build.yml

name: build+test

on:
  push:
    branches:
      - main

  workflow_dispatch:
    inputs:
      reason:
        description: "Reason for manual trigger"
        required: true

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: checkout brownie repo
        uses: actions/checkout@v4

      - name: setup go
        uses: actions/setup-go@v5
        with:
          go-version: "1.23.0"

      - name: download dependencies
        run: make install

      - name: audit code
        run: make audit

      - name: run unit tests
        run: make test

      - name: build artifact
        run: make build

      - name: upload artifact
        uses: actions/upload-artifact@master
        with:
          name: artifacts
          path: tmp/bin/brownie

  test:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: checkout runtime-tools repo
        uses: actions/checkout@v4
        with:
          repository: opencontainers/runtime-tools

      - name: install nodejs
        uses: actions/setup-node@v4
        with:
          node-version: 20.9.0

      - name: install tap
        run: npm install tap

      - name: build runtime-tools
        run: make runtimetest validation-executables

      - name: download artifact
        uses: actions/download-artifact@master
        with:
          name: artifacts
          path: .

      - name: chmod brownie
        run: chmod 755 ./brownie

      - name: run oci tests
        run: |
          touch results.tap &&
            # sudo RUNTIME=./brownie ./validation/config_updates_without_affect/config_updates_without_affect.t >> results.tap &&
            # sudo RUNTIME=./brownie ./validation/create/create.t >> results.tap &&
            sudo RUNTIME=./brownie ./validation/default/default.t >> results.tap &&
            # sudo RUNTIME=./brownie ./validation/kill_no_effect/kill_no_effect.t >> results.tap &&
            # sudo RUNTIME=./brownie ./validation/linux_mount_label/linux_mount_label.t >> results.tap &&
            # sudo RUNTIME=./brownie ./validation/linux_readonly_paths/linux_readonly_paths.t >> results.tap &&
            # sudo RUNTIME=./brownie ./validation/linux_sysctl/linux_sysctl.t >> results.tap &&
            sudo RUNTIME=./brownie ./validation/pidfile/pidfile.t >> results.tap &&
            # sudo RUNTIME=./brownie ./validation/process_capabilities/process_capabilities.t >> results.tap &&
            # sudo RUNTIME=./brownie ./validation/state/state.t >> results.tap &&
            (! grep -F "not ok" results.tap)