mirror of
https://github.com/git/git.git
synced 2025-12-12 20:36:24 +01:00
The containerized jobs in GitHub Actions run as root, giving them special permissions to for example delete files even when the user shouldn't be able to due to file permissions. This limitation keeps us from using containerized jobs for most of our Ubuntu-based jobs as it causes a number of tests to fail. Adapt the jobs to create a separate user that executes the test suite. This follows similar infrastructure that we already have in GitLab CI. Signed-off-by: Patrick Steinhardt <ps@pks.im> Signed-off-by: Junio C Hamano <gitster@pobox.com>
161 lines
4.6 KiB
Bash
Executable File
161 lines
4.6 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# Install dependencies required to build and test Git on Linux and macOS
|
|
#
|
|
|
|
. ${0%/*}/lib.sh
|
|
|
|
begin_group "Install dependencies"
|
|
|
|
P4WHENCE=https://cdist2.perforce.com/perforce/r23.2
|
|
LFSWHENCE=https://github.com/github/git-lfs/releases/download/v$LINUX_GIT_LFS_VERSION
|
|
JGITWHENCE=https://repo.eclipse.org/content/groups/releases//org/eclipse/jgit/org.eclipse.jgit.pgm/6.8.0.202311291450-r/org.eclipse.jgit.pgm-6.8.0.202311291450-r.sh
|
|
|
|
# Make sudo a no-op and execute the command directly when running as root.
|
|
# While using sudo would be fine on most platforms when we are root already,
|
|
# some platforms like e.g. Alpine Linux do not have sudo available by default
|
|
# and would thus break.
|
|
if test "$(id -u)" -eq 0
|
|
then
|
|
sudo () {
|
|
"$@"
|
|
}
|
|
fi
|
|
|
|
case "$distro" in
|
|
alpine-*)
|
|
apk add --update shadow sudo build-base curl-dev openssl-dev expat-dev gettext \
|
|
pcre2-dev python3 musl-libintl perl-utils ncurses \
|
|
apache2 apache2-http2 apache2-proxy apache2-ssl apache2-webdav apr-util-dbd_sqlite3 \
|
|
bash cvs gnupg perl-cgi perl-dbd-sqlite perl-io-tty >/dev/null
|
|
;;
|
|
fedora-*|almalinux-*)
|
|
dnf -yq update >/dev/null &&
|
|
dnf -yq install shadow-utils sudo make gcc findutils diffutils perl python3 gettext zlib-devel expat-devel openssl-devel curl-devel pcre2-devel >/dev/null
|
|
;;
|
|
ubuntu-*|ubuntu32-*|debian-*)
|
|
# Required so that apt doesn't wait for user input on certain packages.
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
|
|
case "$distro" in
|
|
ubuntu-*)
|
|
SVN='libsvn-perl subversion'
|
|
LANGUAGES='language-pack-is'
|
|
;;
|
|
ubuntu32-*)
|
|
SVN=
|
|
LANGUAGES='language-pack-is'
|
|
;;
|
|
*)
|
|
SVN='libsvn-perl subversion'
|
|
LANGUAGES='locales-all'
|
|
;;
|
|
esac
|
|
|
|
sudo apt-get -q update
|
|
sudo apt-get -q -y install \
|
|
$LANGUAGES apache2 cvs cvsps git gnupg $SVN \
|
|
make libssl-dev libcurl4-openssl-dev libexpat-dev wget sudo default-jre \
|
|
tcl tk gettext zlib1g-dev perl-modules liberror-perl libauthen-sasl-perl \
|
|
libemail-valid-perl libio-pty-perl libio-socket-ssl-perl libnet-smtp-ssl-perl libdbd-sqlite3-perl libcgi-pm-perl \
|
|
