swaits
2c28dd77b4
The nightly workflow has failed every run since it was added. Fix the four distinct issues so it can actually exercise the slow checks: - cargo-mutants: drop bogus `--in-diff-base ""` flag (never existed in cargo-mutants; v27 rejects it). - fuzz smoke: pin `--target x86_64-unknown-linux-gnu`. Binstall ships a musl-static cargo-fuzz binary whose default target inherits its own triple, and libfuzzer's sanitizer is incompatible with `crt-static`. - miri: move multi-module filters after `--`. `cargo test` only accepts one TESTNAME positional; libtest accepts multiple substring filters. - stateright random_large: add `target_state_count(1_000_000)` so the simulation actually terminates instead of looping past the 30 min CI timeout. The comment already claimed "up to 10⁶ states". Also refreshes fuzz/Cargo.lock, regenerated by the local verification build (was stale vs. parent deps).
102 lines
3.1 KiB
YAML
102 lines
3.1 KiB
YAML
name: Nightly
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "0 5 * * *" # 05:00 UTC daily
|
|
workflow_dispatch: {}
|
|
|
|
concurrency:
|
|
group: nightly-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
env:
|
|
CARGO_TERM_COLOR: always
|
|
|
|
jobs:
|
|
miri:
|
|
name: miri (sync modules)
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- uses: dtolnay/rust-toolchain@nightly
|
|
with:
|
|
components: miri
|
|
- uses: Swatinem/rust-cache@v2
|
|
- name: miri on keys/wire/crypto/merge
|
|
env:
|
|
MIRIFLAGS: -Zmiri-disable-isolation
|
|
# `cargo test` takes a single TESTNAME positional, so multi-module
|
|
# filters must be passed to the test binary after `--`. Quoted because
|
|
# YAML plain scalars can't contain `: ` sequences without being
|
|
# misparsed as mapping entries.
|
|
run: "cargo +nightly miri test --lib -- keys:: wire:: crypto:: merge::"
|
|
|
|
mutants:
|
|
name: cargo-mutants
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
shard: [0, 1, 2, 3]
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
- uses: Swatinem/rust-cache@v2
|
|
- uses: taiki-e/install-action@v2
|
|
with:
|
|
tool: cargo-mutants,cargo-nextest
|
|
- run: cargo mutants --shard ${{ matrix.shard }}/4
|
|
|
|
fuzz-smoke:
|
|
name: fuzz smoke (60s / target)
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
target:
|
|
- fuzz_decode_entries
|
|
- fuzz_wire_roundtrip
|
|
- fuzz_crypto_open
|
|
- fuzz_merge
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- uses: dtolnay/rust-toolchain@nightly
|
|
- uses: Swatinem/rust-cache@v2
|
|
- uses: taiki-e/install-action@v2
|
|
with:
|
|
tool: cargo-fuzz
|
|
# `--target` is explicit because the binstall'd `cargo-fuzz` binary is a
|
|
# statically-linked musl build, and `cargo fuzz`'s default target is the
|
|
# triple it was compiled for. The libfuzzer sanitizer is incompatible
|
|
# with the static-crt musl target, so force the glibc triple.
|
|
- run: cd fuzz && cargo +nightly fuzz run --target x86_64-unknown-linux-gnu ${{ matrix.target }} -- -max_total_time=60
|
|
|
|
kani:
|
|
name: kani
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
- uses: model-checking/kani-github-action@v1
|
|
with:
|
|
args: "--harness merge_size_invariant --harness merge_age_invariant --harness merge_self_always_at_zero --harness wire_encode_decode_roundtrip --harness wire_decode_no_panic --harness crypto_epoch_of_no_overflow"
|
|
|
|
stateright-random:
|
|
name: stateright random N=6 K=3
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 30
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
- uses: Swatinem/rust-cache@v2
|
|
- run: cargo test --test stateright_model --release --all-features -- random_large --ignored
|
|
|
|
bench:
|
|
name: criterion benches
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
- uses: Swatinem/rust-cache@v2
|
|
- run: cargo bench --all-features
|