Skip to content
Snippets Groups Projects
Unverified Commit 5d4220f4 authored by Harmen Stoppels's avatar Harmen Stoppels Committed by GitHub
Browse files

Verify checksums for downloads in GitLab CI (#1492)

parent 9da761d6
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
ci/codecov/build.Dockerfile
+ 15
− 5
View file @ 5d4220f4
...@@ -20,26 +20,36 @@ RUN apt-get update -qq && apt-get install -qq -y --no-install-recommends \ ...@@ -20,26 +20,36 @@ RUN apt-get update -qq && apt-get install -qq -y --no-install-recommends \
update-alternatives --config gcc && \ update-alternatives --config gcc && \
rm -rf /var/lib/apt/lists/* rm -rf /var/lib/apt/lists/*
RUN cd /usr/local/bin && \
curl -Ls https://codecov.io/bash > codecov.sh && \
echo "89c658e261d5f25533598a222fd96cf17a5fa0eb3772f2defac754d9970b2ec8 codecov.sh" | sha256sum --check --quiet && \
chmod +x codecov.sh
RUN wget -q "https://github.com/linux-test-project/lcov/archive/v1.15.tar.gz" && \ RUN wget -q "https://github.com/linux-test-project/lcov/archive/v1.15.tar.gz" && \
echo "d88b0718f59815862785ac379aed56974b9edd8037567347ae70081cd4a3542a v1.15.tar.gz" | sha256sum --check --quiet && \
tar -xzf v1.15.tar.gz && \ tar -xzf v1.15.tar.gz && \
cd lcov-1.15 && \ cd lcov-1.15 && \
make install -j$(nproc) && \ make install -j$(nproc) && \
rm -rf lcov-1.15 v1.15.tar.gz rm -rf lcov-1.15 v1.15.tar.gz
# Install MPICH ABI compatible with Cray's lib on Piz Daint # Install MPICH ABI compatible with Cray's lib on Piz Daint
RUN wget -q https://www.mpich.org/static/downloads/${MPICH_VERSION}/mpich-${MPICH_VERSION}.tar.gz && \ RUN wget -q https://www.mpich.org/static/downloads/${MPICH_VERSION}/mpich-${MPICH_VERSION}.tar.gz -O mpich.tar.gz && \
tar -xzf mpich-${MPICH_VERSION}.tar.gz && \ echo "4bfaf8837a54771d3e4922c84071ef80ffebddbb6971a006038d91ee7ef959b9 mpich.tar.gz" | sha256sum --check --quiet && \
tar -xzf mpich.tar.gz && \
cd mpich-${MPICH_VERSION} && \ cd mpich-${MPICH_VERSION} && \
./configure --disable-fortran && \ ./configure --disable-fortran && \
make install -j$(nproc) && \ make install -j$(nproc) && \
rm -rf mpich-${MPICH_VERSION}.tar.gz mpich-${MPICH_VERSION} rm -rf mpich.tar.gz mpich-${MPICH_VERSION}
# Install cmake # Install cmake
RUN wget -qO- "https://github.com/Kitware/CMake/releases/download/v3.12.4/cmake-3.12.4-Linux-x86_64.tar.gz" | tar --strip-components=1 -xz -C /usr/local RUN wget -q "https://github.com/Kitware/CMake/releases/download/v3.12.4/cmake-3.12.4-Linux-x86_64.tar.gz" -O cmake.tar.gz && \
echo "486edd6710b5250946b4b199406ccbf8f567ef0e23cfe38f7938b8c78a2ffa5f cmake.tar.gz" | sha256sum --check --quiet && \
tar --strip-components=1 -xzf cmake.tar.gz -C /usr/local && \
rm -rf cmake.tar.gz
# Install bundle tooling for creating small Docker images # Install bundle tooling for creating small Docker images
RUN wget -q https://github.com/haampie/libtree/releases/download/v1.2.0/libtree_x86_64.tar.gz && \ RUN wget -q https://github.com/haampie/libtree/releases/download/v1.2.0/libtree_x86_64.tar.gz && \
echo "4316a52aed7c8d2f7d2736c935bbda952204be92e56948110a143283764c427c libtree_x86_64.tar.gz" | sha256sum --check --quiet && \
tar -xzf libtree_x86_64.tar.gz && \ tar -xzf libtree_x86_64.tar.gz && \
rm libtree_x86_64.tar.gz && \ rm libtree_x86_64.tar.gz && \
ln -s /root/libtree/libtree /usr/local/bin/libtree ln -s /root/libtree/libtree /usr/local/bin/libtree
ci/codecov/deploy.Dockerfile
+ 2
− 1
View file @ 5d4220f4
...@@ -43,7 +43,8 @@ RUN mkdir ${BUILD_DIR} && cd ${BUILD_DIR} && \ ...@@ -43,7 +43,8 @@ RUN mkdir ${BUILD_DIR} && cd ${BUILD_DIR} && \
# Install some code cov related executables # Install some code cov related executables
RUN libtree -d ${BUNDLE_DIR} $(which gcov) && \ RUN libtree -d ${BUNDLE_DIR} $(which gcov) && \
cp -L ${SOURCE_DIR}/ci/codecov_pre ${SOURCE_DIR}/ci/codecov_post ${SOURCE_DIR}/ci/upload_codecov ${BUNDLE_DIR}/usr/bin && \ cp -L ${SOURCE_DIR}/ci/codecov_pre ${SOURCE_DIR}/ci/codecov_post ${SOURCE_DIR}/ci/upload_codecov ${BUNDLE_DIR}/usr/bin && \
cp -L $(which lcov geninfo) ${BUNDLE_DIR}/usr/bin cp -L $(which lcov geninfo) ${BUNDLE_DIR}/usr/bin && \
cp -L /usr/local/bin/codecov.sh ${BUNDLE_DIR}/usr/bin
# In the build dir, remove everything except for gcno coverage files # In the build dir, remove everything except for gcno coverage files
RUN mv ${BUILD_DIR} ${BUILD_DIR}-tmp && \ RUN mv ${BUILD_DIR} ${BUILD_DIR}-tmp && \
......
