sudo('apt-get install -qq -y curl gnupg2')
575 if version
== 'master':
576 c
.sudo('curl -s -o /etc/apt/trusted.gpg.d/pdns-repo.asc https://repo.powerdns.com/CBC8B383-pub.asc')
578 c
.sudo('curl -s -o /etc/apt/trusted.gpg.d/pdns-repo.asc https://repo.powerdns.com/FD380FBB-pub.asc')
579 c
.run(f
"echo 'deb [arch=amd64] http://repo.powerdns.com/{dist} {release}-auth-{version} main' | sudo tee /etc/apt/sources.list.d/pdns.list")
580 c
.run("echo 'Package: pdns-*' | sudo tee /etc/apt/preferences.d/pdns")
581 c
.run("echo 'Pin: origin repo.powerdns.com' | sudo tee -a /etc/apt/preferences.d/pdns")
582 c
.run("echo 'Pin-Priority: 600' | sudo tee -a /etc/apt/preferences.d/pdns")
583 c
.sudo('apt-get update')
586 def test_api(c
, product
, backend
=''):
587 if product
== 'recursor':
588 with c
.cd('regression-tests.api'):
589 c
.run(f
'PDNSRECURSOR=/opt/pdns-recursor/sbin/pdns_recursor ./runtests recursor {backend}')
590 elif product
== 'auth':
591 with c
.cd('regression-tests.api'):
592 c
.run(f
'PDNSSERVER=/opt/pdns-auth/sbin/pdns_server PDNSUTIL=/opt/pdns-auth/bin/pdnsutil SDIG=/opt/pdns-auth/bin/sdig MYSQL_HOST="127.0.0.1" PGHOST="127.0.0.1" PGPORT="5432" ./runtests authoritative {backend}')
594 raise Failure('unknown product')
596 backend_regress_tests
= dict(
600 'bind-dnssec-nsec3-both',
601 'bind-dnssec-nsec3-optout-both',
602 'bind-dnssec-nsec3-narrow',
603 # FIXME 'bind-dnssec-pkcs11'
609 lua2
= ['lua2', 'lua2-dnssec'],
610 tinydns
= ['tinydns'],
612 'remotebackend-pipe',
613 'remotebackend-unix',
614 'remotebackend-http',
615 'remotebackend-zeromq',
616 'remotebackend-pipe-dnssec',
617 'remotebackend-unix-dnssec',
618 'remotebackend-http-dnssec',
619 'remotebackend-zeromq-dnssec'
622 'lmdb-nodnssec-both',
625 'lmdb-nsec3-optout-both',
630 'gmysql-nodnssec-both',
632 'gmysql-nsec3-optout-both',
633 'gmysql-nsec3-narrow',
638 'gpgsql-nodnssec-both',
640 'gpgsql-nsec3-optout-both',
641 'gpgsql-nsec3-narrow',
646 'gsqlite3-nodnssec-both',
647 'gsqlite3-nsec3-both',
648 'gsqlite3-nsec3-optout-both',
649 'gsqlite3-nsec3-narrow'
651 godbc_sqlite3
= ['godbc_sqlite3-nodnssec'],
654 'godbc_mssql-nodnssec',
656 'godbc_mssql-nsec3-optout',
657 'godbc_mssql-nsec3-narrow'
664 geoip_mmdb
= ['geoip'],
667 godbc_mssql_credentials
= {"username": "sa", "password": "SAsa12%%"}
678 [pdns-mssql-docker-nodb]
687 Database = pdns.sqlite3
691 Database = pdns.sqlite32
694 def setup_godbc_mssql(c
):
695 with
open(os
.path
.expanduser("~/.odbc.ini"), "a") as f
:
696 f
.write(godbc_config
)
697 c
.sudo('sh -c \'echo "Threading=1" | cat /usr/share/tdsodbc/odbcinst.ini - | tee -a /etc/odbcinst.ini\'')
698 c
.sudo('sed -i "s/libtdsodbc.so/\/usr\/lib\/x86_64-linux-gnu\/odbc\/libtdsodbc.so/g" /etc/odbcinst.ini')
699 c
.run(f
'echo "create database pdns" | isql -v pdns-mssql-docker-nodb {godbc_mssql_credentials["username"]} {godbc_mssql_credentials["password"]}')
700 # FIXME: Skip 8bit-txt-unescaped test
701 c
.run('touch ${PWD}/regression-tests/tests/8bit-txt-unescaped/skip')
703 def setup_godbc_sqlite3(c
):
704 with
open(os
.path
.expanduser("~/.odbc.ini"), "a") as f
:
705 f
.write(godbc_config
)
706 c
.sudo('sed -i "s/libsqlite3odbc.so/\/usr\/lib\/x86_64-linux-gnu\/odbc\/libsqlite3odbc.so/g" /etc/odbcinst.ini')
708 def setup_ldap_client(c
):
709 c
.sudo('DEBIAN_FRONTEND=noninteractive apt-get install -qq -y ldap-utils')
710 c
.sudo('sh -c \'echo "127.0.0.1 ldapserver" | tee -a /etc/hosts\'')
713 def test_auth_backend(c
, backend
):
714 pdns_auth_env_vars
= 'PDNS=/opt/pdns-auth/sbin/pdns_server PDNS2=/opt/pdns-auth/sbin/pdns_server SDIG=/opt/pdns-auth/bin/sdig NOTIFY=/opt/pdns-auth/bin/pdns_notify NSEC3DIG=/opt/pdns-auth/bin/nsec3dig SAXFR=/opt/pdns-auth/bin/saxfr ZONE2SQL=/opt/pdns-auth/bin/zone2sql ZONE2LDAP=/opt/pdns-auth/bin/zone2ldap ZONE2JSON=/opt/pdns-auth/bin/zone2json PDNSUTIL=/opt/pdns-auth/bin/pdnsutil PDNSCONTROL=/opt/pdns-auth/bin/pdns_control PDNSSERVER=/opt/pdns-auth/sbin/pdns_server SDIG=/opt/pdns-auth/bin/sdig GMYSQLHOST=127.0.0.1 GMYSQL2HOST=127.0.0.1 MYSQL_HOST="127.0.0.1" PGHOST="127.0.0.1" PGPORT="5432"'
716 if backend
== 'remote':
717 ci_auth_install_remotebackend_test_deps(c
)
719 if backend
== 'authpy':
720 with c
.cd('regression-tests.auth-py'):
721 c
.run(f
'{pdns_auth_env_vars} WITHKERBEROS=YES ./runtests')
724 if backend
== 'godbc_sqlite3':
725 setup_godbc_sqlite3(c
)
726 with c
.cd('regression-tests'):
727 for variant
in backend_regress_tests
[backend
]:
728 c
.run(f
'{pdns_auth_env_vars} GODBC_SQLITE3_DSN=pdns-sqlite3-1 ./start-test-stop 5300 {variant}')
731 if backend
== 'godbc_mssql':
733 with c
.cd('regression-tests'):
734 for variant
in backend_regress_tests
[backend
]:
735 c
.run(f
'{pdns_auth_env_vars} GODBC_MSSQL_PASSWORD={godbc_mssql_credentials["password"]} GODBC_MSSQL_USERNAME={godbc_mssql_credentials["username"]} GODBC_MSSQL_DSN=pdns-mssql-docker GODBC_MSSQL2_PASSWORD={godbc_mssql_credentials["password"]} GODBC_MSSQL2_USERNAME={godbc_mssql_credentials["username"]} GODBC_MSSQL2_DSN=pdns-mssql-docker ./start-test-stop 5300 {variant}')
738 if backend
== 'ldap':
741 if backend
== 'geoip_mmdb':
742 with c
.cd('regression-tests'):
743 for variant
in backend_regress_tests
[backend
]:
744 c
.run(f
'{pdns_auth_env_vars} geoipdatabase=../modules/geoipbackend/regression-tests/GeoLiteCity.mmdb ./start-test-stop 5300 {variant}')
747 with c
.cd('regression-tests'):
748 if backend
== 'lua2':
749 c
.run('touch trustedkeys') # avoid silly error during cleanup
750 for variant
in backend_regress_tests
[backend
]:
751 c
.run(f
'{pdns_auth_env_vars} ./start-test-stop 5300 {variant}')
753 if backend
== 'gsqlite3':
754 with c
.cd('regression-tests.nobackend'):
755 c
.run(f
'{pdns_auth_env_vars} ./runtests')
756 c
.run('/opt/pdns-auth/bin/pdnsutil test-algorithms')
760 def test_ixfrdist(c
):
761 with c
.cd('regression-tests.ixfrdist'):
762 c
.run('IXFRDISTBIN=/opt/pdns-auth/bin/ixfrdist ./runtests')
766 c
.run('chmod +x /opt/dnsdist/bin/*')
767 c
.run('ls -ald /var /var/agentx /var/agentx/master')
768 c
.run('ls -al /var/agentx/master')
769 with c
.cd('regression-tests.dnsdist'):
770 c
.run('DNSDISTBIN=/opt/dnsdist/bin/dnsdist ./runtests')
773 def test_regression_recursor(c
):
774 c
.run('/opt/pdns-recursor/sbin/pdns_recursor --version')
775 c
.run('PDNSRECURSOR=/opt/pdns-recursor/sbin/pdns_recursor RECCONTROL=/opt/pdns-recursor/bin/rec_control SKIP_IPV6_TESTS=y ./build-scripts/test-recursor')
778 def test_bulk_recursor(c
, threads
, mthreads
, shards
):
779 # We run an extremely small version of the bulk test, as GH does not seem to be able to handle the UDP load
780 with c
.cd('regression-tests'):
781 c
.run('curl -LO http://s3-us-west-1.amazonaws.com/umbrella-static/top-1m.csv.zip')
782 c
.run('unzip top-1m.csv.zip -d .')
783 c
.run('chmod +x /opt/pdns-recursor/bin/* /opt/pdns-recursor/sbin/*')
784 c
.run(f
'DNSBULKTEST=/usr/bin/dnsbulktest RECURSOR=/opt/pdns-recursor/sbin/pdns_recursor RECCONTROL=/opt/pdns-recursor/bin/rec_control THRESHOLD=95 TRACE=no ./timestamp ./recursor-test 5300 100 {threads} {mthreads} {shards}')
787 def install_swagger_tools(c
):
788 c
.run('npm install -g api-spec-converter')
791 def swagger_syntax_check(c
):
792 c
.run('api-spec-converter docs/http-api/swagger/authoritative-api-swagger.yaml -f swagger_2 -t openapi_3 -s json -c')
795 def install_coverity_tools(c
, project
):
796 token
= os
.getenv('COVERITY_TOKEN')
797 c
.run(f
'curl -s https://scan.coverity.com/download/linux64 --data "token={token}&project={project}" | gunzip | sudo tar xvf /dev/stdin --strip-components=1 --no-same-owner -C /usr/local', hide
=True)
800 def coverity_clang_configure(c
):
801 c
.sudo('/usr/local/bin/cov-configure --template --comptype clangcc --compiler clang++-12')
804 def coverity_make(c
):
805 c
.run('/usr/local/bin/cov-build --dir cov-int make -j8 -k')
808 def coverity_tarball(c
, tarball
):
809 c
.run(f
'tar caf {tarball} cov-int')
812 def coverity_upload(c
, email
, project
, tarball
):
813 token
= os
.getenv('COVERITY_TOKEN')
814 c
.run(f
'curl --form token={token} \
815 --form email="{email}" \
816 --form file=@{tarball} \
817 --form version="$(./builder-support/gen-version)" \
818 --form description="master build" \
819 https://scan.coverity.com/builds?project={project}', hide
=True)
823 if '/usr/lib/ccache' not in os
.environ
['PATH']:
824 os
.environ
['PATH']='/usr/lib/ccache:'+os
.environ
['PATH']