chore(travis): re-encrypt secure keys for leanprover/lean
Travis-ci[1] supports encryption key feature[2]. The caveat is that plain-texts are encrypted and decrypted using repository's public and private keys. That is, if we migrate our blessed repo to another one, we need to re-encrypt and update our secure keys in .travis.yml file: - GH_TOKEN : to push to OSX/Windows repositories (Github token for account "soonhokong") - DROPBOX_KEY : to push compiled binaries to DROPBOX (DROPBOX_KEY=access token) - REPO : encrypt "BLESSED". If travis-ci is running on another repository, REPO variable is not decrypted to "BLESSED" because it will use a different private key. Many actions (i.e. upload to Dropbox, trigger OSX/Windows Builds) are protected by this condition. - COVERALLS_REPO_TOKEN: to push to https://coveralls.io (https://coveralls.io/r/leanprover/lean) [1]: http://travis-ci.com [2]: http://docs.travis-ci.com/user/encryption-keys/
This commit is contained in:
parent
a5229e5283
commit
219e9d6c0c
3 changed files with 22 additions and 22 deletions
|
@ -1,6 +1,7 @@
|
||||||
language: objective-c
|
language: objective-c
|
||||||
env:
|
env:
|
||||||
global:
|
global:
|
||||||
|
# DROPBOX_KEY=[secure]
|
||||||
- secure: "W8vou0KRJOOboZXP9q+D/9Wl6LlBeVS2T85MHWPz7EwCMQbJq5xWnGzYLE6FmC0iILcZkXyP63vqoYMFo5MJaEQeALGx2RuIiW7XgrD+7Bn4Vfsp6BLT7K9/AJETGGTQnLs8oZJJCXHGtzbc8EPFIZd/ZPPrve4jhEE5ZNhXnRc="
|
- secure: "W8vou0KRJOOboZXP9q+D/9Wl6LlBeVS2T85MHWPz7EwCMQbJq5xWnGzYLE6FmC0iILcZkXyP63vqoYMFo5MJaEQeALGx2RuIiW7XgrD+7Bn4Vfsp6BLT7K9/AJETGGTQnLs8oZJJCXHGtzbc8EPFIZd/ZPPrve4jhEE5ZNhXnRc="
|
||||||
matrix:
|
matrix:
|
||||||
- CMAKE_CXX_COMPILER=g++ CMAKE_BUILD_TYPE=DEBUG TCMALLOC=OFF PUSH_TO_CDASH=TRUE LUA=51
|
- CMAKE_CXX_COMPILER=g++ CMAKE_BUILD_TYPE=DEBUG TCMALLOC=OFF PUSH_TO_CDASH=TRUE LUA=51
|
||||||
|
|
|
@ -2,7 +2,7 @@ language: cpp
|
||||||
|
|
||||||
env:
|
env:
|
||||||
global:
|
global:
|
||||||
# DROPBOX_KEY
|
# DROPBOX_KEY=[secure]
|
||||||
- secure: "fQ9mzDBBvId1qpEK/DhwlwRYBGrP0XG/XKUvTRTmX3kv7YIrKFZs/TGEDyvwnfaq6IY6rpHdqsnd/ic22DVsEGIGQO0BWUybZP0nmBHmL9aOqjjdUlgVs5vKhWmij8NkCp5LA3GU0fPm0tOonNmejxsxfNUdxk66hOlLLgPhzVo="
|
- secure: "fQ9mzDBBvId1qpEK/DhwlwRYBGrP0XG/XKUvTRTmX3kv7YIrKFZs/TGEDyvwnfaq6IY6rpHdqsnd/ic22DVsEGIGQO0BWUybZP0nmBHmL9aOqjjdUlgVs5vKhWmij8NkCp5LA3GU0fPm0tOonNmejxsxfNUdxk66hOlLLgPhzVo="
|
||||||
matrix:
|
matrix:
|
||||||
- CMAKE_CXX_COMPILER=g++ CMAKE_BUILD_TYPE=RELEASE UPLOAD=windows DROPBOX=TRUE PUSH_TO_CDASH=TRUE PACKAGE=TRUE
|
- CMAKE_CXX_COMPILER=g++ CMAKE_BUILD_TYPE=RELEASE UPLOAD=windows DROPBOX=TRUE PUSH_TO_CDASH=TRUE PACKAGE=TRUE
|
||||||
|
|
41
.travis.yml
41
.travis.yml
|
@ -1,16 +1,15 @@
|
||||||
language: cpp
|
language: cpp
|
||||||
|
cache: apt
|
||||||
env:
|
env:
|
||||||
