git.squeep.com Git - akkoma/blob - .gitlab-ci.yml

   1 image: elixir:1.9.4
   2
   3 variables: &global_variables
   4   POSTGRES_DB: pleroma_test
   5   POSTGRES_USER: postgres
   6   POSTGRES_PASSWORD: postgres
   7   DB_HOST: postgres
   8   MIX_ENV: test
   9
  10 cache: &global_cache_policy
  11   key: ${CI_COMMIT_REF_SLUG}
  12   paths:
  13     - deps
  14     - _build
  15
  16 stages:
  17   - build
  18   - test
  19   - benchmark
  20   - deploy
  21   - release
  22   - docker
  23
  24 before_script:
  25   - apt-get update && apt-get install -y cmake
  26   - mix local.hex --force
  27   - mix local.rebar --force
  28   - apt-get -qq update
  29   - apt-get install -y libmagic-dev
  30
  31 build:
  32   stage: build
  33   script:
  34   - mix deps.get
  35   - mix compile --force
  36
  37 spec-build:
  38   stage: test
  39   artifacts:
  40     paths:
  41     - spec.json
  42   script:
  43   - mix pleroma.openapi_spec spec.json
  44
  45 benchmark:
  46   stage: benchmark
  47   when: manual
  48   variables:
  49     MIX_ENV: benchmark
  50   services:
  51   - name: postgres:9.6
  52     alias: postgres
  53     command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
  54   script:
  55     - mix deps.get
  56     - mix ecto.create
  57     - mix ecto.migrate
  58     - mix pleroma.load_testing
  59
  60 unit-testing:
  61   stage: test
  62   retry: 2
  63   cache: &testing_cache_policy
  64     <<: *global_cache_policy
  65     policy: pull
  66
  67   services:
  68   - name: postgres:13
  69     alias: postgres
  70     command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
  71   script:
  72     - apt-get update && apt-get install -y libimage-exiftool-perl ffmpeg
  73     - mix deps.get
  74     - mix ecto.create
  75     - mix ecto.migrate
  76     - mix coveralls --preload-modules
  77
  78 # Removed to fix CI issue. In this early state it wasn't adding much value anyway.
  79 # TODO Fix and reinstate federated testing
  80 # federated-testing:
  81 #   stage: test
  82 #   cache: *testing_cache_policy
  83 #   services:
  84 #   - name: minibikini/postgres-with-rum:12
  85 #     alias: postgres
  86 #     command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
  87 #   script:
  88 #     - mix deps.get
  89 #     - mix ecto.create
  90 #     - mix ecto.migrate
  91 #     - epmd -daemon
  92 #     - mix test --trace --only federated
  93
  94 unit-testing-rum:
  95   stage: test
  96   retry: 2
  97   cache: *testing_cache_policy
  98   services:
  99   - name: minibikini/postgres-with-rum:12
 100     alias: postgres
 101     command: ["postgres", "-c", "fsync=off", "-c", "synchronous_commit=off", "-c", "full_page_writes=off"]
 102   variables:
 103     <<: *global_variables
 104     RUM_ENABLED: "true"
 105   script:
 106     - apt-get update && apt-get install -y libimage-exiftool-perl ffmpeg
 107     - mix deps.get
 108     - mix ecto.create
 109     - mix ecto.migrate
 110     - "mix ecto.migrate --migrations-path priv/repo/optional_migrations/rum_indexing/"
 111     - mix test --preload-modules
 112
 113 lint:
 114   stage: test
 115   cache: *testing_cache_policy
 116   script:
 117     - mix format --check-formatted
 118
 119 analysis:
 120   stage: test
 121   cache: *testing_cache_policy
