add some safety checks #283
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| workflow_dispatch: | |
| push: | |
| pull_request: | |
| branches: | |
| - main | |
| - develop | |
| jobs: | |
| configure: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| uid_gid: ${{ steps.get-user.outputs.uid_gid }} | |
| steps: | |
| - id: get-user | |
| run: echo "uid_gid=$(id -u):$(id -g)" >> $GITHUB_OUTPUT | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: true | |
| - name: Install deps | |
| run: | | |
| sudo update-alternatives --install /usr/bin/python python /usr/bin/python3 10 | |
| make deps | |
| - run: make cpp_test | |
| build_only_rust: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: true | |
| - name: Install rust | |
| uses: actions-rs/toolchain@v1 | |
| with: | |
| toolchain: stable | |
| - name: rustfmt | |
| run: | | |
| cd ./app/rust | |
| cargo fmt --version | |
| cargo fmt -- --check | |
| - name: clippy | |
| run: | | |
| cd ./app/rust | |
| cargo clippy --version | |
| cargo clippy --all-features --all-targets || true | |
| - name: run tests | |
| run: | | |
| cd ./app/rust | |
| cargo test | |
| build_ledger: | |
| needs: configure | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/ledger-app-builder:latest | |
| options: --user ${{ needs.configure.outputs.uid_gid }} | |
| env: | |
| BOLOS_SDK: /opt/nanos-secure-sdk | |
| outputs: | |
| size: ${{steps.build.outputs.size}} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: true | |
| - name: Build Standard app | |
| id: build | |
| shell: bash -l {0} | |
| run: | | |
| SUBSTRATE_PARSER_FULL=1 make | |
| echo "size=$(python3 deps/ledger-zxlib/scripts/getSize.py s)" >> $GITHUB_OUTPUT | |
| - name: Build SR25519 app | |
| shell: bash -l {0} | |
| run: | | |
| SUBSTRATE_PARSER_FULL=1 SUPPORT_SR25519=1 make | |
| size_nano_s: | |
| needs: build_ledger | |
| runs-on: ubuntu-latest | |
| env: | |
| NANOS_LIMIT_SIZE: 136 | |
| steps: | |
| - run: | | |
| echo "LNS app size: ${{needs.build_ledger.outputs.size}} KiB" | |
| [ ${{needs.build_ledger.outputs.size}} -le $NANOS_LIMIT_SIZE ] | |
| test_zemu: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Test | |
| run: | | |
| id | |
| echo $HOME | |
| echo $DISPLAY | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: true | |
| - run: sudo apt-get update -y && sudo apt-get install -y libusb-1.0.0 libudev-dev | |
| - name: Install rust | |
| uses: actions-rs/toolchain@v1 | |
| with: | |
| toolchain: stable | |
| - name: Install node | |
| uses: actions/setup-node@v3 | |
| - name: Install yarn | |
| run: | | |
| npm install -g yarn | |
| - name: Build and run zemu tests | |
| run: | | |
| make test_all | |
| build_package_nanos: | |
| needs: [configure, build, build_ledger, test_zemu] | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/ledger-app-builder:latest | |
| options: --user ${{ needs.configure.outputs.uid_gid }} | |
| env: | |
| BOLOS_SDK: /opt/nanos-secure-sdk | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: true | |
| - name: Install deps | |
| run: pip install ledgerblue | |
| - name: Build NanoS | |
| shell: bash -l {0} | |
| run: | | |
| make SUBSTRATE_PARSER_FULL=0 | |
| mv ./app/pkg/installer_s.sh ./app/pkg/installer_nanos.sh | |
| - name: Set tag | |
| id: nanos_light | |
| run: echo "tag_name=$(./app/pkg/installer_nanos.sh version)" >> $GITHUB_OUTPUT | |
| - name: Create or Update Release (1) | |
| id: create_release_0 | |
| uses: softprops/action-gh-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token | |
| with: | |
| files: ./app/pkg/installer_nanos.sh | |
| tag_name: ${{ steps.nanos_light.outputs.tag_name }} | |
| draft: false | |
| prerelease: false | |
| build_package_nanos_xl: | |
| needs: [configure, build, build_ledger, test_zemu] | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/ledger-app-builder:latest | |
| options: --user ${{ needs.configure.outputs.uid_gid }} | |
| env: | |
| BOLOS_SDK: /opt/nanos-secure-sdk | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: true | |
| - name: Install deps | |
| run: pip install ledgerblue | |
| - name: Build NanoS XL | |
| shell: bash -l {0} | |
| run: | | |
| make SUBSTRATE_PARSER_FULL=1 | |
| mv ./app/pkg/installer_s.sh ./app/pkg/installer_nanos_xl.sh | |
| - name: Set tag | |
| id: nanos_xl | |
| run: echo "tag_name=$(./app/pkg/installer_nanos_xl.sh version)" >> $GITHUB_OUTPUT | |
| - name: Update Release | |
| id: update_release_1 | |
| uses: softprops/action-gh-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token | |
| with: | |
| files: ./app/pkg/installer_nanos_xl.sh | |
| tag_name: ${{ steps.nanos_xl.outputs.tag_name }} | |
| draft: false | |
| prerelease: false | |
| build_package_nanosp: | |
| needs: [configure, build, build_ledger, test_zemu] | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/ledger-app-builder:latest | |
| options: --user ${{ needs.configure.outputs.uid_gid }} | |
| env: | |
| BOLOS_SDK: /opt/nanosplus-secure-sdk | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: true | |
| - name: Install deps | |
| run: pip install ledgerblue | |
| - name: Build NanoSP | |
| shell: bash -l {0} | |
| run: | | |
| make SUBSTRATE_PARSER_FULL=1 | |
| mv ./app/pkg/installer_s2.sh ./app/pkg/installer_nanos_plus.sh | |
| - name: Set tag | |
| id: nanosp | |
| run: echo "tag_name=$(./app/pkg/installer_nanos_plus.sh version)" >> $GITHUB_OUTPUT | |
| - name: Update Release | |
| id: update_release_2 | |
| uses: softprops/action-gh-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token | |
| with: | |
| files: ./app/pkg/installer_nanos_plus.sh | |
| tag_name: ${{ steps.nanosp.outputs.tag_name }} | |
| draft: false | |
| prerelease: false | |
| build_package_stax: | |
| needs: [configure, build, build_ledger, test_zemu] | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| runs-on: ubuntu-latest | |
| container: | |
| image: zondax/ledger-app-builder:latest | |
| options: --user ${{ needs.configure.outputs.uid_gid }} | |
| env: | |
| BOLOS_SDK: /opt/stax-secure-sdk | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: true | |
| - name: Install deps | |
| run: pip install ledgerblue | |
| - name: Build Stax | |
| shell: bash -l {0} | |
| run: make SUBSTRATE_PARSER_FULL=1 | |
| - name: Set tag | |
| id: stax | |
| run: echo "tag_name=$(./app/pkg/installer_stax.sh version)" >> $GITHUB_OUTPUT | |
| - name: Update Release | |
| id: update_release_2 | |
| uses: softprops/action-gh-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token | |
| with: | |
| files: ./app/pkg/installer_stax.sh | |
| tag_name: ${{ steps.stax.outputs.tag_name }} | |
| draft: false | |
| prerelease: false |