ci: add platform build coverage#358
Draft
abhinavagarwal07 wants to merge 1 commit into
Draft
Conversation
- New build-platforms.yml with build-only jobs for portability checking - Linux matrix: ubuntu-22.04, ubuntu-24.04-arm, plus release/debug/hardened build variants - Hardened build uses _FORTIFY_SOURCE=3 and -fstack-protector-strong - Alpine/musl via Docker container (alpine:3.21) - FreeBSD 14 via vmactions/freebsd-vm - All compile-only, no runtime tests (test harness not yet portable to these platforms) - Upload meson build logs on failure for all platforms including FreeBSD - All actions pinned to Node 24-capable SHAs, host runners pinned to ubuntu-24.04
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
New
build-platforms.ymlwith compile-only jobs for portability and build-hardening checks:--buildtype=release), ubuntu-24.04-debug (--buildtype=debug), and ubuntu-24.04-hardened (_FORTIFY_SOURCE=3,-fstack-protector-strong)All build-only — no runtime tests (the test harness is not yet portable to these platforms). Meson build logs uploaded on failure for all platforms. All actions SHA-pinned to Node 24-capable versions, host runners pinned to
ubuntu-24.04.Compile-only platform checks catch portability issues (musl libc differences, FreeBSD header availability, ARM alignment) and hardening regressions (release-mode optimizations exposing UB,
_FORTIFY_SOURCE=3catching buffer overflows at higher optimization levels) without the cost of full test infrastructure on each platform. Runtime tests for these platforms can be added incrementally as the test harness gains cross-platform mount/unmount abstractions.