William Lallemand
a58f09b63c
CI: github: remove openssl no-deprecated job
...
Remove the openssl no-deprecated job which was used for 1.1.0 API.
It's not useful anymore since it uses the OpenSSL version of the
distributions.
Checking depreciations in the API is still useful when using newest
version of the library. A job for the OpenSSL master branch would be
more useful than that.
2025-12-18 15:22:27 +01:00
Frederic Lecaille
6e94b69665
REGTESTS: ssl: Move all the SSL certificates, keys, crt-lists inside "certs" directory
...
Move all these files and others for OCSP tests found into reg-tests/ssl
to reg-test/ssl/certs and adapt all the VTC files which use them.
This patch is needed by other tests which have to include the SSL tests.
Indeed, some VTC commands contain paths to these files which cannot
be customized with environment variables, depending on the location the VTC file
is runi from, because VTC does not resolve the environment variables. Only macros
as ${testdir} can be resolved.
For instance this command run from a VTC file from reg-tests/ssl directory cannot
be reused from another directory, except if we add a symbolic link for each certs,
key etc.
haproxy h1 -cli {
send "del ssl crt-list ${testdir}/localhost.crt-list ${testdir}/common.pem:1"
}
This is not what we want. We add a symbolic link to reg-test/ssl/certs to the
directory and modify the command above as follows:
haproxy h1 -cli {
send "del ssl crt-list ${testdir}/certs/localhost.crt-list ${testdir}/certs/common.pem:1"
}
2025-12-08 10:40:59 +01:00
William Lallemand
1f562687e3
CI: github: make install-bin instead of make install
...
Contrib / build (push) Waiting to run
alpine/musl / gcc (push) Waiting to run
VTest / Generate Build Matrix (push) Waiting to run
VTest / (push) Blocked by required conditions
Windows / Windows, gcc, all features (push) Waiting to run
make install now have a dependency to install-admin which have a
dependency to admin/halog/halog.
halog links haproxy .o together with its own objects, but those objects
when built with ASAN must also be linked with ASAN or it won't be
possible to link the binary.
We don't need an ASAN-ready halog, so let's just do an install-bin
instead that will just install haproxy.
2025-11-18 20:11:23 +01:00
William Lallemand
3c578ca31c
CI: github: update to macos-26
...
Contrib / build (push) Has been cancelled
alpine/musl / gcc (push) Has been cancelled
VTest / Generate Build Matrix (push) Has been cancelled
Windows / Windows, gcc, all features (push) Has been cancelled
VTest / (push) Has been cancelled
macOS-15 images seems to have difficulties to run the reg-tests since a
few days for an unknown reason. Doing a rollback of both VTest2 and
haporxy doesn't seem to fix the problem so this is probably related to a
change in github actions.
This patch switches the image to the new macos-26 images which seems to
fix the problem.
2025-11-03 16:17:36 +01:00
William Lallemand
ce413f002a
CI: github: add USE_ECH=1 to haproxy for openssl-ech job
...
Add the USE_ECH=1 make option to the haproxy build in order to test the
build of the feature.
2025-10-30 10:38:38 +01:00
Ilia Shipitsin
9781d91e4d
CI: disable fail-fast on fedora rawhide builds
...
Previously builds were dependent in terms that if one fails, other are
stopped. By their nature those builds are independent, let's not to fail
them altogether
2025-10-29 08:15:01 +01:00
William Lallemand
6499c0a0d5
CI: github: build halog on the vtest job
...
halog was not built in the vtest job. Add it to vtest.yml to be able to
track build issues on push.
2025-09-26 16:29:29 +02:00
William Lallemand
230a072102
CI: github: add curl+ech build into openssl-ech job
...
Build a curl binary with the ECH function linked with our openssl+ech
library.
2025-09-25 17:05:46 +02:00
Ilia Shipitsin
8c8e50e09a
CI: move VTest preparation & friends to dedicated composite action
...
reference: https://docs.github.com/en/actions/tutorials/create-actions/create-a-composite-action
preparing coredump limits, installing VTest are now served by dedicated
composite action
2025-09-22 19:18:23 +02:00
William Lallemand
9517116f63
CI: github: add an OpenSSL + ECH job
...
The upcoming ECH feature need a patched OpenSSL with the "feature/ech"
branch.
This daily job launches an openssl build, as well as haproxy build with
reg-tests.
2025-09-16 15:05:44 +02:00
Ilia Shipitsin
3354719709
CI: fix syntax of Quic Interop pipelines
...
previously, wrong syntax of passing build arguments was used, thus
previously images were built using default SSLLIB=QuicTLS-1.1.1
2025-09-03 11:36:14 +02:00
Tim Duesterhus
b81a7f428b
CI: Update to actions/checkout@v5
...
No functional change, but we should keep this current.
see 5f4ddb54b0
see 5c923f1869
2025-08-13 19:15:04 +02:00
Ilia Shipitsin
c10e8401e2
CI: vtest: add Ubuntu arm64 builds
...
Reference: https://github.com/actions/partner-runner-images
since GHA now supports arm64 as well, let add those builds. We will
start with ASAN builds, other will be added later if required
2025-08-08 15:36:11 +02:00
Ilia Shipitsin
6b2bbcb428
CI: vtest: add os name to OT cache key
...
currently OpenTracing cache does not include os name. it does not
allow to distinguish, for example between ubuntu-24.04 and
ubuntu-24.04-arm.
2025-08-08 15:36:12 +02:00
William Lallemand
9e78859fb3
CI: github: skip a ssl library version when latest is already in the list
...
Skip the job for "latest" libssl version, when this version is the same
as a one already in the list.
This avoid having 2 jobs for OpenSSL 3.5.1 since no new dev version are
available for now and 3.5.1 is already in the list.
2025-07-07 19:46:07 +02:00
William Lallemand
0efbe6da88
CI: github: update to OpenSSL 3.5.1
...
Update the OpenSSL 3.5 job to 3.5.1.
This must be backported to 3.2.
2025-07-07 13:58:38 +02:00
William Lallemand
d0bd0595da
CI: github: update the stable CI to ubuntu-24.04
...
Update the stable CI to ubuntu-24.04.
Must be backported to 3.2.
2025-07-07 09:29:33 +02:00
William Lallemand
b6fec27ef6
CI: github: add an OpenSSL 3.5.0 job
...
Add an OpenSSL 3.5.0 job to test USE_QUIC.
This must be backported to 3.2.
2025-07-07 09:27:17 +02:00
Ilia Shipitsin
d8c867a1e6
CI: enable USE_QUIC=1 for OpenSSL versions >= 3.5.0
...
OpenSSL 3.5.0 introduced experimental support for QUIC. This change enables the use_quic option when a compatible version of OpenSSL is detected, allowing QUIC-based functionality to be leveraged where applicable. Feature remains disabled for earlier versions to ensure compatibility.
2025-07-07 09:02:11 +02:00
Ilia Shipitsin
198d422a31
CI: set DEBUG_STRICT=2 for coverity scan
...
enabling DEBUG_STRICT=2 will enable BUG_ON_HOT() and help coverity
in bug detection
for the reference: https://github.com/haproxy/haproxy/issues/3008
2025-07-06 08:17:37 +02:00
Ilya Shipitsin
94ded5523f
CI: combine AWS-LC and AWS-LC-FIPS by template
...
let's reduce code duplication by involving workflow templates
2025-05-27 15:06:58 +02:00
Ilia Shipitsin
12de9ecce5
CI: WolfSSL: enable unit tests
...
Run the new make unit-tests on the CI.
2025-05-14 17:00:31 +02:00
Ilia Shipitsin
75a1e40501
CI: QuicTLS (weekly): limit run on forks only to manual dispatch
2025-05-14 17:00:31 +02:00
Ilia Shipitsin
a8b1b08fd7
CI: musl: enable unit tests
...