ci/release/build.Dockerfile
+ 9
− 4
View file @ 5d4220f4
...@@ -20,18 +20,23 @@ RUN apt-get update -qq && apt-get install -qq -y --no-install-recommends \ ...@@ -20,18 +20,23 @@ RUN apt-get update -qq && apt-get install -qq -y --no-install-recommends \
rm -rf /var/lib/apt/lists/* rm -rf /var/lib/apt/lists/*
# Install cmake # Install cmake
RUN wget -qO- "https://github.com/Kitware/CMake/releases/download/v3.12.4/cmake-3.12.4-Linux-x86_64.tar.gz" | tar --strip-components=1 -xz -C /usr/local RUN wget -q "https://github.com/Kitware/CMake/releases/download/v3.12.4/cmake-3.12.4-Linux-x86_64.tar.gz" -O cmake.tar.gz && \
echo "486edd6710b5250946b4b199406ccbf8f567ef0e23cfe38f7938b8c78a2ffa5f cmake.tar.gz" | sha256sum --check --quiet && \
tar --strip-components=1 -xzf cmake.tar.gz -C /usr/local && \
rm -rf cmake.tar.gz
# Install MPICH ABI compatible with Cray's lib on Piz Daint # Install MPICH ABI compatible with Cray's lib on Piz Daint
RUN wget -q https://www.mpich.org/static/downloads/${MPICH_VERSION}/mpich-${MPICH_VERSION}.tar.gz && \ RUN wget -q https://www.mpich.org/static/downloads/${MPICH_VERSION}/mpich-${MPICH_VERSION}.tar.gz -O mpich.tar.gz && \
tar -xzf mpich-${MPICH_VERSION}.tar.gz && \ echo "4bfaf8837a54771d3e4922c84071ef80ffebddbb6971a006038d91ee7ef959b9 mpich.tar.gz" | sha256sum --check --quiet && \
tar -xzf mpich.tar.gz && \
cd mpich-${MPICH_VERSION} && \ cd mpich-${MPICH_VERSION} && \
./configure --disable-fortran && \ ./configure --disable-fortran && \
make install -j$(nproc) && \ make install -j$(nproc) && \
rm -rf mpich-${MPICH_VERSION}.tar.gz mpich-${MPICH_VERSION} rm -rf mpich.tar.gz mpich-${MPICH_VERSION}
# Install bundle tooling for creating small Docker images # Install bundle tooling for creating small Docker images
RUN wget -q https://github.com/haampie/libtree/releases/download/v1.2.0/libtree_x86_64.tar.gz && \ RUN wget -q https://github.com/haampie/libtree/releases/download/v1.2.0/libtree_x86_64.tar.gz && \
echo "4316a52aed7c8d2f7d2736c935bbda952204be92e56948110a143283764c427c libtree_x86_64.tar.gz" | sha256sum --check --quiet && \
tar -xzf libtree_x86_64.tar.gz && \ tar -xzf libtree_x86_64.tar.gz && \
rm libtree_x86_64.tar.gz && \ rm libtree_x86_64.tar.gz && \
ln -s /root/libtree/libtree /usr/local/bin/libtree ln -s /root/libtree/libtree /usr/local/bin/libtree
ci/upload_codecov
+ 2
− 2
View file @ 5d4220f4
...@@ -6,6 +6,6 @@ TRACE_FILES_ARGS=`find "$SHARED_REPORTS" -type f -iname '*.info' -exec sh -c "ec ...@@ -6,6 +6,6 @@ TRACE_FILES_ARGS=`find "$SHARED_REPORTS" -type f -iname '*.info' -exec sh -c "ec
lcov ${TRACE_FILES_ARGS} --output-file "$SHARED_REPORTS/combined.info" lcov ${TRACE_FILES_ARGS} --output-file "$SHARED_REPORTS/combined.info"
pushd $SOURCE_DIR pushd $SOURCE_DIR
bash <(curl -s https://codecov.io/bash) -f "$SHARED_REPORTS/combined.info" -t $CODECOV_TOKEN_GITHUB codecov.sh -f "$SHARED_REPORTS/combined.info" -t $CODECOV_TOKEN_GITHUB
bash <(curl -s https://codecov.io/bash) -f "$SHARED_REPORTS/combined.info" -t $CODECOV_TOKEN_GITLAB codecov.sh -f "$SHARED_REPORTS/combined.info" -t $CODECOV_TOKEN_GITLAB
popd popd
\ No newline at end of file
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment