zeek/ci
Robin Sommer d99f041ac5
Add WebSocket support for exchanging events with external clients.
This exposes Broker's new WebSocket support in Zeek. To enable it,
call `Broker::listen_websocket()`. Zeek will then start listening on
port 9997 for incoming WebSocket connections.

See the Broker documentation for a description of the message format
expected over these WebSocket connections.
2022-06-02 10:31:52 +02:00
..
alpine Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
centos-7 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
centos-stream-8 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
centos-stream-9 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
debian-9 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
debian-9-32bit Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
debian-10 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
debian-11 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
fedora-34 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
fedora-35 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
freebsd Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
macos Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
openssl-3.0 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
opensuse-leap-15.3 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
ubuntu-18.04 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
ubuntu-20.04 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
ubuntu-21.10 Add WebSocket support for exchanging events with external clients. 2022-06-02 10:31:52 +02:00
benchmark.sh Include git sha in request to benchmark host 2021-03-25 17:38:02 -07:00
build.sh Format shell scripts with shfmt. 2021-11-24 23:13:02 +01:00
common.sh Rework .cirrus.yml a bit to commonize some parts 2022-05-19 09:21:55 -07:00
init-external-repos.sh Format shell scripts with shfmt. 2021-11-24 23:13:02 +01:00
README Update docs for configuring CI email notifications 2020-08-19 11:51:27 -07:00
test-fuzzers.sh Format shell scripts with shfmt. 2021-11-24 23:13:02 +01:00
test.sh Format shell scripts with shfmt. 2021-11-24 23:13:02 +01:00
update-zeekygen-docs.sh Format shell scripts with shfmt. 2021-11-24 23:13:02 +01:00
upload-coverage.sh Prevent non-master builds, add cirrus information to upload 2020-10-22 00:56:20 +00:00

=========================================
Continuous Integration Configuration Info
=========================================

The following pointers are aimed at maintainers to help describe a few points
about the Cirrus CI setup that may not be obvious/intuitive.

Private Test Suite
------------------

Access to the private test suite is available in CI tasks except in Pull
Requests from people that do not otherwise have write access to the zeek
repository on GitHub.  To configure this access for the
``zeek-testing-private`` repository, it uses a "deploy key" which is a single
purpose SSH key with read-only permissions.  Here's how it can be set up:

1. ``ssh-keygen -f cirrus-key``

2. Add contents of ``cirrus-key.pub`` as a new key on GitHub:
   https://github.com/zeek/zeek-testing-private/settings/keys

3. Generate a new Orgnaization-Level Secured Variable in Cirrus CI settings at
   https://cirrus-ci.com/settings/github/zeek.  The value of the secured
   variable is the base64-encoded private key, and can be obtained from the
   output of the command: ``base64 cirrus-key``.

4. Take the ``ENCRYPTED[...]``` string generated by Cirrus and use that as the
   value of ``ZEEK_TESTING_PRIVATE_SSH_KEY`` in ``.cirrus.yml``

5. Delete the local key: ``rm cirrus-key*``

6. Commit/push the changes.

Email Notifications
-------------------

Cirrus CI doesn't feature any way to perform email notifications on failures,
so that is instead handled by a separate GitHub Action:

  https://github.com/zeek/ci-email-action

The configuration of that GitHub Action is typical: it's the
``.github/workflows/ci-notification.yml`` file, which sets SMTP/mail info
via secrets stored in GitHub for the Zeek organization:

  https://github.com/organizations/zeek/settings/secrets

The particular values used for those are currently from the Zeek project's AWS
Simple Email Service configuration.