mirrors/meta-security
1
0
Fork 0
mirror of https://git.yoctoproject.org/meta-security synced 2026-05-07 04:58:47 +00:00
Code Issues Projects Releases Wiki Activity

.gitlab-ci.yml: add logging of jobs to files

Browse Source 
Log kas commands to files and export them as artefacts

Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com>
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
This commit is contained in:
Marta Rybczynska
2025-07-04 15:04:32 +02:00
committed by Scott Murray
parent 7cabe4fa2b
commit d750c6cf48
1 changed files with 22 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitlab-ci.yml
+22 -17
View File
@@ -7,6 +7,7 @@
- source ~/kas_env/bin/activate - source ~/kas_env/bin/activate
- python3 -m pip install kas - python3 -m pip install kas
- mkdir -p $CI_PROJECT_DIR/build/tmp/log/error-report/ - mkdir -p $CI_PROJECT_DIR/build/tmp/log/error-report/
- mkdir -p $CI_PROJECT_DIR/log/
.after-my-script: &after-my-script .after-my-script: &after-my-script
- cd $CI_PROJECT_DIR/poky - cd $CI_PROJECT_DIR/poky
@@ -28,6 +29,10 @@ stages:
stage: base stage: base
after_script: after_script:
- *after-my-script - *after-my-script
artifacts:
paths:
- $CI_PROJECT_DIR/log/*
when: always
.parsec: .parsec:
before_script: before_script:
@@ -53,72 +58,72 @@ stages:
qemux86: qemux86:
extends: .base extends: .base
script: script:
- kas shell kas/$CI_JOB_NAME.yml -c "bitbake -k security-build-image integrity-image-minimal" - kas shell kas/$CI_JOB_NAME.yml -c "bitbake -k security-build-image integrity-image-minimal" 2>&1 | tee $CI_PROJECT_DIR/log/qemux86_security_image.txt
- kas build --target harden-image-minimal kas/$CI_JOB_NAME-harden.yml - kas build --target harden-image-minimal kas/$CI_JOB_NAME-harden.yml 2>&1 | tee CI_PROJECT_DIR/log/qemux86_harden_image.txt
qemux86-musl: qemux86-musl:
extends: .musl extends: .musl
needs: ['qemux86'] needs: ['qemux86']
script: script:
- kas build --target security-build-image kas/$CI_JOB_NAME.yml - kas build --target security-build-image kas/$CI_JOB_NAME.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemux86_musl_security_image.txt
qemux86-parsec: qemux86-parsec:
extends: .parsec extends: .parsec
needs: ['qemux86'] needs: ['qemux86']
script: script:
- kas build --target security-parsec-image kas/$CI_JOB_NAME.yml - kas build --target security-parsec-image kas/$CI_JOB_NAME.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemux86_parsec_security_image.txt
qemux86-test: qemux86-test:
extends: .test extends: .test
needs: ['qemux86'] needs: ['qemux86']
allow_failure: true allow_failure: true
script: script:
- kas build --target security-test-image kas/$CI_JOB_NAME.yml - kas build --target security-test-image kas/$CI_JOB_NAME.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemux86_test_security_image.txt
- kas build -c testimage --target security-test-image kas/$CI_JOB_NAME.yml - kas build -c testimage --target security-test-image kas/$CI_JOB_NAME.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemux86_testimage_security_image.txt
qemux86-64: qemux86-64:
extends: .base extends: .base
script: script:
- kas shell kas/$CI_JOB_NAME.yml -c "bitbake -k core-image-minimal security-build-image security-tpm-image security-tpm2-image integrity-image-minimal" - kas shell kas/$CI_JOB_NAME.yml -c "bitbake -k core-image-minimal security-build-image security-tpm-image security-tpm2-image integrity-image-minimal" 2>&1 | tee $CI_PROJECT_DIR/log/qemux86_64_security_image.txt
- kas build --target dm-verity-image-initramfs kas/$CI_JOB_NAME-dm-verify.yml - kas build --target dm-verity-image-initramfs kas/$CI_JOB_NAME-dm-verify.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemux86_64_dm_verify.txt
- kas build --target security-build-image kas/$CI_JOB_NAME-alt.yml - kas build --target security-build-image kas/$CI_JOB_NAME-alt.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemux86_64_security_build_image.txt
qemux86-64-parsec: qemux86-64-parsec:
extends: .parsec extends: .parsec
needs: ['qemux86-64'] needs: ['qemux86-64']
script: script:
- kas build --target security-parsec-image kas/$CI_JOB_NAME.yml - kas build --target security-parsec-image kas/$CI_JOB_NAME.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemux86_64_parsec_security_image.txt
qemuarm: qemuarm:
extends: .base extends: .base
script: script:
- kas build --target security-build-image kas/$CI_JOB_NAME.yml - kas build --target security-build-image kas/$CI_JOB_NAME.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemuarm_security_image.txt
qemuarm-parsec: qemuarm-parsec:
extends: .parsec extends: .parsec
needs: ['qemuarm'] needs: ['qemuarm']
script: script:
- kas build --target security-parsec-image kas/$CI_JOB_NAME.yml - kas build --target security-parsec-image kas/$CI_JOB_NAME.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemuarm_parsec_security_image.txt
qemuarm64: qemuarm64:
extends: .base extends: .base
script: script:
- kas shell kas/$CI_JOB_NAME.yml -c "bitbake -k security-build-image security-tpm2-image integrity-image-minimal" - kas shell kas/$CI_JOB_NAME.yml -c "bitbake -k security-build-image security-tpm2-image integrity-image-minimal" 2>&1 | tee $CI_PROJECT_DIR/log/qemuarm64_parsec_security_image.txt
- kas build --target security-build-image kas/$CI_JOB_NAME-alt.yml - kas build --target security-build-image kas/$CI_JOB_NAME-alt.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemuarm64_build_security_image.txt
qemuarm64-musl: qemuarm64-musl:
extends: .musl extends: .musl
needs: ['qemuarm64'] needs: ['qemuarm64']
script: script:
- kas build --target security-build-image kas/$CI_JOB_NAME.yml - kas build --target security-build-image kas/$CI_JOB_NAME.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemuarm64_musl_security_image.txt
qemuarm64-parsec: qemuarm64-parsec:
extends: .parsec extends: .parsec
needs: ['qemuarm64'] needs: ['qemuarm64']
script: script:
- kas build --target security-parsec-image kas/$CI_JOB_NAME.yml - kas build --target security-parsec-image kas/$CI_JOB_NAME.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemuarm64_parsec_security_image.txt
qemuriscv64: qemuriscv64:
extends: .base extends: .base
script: script:
- kas build --target security-build-image kas/$CI_JOB_NAME.yml - kas build --target security-build-image kas/$CI_JOB_NAME.yml 2>&1 | tee $CI_PROJECT_DIR/log/qemuriscv64_security_image.txt