mirror of
https://github.com/bitcoin/bitcoin.git
synced 2024-11-19 01:42:58 +01:00
2d46a89386
0cdc758a563 Merge bitcoin-core/secp256k1#1631: release: prepare for 0.6.0 39d5dfd542a release: prepare for 0.6.0 df2eceb2790 build: add ellswift.md and musig.md to release tarball a306bb7e903 tools: fix check-abi.sh after cmake out locations were changed 145868a84d2 Do not export `secp256k1_musig_nonce_gen_internal` b161bffb8bf Merge bitcoin-core/secp256k1#1579: Clear sensitive memory without getting optimized out (revival of #636) a38d879a1a6 Merge bitcoin-core/secp256k1#1628: Name public API structs 7d48f5ed02e Merge bitcoin-core/secp256k1#1581: test, ci: Lower default iteration count to 16 694342fdb71 Name public API structs 0f73caf7c62 test, ci: Lower default iteration count to 16 9a8db52f4e9 Merge bitcoin-core/secp256k1#1582: cmake, test: Add `secp256k1_` prefix to test names 765ef53335a Clear _gej instances after point multiplication to avoid potential leaks 349e6ab916b Introduce separate _clear functions for hash module 99cc9fd6d01 Don't rely on memset to set signed integers to 0 97c57f42ba8 Implement various _clear() functions with secp256k1_memclear() 9bb368d1466 Use secp256k1_memclear() to clear stack memory instead of memset() e3497bbf001 Separate between clearing memory and setting to zero in tests d79a6ccd43a Separate secp256k1_fe_set_int( . , 0 ) from secp256k1_fe_clear() 1c081262227 Add secp256k1_memclear() for clearing secret data 1464f15c812 Merge bitcoin-core/secp256k1#1625: util: Remove unused (u)int64_t formatting macros 980c08df80a util: Remove unused (u)int64_t formatting macros 9b7c59cbb90 Merge bitcoin-core/secp256k1#1624: ci: Update macOS image 096e3e23f63 ci: Update macOS image e7d384488e8 Don't clear secrets in pippenger implementation 68b55209f1b Merge bitcoin-core/secp256k1#1619: musig: ctimetests: fix _declassify range for generated nonce points f0868a9b3d8 Merge bitcoin-core/secp256k1#1595: build: 45839th attempt to fix symbol visibility on Windows 1fae76f50c0 Merge bitcoin-core/secp256k1#1620: Remove unused scratch space from API 8be3839fb2e Remove unused scratch space from API 57eda3ba300 musig: ctimetests: fix _declassify range for generated nonce points 87384f5c0f2 cmake, test: Add `secp256k1_` prefix to test names e59158b6eb7 Merge bitcoin-core/secp256k1#1553: cmake: Set top-level target output locations 18f9b967c25 Merge bitcoin-core/secp256k1#1616: examples: do not retry generating seckey randomness in musig 5bab8f6d3c4 examples: make key generation doc consistent e8908221a45 examples: do not retry generating seckey randomness in musig 70b6be1834e extrakeys: improve doc of keypair_create (don't suggest retry) 01b5893389e Merge bitcoin-core/secp256k1#1599: #1570 improve examples: remove key generation loop cd4f84f3ba8 Improve examples/documentation: remove key generation loops a88aa935063 Merge bitcoin-core/secp256k1#1603: f can never equal -m 3660fe5e2a9 Merge bitcoin-core/secp256k1#1479: Add module "musig" that implements MuSig2 multi-signatures (BIP 327) 168c92011f5 build: allow enabling the musig module in cmake f411841a46b Add module "musig" that implements MuSig2 multi-signatures (BIP 327) 0be79660f38 util: add constant-time is_zero_array function c8fbdb1b972 group: add ge_to_bytes_ext and ge_from_bytes_ext ef7ff03407f f can never equal -m c232486d84e Revert "cmake: Set `ENVIRONMENT` property for examples on Windows" 26e4a7c2146 cmake: Set top-level target output locations 4c57c7a5a95 Merge bitcoin-core/secp256k1#1554: cmake: Clean up testing code 447334cb06d include: Avoid visibility("default") on Windows 472faaa8ee6 Merge bitcoin-core/secp256k1#1604: doc: fix typos in `secp256k1_ecdsa_{recoverable_,}signature` API description 292310fbb24 doc: fix typos in `secp256k1_ecdsa_{recoverable_,}signature` API description 85e224dd97f group: add ge_to_bytes and ge_from_bytes 7c987ec89e6 cmake: Call `enable_testing()` unconditionally 6aa576515ef cmake: Delete `CTest` module git-subtree-dir: src/secp256k1 git-subtree-split: 0cdc758a56360bf58a851fe91085a327ec97685a
214 lines
7.3 KiB
YAML
214 lines
7.3 KiB
YAML
env: # Global defaults
|
|
CIRRUS_CLONE_DEPTH: 1
|
|
CIRRUS_LOG_TIMESTAMP: true
|
|
MAKEJOBS: "-j10"
|
|
TEST_RUNNER_PORT_MIN: "14000" # Must be larger than 12321, which is used for the http cache. See https://cirrus-ci.org/guide/writing-tasks/#http-cache
|
|
CI_FAILFAST_TEST_LEAVE_DANGLING: "1" # Cirrus CI does not care about dangling processes and setting this variable avoids killing the CI script itself on error
|
|
|
|
# A self-hosted machine(s) can be used via Cirrus CI. It can be configured with
|
|
# multiple users to run tasks in parallel. No sudo permission is required.
|
|
#
|
|
# https://cirrus-ci.org/guide/persistent-workers/
|
|
#
|
|
# Generally, a persistent worker must run Ubuntu 23.04+ or Debian 12+.
|
|
#
|
|
# The following specific types should exist, with the following requirements:
|
|
# - small: For an x86_64 machine, with at least 2 vCPUs and 8 GB of memory.
|
|
# - medium: For an x86_64 machine, with at least 4 vCPUs and 16 GB of memory.
|
|
# - arm64: For an aarch64 machine, with at least 2 vCPUs and 8 GB of memory.
|
|
#
|
|
# CI jobs for the latter configuration can be run on x86_64 hardware
|
|
# by installing qemu-user-static, which works out of the box with
|
|
# podman or docker. Background: https://stackoverflow.com/a/72890225/313633
|
|
#
|
|
# The above machine types are matched to each task by their label. Refer to the
|
|
# Cirrus CI docs for more details.
|
|
#
|
|
# When a contributor maintains a fork of the repo, any pull request they make
|
|
# to their own fork, or to the main repository, will trigger two CI runs:
|
|
# one for the branch push and one for the pull request.
|
|
# This can be avoided by setting SKIP_BRANCH_PUSH=true as a custom env variable
|
|
# in Cirrus repository settings, accessible from
|
|
# https://cirrus-ci.com/github/my-organization/my-repository
|
|
#
|
|
# On machines that are persisted between CI jobs, RESTART_CI_DOCKER_BEFORE_RUN=1
|
|
# ensures that previous containers and artifacts are cleared before each run.
|
|
# This requires installing Podman instead of Docker.
|
|
#
|
|
# Futhermore:
|
|
# - podman-docker-4.1+ is required due to the bugfix in 4.1
|
|
# (https://github.com/bitcoin/bitcoin/pull/21652#issuecomment-1657098200)
|
|
# - The ./ci/ dependencies (with cirrus-cli) should be installed. One-liner example
|
|
# for a single user setup with sudo permission:
|
|
#
|
|
# ```
|
|
# apt update && apt install git screen python3 bash podman-docker uidmap slirp4netns curl -y && curl -L -o cirrus "https://github.com/cirruslabs/cirrus-cli/releases/latest/download/cirrus-linux-$(dpkg --print-architecture)" && mv cirrus /usr/local/bin/cirrus && chmod +x /usr/local/bin/cirrus
