Merge a non-functional Wizer into Wasmtime

Cargo.toml

@@ -172,6 +172,7 @@ members = [
 ]
 exclude = [
   'docs/rust_wasi_markdown_parser',
+  'crates/wizer',
 ]
 
 [workspace.package]

crates/wizer/.github/actions/binary-compatible-builds/README.md

@@ -0,0 +1,9 @@
+# binary-compatible-builds
+
+A small (ish) action which is intended to be used and will configure builds of
+Rust projects to be "more binary compatible". On Windows and macOS this
+involves setting a few env vars, and on Linux this involves spinning up a CentOS
+6 container which is running in the background.
+
+All subsequent build commands need to be wrapped in `$CENTOS` to optionally run
+on `$CENTOS` on Linux to ensure builds happen inside the container.

crates/wizer/.github/actions/binary-compatible-builds/action.yml

@@ -0,0 +1,10 @@
+name: 'Set up a CentOS 6 container to build releases in'
+description: 'Set up a CentOS 6 container to build releases in'
+
+runs:
+  using: node20
+  main: 'main.js'
+inputs:
+  name:
+    required: true
+    description: "Name of the build"

crates/wizer/.github/actions/binary-compatible-builds/main.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+
+const child_process = require('child_process');
+const stdio = { stdio: 'inherit' };
+const fs = require('fs');
+
+function set_env(name, val) {
+  fs.appendFileSync(process.env['GITHUB_ENV'], `${name}=${val}\n`)
+}
+
+// On OSX all we need to do is configure our deployment target as old as
+// possible. For now 10.9 is the limit.
+if (process.platform == 'darwin') {
+  set_env("MACOSX_DEPLOYMENT_TARGET", "10.9");
+  return;
+}
+
+// On Windows we build against the static CRT to reduce dll dependencies
+if (process.platform == 'win32') {
+  set_env("RUSTFLAGS", "-Ctarget-feature=+crt-static");
+  return;
+}
+
+// Android doesn't use a container as it's controlled by the installation of the
+// SDK/NDK.
+if (process.env.INPUT_NAME && process.env.INPUT_NAME.indexOf("android") >= 0) {
+  return;
+}
+
+// ... and on Linux we do fancy things with containers. We'll spawn an old
+// CentOS container in the background with a super old glibc, and then we'll run
+// commands in there with the `$CENTOS` env var.
+
+if (process.env.CENTOS !== undefined) {
+  const args = ['exec', '-w', process.cwd(), '-i', 'build-container'];
+  for (const arg of process.argv.slice(2)) {
+    args.push(arg);
+  }
+  child_process.execFileSync('docker', args, stdio);
+  return;
+}
+
+const name = process.env.INPUT_NAME.replace(/-min$/, '');
+
+child_process.execFileSync('docker', [
+  'build',
+  '--tag', 'build-image',
+  `${process.cwd()}/ci/docker/${name}`
+], stdio);
+
+child_process.execFileSync('docker', [
+  'run',
+  '--detach',
+  '--interactive',
+  '--name', 'build-container',
+  '-v', `${process.cwd()}:${process.cwd()}`,
+  '-v', `${child_process.execSync('rustc --print sysroot').toString().trim()}:/rust:ro`,
+  'build-image',
+], stdio);
+
+// Use ourselves to run future commands
+set_env("CENTOS", __filename);

crates/wizer/.github/actions/install-rust/README.md

@@ -0,0 +1,18 @@
+# install-rust
+
+A small github action to install `rustup` and a Rust toolchain. This is
+generally expressed inline, but it was repeated enough in this repository it
+seemed worthwhile to extract.
+
+Some gotchas:
+
+* Can't `--self-update` on Windows due to permission errors (a bug in Github
+  Actions)
+* `rustup` isn't installed on macOS (a bug in Github Actions)
+
+When the above are fixed we should delete this action and just use this inline:
+
+```yml
+- run: rustup update $toolchain && rustup default $toolchain
+  shell: bash
+```