global:
|
global:
|
||||||
# GH_TOKEN
|
# GH_TOKEN=[secure] (to push to osx/windows repo under soonhokong)
|
||||||
- secure: "Zdab8c1wnKcwYWEVBvtaClCzw7sYmFPZ47urG4jSeO5FL+M4MiR6c7STeoW7wge9k3uUyMTAodD/bJ0RhskBp0wbvg0UoYQaFRm+RwsDiM7CNj+fYM8wnV0cvTJj869NsqQ92zde6L5gFEHNDrVUwC6PJpIC4JxRRfzIA4/qH5A="
|
- secure: "bDcZ1BusPgeFcilXBXqJ+aLWmCD6ET6SY6GaIDz66zFFVvHULkr8PcGQgKHw/VxH4Kbll52hkKwYgKhXyBF+VlHiyAxQHzlr17honzIl42vbz+tC5qr4/oDASolqayUtz9xJqNOFbTwvh5EHZLbG5hjudSdGE8LX3QC6IN7wYy8="
|
||||||
# DROPBOX_KEY
|
# DROPBOX_KEY=[secure] (to send binaries to dropbox, "access_token")
|
||||||
- secure: "b9qdjrlr2khvQclMg12Fjg0DF3Chv46SdNRymK7cPukAhIaqaPn8g0FL4K9xW/asXRXdWcd3dYBoarjkqX43mNV9nl5Hl2VwV7T6KeGAxQSRqdYioMugIY0P8xrj4i5dwuvt8aqSlCctSozE1e/th8EWjjy6TWi890MJB//NGRE="
|
- secure: "CyASf1F7hGwB85jUQOfDoNBQSouSayP4BVvjqAJdRxirui/oyw2sJ02HC6ZTM+LO+ZyWy3eJOGwe81z6PEQFzovv9C8VLRbhV8Tk7aN+nQTCyyKLoxsON/T5PO/C74ZSu5hTNMwnHrbdphc88Y4ZrQqL2M3cTWT5nVFCshEq6IM="
|
||||||
# LEANREPO
|
# REPO=BLESSED (to perform extra stuff only for pushes to the blessed repo)
|
||||||
- secure: "KsbUsMxTFDbUaObKOTxfWSu0gGzbUWlJr52nI1ITMqLxswettUR9bYAa1HTA+7hXXCT1W5I+RjxeWi74C+w/eTJGPGePX0irtzjNF/XVhP1ADoJJVQCF64yv02GNBeeUzGSDiW4bmO8ZLxTzvFr2ZskJDe/bIytQd3pJAlU6M0w="
|
- secure: "iZEcYPaxqGRQs7loHwO88DlewbRngBwoNGfo438jabh0adF3y9zCPw0tcAtp6IJuCw8E6QVoM9JMwoQRvPbnqBelFjpXH+U3eYdaeeZRkBkyOthTWzzdwEexlnK7dXVEc+gTDjh2NBD9juXKDSJ5xOF1HfhEJaMXSLairnhpL6k="
|
||||||
# COVERALLS.IO TOKEN
|
# COVERALLS_REPO_TOKEN=[secure] (from https://coveralls.io/r/leanprover/lean)
|
||||||
- secure: "UaRz6E3zZeOG/2UzrGrsofYPkQG3qWzooYV6cRm5G+pMYReee8MdosnP6GtmPFhoFlkHeLQl21BpoJu3yFtrQoD2qpdrnb2uOJMYlSHLJtcZ5+pOl3DuX1qu06xXtz4PrZUSTx4WyaYynBP5kpky2Ghzmm1B5LKLUBcpCyP7uaw="
|
- secure: "j14U5pV2qkArCTt4MdI+rYe9MzcIcoMYrPX3Kp4bFNAyxfTALHG25bZUaEyqBJKPevch02+i8hs3I/+b9Iue0j8be8hjy7GSKDEkhbd8HIWJMvMBM1Y+h88ZPTvTiEB9OCbHa6PrETN+3WO8cSe3PufWO7cwoOqzWuY440ZZqSM="
|
||||||
|
|
||||||
matrix:
|
matrix:
|
||||||
# =======================================================
|
# =======================================================
|
||||||
# TESTCOV Build
|
# TESTCOV Build
|
||||||
|
@ -172,10 +171,10 @@ install:
|
||||||
- until sudo apt-get -qq install libstdc++-4.8-dev; do echo retry; done
|
- until sudo apt-get -qq install libstdc++-4.8-dev; do echo retry; done
|
||||||
- if [[ $CMAKE_CXX_COMPILER == g++-4.8 ]]; then until sudo apt-get -qq install g++-4.8; do echo retry; done fi
|
- if [[ $CMAKE_CXX_COMPILER == g++-4.8 ]]; then until sudo apt-get -qq install g++-4.8; do echo retry; done fi
|
||||||
- if [[ $CMAKE_CXX_COMPILER == clang++-3.3 ]]; then until sudo apt-get -qq install clang-3.3; do echo retry; done fi
|
