mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-07-05 15:50:51 +02:00
Juliusz Sosinowicz
844852202b
GitHub Actions now emits "Node.js 20 actions are deprecated" warnings: actions are forced to Node.js 24 by default starting 2026-06-16, and Node.js 20 is removed from the runners on 2026-09-16. Update every JavaScript action referenced by the workflows and the local composite actions to the lowest release that runs on Node.js 24: actions/checkout v4 -> v5 actions/checkout (SHA pin) v4.1.7 -> v5 actions/upload-artifact v4 -> v6 (v5 still Node.js 20) actions/download-artifact v4 -> v7 (v5/v6 still Node.js 20) actions/cache[/restore|/save] v4 -> v5 actions/setup-python v5 -> v6 actions/github-script v7 -> v8 docker/setup-buildx-action v3 -> v4 docker/build-push-action v5 -> v7 (v6 still Node.js 20) docker/login-action v3 -> v4 microsoft/setup-msbuild v2 -> v3 open-watcom/setup-watcom v0 -> v1 Actions already running on Node.js 24 (jwlawson/actions-setup-cmake, shogo82148/actions-setup-perl, msys2/setup-msys2, dorny/paths-filter) are left unchanged. These bumps are runtime-only; no workflow uses an input or output removed by the new majors, and v4-format artifacts remain compatible across the upload v6 / download v7 backends.
137 lines
6.4 KiB
YAML
137 lines
6.4 KiB
YAML
name: Stack Size warnings
|
|
|
|
# START OF COMMON SECTION
|
|
on:
|
|
push:
|
|
branches: [ 'release/**' ]
|
|
pull_request:
|
|
types: [opened, synchronize, reopened, ready_for_review]
|
|
branches: [ '*' ]
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
# END OF COMMON SECTION
|
|
|
|
jobs:
|
|
# All former runner-per-config matrix entries build on one runner via
|
|
# .github/scripts/parallel-make-check.py (see os-check.yml for the full
|
|
# pattern): each config builds in its own out-of-tree ("VPATH") build
|
|
# directory off one checkout/autogen, on a pool of one-per-CPU worker
|
|
# threads, longest first.
|
|
build_library:
|
|
name: build library
|
|
if: ${{ (github.repository_owner == 'wolfssl') && (github.event_name != 'pull_request' || github.event.pull_request.draft == false) }}
|
|
runs-on: ubuntu-24.04
|
|
# Generous for a cold ccache; warm reruns finish in a fraction.
|
|
timeout-minutes: 15
|
|
steps:
|
|
- uses: actions/checkout@v5
|
|
name: Checkout wolfSSL
|
|
|
|
- name: Install dependencies
|
|
uses: ./.github/actions/install-apt-deps
|
|
with:
|
|
packages: autoconf automake libtool build-essential
|
|
|
|
# ccache via the cross-platform composite; the script passes the
|
|
# compiler to configure as CC="ccache gcc" (or a per-config "cc").
|
|
- name: Set up ccache
|
|
uses: ./.github/actions/ccache-setup
|
|
with:
