[hsm] Load symmetric keys using hsmtool. #127
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright lowRISC contributors (OpenTitan project). | |
| # Licensed under the Apache License, Version 2.0, see LICENSE for details. | |
| # SPDX-License-Identifier: Apache-2.0 | |
| name: CI | |
| on: [push, pull_request] | |
| jobs: | |
| # Run lint checks on codebase. | |
| lint: | |
| # https://github.com/actions/runner-images/blob/main/images/linux/Ubuntu2204-Readme.md | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 30 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Run linter checks | |
| run: bazel test //quality/... | |
| # Build and test everything in codebase. | |
| test: | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 80 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Prepare environment | |
| uses: ./.github/actions/prepare-env | |
| - name: Build everything | |
| run: | | |
| bazel build //... | |
| bazel run //release:release -- \ | |
| --norelease \ | |
| --copy "${PWD}/artifacts" \ | |
| "no_tag_not_a_release" | |
| - name: Upload build artifacts | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: artifacts | |
| path: artifacts/* | |
| - name: Test everything | |
| # Skip running lint tests as those are run in a previous stage. | |
| run: bazel test --test_tag_filters=-lint //... | |
| # Run integration tests. | |
| integration_tests: | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 30 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Prepare environment | |
| uses: ./.github/actions/prepare-env | |
| - name: Run PA loadtest (in containers) | |
| run: ./run_integration_tests.sh | |
| # Test airgapped build. | |
| airgapped_build_test: | |
| runs-on: ubuntu-22.04 | |
| timeout-minutes: 80 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Prepare environment | |
| uses: ./.github/actions/prepare-env | |
| - name: Build everything in an airgapped network namespace. | |
| run: | | |
| ./util/airgapped_builds/test-airgapped-build.sh |