tests.yaml

name: tests

on:
  push:

  pull_request:


jobs:
  unit-test:

    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3

      - name: Set up Go
        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # ratchet:actions/setup-go@v4
        with:
          go-version: '1.21'

      - name: Install Dependencies
        run: |
          sudo apt update
          sudo apt install -y clang
          sudo apt install -y libbpf-dev
          sudo apt install -y libseccomp-dev

      - name: Build coverage-instrumented binary
        run: |
          make build-static-libbpfgo
          make build-bpf

      - name: Run Unit-Test
        run: |
          mkdir /tmp/unit/
          # test packages excluding the ones with libbpfgo
          go test \
            -cover \
            -v \
            $(go list ./... | grep -v "github.com/alegrey91/harpoon$" | grep -v ebpf | grep -v cmd) \
            -skip TestHarpoon \
            -args -test.gocoverdir=/tmp/unit/

      - name: Upload cover profiles
        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # ratchet:actions/upload-artifact@v3
        with:
          name: unit-test
          path: /tmp/unit/

  linting:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3

      - name: Set up Go
        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # ratchet:actions/setup-go@v4
        with:
          go-version: '1.21'

      - name: Install Dependencies
        run: |
          sudo apt update
          sudo apt install -y clang
          sudo apt install -y libbpf-dev
          sudo apt install -y libseccomp-dev

      - name: Build coverage-instrumented binary
        run: |
          make build-static-libbpfgo
          make build-bpf

      - name: Golangci-lint
        uses: golangci/golangci-lint-action@v6.1.0
        with:
          args: internal/analyzer internal/archiver internal/elfreader internal/embeddable internal/executor internal/metadata harpoon/internal/privileged internal/seccomputils internal/writer

  integration-test:

    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3

      - name: Set up Go
        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # ratchet:actions/setup-go@v4
        with:
          go-version: '1.21'

      - name: Install Dependencies
        run: |
          sudo apt update
          sudo apt install -y clang
          sudo apt install -y libbpf-dev
          sudo apt install -y libseccomp-dev

      - name: Build coverage-instrumented binary
        run: |
          make build-static-libbpfgo
          make build-bpf
          make build-go-cover && sudo make -B install

      - name: Run integration test
        run: |
          mkdir -p /tmp/integration
          # we have to run integration tests one-by-one
          # otherwhise they will run in parallel.
          # since harpoon apply network forwards, these could
          # interact with each other and make the test fail.
          go test \
            -exec sudo \
            -cover \
            -v main_test.go \
            -args -test.gocoverdir=/tmp/integration/

      - name: Upload cover profiles
        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # ratchet:actions/upload-artifact@v3
        with:
          name: integration-test
          path: /tmp/integration/

  code-coverage:

    runs-on: ubuntu-latest
    needs: [unit-test,integration-test]
    steps:
      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3

      - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # ratchet:actions/download-artifact@v3
        with:
          name: unit-test
          path: /tmp/unit-test

      - uses: actions/download-artifact@v3
        with:
          name: integration-test
          path: /tmp/integration-test

      - name: list files
        run: |
          ls -lah /tmp/unit-test
          ls -lah /tmp/integration-test

      - name: Set up Go
        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # ratchet:actions/setup-go@v4
        with:
          go-version: '1.21'

      - name: Calculate total coverage
        run: |
          go tool \
            covdata \
            textfmt \
            -i=/tmp/unit-test,/tmp/integration-test \
            -o code-coverage
          go tool \
            cover \
            -func code-coverage