ci: add deps caching

Author: mjain-jump

.github/actions/deps/action.yml

@@ -0,0 +1,38 @@
+name: deps
+description: 'Build and cache dependencies'
+inputs:
+  deps-script-path:
+    description: 'Path of deps.sh script'
+    required: true
+    default: './deps.sh'
+  deps-bundle-path:
+    description: 'Path of deps-bundle.sh script'
+    required: true
+    default: './scripts/deps-bundle.sh'
+outputs: {}
+runs:
+  using: composite
+  steps:
+    - id: deps-sh-hash
+      shell: bash
+      run: sha256sum '${{ inputs.deps-script-path }}' | awk '{print "HASH=" $1}' >> "$GITHUB_OUTPUT"
+
+    # TODO: Remove runner.name from cache key once both boxes are on RHEL9
+    - id: deps-sh-cache
+      uses: actions/cache@v4
+      with:
+        path: deps-bundle.tar.zst
+        key: ${{ runner.os }}-${{ runner.name }}-deps-sh-${{ steps.deps-sh-hash.outputs.HASH }}
+
+    - name: Install dependencies from cache
+      shell: bash
+      run: tar -Izstd -xvf deps-bundle.tar.zst
+      if: steps.deps-sh-cache.outputs.cache-hit == 'true'
+
+    - name: Install dependencies from scratch
+      shell: bash
+      run: |
+        '${{ inputs.deps-script-path }}'
+        '${{ inputs.deps-bundle-path }}'
+
+      if: steps.deps-sh-cache.outputs.cache-hit != 'true'

.github/workflows/build-common.yml

@@ -20,19 +20,20 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: recursive
+
       # TODO: change back to stable once rust releases the coverage fix
       # - uses: dtolnay/[email protected]
       - uses: actions-rs/toolchain@v1
         with:
           toolchain: nightly-2025-10-30
           override: true
           components: "clippy, rustfmt"
+
       - uses: Swatinem/rust-cache@v2
         with:
           cache-all-crates: true # we do this because we have a crapload of crates used for testing/CI
 
-      - name: Install dependencies
-        run: ./deps.sh
+      - uses: ./.github/actions/deps
 
       - name: Check lints and clippy
         run: |
@@ -87,19 +88,20 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: recursive
+
       # TODO: change back to stable once rust releases the coverage fix
       # - uses: dtolnay/[email protected]
       - uses: actions-rs/toolchain@v1
         with:
           toolchain: nightly-2025-10-30
           override: true
           components: "clippy, rustfmt"
+
       - uses: Swatinem/rust-cache@v2
         with:
           cache-all-crates: true # we do this because we have a crapload of crates used for testing/CI
 
-      - name: Install dependencies
-        run: ./deps.sh
+      - uses: ./.github/actions/deps
 
       - name: check out test-vectors (persistent)
         run: |

scripts/deps-bundle.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+set -e
+
+# deps-bundle.sh pack a redistributable bundle of build dependencies.
+#
+# This offers an alternative to building dependencies from source,
+# such that only a recent compiler and linker is required (and no other
+# tools like perl or bison).  Also requires the Zstandard compression
+# tool and GNU tar.
+#
+# To start, first create the a dependency prefix at ./opt using deps.sh.
+# Then, run this script to create deps-bundle.tar.zst which contains
+# only static libraries and binaries.
+cd -- "$( dirname -- "${BASH_SOURCE[0]}" )"/..
+rm -f deps-bundle.tar.zst
+tar -Izstd -cf deps-bundle.tar.zst ./opt/{bin,lib}
+echo "[+] Created deps-bundle.tar.zst"