StelluxOS/.github/workflows/kernel-unit-tests.yml at master · FlareCoding/StelluxOS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
#
# Kernel CI Pipeline
#
# Validates every commit by linting privilege annotations, building the kernel
# across all supported architectures and build modes, and running the full
# unit-test suite inside QEMU.
#
# Job graph:
#
#   dynpriv-lint  (fast gate)
#        │
#        ▼
#      build     (4 jobs: arch × mode)
#        │
#        ▼
#    unit-tests  (2 jobs: arch)
#

name: Kernel CI

on:
  push:
    branches:
      - "**"
  pull_request:

# Ensure all run steps use bash with pipefail so piped commands like
# `make test | tee` correctly propagate non-zero exit codes.
defaults:
  run:
    shell: bash

jobs:
  # ============================================================================
  # Privilege Annotation Lint
  # ============================================================================

  dynpriv-lint:
    name: dynpriv lint
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Run dynamic privilege lint
        run: bash scripts/dynpriv-lint.sh

  # ============================================================================
  # Build Verification (arch × mode matrix)
  # ============================================================================

  build:
    name: build (${{ matrix.arch }}, ${{ matrix.mode }})
    runs-on: ubuntu-latest
    needs: dynpriv-lint

    strategy:
      fail-fast: false
      matrix:
        arch: [x86_64, aarch64]
        mode: [debug, release]

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install build dependencies
        run: |
          sudo apt-get update -qq
          sudo apt-get install -y -qq \
            clang lld llvm \
            libclang-rt-dev \
            gcc-aarch64-linux-gnu \
            linux-libc-dev-arm64-cross \
            cmake \
            mtools gdisk xorriso

      - name: Fetch Limine EFI binaries
        run: make limine

      - name: Cache musl sysroot
        uses: actions/cache@v4
        id: musl-cache
        with:
          path: userland/sysroot
          key: musl-sysroot-1.2.5

      - name: Build musl libc
        if: steps.musl-cache.outputs.cache-hit != 'true'
        run: make musl

      - name: Cache libc++ sysroot
        uses: actions/cache@v4
        id: libcxx-cache
        with:
          path: |
            userland/sysroot/x86_64/lib/libc++.a
            userland/sysroot/x86_64/lib/libc++abi.a
            userland/sysroot/x86_64/lib/libunwind.a
            userland/sysroot/x86_64/include/c++
            userland/sysroot/aarch64/lib/libc++.a
            userland/sysroot/aarch64/lib/libc++abi.a
            userland/sysroot/aarch64/lib/libunwind.a
            userland/sysroot/aarch64/include/c++
          key: libcxx-sysroot-18.1.8

      - name: Build libc++
        if: steps.libcxx-cache.outputs.cache-hit != 'true'
        run: make libcxx

      - name: Build kernel
        run: |
          make kernel ARCH=${{ matrix.arch }} \
            ${{ matrix.mode == 'release' && 'RELEASE=1' || '' }}

      - name: Build userland
        run: make userland ARCH=${{ matrix.arch }}

      - name: Verify kernel ELF exists
        run: |
          elf="build/kernel/${{ matrix.arch }}/kernel.elf"
          if [[ ! -f "$elf" ]]; then
            echo "::error::Kernel ELF not found: $elf"
            exit 1
          fi
          echo "Kernel ELF: $(ls -lh "$elf")"

  # ============================================================================
  # Unit Tests (arch matrix)
  # ============================================================================

  unit-tests:
    name: unit-tests (${{ matrix.arch }})
    runs-on: ubuntu-latest
    needs: build
    timeout-minutes: 20

    strategy:
      fail-fast: false
      matrix:
        arch: [x86_64, aarch64]

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install build and QEMU dependencies
        run: |
          sudo apt-get update -qq
          sudo apt-get install -y -qq \
            clang lld llvm \
            libclang-rt-dev \
            gcc-aarch64-linux-gnu \
            linux-libc-dev-arm64-cross \
            cmake \
            qemu-system-x86 qemu-system-arm \
            ovmf qemu-efi-aarch64 \
            mtools gdisk xorriso

      - name: Fetch Limine EFI binaries
        run: make limine

      - name: Cache musl sysroot
        uses: actions/cache@v4
        id: musl-cache
        with:
          path: userland/sysroot
          key: musl-sysroot-1.2.5

      - name: Build musl libc
        if: steps.musl-cache.outputs.cache-hit != 'true'
        run: make musl

      - name: Cache libc++ sysroot
        uses: actions/cache@v4
        id: libcxx-cache
        with:
          path: |
            userland/sysroot/x86_64/lib/libc++.a
            userland/sysroot/x86_64/lib/libc++abi.a
            userland/sysroot/x86_64/lib/libunwind.a
            userland/sysroot/x86_64/include/c++
            userland/sysroot/aarch64/lib/libc++.a
            userland/sysroot/aarch64/lib/libc++abi.a
            userland/sysroot/aarch64/lib/libunwind.a
            userland/sysroot/aarch64/include/c++
          key: libcxx-sysroot-18.1.8

      - name: Build libc++
        if: steps.libcxx-cache.outputs.cache-hit != 'true'
        run: make libcxx

      - name: Run unit tests
        run: make test ARCH=${{ matrix.arch }} 2>&1 | tee test-log-${{ matrix.arch }}.txt

      - name: Upload test log
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: test-log-${{ matrix.arch }}
          path: test-log-${{ matrix.arch }}.txt
          if-no-files-found: ignore