name: ntp Tests

# START OF COMMON SECTION
on:
  push:
    branches: [ 'release/**' ]
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]
    branches: [ '*' ]
  # Daily run on master reseeds the shared cache (see save step below).
  schedule:
    - cron: '0 5 * * *'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
# END OF COMMON SECTION

jobs:
  build_wolfssl:
    name: Build wolfSSL
    if: ${{ (github.repository_owner == 'wolfssl') && (github.event_name != 'pull_request' || github.event.pull_request.draft == false) }}
    # Just to keep it the same as the testing target
    runs-on: ubuntu-24.04
    # This should be a safe limit for the tests to run.
    timeout-minutes: 4
    steps:
      - name: Build wolfSSL
        uses: wolfSSL/actions-build-autotools-project@v1
        with:
          path: wolfssl
          configure: --enable-all
          install: true
          check: false

      - name: tar build-dir
        run: tar -zcf build-dir.tgz build-dir

      - name: Upload built lib
        uses: actions/upload-artifact@v6
        with:
          name: wolf-install-ntp
          path: build-dir.tgz
          retention-days: 5

  ntp_check:
    strategy:
      fail-fast: false
      matrix:
        # List of releases to test
        ref: [ 4.2.8p15, 4.2.8p17, 4.2.8p18 ]
    name: ${{ matrix.ref }}
    if: ${{ (github.repository_owner == 'wolfssl') && (github.event_name != 'pull_request' || github.event.pull_request.draft == false) }}
    runs-on: ubuntu-24.04
    # This should be a safe limit for the tests to run.
    timeout-minutes: 10
    needs: build_wolfssl
    steps:
      - name: Download lib
        uses: actions/download-artifact@v7
        with:
          name: wolf-install-ntp

      - name: untar build-dir
        run: tar -xf build-dir.tgz

      - name: Checkout OSP
        uses: actions/checkout@v5
        with:
          repository: wolfssl/osp
          path: osp
          fetch-depth: 1

      # Avoid DoS'ing ntp site so cache the tar.gz
      - name: Check if we have ntp
        uses: actions/cache/restore@v5
        id: cache
        with:
          path: ntp-${{ matrix.ref }}.tar.gz
          key: ntp-${{ matrix.ref }}.tar.gz

      - name: Download ntp
        if: steps.cache.outputs.cache-hit != 'true'
        run: |
          wget https://downloads.nwtime.org/ntp/4.2.8/ntp-${{ matrix.ref }}.tar.gz

      # Only master (the daily schedule) saves, so all PRs share one entry.
      - name: Save ntp cache
        if: github.ref == 'refs/heads/master' && steps.cache.outputs.cache-hit != 'true'
        uses: actions/cache/save@v5
        with:
          path: ntp-${{ matrix.ref }}.tar.gz
          key: ntp-${{ matrix.ref }}.tar.gz

      - name: Extract ntp
        run: |
          tar -xf ntp-${{ matrix.ref }}.tar.gz

      - name: Build and test ntp
        working-directory: ntp-${{ matrix.ref }}
        run: |
          patch -p1 < $GITHUB_WORKSPACE/osp/ntp/${{ matrix.ref }}/ntp-${{ matrix.ref }}.patch
          ./bootstrap
          ./configure --with-wolfssl=$GITHUB_WORKSPACE/build-dir
          make -j
          make -j check