libpcre2-dev meson ninja-build pkg-config \
|
|
${CC_PACKAGE:-${CC:-gcc}} $PYTHON_PACKAGE
|
|
|
|
case "$distro" in
|
|
ubuntu-*)
|
|
mkdir --parents "$CUSTOM_PATH"
|
|
|
|
wget --quiet --directory-prefix="$CUSTOM_PATH" \
|
|
"$P4WHENCE/bin.linux26x86_64/p4d" "$P4WHENCE/bin.linux26x86_64/p4"
|
|
chmod a+x "$CUSTOM_PATH/p4d" "$CUSTOM_PATH/p4"
|
|
|
|
wget --quiet "$LFSWHENCE/git-lfs-linux-amd64-$LINUX_GIT_LFS_VERSION.tar.gz"
|
|
tar -xzf "git-lfs-linux-amd64-$LINUX_GIT_LFS_VERSION.tar.gz" \
|
|
-C "$CUSTOM_PATH" --strip-components=1 "git-lfs-$LINUX_GIT_LFS_VERSION/git-lfs"
|
|
rm "git-lfs-linux-amd64-$LINUX_GIT_LFS_VERSION.tar.gz"
|
|
|
|
wget --quiet "$JGITWHENCE" --output-document="$CUSTOM_PATH/jgit"
|
|
chmod a+x "$CUSTOM_PATH/jgit"
|
|
;;
|
|
esac
|
|
;;
|
|
macos-*)
|
|
export HOMEBREW_NO_AUTO_UPDATE=1 HOMEBREW_NO_INSTALL_CLEANUP=1
|
|
# Uncomment this if you want to run perf tests:
|
|
# brew install gnu-time
|
|
brew link --force gettext
|
|
|
|
mkdir -p "$CUSTOM_PATH"
|
|
wget -q "$P4WHENCE/bin.macosx1015x86_64/helix-core-server.tgz" &&
|
|
tar -xf helix-core-server.tgz -C "$CUSTOM_PATH" p4 p4d &&
|
|
sudo xattr -d com.apple.quarantine "$CUSTOM_PATH/p4" "$CUSTOM_PATH/p4d" 2>/dev/null || true
|
|
rm helix-core-server.tgz
|
|
|
|
case "$jobname" in
|
|
osx-meson)
|
|
brew install meson ninja pcre2
|
|
;;
|
|
esac
|
|
|
|
if test -n "$CC_PACKAGE"
|
|
then
|
|
BREW_PACKAGE=${CC_PACKAGE/-/@}
|
|
brew install "$BREW_PACKAGE"
|
|
brew link "$BREW_PACKAGE"
|
|
fi
|
|
;;
|
|
esac
|
|
|
|
case "$jobname" in
|
|
ClangFormat)
|
|
sudo apt-get -q update
|
|
sudo apt-get -q -y install clang-format
|
|
;;
|
|
StaticAnalysis)
|
|
sudo apt-get -q update
|
|
sudo apt-get -q -y install coccinelle libcurl4-openssl-dev libssl-dev \
|
|
libexpat-dev gettext make
|
|
;;
|
|
sparse)
|
|
sudo apt-get -q update -q
|
|
sudo apt-get -q -y install libssl-dev libcurl4-openssl-dev \
|
|
libexpat-dev gettext zlib1g-dev
|
|
;;
|
|
Documentation)
|
|
sudo apt-get -q update
|
|
sudo apt-get -q -y install asciidoc xmlto docbook-xsl-ns make
|
|
|
|
test -n "$ALREADY_HAVE_ASCIIDOCTOR" ||
|
|
sudo gem install --version 1.5.8 asciidoctor
|
|
sudo gem install concurrent-ruby
|
|
;;
|
|
esac
|
|
|
|
if type p4d >/dev/null 2>&1 && type p4 >/dev/null 2>&1
|
|
then
|
|
echo "$(tput setaf 6)Perforce Server Version$(tput sgr0)"
|
|
p4d -V
|
|
echo "$(tput setaf 6)Perforce Client Version$(tput sgr0)"
|
|
p4 -V
|
|
else
|
|
echo >&2 "WARNING: perforce wasn't installed, see above for clues why"
|
|
fi
|
|
|
|
if type git-lfs >/dev/null 2>&1
|
|
then
|
|
echo "$(tput setaf 6)Git-LFS Version$(tput sgr0)"
|
|
git-lfs version
|
|
else
|
|
echo >&2 "WARNING: git-lfs wasn't installed, see above for clues why"
|
|
fi
|
|
|
|
if type jgit >/dev/null 2>&1
|
|
then
|
|
echo "$(tput setaf 6)JGit Version$(tput sgr0)"
|
|
jgit version
|
|
else
|
|
echo >&2 "WARNING: JGit wasn't installed, see above for clues why"
|
|
fi
|
|
|
|
end_group "Install dependencies"
|