1 ######################################################
2 # WARNING! Action needed when changing this file #
3 ######################################################
5 # Due to GitHub Actions limitations, we can't use YAML Anchors directly in the
6 # CI configuration stored on the repository. To work around that this file is
7 # expanded by a tool in the repository, and the expansion is committed as well.
9 # After you make any change to the file you'll need to run this command:
11 # ./x.py run src/tools/expand-yaml-anchors
13 # ...and commit the file it updated in addition to this one. If you forget this
18 ###############################
19 # YAML Anchors Definition #
20 ###############################
22 # This key contains most of the YAML anchors that will be used later in the
23 # document. YAML anchors allows us to greatly reduce duplication inside the CI
24 # configuration by reusing parts of the configuration.
26 # YAML anchors work by defining an anchor with `&anchor-name` and reusing its
27 # content in another place with `*anchor-name`. The special `<<` map key merges
28 # the content of the map with the content of the anchor (or list of anchors).
30 # The expand-yaml-anchors tool will automatically remove this block from the
32 x--expand-yaml-anchors--remove:
34 - &shared-ci-variables
35 CI_JOB_NAME: ${{ matrix.name }}
38 SCCACHE_BUCKET: rust-lang-ci-sccache2
39 TOOLSTATE_REPO: https://github.com/rust-lang-nursery/rust-toolstate
40 CACHE_DOMAIN: ci-caches.rust-lang.org
43 SCCACHE_BUCKET: rust-lang-ci-sccache2
44 DEPLOY_BUCKET: rust-lang-ci2
45 TOOLSTATE_REPO: https://github.com/rust-lang-nursery/rust-toolstate
46 TOOLSTATE_ISSUES_API_URL: https://api.github.com/repos/rust-lang/rust/issues
48 # AWS_SECRET_ACCESS_KEYs are stored in GitHub's secrets storage, named
49 # AWS_SECRET_ACCESS_KEY_<keyid>. Including the key id in the name allows to
50 # rotate them in a single branch while keeping the old key in another
51 # branch, which wouldn't be possible if the key was named with the kind
52 # (caches, artifacts...).
53 CACHES_AWS_ACCESS_KEY_ID: AKIA46X5W6CZI5DHEBFL
54 ARTIFACTS_AWS_ACCESS_KEY_ID: AKIA46X5W6CZN24CBO55
55 CACHE_DOMAIN: ci-caches.rust-lang.org
58 SCCACHE_BUCKET: rust-lang-gha-caches
59 DEPLOY_BUCKET: rust-lang-gha
60 TOOLSTATE_REPO: https://github.com/pietroalbini/rust-toolstate
61 TOOLSTATE_ISSUES_API_URL: https://api.github.com/repos/pietroalbini/rust-toolstate/issues
63 # AWS_SECRET_ACCESS_KEYs are stored in GitHub's secrets storage, named
64 # AWS_SECRET_ACCESS_KEY_<keyid>. Including the key id in the name allows to
65 # rotate them in a single branch while keeping the old key in another
66 # branch, which wouldn't be possible if the key was named with the kind
67 # (caches, artifacts...).
68 CACHES_AWS_ACCESS_KEY_ID: AKIA46X5W6CZOMUQATD5
69 ARTIFACTS_AWS_ACCESS_KEY_ID: AKIA46X5W6CZH5AYXDVF
70 CACHE_DOMAIN: ci-caches-gha.rust-lang.org
80 os: macos-latest # We don't have an XL builder for this
88 os: [self-hosted, ARM64, linux]
91 if: success() && !env.SKIP_JOB
95 runs-on: "${{ matrix.os }}"
96 env: *shared-ci-variables
98 - name: disable git crlf conversion
99 run: git config --global core.autocrlf false
101 - name: checkout the source code
102 uses: actions/checkout@v2
106 # Rust Log Analyzer can't currently detect the PR number of a GitHub
107 # Actions build on its own, so a hint in the log message is needed to
108 # point it in the right direction.
