When installing in standalone mode, don't modify system config #1498
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Net-SNMP Tests | |
| # START OF COMMON SECTION | |
| on: | |
| push: | |
| branches: [ 'master', 'main', 'release/**' ] | |
| pull_request: | |
| branches: [ '*' ] | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| # END OF COMMON SECTION | |
| jobs: | |
| build_wolfprovider: | |
| uses: ./.github/workflows/build-wolfprovider.yml | |
| with: | |
| wolfssl_ref: ${{ matrix.wolfssl_ref }} | |
| openssl_ref: ${{ matrix.openssl_ref }} | |
| fips_ref: ${{ matrix.fips_ref }} | |
| replace_default: ${{ matrix.replace_default }} | |
| strategy: | |
| matrix: | |
| wolfssl_ref: [ 'v5.8.2-stable' ] | |
| openssl_ref: [ 'openssl-3.5.2' ] | |
| fips_ref: [ 'FIPS', 'non-FIPS' ] | |
| replace_default: [ true ] | |
| test_net_snmp: | |
| runs-on: ubuntu-22.04 | |
| needs: build_wolfprovider | |
| container: | |
| image: debian:bookworm | |
| env: | |
| DEBIAN_FRONTEND: noninteractive | |
| # This should be a safe limit for the tests to run. | |
| timeout-minutes: 20 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| net_snmp_ref: [ 'v5.9.3' ] | |
| wolfssl_ref: [ 'v5.8.2-stable' ] | |
| openssl_ref: [ 'openssl-3.5.2' ] | |
| fips_ref: [ 'FIPS', 'non-FIPS' ] | |
| force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] | |
| replace_default: [ true ] | |
| env: | |
| WOLFSSL_PACKAGES_PATH: /tmp/wolfssl-packages | |
| OPENSSL_PACKAGES_PATH: /tmp/openssl-packages | |
| WOLFPROV_PACKAGES_PATH: /tmp/wolfprov-packages | |
| steps: | |
| - name: Checkout wolfProvider | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 1 | |
| - name: Download packages from build job | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: debian-packages-${{ matrix.fips_ref }}${{ matrix.replace_default && '-replace-default' || '' }}-${{ matrix.wolfssl_ref }}-${{ matrix.openssl_ref }} | |
| path: /tmp | |
| - name: Install wolfSSL/OpenSSL/wolfprov packages | |
| run: | | |
| apt install --reinstall -y --allow-downgrades --allow-change-held-packages \ | |
| ${{ env.WOLFSSL_PACKAGES_PATH }}/libwolfssl_*.deb | |
| apt install --reinstall -y --allow-downgrades --allow-change-held-packages \ | |
| ${{ env.OPENSSL_PACKAGES_PATH }}/openssl_*.deb \ | |
| ${{ env.OPENSSL_PACKAGES_PATH }}/libssl3_*.deb \ | |
| ${{ env.OPENSSL_PACKAGES_PATH }}/libssl-dev_*.deb | |
| apt install --reinstall -y --allow-downgrades --allow-change-held-packages \ | |
| ${{ env.WOLFPROV_PACKAGES_PATH }}/libwolfprov_*.deb | |
| - name: Verify wolfProvider is properly installed | |
| run: | | |
| $GITHUB_WORKSPACE/scripts/verify-install.sh \ | |
| ${{ matrix.replace_default && '--replace-default' || '' }} \ | |
| ${{ matrix.fips_ref == 'FIPS' && '--fips' || '' }} | |
| - name: Install dependencies | |
| run: | | |
| apt-get update | |
| apt-get install -y libperl-dev build-essential autoconf \ | |
| libtool pkg-config gettext net-tools | |
| - name: Checkout net-snmp | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: net-snmp/net-snmp | |
| ref: ${{ matrix.net_snmp_ref }} | |
| path: net-snmp | |
| fetch-depth: 1 | |
| - name: Checkout OSP | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: wolfssl/osp | |
| path: osp | |
| fetch-depth: 1 | |
| - run: | | |
| cd net-snmp | |
| if [ ${{ matrix.fips_ref == 'FIPS' }} ]; then | |
| patch -p1 < $GITHUB_WORKSPACE/osp/wolfProvider/net-snmp/net-snmp-FIPS-${{ matrix.net_snmp_ref }}-wolfprov.patch | |
| else | |
| patch -p1 < $GITHUB_WORKSPACE/osp/wolfProvider/net-snmp/net-snmp-${{ matrix.net_snmp_ref }}-wolfprov.patch | |
| fi | |
| - name: Build net-snmp with wolfProvider | |
| working-directory: net-snmp | |
| run: | | |
| autoreconf -ivf | |
| if [ "${{ matrix.fips_ref }}" = "FIPS" ]; then | |
| ./configure --enable-wolfprov-fips \ | |
| --disable-shared \ | |
| --with-default-snmp-version="3" \ | |
| --with-sys-contact="@@no.where" \ | |
| --with-sys-location="Unknown" \ | |
| --with-logfile="$SNMP_LOGFILE" \ | |
| --with-persistent-directory="$SNMP_PERSISTENT_DIR" | |
| else | |
| ./configure --disable-shared \ | |
| --with-default-snmp-version="3" --with-sys-contact="@@no.where" \ | |
| --with-sys-location="Unknown" --with-logfile="/var/log/snmpd.log" \ | |
| --with-persistent-directory="/var/net-snmp" | |
| fi | |
| make -j$(nproc) | |
| - name: Run tests | |
| working-directory: net-snmp | |
| shell: bash | |
| run: | | |
| set +o pipefail # ignore errors from make test | |
| export ${{ matrix.force_fail }} | |
| autoconf --version | grep -P '2\.\d\d' -o > dist/autoconf-version | |
| make -j test TESTOPTS="-e agentxperl" 2>&1 | tee net-snmp-test.log | |
| # Capture the test result using PIPESTATUS (Bash only) | |
| TEST_RESULT=${PIPESTATUS[0]} | |
| $GITHUB_WORKSPACE/.github/scripts/check-workflow-result.sh $TEST_RESULT ${{ matrix.force_fail }} net-snmp |