 122   script:
 123     - mix deps.get
 124     - mix credo --strict --only=warnings,todo,fixme,consistency,readability
 125
 126 docs-deploy:
 127   stage: deploy
 128   cache: *testing_cache_policy
 129   image: alpine:latest
 130   only:
 131   - stable@pleroma/pleroma
 132   - develop@pleroma/pleroma
 133   before_script:
 134   - apk add curl
 135   script:
 136   - curl -X POST -F"token=$DOCS_PIPELINE_TRIGGER" -F'ref=master' -F"variables[BRANCH]=$CI_COMMIT_REF_NAME" https://git.pleroma.social/api/v4/projects/673/trigger/pipeline
 137 review_app:
 138   image: alpine:3.9
 139   stage: deploy
 140   before_script:
 141     - apk update && apk add openssh-client git
 142   when: manual
 143   environment:
 144     name: review/$CI_COMMIT_REF_NAME
 145     url: https://$CI_ENVIRONMENT_SLUG.pleroma.online/
 146     on_stop: stop_review_app
 147   only:
 148     - branches
 149   except:
 150     - master
 151     - develop
 152   script:
 153     - echo "$CI_ENVIRONMENT_SLUG"
 154     - mkdir -p ~/.ssh
 155     - eval $(ssh-agent -s)
 156     - echo "$SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add -
 157     - ssh-keyscan -H "pleroma.online" >> ~/.ssh/known_hosts
 158     - (ssh -t dokku@pleroma.online -- apps:create "$CI_ENVIRONMENT_SLUG") || true
 159     - (ssh -t dokku@pleroma.online -- git:set "$CI_ENVIRONMENT_SLUG" keep-git-dir true) || true
 160     - ssh -t dokku@pleroma.online -- config:set "$CI_ENVIRONMENT_SLUG" APP_NAME="$CI_ENVIRONMENT_SLUG" APP_HOST="$CI_ENVIRONMENT_SLUG.pleroma.online" MIX_ENV=dokku
 161     - (ssh -t dokku@pleroma.online -- postgres:create $(echo $CI_ENVIRONMENT_SLUG | sed -e 's/-/_/g')_db) || true
 162     - (ssh -t dokku@pleroma.online -- postgres:link $(echo $CI_ENVIRONMENT_SLUG | sed -e 's/-/_/g')_db "$CI_ENVIRONMENT_SLUG") || true
 163     - (ssh -t dokku@pleroma.online -- certs:add "$CI_ENVIRONMENT_SLUG" /home/dokku/server.crt /home/dokku/server.key) || true
 164     - git push -f dokku@pleroma.online:$CI_ENVIRONMENT_SLUG $CI_COMMIT_SHA:refs/heads/master
 165
 166 spec-deploy:
 167   stage: deploy
 168   only:
 169     - develop@pleroma/pleroma
 170   image: alpine:latest
 171   before_script:
 172     - apk add curl
 173   script:
 174     - curl -X POST -F"token=$API_DOCS_PIPELINE_TRIGGER" -F'ref=master' -F"variables[BRANCH]=$CI_COMMIT_REF_NAME" https://git.pleroma.social/api/v4/projects/1130/trigger/pipeline
 175
 176
 177 stop_review_app:
 178   image: alpine:3.9
 179   stage: deploy
 180   before_script:
 181     - apk update && apk add openssh-client git
 182   when: manual
 183   environment:
 184     name: review/$CI_COMMIT_REF_NAME
 185     action: stop
 186   script:
 187     - echo "$CI_ENVIRONMENT_SLUG"
 188     - mkdir -p ~/.ssh
 189     - eval $(ssh-agent -s)
 190     - echo "$SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add -
 191     - ssh-keyscan -H "pleroma.online" >> ~/.ssh/known_hosts
 192     - ssh -t dokku@pleroma.online -- --force apps:destroy "$CI_ENVIRONMENT_SLUG"
 193     - ssh -t dokku@pleroma.online -- --force postgres:destroy $(echo $CI_ENVIRONMENT_SLUG | sed -e 's/-/_/g')_db
 194
 195 amd64:
 196   stage: release
 197   image: elixir:1.10.3
 198   only: &release-only
 199   - stable@pleroma/pleroma
 200   - develop@pleroma/pleroma
 201   - /^maint/.*$/@pleroma/pleroma
