CI coverity: Use Debian package depends lists (#4004)

diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 15fe4bd3380610189c1f3c34a7dc7284ddbb6138..a87a8c06639a8b8d39bbcf4312a2fab197fc2096 100644 (file)
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -15,69 +15,28 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
 
-      - name: Install build dependencies
+      - name: Package manager performance improvements
         run: |
+          sudo sh -c 'echo force-unsafe-io > /etc/dpkg/dpkg.cfg.d/02speedup'
+          echo 'man-db man-db/auto-update boolean false' | sudo debconf-set-selections
+          sudo dpkg-reconfigure man-db
+          sudo sed -i 's/^update_initramfs=.*/update_initramfs=no/' /etc/initramfs-tools/update-initramfs.conf
           sudo apt-get update
-          sudo apt-get install -y --no-install-recommends \
-          autoconf \
-          build-essential \
-          debhelper \
-          devscripts \
-          dh-make \
-          dovecot-dev \
-          doxygen \
-          fakeroot \
-          firebird-dev \
-          freetds-dev \
-          graphviz \
-          ldap-utils \
-          libcap-dev \
-          libcollectdclient-dev \
-          libcurl4-openssl-dev \
-          libgdbm-dev \
-          libgoogle-perftools-dev \
-          libhiredis-dev \
-          libidn11-dev \
-          libiodbc2 \
-          libiodbc2-dev \
-          libjson-c-dev \
-          libjson-c4 \
-          libjson-perl \
-          libkqueue-dev \
-          libkrb5-dev \
-          libldap2-dev \
-          libluajit-5.1-dev \
-          libmemcached-dev \
-          libmysqlclient-dev \
-          libnl-genl-3-dev \
-          libpam0g-dev \
-          libpcap-dev \
-          libpcre3-dev \
-          libperl-dev \
-          libpq-dev \
-          libpython-all-dev \
-          libreadline-dev \
-          libsnmp-dev \
-          libssl-dev \
-          libtalloc-dev \
-          libunbound-dev \
-          libwbclient-dev \
-          libykclient-dev \
-          libyubikey-dev \
-          lintian \
-          luajit \
-          lynx \
-          openssl \
-          pbuilder \
-          python-dev \
-          python3-pip \
-          quilt
+
+      - name: Install build dependencies
+        run: |
+          sudo apt-get install -y --no-install-recommends build-essential devscripts equivs quilt
+          debian/rules debian/control
+          sudo mk-build-deps -irt"apt-get -y --no-install-recommends" debian/control
+          sudo mk-build-deps -irt"apt-get -y --no-install-recommends" scripts/ci/extra-packages.debian.control
+
       - name: Cache coverity tool
         uses: actions/cache@v2
         id: cache-coverity
         with:
           key: coverity-tool-cache-${{ runner.os }}
           path: coverity_tool.tar.gz
+
       - name: Download coverity tool
         if: steps.cache-coverity.outputs.cache-hit != 'true'
         run: |
@@ -86,15 +45,18 @@ jobs:
             -O coverity_tool.tar.gz
         env:
           TOKEN: ${{ secrets.COVERITY_SCAN_TOKEN }}
+
       - name: Extract coverity tool
         run: |
           mkdir coverity_tool
           tar xzf coverity_tool.tar.gz --strip 1 -C coverity_tool
+
       - name: Build with Coverity
         run: |
           export PATH=`pwd`/coverity_tool/bin:$PATH
           ./configure -with-rlm-python-bin=/usr/bin/python2.7
           cov-build --dir cov-int make
+
       - name: Submit result
         run: |
           tar czf cov-int.tar.gz cov-int