109 - name: configure the PR in which the error message will be posted
110 run: echo "[CI_PR_NUMBER=$num]"
112 num: ${{ github.event.number }}
113 if: success() && !env.SKIP_JOBS && github.event_name == 'pull_request'
115 - name: add extra environment variables
116 run: src/ci/scripts/setup-environment.sh
118 # Since it's not possible to merge `${{ matrix.env }}` with the other
119 # variables in `job.<name>.env`, the variables defined in the matrix
120 # are passed to the `setup-environment.sh` script encoded in JSON,
121 # which then uses log commands to actually set them.
122 EXTRA_VARIABLES: ${{ toJson(matrix.env) }}
125 - name: decide whether to skip this job
126 run: src/ci/scripts/should-skip-this.sh
129 - name: configure GitHub Actions to kill the build when outdated
130 uses: rust-lang/simpleinfra/github-actions/cancel-outdated-builds@master
132 github_token: "${{ secrets.github_token }}"
133 if: success() && !env.SKIP_JOB && github.ref != 'refs/heads/try'
136 - name: collect CPU statistics
137 run: src/ci/scripts/collect-cpu-stats.sh
140 - name: show the current environment
141 run: src/ci/scripts/dump-environment.sh
144 - name: install awscli
145 run: src/ci/scripts/install-awscli.sh
148 - name: install sccache
149 run: src/ci/scripts/install-sccache.sh
153 run: src/ci/scripts/select-xcode.sh
156 - name: install clang
157 run: src/ci/scripts/install-clang.sh
161 run: src/ci/scripts/install-wix.sh
164 - name: ensure the build happens on a partition with enough space
165 run: src/ci/scripts/symlink-build-dir.sh
168 - name: disable git crlf conversion
169 run: src/ci/scripts/disable-git-crlf-conversion.sh
172 - name: install MSYS2
173 run: src/ci/scripts/install-msys2.sh
176 - name: install MinGW
177 run: src/ci/scripts/install-mingw.sh
180 - name: install ninja
181 run: src/ci/scripts/install-ninja.sh
184 - name: enable ipv6 on Docker
185 run: src/ci/scripts/enable-docker-ipv6.sh
188 # Disable automatic line ending conversion (again). On Windows, when we're
189 # installing dependencies, something switches the git configuration directory or
190 # re-enables autocrlf. We've not tracked down the exact cause -- and there may
191 # be multiple -- but this should ensure submodules are checked out with the
192 # appropriate line endings.
193 - name: disable git crlf conversion
194 run: src/ci/scripts/disable-git-crlf-conversion.sh
197 - name: checkout submodules
198 run: src/ci/scripts/checkout-submodules.sh
201 - name: ensure line endings are correct
202 run: src/ci/scripts/verify-line-endings.sh
205 - name: run the build
206 run: src/ci/scripts/run-build-from-ci.sh
208 AWS_ACCESS_KEY_ID: ${{ env.CACHES_AWS_ACCESS_KEY_ID }}
209 AWS_SECRET_ACCESS_KEY: ${{ secrets[format('AWS_SECRET_ACCESS_KEY_{0}', env.CACHES_AWS_ACCESS_KEY_ID)] }}
210 TOOLSTATE_REPO_ACCESS_TOKEN: ${{ secrets.TOOLSTATE_REPO_ACCESS_TOKEN }}
213 - name: upload artifacts to S3
214 run: src/ci/scripts/upload-artifacts.sh
216 AWS_ACCESS_KEY_ID: ${{ env.ARTIFACTS_AWS_ACCESS_KEY_ID }}
217 AWS_SECRET_ACCESS_KEY: ${{ secrets[format('AWS_SECRET_ACCESS_KEY_{0}', env.ARTIFACTS_AWS_ACCESS_KEY_ID)] }}
218 # Adding a condition on DEPLOY=1 or DEPLOY_ALT=1 is not needed as all deploy
219 # builders *should* have the AWS credentials available. Still, explicitly
220 # adding the condition is helpful as this way CI will not silently skip
221 # deploying artifacts from a dist builder if the variables are misconfigured,
222 # erroring about invalid credentials instead.