 202   - /^release/.*$/@pleroma/pleroma
 203   artifacts: &release-artifacts
 204     name: "pleroma-$CI_COMMIT_REF_NAME-$CI_COMMIT_SHORT_SHA-$CI_JOB_NAME"
 205     paths:
 206       - release/*
 207     # Ideally it would be never for master branch and with the next commit for develop,
 208     # but Gitlab does not support neither `only` for artifacts
 209     # nor setting it to never from .gitlab-ci.yml
 210     # nor expiring with the next commit
 211     expire_in: 42 yrs
 212
 213   cache: &release-cache
 214     key: $CI_COMMIT_REF_NAME-$CI_JOB_NAME
 215     paths:
 216           - deps
 217   variables: &release-variables
 218     MIX_ENV: prod
 219   before_script: &before-release
 220   - apt-get update && apt-get install -y cmake libmagic-dev
 221   - echo "import Mix.Config" > config/prod.secret.exs
 222   - mix local.hex --force
 223   - mix local.rebar --force
 224   script: &release
 225     - mix deps.get --only prod
 226     - mkdir release
 227     - export PLEROMA_BUILD_BRANCH=$CI_COMMIT_REF_NAME
 228     - mix release --path release
 229
 230
 231 amd64-musl:
 232   stage: release
 233   artifacts: *release-artifacts
 234   only: *release-only
 235   image: elixir:1.10.3-alpine
 236   cache: *release-cache
 237   variables: *release-variables
 238   before_script: &before-release-musl
 239   - apk add git gcc g++ musl-dev make cmake file-dev
 240   - echo "import Mix.Config" > config/prod.secret.exs
 241   - mix local.hex --force
 242   - mix local.rebar --force
 243   script: *release
 244
 245 arm:
 246   stage: release
 247   artifacts: *release-artifacts
 248   only: *release-only
 249   tags:
 250     - arm32-specified
 251   image: arm32v7/elixir:1.10.3
 252   cache: *release-cache
 253   variables: *release-variables
 254   before_script: *before-release
 255   script: *release
 256
 257 arm-musl:
 258   stage: release
 259   artifacts: *release-artifacts
 260   only: *release-only
 261   tags:
 262     - arm32-specified
 263   image: arm32v7/elixir:1.10.3-alpine
 264   cache: *release-cache
 265   variables: *release-variables
 266   before_script: *before-release-musl
 267   script: *release
 268
 269 arm64:
 270   stage: release
 271   artifacts: *release-artifacts
 272   only: *release-only
 273   tags:
 274     - arm
 275   image: arm64v8/elixir:1.10.3
 276   cache: *release-cache
 277   variables: *release-variables
 278   before_script: *before-release
 279   script: *release
 280
 281 arm64-musl:
 282   stage: release
 283   artifacts: *release-artifacts
 284   only: *release-only
 285   tags:
 286     - arm
 287   image: arm64v8/elixir:1.10.3-alpine
 288   cache: *release-cache
 289   variables: *release-variables
 290   before_script: *before-release-musl
 291   script: *release
 292
 293 docker:
 294   stage: docker
 295   image: docker:latest
 296   cache: {}
 297   dependencies: []
 298   variables: &docker-variables
 299     DOCKER_DRIVER: overlay2
 300     DOCKER_HOST: unix:///var/run/docker.sock
 301     IMAGE_TAG: $CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA
 302     IMAGE_TAG_SLUG: $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG
 303     IMAGE_TAG_LATEST: $CI_REGISTRY_IMAGE:latest
 304     IMAGE_TAG_LATEST_STABLE: $CI_REGISTRY_IMAGE:latest-stable