|
|
# ```
|
|
#
|
|
# - There are no strict requirements on the hardware. Having fewer CPU threads
|
|
# than recommended merely causes the CI script to run slower.
|
|
# To avoid rare and intermittent OOM due to short memory usage spikes,
|
|
# it is recommended to add (and persist) swap:
|
|
#
|
|
# ```
|
|
# fallocate -l 16G /swapfile_ci && chmod 600 /swapfile_ci && mkswap /swapfile_ci && swapon /swapfile_ci && ( echo '/swapfile_ci none swap sw 0 0' | tee -a /etc/fstab )
|
|
# ```
|
|
#
|
|
# - To register the persistent worker, open a `screen` session and run:
|
|
#
|
|
# ```
|
|
# RESTART_CI_DOCKER_BEFORE_RUN=1 screen cirrus worker run --labels type=todo_fill_in_type --token todo_fill_in_token
|
|
# ```
|
|
|
|
# https://cirrus-ci.org/guide/tips-and-tricks/#sharing-configuration-between-tasks
|
|
filter_template: &FILTER_TEMPLATE
|
|
# Allow forks to specify SKIP_BRANCH_PUSH=true and skip CI runs when a branch is pushed,
|
|
# but still run CI when a PR is created.
|
|
# https://cirrus-ci.org/guide/writing-tasks/#conditional-task-execution
|
|
skip: $SKIP_BRANCH_PUSH == "true" && $CIRRUS_PR == ""
|
|
stateful: false # https://cirrus-ci.org/guide/writing-tasks/#stateful-tasks
|
|
|
|
base_template: &BASE_TEMPLATE
|
|
<< : *FILTER_TEMPLATE
|
|
merge_base_script:
|
|
# Require git (used in fingerprint_script).
|
|
- git --version || ( apt-get update && apt-get install -y git )
|
|
- if [ "$CIRRUS_PR" = "" ]; then exit 0; fi
|
|
- git fetch --depth=1 $CIRRUS_REPO_CLONE_URL "pull/${CIRRUS_PR}/merge"
|
|
- git checkout FETCH_HEAD # Use merged changes to detect silent merge conflicts
|
|
# Also, the merge commit is used to lint COMMIT_RANGE="HEAD~..HEAD"
|
|
|
|
main_template: &MAIN_TEMPLATE
|
|
timeout_in: 120m # https://cirrus-ci.org/faq/#instance-timed-out
|
|
ci_script:
|
|
- ./ci/test_run_all.sh
|
|
|
|
global_task_template: &GLOBAL_TASK_TEMPLATE
|
|
<< : *BASE_TEMPLATE
|
|
<< : *MAIN_TEMPLATE
|
|
|
|
compute_credits_template: &CREDITS_TEMPLATE
|
|
# https://cirrus-ci.org/pricing/#compute-credits
|
|
# Only use credits for pull requests to the main repo
|
|
use_compute_credits: $CIRRUS_REPO_FULL_NAME == 'bitcoin/bitcoin' && $CIRRUS_PR != ""
|
|
|
|
task:
|
|
name: 'lint'
|
|
<< : *BASE_TEMPLATE
|
|
container:
|
|
image: debian:bookworm
|
|
cpu: 1
|
|
memory: 1G
|
|
# For faster CI feedback, immediately schedule the linters
|
|
<< : *CREDITS_TEMPLATE
|
|
test_runner_cache:
|
|
folder: "/lint_test_runner"
|
|
fingerprint_script: echo $CIRRUS_TASK_NAME $(git rev-parse HEAD:test/lint/test_runner)
|
|
python_cache:
|
|
folder: "/python_build"
|
|