Run the new make unit-tests on the CI.
2025-05-14 17:00:31 +02:00
Ilia Shipitsin
01225f9aa5
CI: compliance: limit run on forks only to manual + cleanup
2025-05-14 17:00:31 +02:00
Ilia Shipitsin
61b30a09c0
CI: AWS-LC: enable unit tests
...
Run the new make unit-tests on the CI.
2025-05-14 17:00:31 +02:00
Ilia Shipitsin
944a96156e
CI: AWS-LC(fips): enable unit tests
...
Run the new make unit-tests on the CI.
2025-05-14 17:00:31 +02:00
Ilia Shipitsin
4dee087f19
CI: fedora rawhide: enable unit tests
...
Run the new make unit-tests on the CI.
2025-04-15 16:53:54 +02:00
Ilya Shipitsin
eed4116c07
CI: enable weekly QuicTLS build
...
QuicTLS started own fork not dependant on OpenSSL, lets add
that to weekly builds
ML: https://www.mail-archive.com/haproxy@formilux.org/msg45574.html
GH: https://github.com/quictls/quictls/issues/244
2025-04-11 16:01:45 +02:00
Ilia Shipitsin
bd477d5f51
CI: codespell: add "pres" to spellcheck whitelist
...
spellcheck was triggered by the following:
* pres : same as "res" but using the parent stream, if any. "pres"
variables are only accessible during response processing of the
parent stream.
2025-04-03 11:37:25 +02:00
Ilia Shipitsin
30df5b0f23
CI: spell check: allow manual trigger
2025-04-03 11:37:25 +02:00
Ilia Shipitsin
415d446065
CI: QUIC Interop on LibreSSL: allow "on: workflow_dispatch" in forks
...
previously that build were limited to "haproxy" github organization
only. let's allow manual builds from forks
2025-03-28 09:51:35 +01:00
Ilia Shipitsin
8d591c387a
CI: QUIC Interop on AWS-LC: allow "on: workflow_dispatch" in forks
...
previously that build were limited to "haproxy" github organization
only. let's allow manual builds from forks
2025-03-28 09:51:35 +01:00
Ilia Shipitsin
7de45e3874
CI: NetBSD: allow "on: workflow_dispatch" in forks
...
previously that build were limited to "haproxy" github organization
only. let's allow manual builds from forks
2025-03-28 09:51:35 +01:00
Ilia Shipitsin
8231f58fdc
CI: Illumos: allow "on: workflow_dispatch" in forks
...
previously that build were limited to "haproxy" github organization
only. let's allow manual builds from forks
2025-03-28 09:51:35 +01:00
Ilia Shipitsin
7495dbed22
CI: cross compile: allow "on: workflow_dispatch" in forks
...
previously that build were limited to "haproxy" github organization
only. let's allow manual builds from forks
2025-03-28 09:51:35 +01:00
Ilia Shipitsin
7eb54656ae
CI: coverity scan: allow "on: workflow_dispatch" in forks
...
previously that build were limited to "haproxy" github organization
only. let's allow manual builds from forks
2025-03-28 09:51:35 +01:00
Ilia Shipitsin
424ca19831
CI: spellcheck: allow "on: workflow_dispatch" in forks
...
previously that build were limited to "haproxy" github organization
only. let's allow manual builds from forks
2025-03-28 09:51:35 +01:00
Ilia Shipitsin
d9cb95c2a5
CI: fedora rawhide: install "awk" as a dependency
...
for some reason it is not installed by default on rawhide anymore
2025-03-28 09:51:35 +01:00
Ilia Shipitsin
21894300c1
CI: fedora rawhide: allow "on: workflow_dispatch" in forks
...
previously that build were limited to "haproxy" github organization
only. let's allow manual builds from forks
2025-03-28 09:51:35 +01:00
William Lallemand
c6e6318125
CI: github: add "jose" to apt dependencies
...
jose is used in the JWS unit-test, let's add it to the CI.
2025-03-11 22:29:40 +01:00
William Lallemand
29db5406b4
CI: github: show results of the Unit tests
...
Add a "Show Unit-Tests results" section which show each unit test which
failed by displaying their result file.
2025-03-06 21:23:54 +01:00
William Lallemand
588237ca6e
CI: github: fix h2spec.config proxy names
...
h2spec.config config file emitted a warning because the frontend name
has the same name as the backend.
2025-03-04 11:44:03 +01:00
William Lallemand
937ece45d4
CI: github: remove smoke tests from vtest.yml
...
Smoke tests from the vtest.yml are not useful anymore since they are run
directly by tests/unit/smoke/test.sh. This patch removes them.
2025-03-03 12:46:20 +01:00
William Lallemand
7a2a613132
CI: github: run make unit-tests on the CI
...
Run the new make unit-tests on the CI.
It requires HAProxy to be built with -DDEBUG_UNIT so the -U option is
available in HAProxy
2025-03-03 12:43:32 +01:00
Ilia Shipitsin
0bdf414fa5
CI: QUIC Interop: clean old docker images
...
currently temporary docker images are kept forever. let's delete
outdated ones
2025-02-21 11:34:43 +01:00
William Lallemand
4332fed6c1
CI: github: activate debug in wolfssl weekly build
...
Activate the WolfSSL debugging of WolfSSL in the weekly job.
2024-12-23 18:00:34 +01:00
William Lallemand
dfc403f5c6
CI: github: activate ASAN on the WolfSSL weekly job
...
Activate ASAN on the WolfSSL weekly job in order to have use-after-free
traces.
2024-12-23 17:27:27 +01:00
William Lallemand
ef108705e4
CI: github: try to build the latest WolfSSL master weekly
...
The WolfSSL latest version is still broken (5.7.4), no new release was
done with a new version.
Modify the weekly CI job so we could build with the latest git version.
2024-12-23 17:27:00 +01:00
Ilia Shipitsin
6aae995b1d
CI: limit aws-lc and libressl Quic Interop to "haproxy" only
...
those CI are not supposed to run in forks (however, if someone wants,
he can enable it personally)
2024-12-23 13:59:48 +01:00
William Lallemand
0c1fdb2908
CI: github: let's add an AWS-LC-FIPS job
...
Add a job which does exactly the same as the aws-lc.yml job, but using
the AWS-LC-FIPS build.
2024-12-12 16:35:42 +01:00
Ilia Shipitsin
d61cac4ed1
CI: use "/tmp" as default value for TMPDIR when searching logs
...
VTest use /tmp already if not defined, let stick the behaviour for
searching logs as well
2024-12-10 08:20:51 +01:00
William Lallemand
a582b9c18d
CI: github: allow coredumps on aws-lc and wolfssl jobs
...
The weekly aws-lc and wolfssl jobs lacks an `ulimit -c` call in order to
allow to get the coredumps.
2024-12-02 15:19:41 +01:00
William Lallemand
dee3f4b3ff
CI: github: add 'workflow_dispatch' on remaining build jobs
...
Add 'workflow_dispatch' on the remaining scheduled build jobs that does
not have it.
This keyword allows to start manually a job from the "Actions" interface
in github.
2024-11-25 14:03:13 +01:00
William Lallemand
079193e375
CI: github: allow to run the Illumos job manually
...
Add the "workflow_dispatch" option to the Illumos CI so it can be run
manually from the github actions page.
2024-11-25 11:30:55 +01:00
William Lallemand
a7e5180c71
CI: github: improve the AWS-LC job
...
Like the WolfSSL job, improve the AWS-LC job by adding the socat command
so all SSL reg-tests can be run.
Also add gdb and output of corefiles.
2024-11-25 11:14:33 +01:00
William Lallemand
b0c2745ed0
CI: github: improve the Wolfssl job
...
Improve the WolfSSL job by adding the missing socat command.
Also add gdb and output corefiles like it's done on the VTest job.
2024-11-25 11:00:03 +01:00
William Lallemand
a941c92c12
CI: github: add a WolfSSL job which tries the latest version
...
Like the AWS-LC job, add a CI job which looks for the latest WolfSSL
version and tries to build it.
The patch adds a function which determines the latest version of WolfSSL
from the github tag, and the yml which describes the job.
2024-11-22 17:40:34 +01:00
William Lallemand
16e44e70c8
Revert "CI: update to the latest WolfSSL version"
...
This reverts commit 03f57fcf94 .
Looks like the 5.7.4 version is broke with HAProxy, let's revert the CI
for now.
2024-11-22 16:24:23 +01:00
William Lallemand
03f57fcf94
CI: update to the latest WolfSSL version
...
Update the CI to the 5.7.4 WolfSSL version.
2024-11-22 16:05:32 +01:00
William Lallemand
0022962ecb
CI: update to the latest AWS-LC version
...
Update the CI to the 1.39.0 AWS-LC version.
2024-11-22 16:03:28 +01:00
William Lallemand
15845247db
MEDIUM: mworker: remove USE_SYSTEMD requirement for -Ws
...
Since sd_notify() is now implemented in src/systemd.c, there is no need
anymore to build its support conditionnally with USE_SYSTEMD.
This patch add supports for -Ws for every build and removes the
USE_SYSTEMD build option. It also remove every reference to USE_SYSTEMD
in the documentation and the CI.
This also allows to run the reg-tests in -Ws with the new VTest support.
2024-11-20 12:07:38 +01:00
Ilia Shipitsin
976af317a4
CI: LibreSSL QUIC Interop: fix docker context
...
in the commit 98099287ee
building docker was switched to URL, but I forgotten to change context.
this is a followup fix.
2024-10-30 19:42:31 +01:00
Ilia Shipitsin
3ecca216b4
CI: enable chacha20 test on LibreSSL QUIC Interop
...
it was commented on purpose "until LibreSSL-4.0 is released".
lets enable it
2024-10-30 16:46:22 +01:00
Ilia Shipitsin
98099287ee
CI: switch QUIC Interop on LibreSSL to common docker image
...
previously we used different docker images for different SSL libs,
now all of them are merged into one, lets switch to it
2024-10-30 16:46:06 +01:00
Ilia Shipitsin
4d40e9384c
CI: switch QUIC Interop on AWS-LC to common docker image
...
previously we used different docker images for different SSL libs,
now all of them are merged into one, lets switch to it
2024-10-30 16:45:36 +01:00
Ilya Shipitsin
8a1aabb133
CI: modernize macos builds to macos-15
...
macos-15 support was announced few months ago: https://github.com/github/roadmap/issues/986
2024-10-21 07:54:38 +02:00
Ilya Shipitsin
50cf89ad5c
CI: bump development builds explicitely to Ubuntu 24.04
...
Initially we agreed to split builds into "latest" for development branch
and fixed 22.04 for stable branches. It got broken when "latest" label migrated
from ubuntu-22 to ubuntu-24 ... because of build cache. Cache key is built using
runner label, it was not prepared to use the same "latest" cache from ubuntu 22
on ubuntu 24. To make things clear, let's stick explicitely to ubuntu 24.
2024-10-21 07:54:35 +02:00
Ilya Shipitsin
b6491ab19f
CI: prepare Coverity build for Ubuntu 24
...
PCRE2 is recommended, PCRE was chosen for no reason. GHA Ubuntu 22 images include both libs,
but recent Ubuntu 24 does not. Let us prepare for Ubuntu 24
2024-10-21 07:54:32 +02:00
Ilya Shipitsin
4256961a44
CI: QUIC Interop: use different artifact names for uploading logs
...
artifact names must be unique, otherwise only first failed logs are
uploaded, other encounter 409 conflict
2024-08-26 11:19:41 +02:00
Ilya Shipitsin
438ad6b495
CI: QUIC Interop: do not run bandwidth measurement tests
...
crosstraffic, goodput tests are intended to perform bandwidth measurement,
we do not consider GitHub runners for that purpose
GH issue: https://github.com/haproxy/haproxy/issues/2688
2024-08-26 11:19:41 +02:00
Ilya Shipitsin
f583ed9469
CI: fix missing comma introduced in 956839c0f6
...
in 956839c0f6 syntax was broken due to missing
comma. it is follow up.
2024-08-26 11:19:41 +02:00
Ilya Shipitsin
956839c0f6
CI: QUIC Interop AWS-LC: enable ngtcp2 client
...
Let's add it and see how it goes.
GH issue: https://github.com/haproxy/haproxy/issues/2688
2024-08-24 19:13:59 +02:00
Ilia Shipitsin
ae8f6724a1
CI: QUIC Interop AWS-LC: enable chrome client
...
chrome is important browser, let's enable it in AWS-LC weekly tests.
the only test supported by chrome is http3
2024-08-20 05:13:46 +02:00
Ilia Shipitsin
6301042938
CI: modernize codespell action, switch to node 16
...
The following actions uses node12 which is deprecated and will be forced
to run on node16: codespell-project/codespell-problem-matcher@v1. For
more info:
https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
2024-08-20 05:13:46 +02:00
Ilia Shipitsin
8b422971ee
CI: QUIC Interop LibreSSL: document chacha20 test status
...
due to https://github.com/haproxy/haproxy/issues/2569 chacha20 is
disabled completely on LibreSSL. let's add a comment to not forget
enabling it
2024-08-20 05:13:26 +02:00
Ilia Shipitsin
ec1d93a6e9
CI: keep logs for failed QIUC Interop jobs
...
it might be useful to investigate logs of failed tests. to keep
artifacts small the following actions are taken
- only failed logs are kept
- logs retention is 6 days
2024-08-13 16:21:01 +02:00
Ilia Shipitsin
7fc52032e3
CI: harden NetBSD builds by ERR=1
...
Add ERR=1 build option to the NetBSD build from github.
2024-08-05 08:49:19 +02:00
Ilia Shipitsin
15d47eda37
CI: add weekly QUIC Interop regression against AWS-LC
...
currently only quic-go and picoquic clients are enabled.
Tests will be run weekly.
2024-08-05 08:46:49 +02:00
Ilia Shipitsin
89bdd8b62a
CI: weekly QUIC Interop: try to fix private image
...
for some reason image built in HAProxy workflow is "private", it
is succesfully built, but fails to pull. Let's try explicit docker login
for run job as well
2024-07-10 09:43:02 +02:00
Ilia Shipitsin
f8a30b69d2
CI: add weekly QUIC Interop regression against LibreSSL
...
currently only quic-go and picoquic clients are enabled with testsuites
supposed to be "green". Tests will be run weekly.
2024-07-05 15:11:21 +02:00
William Lallemand
5e361c7767
CI: github: do the AWS-LC weekly build with ERR=1
...
The weekly CI that tries new version of AWS-LC was not building with
ERR=1, which let us think that everything was good but there was in fact
new warning that we missed.
Add ERR=1 to the build so the CI will failed for any new warning.
2024-06-14 12:18:32 +02:00
William Lallemand
11e13175d4
CI: github: upgrade aws-lc to 1.29.0
...
Upgrade aws-lc to 1.29.0 on the push CI.
2024-06-14 11:37:11 +02:00
William Lallemand
935b3bd1b7
Revert "CI: github: upgrade aws-lc to 1.29.0"
...
This reverts commit 6e986e7493 .
2024-06-13 17:14:58 +02:00
William Lallemand
6e986e7493
CI: github: upgrade aws-lc to 1.29.0
...