 305     DOCKER_BUILDX_URL: https://github.com/docker/buildx/releases/download/v0.4.1/buildx-v0.4.1.linux-amd64
 306     DOCKER_BUILDX_HASH: 71a7d01439aa8c165a25b59c44d3f016fddbd98b
 307   before_script: &before-docker
 308     - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
 309     - docker pull $IMAGE_TAG_SLUG || true
 310     - export CI_JOB_TIMESTAMP=$(date --utc -Iseconds)
 311     - export CI_VCS_REF=$CI_COMMIT_SHORT_SHA
 312   allow_failure: true
 313   script:
 314     - mkdir -p /root/.docker/cli-plugins
 315     - wget "${DOCKER_BUILDX_URL}" -O ~/.docker/cli-plugins/docker-buildx
 316     - echo "${DOCKER_BUILDX_HASH}  /root/.docker/cli-plugins/docker-buildx" | sha1sum -c
 317     - chmod +x ~/.docker/cli-plugins/docker-buildx
 318     - docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
 319     - docker buildx create --name mbuilder --driver docker-container --use
 320     - docker buildx inspect --bootstrap
 321     - docker buildx build --platform linux/amd64,linux/arm/v7,linux/arm64/v8 --push --cache-from $IMAGE_TAG_SLUG --build-arg VCS_REF=$CI_VCS_REF --build-arg BUILD_DATE=$CI_JOB_TIMESTAMP -t $IMAGE_TAG -t $IMAGE_TAG_SLUG -t $IMAGE_TAG_LATEST .
 322   tags:
 323     - dind
 324   only:
 325     - develop@pleroma/pleroma
 326
 327 docker-stable:
 328   stage: docker
 329   image: docker:latest
 330   cache: {}
 331   dependencies: []
 332   variables: *docker-variables
 333   before_script: *before-docker
 334   allow_failure: true
 335   script:
 336     - mkdir -p /root/.docker/cli-plugins
 337     - wget "${DOCKER_BUILDX_URL}" -O ~/.docker/cli-plugins/docker-buildx
 338     - echo "${DOCKER_BUILDX_HASH}  /root/.docker/cli-plugins/docker-buildx" | sha1sum -c
 339     - chmod +x ~/.docker/cli-plugins/docker-buildx
 340     - docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
 341     - docker buildx create --name mbuilder --driver docker-container --use
 342     - docker buildx inspect --bootstrap
 343     - docker buildx build --platform linux/amd64,linux/arm/v7,linux/arm64/v8 --push --cache-from $IMAGE_TAG_SLUG --build-arg VCS_REF=$CI_VCS_REF --build-arg BUILD_DATE=$CI_JOB_TIMESTAMP -t $IMAGE_TAG -t $IMAGE_TAG_SLUG -t $IMAGE_TAG_LATEST_STABLE .
 344   tags:
 345     - dind
 346   only:
 347     - stable@pleroma/pleroma
 348
 349 docker-release:
 350   stage: docker
 351   image: docker:latest
 352   cache: {}
 353   dependencies: []
 354   variables: *docker-variables
 355   before_script: *before-docker
 356   allow_failure: true
 357   script:
 358   script:
 359     - mkdir -p /root/.docker/cli-plugins
 360     - wget "${DOCKER_BUILDX_URL}" -O ~/.docker/cli-plugins/docker-buildx
 361     - echo "${DOCKER_BUILDX_HASH}  /root/.docker/cli-plugins/docker-buildx" | sha1sum -c
 362     - chmod +x ~/.docker/cli-plugins/docker-buildx
 363     - docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
 364     - docker buildx create --name mbuilder --driver docker-container --use
 365     - docker buildx inspect --bootstrap
 366     - docker buildx build --platform linux/amd64,linux/arm/v7,linux/arm64/v8 --push --cache-from $IMAGE_TAG_SLUG --build-arg VCS_REF=$CI_VCS_REF --build-arg BUILD_DATE=$CI_JOB_TIMESTAMP -t $IMAGE_TAG -t $IMAGE_TAG_SLUG .
 367   tags:
 368     - dind
 369   only:
 370     - /^release/.*$/@pleroma/pleroma