fingerprint_script: cat .python-version /etc/os-release
|
|
unshallow_script:
|
|
- git fetch --unshallow --no-tags
|
|
lint_script:
|
|
- ./ci/lint_run_all.sh
|
|
|
|
task:
|
|
name: 'tidy'
|
|
<< : *GLOBAL_TASK_TEMPLATE
|
|
persistent_worker:
|
|
labels:
|
|
type: medium
|
|
env:
|
|
FILE_ENV: "./ci/test/00_setup_env_native_tidy.sh"
|
|
|
|
task:
|
|
name: 'ARM, unit tests, no functional tests'
|
|
<< : *GLOBAL_TASK_TEMPLATE
|
|
persistent_worker:
|
|
labels:
|
|
type: arm64 # Use arm64 worker to sidestep qemu and avoid a slow CI: https://github.com/bitcoin/bitcoin/pull/28087#issuecomment-1649399453
|
|
env:
|
|
FILE_ENV: "./ci/test/00_setup_env_arm.sh"
|
|
|
|
task:
|
|
name: 'Win64, unit tests, no gui tests, no functional tests'
|
|
<< : *GLOBAL_TASK_TEMPLATE
|
|
persistent_worker:
|
|
labels:
|
|
type: small
|
|
env:
|
|
FILE_ENV: "./ci/test/00_setup_env_win64.sh"
|
|
|
|
task:
|
|
name: '32-bit CentOS, dash, gui'
|
|
<< : *GLOBAL_TASK_TEMPLATE
|
|
persistent_worker:
|
|
labels:
|
|
type: small
|
|
env:
|
|
FILE_ENV: "./ci/test/00_setup_env_i686_centos.sh"
|
|
|
|
task:
|
|
name: 'previous releases, depends DEBUG'
|
|
<< : *GLOBAL_TASK_TEMPLATE
|
|
persistent_worker:
|
|
labels:
|
|
type: small
|
|
env:
|
|
FILE_ENV: "./ci/test/00_setup_env_native_previous_releases.sh"
|
|
|
|
task:
|
|
name: 'TSan, depends, gui'
|
|
<< : *GLOBAL_TASK_TEMPLATE
|
|
persistent_worker:
|
|
labels:
|
|
type: medium
|
|
env:
|
|
FILE_ENV: "./ci/test/00_setup_env_native_tsan.sh"
|
|
|
|
task:
|
|
name: 'MSan, depends'
|
|
<< : *GLOBAL_TASK_TEMPLATE
|
|
persistent_worker:
|
|
labels:
|
|
type: small
|
|
timeout_in: 300m # Use longer timeout for the *rare* case where a full build (llvm + msan + depends + ...) needs to be done.
|
|
env:
|
|
FILE_ENV: "./ci/test/00_setup_env_native_msan.sh"
|
|
|
|
task:
|
|
name: 'fuzzer,address,undefined,integer, no depends'
|
|
<< : *GLOBAL_TASK_TEMPLATE
|
|
persistent_worker:
|
|
labels:
|
|
type: medium
|
|
env:
|
|
FILE_ENV: "./ci/test/00_setup_env_native_fuzz.sh"
|
|
|
|
task:
|
|
name: 'multiprocess, i686, DEBUG'
|
|
<< : *GLOBAL_TASK_TEMPLATE
|
|
persistent_worker:
|
|
labels:
|
|
type: medium
|
|
env:
|
|
FILE_ENV: "./ci/test/00_setup_env_i686_multiprocess.sh"
|
|
|
|
task:
|
|
name: 'no wallet, libbitcoinkernel'
|
|
<< : *GLOBAL_TASK_TEMPLATE
|
|
persistent_worker:
|
|
labels:
|
|
type: small
|
|
env:
|
|
FILE_ENV: "./ci/test/00_setup_env_native_nowallet_libbitcoinkernel.sh"
|
|
|
|
task:
|
|
name: 'macOS-cross, gui, no tests'
|
|
<< : *GLOBAL_TASK_TEMPLATE
|
|
persistent_worker:
|
|
labels:
|
|
type: small
|
|
env:
|
|
FILE_ENV: "./ci/test/00_setup_env_mac_cross.sh"
|