Commit graph

224 commits

Author SHA1 Message Date
Arne Welzel
70f5430e7c ci/macos/prepare: Install python@3 explicitly
It seems Homebrew's Python 3.12 doesn't install default symlinks or
python3 symlinks[1]. I believe this results in prepare.sh using the
system's Python rather than Homebrew's. Install python@3 explicitly
to put the symlinks in place.

[1] https://stackoverflow.com/a/77655631
2025-03-11 09:51:01 +01:00
Arne Welzel
0b49eac057 ci/alpine: Install openssl package for testing 2025-03-10 17:07:30 +01:00
Arne Welzel
9f768d1896 ci: Install websockets from pip for all distros
The cluster/websocket tests were developed against websockets 14.2,
but Ubuntu and Alpine ship too old versions. Switch to installing
the latest version from pip instead, so we don't need to bother making
tests compatible with very old Python packages shipped by distributions.
2025-03-10 17:07:30 +01:00
Tim Wojtulewicz
1b260333fd CI: Unconditionally upgrade pip on macOS 2025-03-10 08:09:41 -07:00
Christian Kreibich
cff4d3a3a1 CI: remove OpenSuSE Leap 15.5, EOL. 2025-02-05 22:55:05 -08:00
Arne Welzel
bb2e20d353 testing/btest: Use OPENSSL_ENABLE_SHA1_SIGNATURES
This reverts the call to update-crypto-policies in the Fedora 41 image
and instead sets OPENSSL_ENABLE_SHA1_SIGNATURES in the individual tests.
This allows RHEL 10 or Fedora 41 users to run the tests in question
without needing to fiddle with system settings.

Fixes #4035
2025-02-04 09:43:26 +01:00
Evan Typanski
fe44022ee7 Update COPYING date to now and fix some [skip CI] 2025-01-09 08:38:45 -05:00
Arne Welzel
eac91fdc24 cirrus: Move additional tag "computation" into separate script
This allows for easier testing locally and maybe re-usability.
2024-12-13 13:17:31 +01:00
Tim Wojtulewicz
49f82b325b Swap pre-commit yapf for ruff/ruff-format, fix findings 2024-12-11 11:08:37 -07:00
Tim Wojtulewicz
beb7b5bbbf CI: Install python 3.9 on ubuntu 20 2024-12-11 11:08:37 -07:00
Arne Welzel
2f37dcf505 tsan_suppressions: Add called_from_lib: libzmq 2024-12-10 20:33:02 +01:00
Arne Welzel
34275afc1f ci: Add cppzmq and libzmq to most platforms 2024-12-10 20:33:02 +01:00
Tim Wojtulewicz
cb7cda9808 Merge remote-tracking branch 'origin/topic/awelzel/license-header-cleanup'
* origin/topic/awelzel/license-header-cleanup:
  Add missing copyright line to headers and cc files
  pre-commit: Add license-header check inspired by Spicy
  Add missing "COPYING" in file comments
2024-12-09 12:23:00 -07:00
Benjamin Bannier
24894febb6 Bump typos pre-commit hooks
This now picks up additional typical misspellings, but also triggers on
more identifiers we use. I opted for fixing the obvious misspellings and
updated the allowlist for anything else.
2024-12-09 16:13:28 +01:00
Arne Welzel
d93249eeab pre-commit: Add license-header check inspired by Spicy 2024-12-06 12:50:58 +01:00
Arne Welzel
3de52c27e0 ci/test.sh: Run doctest with TZ=UTC
Broker's JSON serialization is TZ dependent (which seems a bug). For now
do the same as we do in btest.cfg and run doctests with TZ set to UTC.

Reported in zeek/broker#434.
2024-11-26 12:58:23 +01:00
Tim Wojtulewicz
ead3a625f8 CI: Use test.sh script for running ZAM tests, but disable parts of it
This ensures that the normal test setup is run, which enables greedy
mode on Cirrus allowing us to over-provision the testing. This should
help speed up the ZAM builds a bit.
2024-11-19 10:52:44 -07:00
Christian Kreibich
af4c21763f Merge branch 'topic/christian/ci-updates'
* topic/christian/ci-updates:
  CI: Use FEDORA40 crypto policy in Fedora 41
  Bump zeekjs to 0.13.0
  CI: bump FreeBSD 13 to 13.4, released in September
  CI: drop Fedora 39, add 41
2024-11-13 17:29:23 -08:00
Johanna Amann
09d6be7f68 CI: Use FEDORA40 crypto policy in Fedora 41
Fedora 41 distrusts SHA-1 signatures by default. Switching to this policy is
Fedora's recommended way of re-enabling support for at least the next several
releases.

A few references:

https://fedoraproject.org/wiki/Changes/OpenSSLDistrustSHA1SigVer
https://fedoraproject.org/wiki/SHA1SignaturesGuidance
https://www.redhat.com/en/blog/rhel-security-sha-1-package-signatures-distrusted-rhel-9
2024-11-13 17:05:08 -08:00
Johanna Amann
2f5f8bdd36 CI: Add Ubuntu 24.10 2024-11-13 12:58:20 +00:00
Christian Kreibich
2881ff620b CI: drop Fedora 39, add 41 2024-11-12 15:32:07 -08:00
Arne Welzel
3f4de778ae ci: Add dnsmasq to a few platforms for testing 2024-11-08 09:50:35 -07:00
Evan Typanski
04c3c2ec72 CI: Add Ubuntu Clang task
This feels more like a band-aid solution - it still requires very manual
intervention to get the next builds, but at least this way we don't rely
on whatever Clang/libc++ happens to ship with FreeBSD for the only
libc++ testing. It seems like sanitizer builds don't use libc++, but I'd
rather a dedicated Linux/Clang/libc++ task at least.
2024-10-30 09:04:24 -04:00
Benjamin Bannier
2d1c865654 Install procps in OpenSuse Leap images
The tests `core.sigterm-regular` and `core.sigterm-stdin` rely on `ps`
to be present which is not the case anymore on OpenSuse Leap; install it
explicitly there.
2024-09-27 10:00:13 +02:00
Arne Welzel
84c9daafd1 ci/ubuntu-24.04: Use ccache 4.10.2
The ccache version shipped with Ubuntu 24.04 does not yet recognize
--fprofile-update=atomic, install one that does.

Now that the asan_sanitizer build also includes building Spicy and
running the spicyz test suite, ccache is quite important.

Reference ccache/ccache#1408 and zeek/zeek#3777.
2024-08-07 11:36:00 +02:00
Arne Welzel
cb500536ea Revert "CI: Use ccache and a single CPU when building spicy analyzers for btests"
This reverts commit b59bed9d06.
2024-07-10 10:02:53 +02:00
Tim Wojtulewicz
b59bed9d06 CI: Use ccache and a single CPU when building spicy analyzers for btests 2024-07-09 14:31:09 -07:00
Christian Kreibich
59d0f311a5 CI: drop Fedora 38, add 40 2024-06-17 18:45:39 -07:00
Benjamin Bannier
20eeb6dbf6 Drop EOL centos8-stream in CI 2024-06-11 14:48:35 +02:00
Tim Wojtulewicz
753127be6d Suppress a known data race during civetweb shutdown 2024-06-07 11:31:34 -07:00
Tim Wojtulewicz
074a87b609 Fix the scripts.policy.frameworks.telemetry.prometheus btest to use the service discovery endpoint 2024-05-31 13:30:31 -07:00
Tim Wojtulewicz
9e9931f2d6 CI: Add coveralls-lcov gem to ubuntu 24, remove from ubuntu 20 2024-05-28 20:30:22 -07:00
Tim Wojtulewicz
0cd023b839 CI: Run coverage builds for PRs, but only upload on master 2024-05-21 15:11:44 -07:00
Tim Wojtulewicz
d5707d606c CI: Add missing lcov package to ubuntu 24 Dockerfile 2024-05-13 22:10:36 -07:00
Tim Wojtulewicz
1a227659fa CI: Add clang-18 to Ubuntu 24.04 VM 2024-05-13 17:40:26 -07:00
Tim Wojtulewicz
e72714410a CI: Replace Ubuntu 23.10 with Ubuntu 24.04 2024-05-08 15:17:35 -07:00
Tim Wojtulewicz
da705c1199 Revert "Install gcc9 on CentOS Stream 8"
This reverts commit 09cc5c37e0.
2024-05-02 19:12:03 -07:00
Tim Wojtulewicz
09cc5c37e0 Install gcc9 on CentOS Stream 8 2024-05-02 19:10:58 -07:00
Johanna Amann
f0acb19823 Add Opensuse leap 15.6 to CI 2024-04-16 10:00:01 +01:00
Tim Wojtulewicz
2491650873 CI: Remove commented openssl 1.1 workaround from macOS preparation script 2024-04-08 12:01:49 -07:00
Tim Wojtulewicz
167cbaf6e4 CI: Fix installation of python package on macOS 2024-04-08 12:01:49 -07:00
Tim Wojtulewicz
17ad726321 CI: Remove CentOS 7 and Debian 10 builds 2024-03-14 13:28:54 -07:00
Tim Wojtulewicz
60da270800 CI: Remove emacs backup file of fedora-38 Dockerfile 2024-02-05 13:33:52 -07:00
Tim Wojtulewicz
2736e8e527 CI: Fix building of alpine image with regards to python packages 2024-02-05 13:32:19 -07:00
Tim Wojtulewicz
674816a01d Switch all of the conan configuration to vcpkg 2024-02-02 14:52:16 -07:00
Tim Wojtulewicz
5a7c482a0f Force Windows CI to use OpenSSL 3.1.1
There's something wrong with chocolatey's OpenSSL 3.2.0 package that
causes cmake to not be able to find libcrypto even though it's clearly
in the directory. Pinning to 3.1.1 fixes the build issue.
2024-01-26 13:10:51 -07:00
Arne Welzel
43fec1f2c8 ci/btest: Remove ZEEK_PROFILER_FILE from btest.cfg, set in ci/test.sh explicitly
The produced coverage files are of little use in current local workflows
and usually just end-up taking up disk space. ZEEK_PROFILER_FILE can be
set explicitly if there's a one-off need to produce these locally, too.
2023-12-15 15:23:52 +01:00
Arne Welzel
344369f169 ci: Remove ZEEK_CI_DISABLE_SCRIPT_PROFILING logic
To my knowledge this doesn't make a huge difference anymore and locally
I'm only using ASAN builds. It's not actually too slow.
2023-12-15 15:23:52 +01:00
Christian Kreibich
866d4b4127 CI: Bump Ubuntu 23.04 to 23.10 2023-12-14 15:35:13 -08:00
Christian Kreibich
ddd56b9ad7 CI: Drop openSUSE Leap 15.4, about to EOL. 2023-12-13 22:03:25 -08:00