5 - image: docker.io/openwrtorg/packages-cci:v1.0.3
7 - SDK_HOST: "downloads.openwrt.org"
8 - SDK_PATH: "snapshots/targets/ath79/generic"
9 - SDK_FILE: "openwrt-sdk-ath79-generic_*.Linux-x86_64.tar.xz"
13 path: ~/openwrt_packages
16 name: Check changes / verify commits
17 working_directory: ~/openwrt_packages
19 cat >> $BASH_ENV <<EOF
20 echo_red() { printf "\033[1;31m\$*\033[m\n"; }
21 echo_green() { printf "\033[1;32m\$*\033[m\n"; }
22 echo_blue() { printf "\033[1;34m\$*\033[m\n"; }
27 for commit in $(git rev-list HEAD ^origin/$BRANCH); do
28 echo_blue "=== Checking commit '$commit'"
29 if git show --format='%P' -s $commit | grep -qF ' '; then
30 echo_red "Pull request should not include merge commits"
34 author="$(git show -s --format=%aN $commit)"
35 if echo $author | grep -q '\S\+\s\+\S\+'; then
36 echo_green "Author name ($author) seems ok"
38 echo_red "Author name ($author) need to be your real name 'firstname lastname'"
42 subject="$(git show -s --format=%s $commit)"
43 if echo "$subject" | grep -q -e '^[0-9A-Za-z,+/_-]\+: ' -e '^Revert '; then
44 echo_green "Commit subject line seems ok ($subject)"
46 echo_red "Commit subject line MUST start with '<package name>: ' ($subject)"
50 body="$(git show -s --format=%b $commit)"
51 sob="$(git show -s --format='Signed-off-by: %aN <%aE>' $commit)"
52 if echo "$body" | grep -qF "$sob"; then
53 echo_green "Signed-off-by match author"
55 echo_red "Signed-off-by is missing or doesn't match author (should be '$sob')"
63 name: Download the SDK
64 working_directory: ~/sdk
66 curl "https://$SDK_HOST/$SDK_PATH/sha256sums" -sS -o sha256sums
67 curl "https://$SDK_HOST/$SDK_PATH/sha256sums.asc" -fs -o sha256sums.asc || true
68 curl "https://$SDK_HOST/$SDK_PATH/sha256sums.sig" -fs -o sha256sums.sig || true
69 if [ ! -f sha256sums.asc ] && [ ! -f sha256sums.sig ]; then
70 echo_red "Missing sha256sums signature files"
73 [ ! -f sha256sums.asc ] || gpg --with-fingerprint --verify sha256sums.asc sha256sums
74 if [ -f sha256sums.sig ]; then
76 for KEY in ~/usign/*; do
78 if signify-openbsd -V -q -p "$KEY" -x sha256sums.sig -m sha256sums; then
84 if [ -z "$VERIFIED" ]; then
85 echo_red "Could not verify usign signature"
89 rsync -av "$SDK_HOST::downloads/$SDK_PATH/$SDK_FILE" .
90 sha256sum -c --ignore-missing sha256sums
93 name: Prepare build_dir
94 working_directory: ~/build_dir
96 tar Jxf ~/sdk/$SDK_FILE --strip=1
97 cat > feeds.conf <<EOF
98 src-git base https://github.com/openwrt/openwrt.git;$BRANCH
99 src-link packages $HOME/openwrt_packages
100 src-git luci https://github.com/openwrt/luci.git;$BRANCH
103 ./scripts/feeds update -a > /dev/null
104 make defconfig > /dev/null
106 sed -i 's/# CONFIG_BUILD_LOG is not set/CONFIG_BUILD_LOG=y/' .config
109 name: Install & download source, check package, compile
110 working_directory: ~/build_dir
113 PKGS=$(cd ~/openwrt_packages; git diff --diff-filter=d --name-only "origin/$BRANCH..." | grep 'Makefile$' | grep -Ev '/files/|/src/' | awk -F/ '{ print $(NF-1) }')
114 if [ -z "$PKGS" ] ; then
115 echo_blue "WARNING: No new or modified packages found!"
119 echo_blue "=== Found new/modified packages: $PKGS"
120 for PKG in $PKGS ; do
121 echo_blue "===+ Install: $PKG"
122 ./scripts/feeds install "$PKG"
124 echo_blue "===+ Download: $PKG"
125 make "package/$PKG/download" V=s
127 echo_blue "===+ Check package: $PKG"
128 make "package/$PKG/check" V=s 2>&1 | tee logtmp
131 if [ $RET -ne 0 ]; then
132 echo_red "=> Package check failed: $RET)"
136 badhash_msg="HASH does not match "
137 badhash_msg+="|HASH uses deprecated hash,"
138 badhash_msg+="|HASH is missing,"
139 if grep -qE "$badhash_msg" logtmp; then
140 echo_red "=> Package HASH check failed"
143 echo_green "=> Package check OK"
146 for PKG in $PKGS ; do
147 echo_blue "===+ Building: $PKG"
148 make "package/$PKG/compile" -j3 V=s
152 path: ~/build_dir/logs
155 path: ~/build_dir/bin