aboutsummaryrefslogtreecommitdiffstats
path: root/.github/workflows/ci.yml
diff options
context:
space:
mode:
authorDmitry Misharov <[email protected]>2026-10-06 15:39:51 +0200
committerTomas Mraz <[email protected]>2026-10-21 18:56:50 +0200
commit03cd9dafab20e82f2c902dc4100e64a0440f93ca (patch)
tree05f5bc13d6f283c8209fb643bb5dd6780e8fc38c /.github/workflows/ci.yml
parentCI: give the cross-compile matrix jobs stable names (diff)
downloadopenssl-03cd9dafab20e82f2c902dc4100e64a0440f93ca.tar.gz
openssl-03cd9dafab20e82f2c902dc4100e64a0440f93ca.zip
CI: run zero-yield jobs nightly instead of on every push
These jobs build configurations that, from May to October 2026, never failed on master when the other push jobs passed, so they cost runner time on every push and pull request without adding signal. Run the whole compiler-zoo workflow, and the moved ci.yml, run-checker-merge and windows.yml jobs, once a day; the latter in a new Nightly CI workflow. mingw64 is a primary platform, so the MSYS2 UCRT64 build stays on every pull request. Drop the run-checker-merge options and the plain libFuzzer leg that other jobs already cover, and the duplicate no-shared option in run-checker-daily. Assisted-by: Claude:claude-opus-5-5 Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Frederik Wedel-Heinen <[email protected]> Reviewed-by: Bob Beck <[email protected]> Merge-date: Wed Oct 21 16:56:52 2026 Merged-from: https://github.com/openssl/openssl/pull/33125
Diffstat (limited to '.github/workflows/ci.yml')
-rw-r--r--.github/workflows/ci.yml63
1 files changed, 0 insertions, 63 deletions
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6ea3d90fbba..e048b9b0cc7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -384,35 +384,6 @@ jobs:
name: "ci@no-shared-macos-14"
path: artifacts.tar.gz
- non-caching:
- runs-on: ubuntu-latest
- steps:
- - uses: actions/checkout@v6
- with:
- persist-credentials: false
- - name: checkout fuzz/corpora submodule
- run: git submodule update --init --depth 1 fuzz/corpora
- - name: Adjust ASLR for sanitizer
- run: |
- sudo cat /proc/sys/vm/mmap_rnd_bits
- sudo sysctl -w vm.mmap_rnd_bits=28
- - name: config
- run: ./config --strict-warnings --banner=Configured --debug enable-demos enable-h3demo enable-asan enable-ubsan no-cached-fetch no-fips no-dtls no-tls1 no-tls1-method no-tls1_1 no-tls1_1-method no-async && perl configdata.pm --dump
- - name: make
- run: make -s -j4
- - name: get cpu info
- run: |
- cat /proc/cpuinfo
- ./util/opensslwrap.sh version -c
- - name: make test
- run: .github/workflows/make-test OPENSSL_TEST_RAND_ORDER=0 TESTS="-test_fuzz* -test_ssl_* -test_sslapi -test_evp -test_cmp_http -test_verify -test_cms -test_store -test_enc -[01][0-9]"
- - name: save artifacts
- if: success() || failure()
- uses: actions/upload-artifact@v5
- with:
- name: "ci@non-caching"
- path: artifacts.tar.gz
-
address_ub_sanitizer:
runs-on: ubuntu-latest
steps:
@@ -442,7 +413,6 @@ jobs:
name: "ci@address_ub_sanitizer"
path: artifacts.tar.gz
- # Same configuration as the run-checker-merge variant, promoted to per-PR CI.
# no-asm builds the sanitizer-instrumented C fallback primitives (e.g. the
# OPENSSL_cleanse() C implementation), which the asm-enabled asan job above
# cannot observe; keep both, as each covers C code the other does not build.
@@ -629,39 +599,6 @@ jobs:
name: "ci@enable_non-default_options"
path: artifacts.tar.gz
- full_featured:
- runs-on: ubuntu-latest
- steps:
- - uses: actions/checkout@v6
- with:
- persist-credentials: false
- - name: checkout fuzz/corpora submodule
- run: git submodule update --init --depth 1 fuzz/corpora
- - name: modprobe tls
- run: sudo modprobe tls
- - name: Enable sctp
- run: sudo modprobe sctp
- - name: Enable auth in sctp
- run: sudo sysctl -w net.sctp.auth_enable=1
- - name: install extra config support
- run: sudo apt-get -y install libsctp-dev abigail-tools libzstd-dev zstd
- - name: config
- run: ./config --strict-warnings --banner=Configured enable-demos enable-h3demo enable-ec_explicit_curves enable-ktls enable-fips enable-lms enable-egd enable-ec_nistp_64_gcc_128 enable-md2 enable-rc5 enable-sctp enable-weak-ssl-ciphers enable-trace enable-zlib enable-zstd && perl configdata.pm --dump
- - name: make
- run: make -s -j4
- - name: get cpu info
- run: |
- cat /proc/cpuinfo
- ./util/opensslwrap.sh version -c
- - name: make test
- run: .github/workflows/make-test
- - name: save artifacts
- if: success() || failure()
- uses: actions/upload-artifact@v5
- with:
- name: "ci@full_featured"
- path: artifacts.tar.gz
-
legacy:
runs-on: ubuntu-latest
steps: