cdh_basic.yml

name: confidential-data-hub basic build and unit tests

on:
  push:
    branches:
      - "main"
    paths:
      - 'confidential-data-hub/**'
      - '.github/workflows/cdh_basic.yml'
      - 'Cargo.toml'
      - 'Cargo.lock'
  pull_request:
    paths:
      - 'confidential-data-hub/**'
      - '.github/workflows/cdh_basic.yml'
      - 'Cargo.toml'
      - 'Cargo.lock'
  create:
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  basic_ci:
    if: github.event_name != 'push'
    name: Check
    defaults:
      run:
        working-directory: ./confidential-data-hub
    strategy:
      fail-fast: false
      matrix:
        instance:
          - ubuntu-24.04
          - s390x
        rust:
          - stable
    runs-on: ${{ matrix.instance }}
    steps:
      - name: Code checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Install Rust toolchain (${{ matrix.rust }})
        run: |
          rustup update --no-self-update ${{ matrix.rust }}
          rustup component add --toolchain ${{ matrix.rust }} rustfmt rustc clippy
          rustup target add x86_64-unknown-linux-gnu
          rustup default ${{ matrix.rust }}

      - name: Install protoc
        run: |
          sudo apt-get update && sudo apt-get install -y protobuf-compiler

      - name: Build and install
        run: |
          mkdir -p ${HOME}/.local/bin
          make RESOURCE_PROVIDER=kbs,sev && make install PREFIX=${HOME}/.local

      - name: Musl build
        run: |
          make LIBC=musl
        if: matrix.instance == 'ubuntu-24.04'

      - name: Run cargo test
        run: |
          sudo -E PATH=$PATH -s cargo test --features kbs,aliyun,sev,bin -p kms -p confidential-data-hub -p secret -p image

      - name: Run cargo fmt check
        run: |
          sudo -E PATH=$PATH -s cargo fmt -p kms -p confidential-data-hub -p secret -p image -- --check

      - name: Run rust lint check
        run: |
          # We are getting error in generated code due to derive_partial_eq_without_eq check, so ignore it for now
          sudo -E PATH=$PATH -s cargo clippy -p kms -p confidential-data-hub -p secret -p image -- -D warnings -A clippy::derive-partial-eq-without-eq