223 if: success() && !env.SKIP_JOB && (github.event_name == 'push' || env.DEPLOY == '1' || env.DEPLOY_ALT == '1')
226 # These snippets are used by the try-success, try-failure, auto-success and auto-failure jobs.
227 # Check out their documentation for more information on why they're needed.
230 name: bors build finished
231 runs-on: ubuntu-latest
235 - name: mark the job as a success
238 <<: *base-outcome-job
242 - name: mark the job as a failure
245 <<: *base-outcome-job
247 ###########################
248 # Builders definition #
249 ###########################
265 # On Linux, macOS, and Windows, use the system-provided bash as the default
266 # shell. (This should only make a difference on Windows, where the default
267 # shell is PowerShell.)
275 <<: [*shared-ci-variables, *public-variables]
276 if: github.event_name == 'pull_request'
283 - name: x86_64-gnu-llvm-9
286 - name: x86_64-gnu-tools
288 CI_ONLY_WHEN_SUBMODULES_CHANGED: 1
295 <<: [*shared-ci-variables, *prod-variables]
296 if: github.event_name == 'push' && github.ref == 'refs/heads/auto' && github.repository == 'rust-lang-ci/rust'
300 #############################
301 # Linux/Docker builders #
302 #############################
305 <<: *job-aarch64-linux
313 - name: dist-aarch64-linux
319 - name: dist-arm-linux
322 - name: dist-armhf-linux
325 - name: dist-armv7-linux
328 - name: dist-i586-gnu-i586-i686-musl
331 - name: dist-i686-linux
334 - name: dist-mips-linux
337 - name: dist-mips64-linux
340 - name: dist-mips64el-linux
343 - name: dist-mipsel-linux
346 - name: dist-powerpc-linux
349 - name: dist-powerpc64-linux
352 - name: dist-powerpc64le-linux
355 - name: dist-riscv64-linux
358 - name: dist-s390x-linux
361 - name: dist-various-1
364 - name: dist-various-2
367 - name: dist-x86_64-freebsd
370 - name: dist-x86_64-illumos
374 name: dist-x86_64-linux
377 - name: dist-x86_64-linux-alt
379 IMAGE: dist-x86_64-linux
382 - name: dist-x86_64-musl
385 - name: dist-x86_64-netbsd
391 - name: i686-gnu-nopt
406 - name: x86_64-gnu-aux
409 - name: x86_64-gnu-debug
412 - name: x86_64-gnu-distcheck
415 - name: x86_64-gnu-llvm-9
420 - name: x86_64-gnu-nopt
423 - name: x86_64-gnu-tools
425 DEPLOY_TOOLSTATES_JSON: toolstates-linux.json
432 - name: dist-x86_64-apple
435 RUST_CONFIGURE_ARGS: --host=x86_64-apple-darwin --target=x86_64-apple-darwin,aarch64-apple-ios,x86_64-apple-ios --enable-full-tools --enable-sanitizers --enable-profiler --set rust.jemalloc --set llvm.ninja=false
436 RUSTC_RETRY_LINKER_ON_SEGFAULT: 1
437 MACOSX_DEPLOYMENT_TARGET: 10.7
438 NO_LLVM_ASSERTIONS: 1
439 NO_DEBUG_ASSERTIONS: 1
440 DIST_REQUIRE_ALL_TOOLS: 1
443 - name: dist-x86_64-apple-alt
446 RUST_CONFIGURE_ARGS: --enable-extended --enable-profiler --set rust.jemalloc --set llvm.ninja=false
447 RUSTC_RETRY_LINKER_ON_SEGFAULT: 1
448 MACOSX_DEPLOYMENT_TARGET: 10.7
449 NO_LLVM_ASSERTIONS: 1
450 NO_DEBUG_ASSERTIONS: 1