crates/wizer/.github/actions/install-rust/action.yml

@@ -0,0 +1,12 @@
+name: 'Install Rust toolchain'
+description: 'Install both `rustup` and a Rust toolchain'
+
+inputs:
+  toolchain:
+    description: 'Default toolchan to install'
+    required: false
+    default: 'stable'
+
+runs:
+  using: node12
+  main: 'main.js'

crates/wizer/.github/actions/install-rust/main.js

@@ -0,0 +1,36 @@
+const child_process = require('child_process');
+const toolchain = process.env.INPUT_TOOLCHAIN;
+const fs = require('fs');
+
+function set_env(name, val) {
+  fs.appendFileSync(process.env['GITHUB_ENV'], `${name}=${val}\n`)
+}
+
+// Needed for now to get 1.24.2 which fixes a bug in 1.24.1 that causes issues
+// on Windows.
+if (process.platform === 'win32') {
+  child_process.execFileSync('rustup', ['self', 'update']);
+}
+
+child_process.execFileSync('rustup', ['set', 'profile', 'minimal']);
+child_process.execFileSync('rustup', ['update', toolchain, '--no-self-update']);
+child_process.execFileSync('rustup', ['default', toolchain]);
+
+// Deny warnings on CI to keep our code warning-free as it lands in-tree. Don't
+// do this on nightly though since there's a fair amount of warning churn there.
+if (!toolchain.startsWith('nightly')) {
+  set_env("RUSTFLAGS", "-D warnings");
+}
+
+// Save disk space by avoiding incremental compilation, and also we don't use
+// any caching so incremental wouldn't help anyway.
+set_env("CARGO_INCREMENTAL", "0");
+
+// Turn down debuginfo from 2 to 1 to help save disk space
+set_env("CARGO_PROFILE_DEV_DEBUG", "1");
+set_env("CARGO_PROFILE_TEST_DEBUG", "1");
+
+if (process.platform === 'darwin') {
+  set_env("CARGO_PROFILE_DEV_SPLIT_DEBUGINFO", "unpacked");
+  set_env("CARGO_PROFILE_TEST_SPLIT_DEBUGINFO", "unpacked");
+}

crates/wizer/.github/workflows/ci.yml

@@ -0,0 +1,56 @@
+name: CI
+
+on: pull_request
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  build:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        include:
+        - build: x86_64-linux
+          os: ubuntu-latest
+        - build: x86_64-macos
+          os: macos-latest
+          target: x86_64-apple-darwin
+        - build: aarch64-macos
+          os: macos-latest
+          target: aarch64-apple-darwin
+        - build: x86_64-windows
+          os: windows-latest
+        - build: x86_64-mingw
+          os: windows-latest
+          target: x86_64-pc-windows-gnu
+        - build: aarch64-linux
+          os: ubuntu-latest
+          target: aarch64-unknown-linux-gnu
+        - build: s390x-linux
+          os: ubuntu-latest
+          target: s390x-unknown-linux-gnu
+    steps:
+    - uses: actions/checkout@v2
+    - name: Build
+      run: cargo build --verbose
+    - name: Run tests
+      run: cargo test --verbose
+    - name: Checking benches
+      run : cargo check --benches
+
+  check_fuzz:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2
+    - run: cargo install cargo-fuzz
+    - run: cargo fuzz build --dev -s none
+
+  rustfmt:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2
+    - run: rustup update stable --no-self-update
+    - run: rustup default stable
+    - run: rustup component add rustfmt
+    - run: cargo fmt --all -- --check