Upgrade aws-lc to 1.29.0 on the push CI.
2024-06-13 17:11:04 +02:00
Ilia Shipitsin
ab23d7eb69
CI: speedup apt package install
...
we are fine to skip some repos like languages and translations.
this drops number of repos twice
2024-06-03 11:59:07 +02:00
Ilia Shipitsin
f3e6dfdc92
CI: VTest: accelerate package install a bit
...
let's check and install only package is required
2024-05-30 17:04:08 +02:00
Ilia Shipitsin
09db70d021
CI: use USE_PCRE2 instead of USE_PCRE
...
USE_PCRE2 is recommended, I guess USE_PCRE is left unintentionally
2024-05-29 22:37:26 +02:00
Ilia Shipitsin
11c088e203
CI: switch to lua 5.4
...
current release is 5.4, let's switch to it
2024-05-29 22:37:26 +02:00
Ilia Shipitsin
01c213a4bb
CI: use "--no-install-recommends" for apt-get
...
this reduces number of packages installed by 1
2024-05-29 22:37:26 +02:00
William Lallemand
40cd5cc0e2
CI: github: upgrade the WolfSSL job to 5.7.0
...
WolfSSL 5.70 was released in March 2024, let's upgrade our CI job to
this version.
2024-05-28 19:26:52 +02:00
Ilia Shipitsin
cbe78c0281
CI: drop asan.log umbrella completely
...
asan.log redirection appeared to work poorly, let's cease that practice
for good.
ML: https://www.mail-archive.com/haproxy@formilux.org/msg44844.html
2024-05-13 11:36:36 +02:00
Ilia Shipitsin
05ecba0813
CI: netbsd: limit scheduled workflow to parent repo only
...
it is not very useful for most of forks.
2024-05-06 08:26:14 +02:00
Ilia Shipitsin
fab5a23731
CI: add Illumos scheduled workflow
...
this is very initial build only implementation.
2024-05-06 08:26:05 +02:00
Ilia Shipitsin
48ae9fe8a4
CI: netbsd: adjust packages after NetBSD-10 released
...
pcre2 is installed already, installing it from packages lead to
conflict. curl is installed as a preparation for VTest
2024-05-03 09:01:36 +02:00
William Lallemand
378d500caf
REGTESTS: use -dI for insecure fork by default in the regtest scripts
...
Let's remove the CI HAPROXY_ARGS setting and set -dI for anything run
with the run-regtests.sh.
2024-04-22 16:15:57 +02:00
Ilya Shipitsin
76f56a39be
CI: modernize macos matrix
...
let's stick to macos-13 for stable branches and macos-14 for development branches.
since macos-14 is available for Apple Silicon, some modifications are required
for VTest (should be ported to VTest later)
news: https://github.blog/changelog/2024-01-30-github-actions-macos-14-sonoma-is-now-available/
2024-04-19 17:37:24 +02:00
Ilya Shipitsin
2bb9e3bd06
CI: reduce ASAN log redirection umbrella size
...
previously ASAN_OPTIONS=log_path=asan.log was intended for VTest
execution only, it should not affect "haproxy -vv" and hsproxy
config smoke testing
2024-04-17 11:14:44 +02:00
Ilya Shipitsin
b5dd8b466e
CI: revert kernel addr randomization introduced in 3a0fc864
...
It has been resolved on image generation side:
https://github.com/actions/runner-images/issues/9491
It is no harm to keep it on our side as well, but we can drop it.
2024-04-13 14:43:36 +02:00
Willy Tarreau
ac73a23454
BUILD: makefile: also drop DEBUG_CFLAGS
...
This one is often used as a gateway to inject regular CFLAGS, even though
not designed for this. It's now ignored, but any attempt at setting it
reports a warning suggesting to use CFLAGS or ARCH_FLAGS instead.
2024-04-11 17:33:28 +02:00