455 SCRIPT: ./x.py --stage 2 test
456 RUST_CONFIGURE_ARGS: --build=x86_64-apple-darwin --enable-sanitizers --enable-profiler --set rust.jemalloc --set llvm.ninja=false
457 RUSTC_RETRY_LINKER_ON_SEGFAULT: 1
458 MACOSX_DEPLOYMENT_TARGET: 10.8
459 MACOSX_STD_DEPLOYMENT_TARGET: 10.7
460 NO_LLVM_ASSERTIONS: 1
461 NO_DEBUG_ASSERTIONS: 1
464 # This target only needs to support 11.0 and up as nothing else supports the hardware
465 - name: dist-aarch64-apple
467 SCRIPT: ./x.py dist --stage 2
468 RUST_CONFIGURE_ARGS: >-
469 --build=x86_64-apple-darwin
470 --host=aarch64-apple-darwin
471 --target=aarch64-apple-darwin
476 --set llvm.ninja=false
477 RUSTC_RETRY_LINKER_ON_SEGFAULT: 1
478 SELECT_XCODE: /Applications/Xcode_12.2.app
480 MACOSX_DEPLOYMENT_TARGET: 11.0
481 MACOSX_STD_DEPLOYMENT_TARGET: 11.0
482 NO_LLVM_ASSERTIONS: 1
483 NO_DEBUG_ASSERTIONS: 1
484 DIST_REQUIRE_ALL_TOOLS: 1
485 # Corresponds to 16K page size
487 # Shouldn't be needed if jemalloc-sys is updated to
488 # handle this platform like iOS or if we build on
489 # aarch64-apple-darwin itself.
491 # https://github.com/gnzlbg/jemallocator/blob/c27a859e98e3cb790dc269773d9da71a1e918458/jemalloc-sys/build.rs#L237
492 JEMALLOC_SYS_WITH_LG_PAGE: 14
495 ######################
497 ######################
499 - name: x86_64-msvc-1
501 RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-msvc --enable-profiler
502 SCRIPT: make ci-subset-1
505 - name: x86_64-msvc-2
507 RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-msvc --enable-profiler
508 SCRIPT: make ci-subset-2
513 RUST_CONFIGURE_ARGS: --build=i686-pc-windows-msvc
514 SCRIPT: make ci-subset-1
519 RUST_CONFIGURE_ARGS: --build=i686-pc-windows-msvc
520 SCRIPT: make ci-subset-2
523 - name: x86_64-msvc-cargo
525 SCRIPT: python x.py --stage 2 test src/tools/cargotest src/tools/cargo
526 RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-msvc --enable-lld
527 VCVARS_BAT: vcvars64.bat
530 - name: x86_64-msvc-tools
532 SCRIPT: src/ci/docker/host-x86_64/x86_64-gnu-tools/checktools.sh x.py /tmp/toolstate/toolstates.json windows
533 RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-msvc --save-toolstates=/tmp/toolstate/toolstates.json
536 # 32/64-bit MinGW builds.
538 # We are using MinGW with POSIX threads since LLVM requires
539 # C++'s std::thread which is disabled in libstdc++ with win32 threads.
540 # FIXME: Libc++ doesn't have this limitation so we can avoid
541 # winpthreads if we switch to it.
543 # Instead of relying on the MinGW version installed on CI we download
544 # and install one ourselves so we won't be surprised by changes to CI's
547 # Finally, note that the downloads below are all in the `rust-lang-ci` S3
548 # bucket, but they clearly didn't originate there! The downloads originally
549 # came from the mingw-w64 SourceForge download site. Unfortunately
550 # SourceForge is notoriously flaky, so we mirror it on our own infrastructure.
