.travis.yml

   1 env:
   2   global:
   3   - secure: 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
   4 sudo: required
   5 language: c
   6 dist: xenial
   7 addons:
   8   apt:
   9       packages:
  10         - automake
  11         - autoconf
  12         - libtool
  13         - libssl-dev
  14         - sed
  15         - make
  16         - gawk
  17         - sed
  18         - bash
  19         - dh-exec
  20         - pylint3
  21         - python3-cryptography
  22         - python3-pip
  23         - python3-setuptools
  24         - python3-twisted
  25         - libfuse-dev
  26         - libglib2.0-dev
  27         - libgmp-dev
  28         - expect
  29         - libtasn1-dev
  30         - socat
  31         - findutils
  32         - gnutls-dev
  33         - gnutls-bin
  34         - libasan2
  35         - softhsm2
  36         - libseccomp-dev
  37   coverity_scan:
  38     project:
  39       name: swtpm
  40       description: Build submitted via Travis CI
  41     notification_email: stefanb@linux.vnet.ibm.com
  42     build_command_prepend: "git clone https://github.com/stefanberger/libtpms && cd libtpms && ./autogen.sh --with-openssl --prefix=/usr --with-tpm2 && make -j$(${NPROC:-nproc}) && sudo make install && cd .. && ./autogen.sh --with-openssl"
  43     build_command: make -j$(${NPROC:-nproc})
  44     branch_pattern: coverity_scan
  45 before_install:
  46   - test $TRAVIS_BRANCH != coverity_scan -o ${TRAVIS_JOB_NUMBER##*.} = 1 || exit 0
  47   - |  # We need trousers only for the tss user
  48     if [ "$(uname -s)" = "Linux" ]; then
  49       sudo rm -rf /dev/tpm* # This is a work-around for Bionic where trousers otherwise fails to install
  50       sudo apt-get -y install trousers
  51     fi
  52 script:
  53   - sudo pip3 install --upgrade pip==20.3.3
  54   - sudo pip3 install --upgrade wheel
  55   - sudo pip3 install --upgrade cryptography
  56   - if [ ! -d libtpms ]; then git clone https://github.com/stefanberger/libtpms; fi
  57   - cd libtpms
  58   - if [ -n "${LIBTPMS_GIT_CHECKOUT}" ]; then
  59        git checkout "${LIBTPMS_GIT_CHECKOUT}" -b testing;
  60     fi
  61   - CFLAGS="${LIBTPMS_CFLAGS:--g -O2}" LDFLAGS="${LIBTPMS_LDFLAGS}"
  62        ./autogen.sh --with-openssl --prefix=${LIBTPMS_PREFIX:-/usr} --with-tpm2 ${LIBTPMS_CONFIG}
  63        && make -j$(${NPROC:-nproc})
  64        && sudo make install
  65   - cd ..
  66   - ./autogen.sh ${CONFIG}
  67       && ${SUDO} make clean
  68       && export SWTPM_TEST_EXPENSIVE=${SWTPM_TEST_EXPENSIVE:-1}
  69       && export SWTPM_TEST_IBMTSS2=${SWTPM_TEST_IBMTSS2:-0}
  70       && export SWTPM_TEST_STORE_VOLATILE=${SWTPM_TEST_STORE_VOLATILE:-0}
  71       && ${SUDO} make -j$(${NPROC:-nproc}) ${CHECK} VERBOSE=1
  72   - if [ -n "${RUN_TEST}" ]; then
  73         sudo make install
  74         && sudo ${PREFIX}/bin/swtpm_setup
  75               --tpmstate /tmp --create-ek-cert --create-platform-cert --tpm2
  76          || { exit 1; };
  77     fi
  78 after_failure:
  79   - for f in tests/*.log; do echo ">>>>>>> $f <<<<<<<"; cat $f; done
  80 matrix:
  81   include:
  82     - env: PREFIX="/usr"
  83            CONFIG="--with-openssl --prefix=${PREFIX}"
  84            CHECK="distcheck"
  85            RUN_TEST="1"
  86     - dist: bionic
  87       env: PREFIX="/usr"
  88            CONFIG="--with-openssl --prefix=/usr --enable-test-coverage"
  89            SUDO="sudo"
  90            CHECK="check"
  91            SWTPM_TEST_IBMTSS2="1"
  92            SWTPM_TEST_STORE_VOLATILE="1"
  93       after_success:
  94       - pylint3 --max-line-length=100 src/swtpm_setup/py_swtpm_setup/*.py || exit 1;
  95       - pylint3 --max-line-length=100 samples/py_swtpm_localca/*.py || exit 1;
  96       before_script:
  97       - sudo apt-get -y install tss2
  98       - sudo pip install cpp-coveralls
  99       - p=$PWD; while [ "$PWD" != "/" ]; do chmod o+x . &>/dev/null ; cd .. ; done; cd $p
 100         && sudo mkdir src/swtpm/.libs
 101         && sudo chown nobody src/swtpm src/swtpm/.libs
 102       after_success:
 103         - uidgid="$(id -nu):$(id -ng)" &&
 104           sudo chown -R ${uidgid} ./ &&
 105           cpp-coveralls --gcov-options '\-lp' -e libtpms
 106     - env: CFLAGS="-fsanitize=address -g -fno-omit-frame-pointer -fno-sanitize-recover"
 107            LIBTPMS_CFLAGS="-fsanitize=address -g -fno-omit-frame-pointer -fno-sanitize-recover"
 108            LIBS="-lasan"
 109            ASAN_OPTIONS="halt_on_error=1"
 110            PREFIX="/usr"
 111            CONFIG="--with-openssl --prefix=${PREFIX} --without-seccomp"
 112            SUDO="sudo"
 113            CHECK="check"
 114     - env: CFLAGS="-fsanitize=address -g -fno-omit-frame-pointer -fno-sanitize-recover"
 115            LIBTPMS_CFLAGS="-fsanitize=address -g -fno-omit-frame-pointer -fno-sanitize-recover"
 116            LIBTPMS_CONFIG="--disable-use-openssl-functions"
 117            LIBS="-lasan"
 118            ASAN_OPTIONS="halt_on_error=1"
 119            PREFIX="/usr"
 120            CONFIG="--with-openssl --prefix=${PREFIX} --without-seccomp"
 121            SUDO="sudo"
 122            CHECK="check"
 123     - env: CFLAGS="-fsanitize=undefined -g -fno-omit-frame-pointer -fno-sanitize-recover"
 124            LIBTPMS_CFLAGS="-fsanitize=undefined -g -fno-omit-frame-pointer -fno-sanitize-recover"
 125            LIBS="-lubsan"
 126            UBSAN_OPTIONS="halt_on_error=1"
 127            PREFIX="/usr"
 128            CONFIG="--with-openssl --prefix=${PREFIX}"
 129            SUDO="sudo"
 130            CHECK="check"