|
|
workflow-id: smallstacksize
|
|
max-size: 150M
|
|
|
|
# The JSON list below is the former runner-per-config matrix (the
|
|
# shared base configure arguments are folded into every entry). Each
|
|
# build must come out clean under -Wframe-larger-than/-Wstack-usage,
|
|
# then runs testwolfcrypt under the relative-stack checker.
|
|
- name: Build all configs (parallel, out-of-tree)
|
|
run: |
|
|
cat > "$RUNNER_TEMP/smallstacksize-configs.json" <<'EOF'
|
|
[
|
|
{"name": "noasm", "minutes": 1,
|
|
"configure": ["--enable-cryptonly", "--disable-cryptocb",
|
|
"--disable-testcert", "--enable-smallstack",
|
|
"--enable-smallstackcache", "--enable-crypttests",
|
|
"--disable-benchmark", "--disable-examples",
|
|
"--with-max-rsa-bits=16384", "--enable-stacksize=verbose",
|
|
"CFLAGS=-Wframe-larger-than=2048 -Wstack-usage=4096 -DWOLFSSL_TEST_MAX_RELATIVE_STACK_BYTES=8192 -DTEST_ALWAYS_RUN_TO_END",
|
|
"--disable-asm"],
|
|
"check": false,
|
|
"run": [["./wolfcrypt/test/testwolfcrypt"]]},
|
|
{"name": "noasm-pq", "minutes": 1,
|
|
"configure": ["--enable-cryptonly", "--disable-cryptocb",
|
|
"--disable-testcert", "--enable-smallstack",
|
|
"--enable-smallstackcache", "--enable-crypttests",
|
|
"--disable-benchmark", "--disable-examples",
|
|
"--with-max-rsa-bits=16384", "--enable-stacksize=verbose",
|
|
"CFLAGS=-Wframe-larger-than=2048 -Wstack-usage=4096 -DWOLFSSL_TEST_MAX_RELATIVE_STACK_BYTES=8192 -DTEST_ALWAYS_RUN_TO_END",
|
|
"--disable-asm", "--enable-mlkem", "--enable-lms", "--enable-xmss",
|
|
"--enable-mldsa"],
|
|
"check": false,
|
|
"run": [["./wolfcrypt/test/testwolfcrypt"]]},
|
|
{"name": "noasm-allcrypto-pq", "minutes": 1,
|
|
"configure": ["--enable-cryptonly", "--disable-cryptocb",
|
|
"--disable-testcert", "--enable-smallstack",
|
|
"--enable-smallstackcache", "--enable-crypttests",
|
|
"--disable-benchmark", "--disable-examples",
|
|
"--with-max-rsa-bits=16384", "--enable-stacksize=verbose",
|
|
"CFLAGS=-Wframe-larger-than=2048 -Wstack-usage=4096 -DWOLFSSL_TEST_MAX_RELATIVE_STACK_BYTES=8192 -DTEST_ALWAYS_RUN_TO_END",
|
|
"--disable-asm", "--enable-all-crypto", "--enable-mlkem",
|
|
"--enable-lms", "--enable-xmss", "--enable-mldsa"],
|
|
"check": false,
|
|
"run": [["./wolfcrypt/test/testwolfcrypt"]]},
|
|
{"name": "intelasm", "minutes": 1,
|
|
"configure": ["--enable-cryptonly", "--disable-cryptocb",
|
|
"--disable-testcert", "--enable-smallstack",
|
|
"--enable-smallstackcache", "--enable-crypttests",
|
|
"--disable-benchmark", "--disable-examples",
|
|
"--with-max-rsa-bits=16384", "--enable-stacksize=verbose",
|
|
"CFLAGS=-Wframe-larger-than=2048 -Wstack-usage=4096 -DWOLFSSL_TEST_MAX_RELATIVE_STACK_BYTES=8192 -DTEST_ALWAYS_RUN_TO_END",
|
|
"--enable-intelasm", "--enable-sp-asm"],
|
|
"check": false,
|
|
"run": [["./wolfcrypt/test/testwolfcrypt"]]},
|
|
{"name": "intelasm-pq", "minutes": 1,
|
|
"configure": ["--enable-cryptonly", "--disable-cryptocb",
|
|
"--disable-testcert", "--enable-smallstack",
|
|
"--enable-smallstackcache", "--enable-crypttests",
|
|
"--disable-benchmark", "--disable-examples",
|
|
"--with-max-rsa-bits=16384", "--enable-stacksize=verbose",
|
|
"CFLAGS=-Wframe-larger-than=2048 -Wstack-usage=4096 -DWOLFSSL_TEST_MAX_RELATIVE_STACK_BYTES=8192 -DTEST_ALWAYS_RUN_TO_END",
|
|
"--enable-intelasm", "--enable-sp-asm", "--enable-mlkem",
|
|
"--enable-lms", "--enable-xmss", "--enable-mldsa"],
|
|
"check": false,
|
|
"run": [["./wolfcrypt/test/testwolfcrypt"]]},
|
|
{"name": "intelasm-allcrypto-pq", "minutes": 1,
|
|
"configure": ["--enable-cryptonly", "--disable-cryptocb",
|
|
"--disable-testcert", "--enable-smallstack",
|
|
"--enable-smallstackcache", "--enable-crypttests",
|
|
"--disable-benchmark", "--disable-examples",
|
|
"--with-max-rsa-bits=16384", "--enable-stacksize=verbose",
|
|
"CFLAGS=-Wframe-larger-than=2048 -Wstack-usage=4096 -DWOLFSSL_TEST_MAX_RELATIVE_STACK_BYTES=8192 -DTEST_ALWAYS_RUN_TO_END",
|
|
"--enable-intelasm", "--enable-sp-asm", "--enable-all-crypto",
|
|
"--enable-mlkem", "--enable-lms", "--enable-xmss",
|
|
"--enable-mldsa"],
|
|
"check": false,
|
|
"run": [["./wolfcrypt/test/testwolfcrypt"]]}
|
|
]
|
|
EOF
|
|
.github/scripts/parallel-make-check.py \
|
|
"$RUNNER_TEMP/smallstacksize-configs.json"
|
|
|
|
- name: ccache stats
|
|
if: always()
|
|
run: ccache -s || true
|
|
|
|
- name: Upload logs on failure
|
|
if: failure()
|
|
uses: actions/upload-artifact@v6
|
|
with:
|
|
name: smallstacksize-logs
|
|
path: |
|
|
build-*/make-check.log
|
|
build-*/test-suite.log
|
|
build-*/config.log
|
|
if-no-files-found: ignore
|