crates/wizer/.github/workflows/release.yml

@@ -0,0 +1,138 @@
+name: Release
+on:
+  push:
+    branches: [main]
+    tags-ignore: [dev]
+  pull_request:
+defaults:
+  run:
+    shell: bash
+
+permissions: write-all
+
+# Cancel any in-flight jobs for the same PR/branch so there's only one active
+# at a time
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        include:
+        - build: x86_64-linux
+          os: ubuntu-latest
+        - build: x86_64-macos
+          os: macos-latest
+          target: x86_64-apple-darwin
+        - build: aarch64-macos
+          os: macos-latest
+          target: aarch64-apple-darwin
+        - build: x86_64-windows
+          os: windows-latest
+        - build: x86_64-mingw
+          os: windows-latest
+          target: x86_64-pc-windows-gnu
+        - build: aarch64-linux
+          os: ubuntu-latest
+          target: aarch64-unknown-linux-gnu
+        - build: s390x-linux
+          os: ubuntu-latest
+          target: s390x-unknown-linux-gnu
+    steps:
+    - uses: actions/checkout@v2
+      with:
+        submodules: true
+    - uses: ./.github/actions/install-rust
+    - uses: ./.github/actions/binary-compatible-builds
+      with:
+        name: ${{ matrix.build }}
+    - run: |
+        echo CARGO_BUILD_TARGET=${{ matrix.target }} >> $GITHUB_ENV
+        rustup target add ${{ matrix.target }}
+      if: matrix.target != ''
+
+    # Build `wizer` and executables
+    - run: $CENTOS cargo build --release --locked --bin wizer --all-features
+
+    # Assemble release artifats appropriate for this platform, then upload them
+    # unconditionally to this workflow's files so we have a copy of them.
+    - run: ./ci/build-tarballs.sh "${{ matrix.build }}" "${{ matrix.target }}"
+    - uses: actions/upload-artifact@v4
+      with:
+        name: bins-${{ matrix.build }}
+        path: dist
+  publish:
+    needs: [build]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      # Download all the artifacts that we'll be publishing. Should keep an eye on
+      # the `download-artifact` repository to see if we can ever get something
+      # like "download all artifacts" or "download this list of artifacts"
+      - uses: actions/download-artifact@v4
+        with:
+          name: bins-x86_64-macos
+          path: dist
+      - uses: actions/download-artifact@v4
+        with:
+          name: bins-aarch64-macos
+          path: dist
+      - uses: actions/download-artifact@v4
+        with:
+          name: bins-x86_64-windows
+          path: dist
+      - uses: actions/download-artifact@v4
+        with:
+          name: bins-x86_64-mingw
+          path: dist
+      - uses: actions/download-artifact@v4
+        with:
+          name: bins-x86_64-linux
+          path: dist
+      - uses: actions/download-artifact@v4
+        with:
+          name: bins-aarch64-linux
+          path: dist
+      - uses: actions/download-artifact@v4
+        with:
+          name: bins-s390x-linux
+          path: dist
+
+      - name: Calculate tag name
+        run: |
+          name=dev
+          if [[ $GITHUB_REF == refs/tags/v* ]]; then
+            name=${GITHUB_REF:10}
+          fi
+          echo ::set-output name=val::$name
+          echo TAG=$name >> $GITHUB_ENV
+        id: tagname
+
+      # ... and if this was an actual push (tag or `main`) then we publish a
+      # new release. This'll automatically publish a tag release or update `dev`
+      # with this `sha`. Note that `continue-on-error` is set here so if this hits
+      # a bug we can go back and fetch and upload the release ourselves.
+      - run: cd .github/actions/github-release && npm install --production
+      - name: Publish Release
+        uses: ./.github/actions/github-release
+        if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v'))
+        with:
+          files: "dist/*"
+          token: ${{ secrets.GITHUB_TOKEN }}
+          name: ${{ steps.tagname.outputs.val }}
+        continue-on-error: true
+      - name: Update npm packages to latest version
+        if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+        working-directory: ./npm/wizer
+        run: npm install && node update.js "${{ steps.tagname.outputs.val }}"
+      - name: Setup npm auth
+        run: sudo npm config --global set '//registry.npmjs.org/:_authToken'='${NODE_AUTH_TOKEN}'
+      - name: Publish npm packages
+        if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+        working-directory: ./npm
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: for dir in *; do (echo $dir && cd $dir && npm publish); done

crates/wizer/.gitignore

@@ -0,0 +1,8 @@
+/target
+node_modules
+npm/wizer-darwin-arm64/
+npm/wizer-darwin-x64/
+npm/wizer-linux-x64/
+npm/wizer-win32-x64/
+npm/wizer-linux-s390x/
+npm/wizer-linux-arm64/

crates/wizer/.gitmodules

@@ -0,0 +1,3 @@
+[submodule "benches/uap-bench/uap-core"]
+	path = benches/uap-bench/uap-core
+	url = https://github.com/ua-parser/uap-core.git