554 RUST_CONFIGURE_ARGS: --build=i686-pc-windows-gnu
555 SCRIPT: make ci-mingw-subset-1
561 RUST_CONFIGURE_ARGS: --build=i686-pc-windows-gnu
562 SCRIPT: make ci-mingw-subset-2
566 - name: x86_64-mingw-1
568 SCRIPT: make ci-mingw-subset-1
569 RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-gnu --enable-profiler
573 - name: x86_64-mingw-2
575 SCRIPT: make ci-mingw-subset-2
576 RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-gnu --enable-profiler
580 - name: dist-x86_64-msvc
582 RUST_CONFIGURE_ARGS: >-
583 --build=x86_64-pc-windows-msvc
584 --host=x86_64-pc-windows-msvc
585 --target=x86_64-pc-windows-msvc
588 SCRIPT: python x.py dist
589 DIST_REQUIRE_ALL_TOOLS: 1
592 - name: dist-i686-msvc
594 RUST_CONFIGURE_ARGS: >-
595 --build=i686-pc-windows-msvc
596 --host=i686-pc-windows-msvc
597 --target=i686-pc-windows-msvc,i586-pc-windows-msvc
600 SCRIPT: python x.py dist
601 DIST_REQUIRE_ALL_TOOLS: 1
604 - name: dist-aarch64-msvc
606 RUST_CONFIGURE_ARGS: >-
607 --build=x86_64-pc-windows-msvc
608 --host=aarch64-pc-windows-msvc
611 SCRIPT: python x.py dist
612 # RLS does not build for aarch64-pc-windows-msvc. See rust-lang/rls#1693
613 DIST_REQUIRE_ALL_TOOLS: 0
616 - name: dist-i686-mingw
618 RUST_CONFIGURE_ARGS: --build=i686-pc-windows-gnu --enable-full-tools --enable-profiler
619 SCRIPT: python x.py dist
621 DIST_REQUIRE_ALL_TOOLS: 1
624 - name: dist-x86_64-mingw
626 SCRIPT: python x.py dist
627 RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-gnu --enable-full-tools --enable-profiler
629 DIST_REQUIRE_ALL_TOOLS: 1
632 - name: dist-x86_64-msvc-alt
634 RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-msvc --enable-extended --enable-profiler
635 SCRIPT: python x.py dist
642 <<: [*shared-ci-variables, *prod-variables]
643 if: github.event_name == 'push' && (github.ref == 'refs/heads/try' || github.ref == 'refs/heads/try-perf') && github.repository == 'rust-lang-ci/rust'
651 runs-on: ubuntu-latest
653 <<: [*prod-variables]
654 if: github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'rust-lang-ci/rust'
656 - name: checkout the source code
657 uses: actions/checkout@v1
661 - name: publish toolstate
662 run: src/ci/publish_toolstate.sh
665 TOOLSTATE_REPO_ACCESS_TOKEN: ${{ secrets.TOOLSTATE_REPO_ACCESS_TOKEN }}
668 # These jobs don't actually test anything, but they're used to tell bors the
669 # build completed, as there is no practical way to detect when a workflow is
670 # successful listening to webhooks only.
673 if: "success() && github.event_name == 'push' && (github.ref == 'refs/heads/try' || github.ref == 'refs/heads/try-perf') && github.repository == 'rust-lang-ci/rust'"
674 <<: *base-success-job
677 if: "!success() && github.event_name == 'push' && (github.ref == 'refs/heads/try' || github.ref == 'refs/heads/try-perf') && github.repository == 'rust-lang-ci/rust'"
678 <<: *base-failure-job
681 if: "success() && github.event_name == 'push' && github.ref == 'refs/heads/auto' && github.repository == 'rust-lang-ci/rust'"
682 <<: *base-success-job
685 if: "!success() && github.event_name == 'push' && github.ref == 'refs/heads/auto' && github.repository == 'rust-lang-ci/rust'"
686 <<: *base-failure-job