OXYGENHUB
# 78b57440054e oxygenhub / .flow / pipeline.kdl
4.8 KiB · last changed Pin the build image with object_store 0.13 vendored (refs andymccall/oxygen#63) 1 month ago source blame history raw
This file is in conflict in this state; the markers below are the conflict. All conflicts
1
// OxygenHub's pipeline (OxygenFlow, docs in the oxygenflow repository).
2
// Every push to a bookmark on OxygenHub runs it in Firecracker microVMs on
3
// Earth; the jobs appear as checks on the change. oxygen and oxygenflow come
4
// from the pinned subrepos in deps/, which the runner puts in the workspace.
5
schema-version 1
6
7
// The OxygenFlow build image: Rust with rustfmt and clippy, Node, every
8
// crate of Cargo.lock vendored, and this workspace's dependencies prebuilt
9
// in /opt/warm/oxygenhub, which .flow/warm-target.sh copies onto a job's
10
// target disk (oxygenflow/images/rust). Rebuild and re-pin it when
11
// Cargo.lock changes; until then only the changed crates are compiled.
12
sandbox "rust" {
13
    runtime "microvm"
14
    rootfs "cas://blob/841c83f01095675996152c29ad65f63f5da36f2719c44f9169a5c84d342d9c90"
15
    memory-limit "8GiB"
16
    cpu-limit 4
17
    // Tests serve and connect on 127.0.0.1; nothing leaves the guest.
18
    network "loopback"
19
}
20
21
sandbox "rust-small" {
22
    runtime "microvm"
23
    rootfs "cas://blob/841c83f01095675996152c29ad65f63f5da36f2719c44f9169a5c84d342d9c90"
24
    memory-limit "1GiB"
25
    cpu-limit 1
26
    network "isolated"
27
}
28
29
job "fmt" {
30
    sandbox "rust-small"
31
    // Only this workspace's packages: --all would also check the path
32
    // dependencies in deps/, which follow their own formatting.
33
    exec "cargo" "fmt" "--check" "-p" "oxygenhub" "-p" "hub-api"
34
}
35
36
job "clippy" {
37
    sandbox "rust"
38
    depends-on "fmt"
39
    mount {
40
        source "ephemeral://disk"
41
        target "/src/target"
42
        size "24GiB"
43
    }
44
<<<<<<< oxy conflict 1 of 2, side 1 of 2: change 6532b323 "oxygen and oxygenflow as pinned subrepos in deps/ (make pins moves them), and an OxygenFlow pipeline: fmt of this workspace, then clippy, tests and a release build against the pins"
45
    env {
46
        CARGO_INCREMENTAL "0"
47
    }
48
======= oxy conflict 1 of 2, side 2 of 2: change bce3997c "CI starts from the build image's prebuilt dependencies"
49
    exec "sh" ".flow/warm-target.sh" "cargo" "clippy" "--workspace" "--all-targets" "--locked" "--" "-D" "warnings"
50
>>>>>>> oxy conflict 1 of 2 end
51
}
52
53
job "test" {
54
    sandbox "rust"
55
    depends-on "fmt"
56
    mount {
57
        source "ephemeral://disk"
58
        target "/src/target"
59
        size "24GiB"
60
    }
61
<<<<<<< oxy conflict 2 of 2, side 1 of 2: change 6532b323 "oxygen and oxygenflow as pinned subrepos in deps/ (make pins moves them), and an OxygenFlow pipeline: fmt of this workspace, then clippy, tests and a release build against the pins"
62
    env {
63
        CARGO_INCREMENTAL "0"
64
    }
65
======= oxy conflict 2 of 2, side 2 of 2: change bce3997c "CI starts from the build image's prebuilt dependencies"
66
    exec "sh" ".flow/warm-target.sh" "cargo" "test" "--workspace" "--locked"
67
>>>>>>> oxy conflict 2 of 2 end
68
}
69
70
job "build" {
71
    sandbox "rust"
72
    depends-on "fmt"
73
    mount {
74
        source "ephemeral://disk"
75
        target "/src/target"
76
        size "24GiB"
77
    }
78
    env {
79
        CARGO_INCREMENTAL "0"
80
    }
81
    exec "sh" ".flow/warm-target.sh" "cargo" "build" "--release" "--locked"
82
}
83
84
// Release files for every platform (oxygen#59): scripts/dist.sh in the
85
// build image's cross toolchains. A push runs it only when it touches
86
// these paths (a release moves Cargo.toml's version); "Run pipeline" and
87
// reruns always do. The files are kept as this run's artifacts, named by
88
// its signed receipt, and attached to the release from there, so the
89
// release's trust page shows each as built here.
90
job "dist" {
91
    sandbox "rust"
92
    depends-on "fmt"
93
    scope "Cargo.toml" "scripts/dist.sh" "packaging/**"
94
    mount {
95
        source "ephemeral://disk"
96
        target "/src/target"
97
        size "24GiB"
98
    }
99
    env {
100
        DIST_FLAT "/src/target/dist-flat"
101
        ZIG_GLOBAL_CACHE_DIR "/src/target/zig-cache"
102
    }
103
    exec "bash" "scripts/dist.sh"
104
    output {
105
        artifact "oh-linux-x86_64.tar.gz" {
106
            path "/src/target/dist-flat/oh-linux-x86_64.tar.gz"
107
        }
108
        artifact "oh-linux-arm64.tar.gz" {
109
            path "/src/target/dist-flat/oh-linux-arm64.tar.gz"
110
        }
111
        artifact "oh-linux-riscv64.tar.gz" {
112
            path "/src/target/dist-flat/oh-linux-riscv64.tar.gz"
113
        }
114
        artifact "oh-macos-x86_64.tar.gz" {
115
            path "/src/target/dist-flat/oh-macos-x86_64.tar.gz"
116
        }
117
        artifact "oh-macos-arm64.tar.gz" {
118
            path "/src/target/dist-flat/oh-macos-arm64.tar.gz"
119
        }
120
        artifact "oh-windows-x86_64.zip" {
121
            path "/src/target/dist-flat/oh-windows-x86_64.zip"
122
        }
123
        artifact "oh_amd64.deb" {
124
            path "/src/target/dist-flat/oh_amd64.deb"
125
        }
126
        artifact "oh_arm64.deb" {
127
            path "/src/target/dist-flat/oh_arm64.deb"
128
        }
129
        artifact "oh_riscv64.deb" {
130
            path "/src/target/dist-flat/oh_riscv64.deb"
131
        }
132
        artifact "SHA256SUMS" {
133
            path "/src/target/dist-flat/SHA256SUMS"
134
        }
135
    }
136
}