- if [[ $CMAKE_CXX_COMPILER == clang++-3.3 ]]; then until sudo apt-get -qq install clang-3.3; do echo retry; done fi
|
||||||
- if [[ $LEANREPO == BLESSED && $MEMCHECK == TRUE ]]; then
|
- if [[ $REPO == BLESSED && $MEMCHECK == TRUE ]]; then
|
||||||
sudo apt-get -qq install valgrind;
|
sudo apt-get -qq install valgrind;
|
||||||
fi
|
fi
|
||||||
- if [[ $LEANREPO == BLESSED && ($UPLOAD || $BUILD_DOXYGEN == TRUE) ]]; then
|
- if [[ $REPO == BLESSED && ($UPLOAD || $BUILD_DOXYGEN == TRUE) ]]; then
|
||||||
sudo apt-get -qq install python python-pip;
|
sudo apt-get -qq install python python-pip;
|
||||||
sudo pip install dropbox;
|
sudo pip install dropbox;
|
||||||
fi
|
fi
|
||||||
|
@ -189,7 +188,7 @@ install:
|
||||||
fi
|
fi
|
||||||
|
|
||||||
before_script:
|
before_script:
|
||||||
- if [[ $LEANREPO == BLESSED && $TRIGGER_OSX == TRUE ]]; then
|
- if [[ $REPO == BLESSED && $TRIGGER_OSX == TRUE ]]; then
|
||||||
MSG=`git log --pretty=oneline --abbrev-commit -n 1 | cut -d ' ' -f 2-`;
|
MSG=`git log --pretty=oneline --abbrev-commit -n 1 | cut -d ' ' -f 2-`;
|
||||||
cp .travis.yml /tmp/.travis.temp.yml;
|
cp .travis.yml /tmp/.travis.temp.yml;
|
||||||
cp .travis.osx.yml .travis.yml;
|
cp .travis.osx.yml .travis.yml;
|
||||||
|
@ -201,7 +200,7 @@ before_script:
|
||||||
mv /tmp/.travis.temp.yml .travis.yml;
|
mv /tmp/.travis.temp.yml .travis.yml;
|
||||||
git reset --hard HEAD~;
|
git reset --hard HEAD~;
|
||||||
fi
|
fi
|
||||||
- if [[ $LEANREPO == BLESSED && $TRIGGER_WINDOWS == TRUE ]]; then
|
- if [[ $REPO == BLESSED && $TRIGGER_WINDOWS == TRUE ]]; then
|
||||||
MSG=`git log --pretty=oneline --abbrev-commit -n 1 | cut -d ' ' -f 2-`;
|
MSG=`git log --pretty=oneline --abbrev-commit -n 1 | cut -d ' ' -f 2-`;
|
||||||
cp .travis.yml /tmp/.travis.temp.yml;
|
cp .travis.yml /tmp/.travis.temp.yml;
|
||||||
cp .travis.windows.yml .travis.yml;
|
cp .travis.windows.yml .travis.yml;
|
||||||
|
@ -255,20 +254,20 @@ script:
|
||||||
|
|
||||||
after_script:
|
after_script:
|
||||||
- cd build
|
- cd build
|
||||||
- if [[ $LEANREPO == BLESSED && $TESTCOV == ON ]]; then
|
- if [[ $REPO == BLESSED && $TESTCOV == ON ]]; then
|
||||||
ctest -D ExperimentalCoverage;
|
ctest -D ExperimentalCoverage;
|
||||||
ninja cov;
|
ninja cov;
|
||||||
npm install coveralls --save;
|
npm install coveralls --save;
|
||||||
cat coverage.info.cleaned | ./node_modules/coveralls/bin/coveralls.js;
|
cat coverage.info.cleaned | ./node_modules/coveralls/bin/coveralls.js;
|
||||||
fi
|
fi
|
||||||
- if [[ $LEANREPO == BLESSED && $MEMCHECK == TRUE ]]; then
|
- if [[ $REPO == BLESSED && $MEMCHECK == TRUE ]]; then
|
||||||
MEMCHECK_SUPP=`readlink -f ../src/memcheck.supp`;
|
MEMCHECK_SUPP=`readlink -f ../src/memcheck.supp`;
|
||||||
CONFIG_FILE=DartConfiguration.tcl;
|
CONFIG_FILE=DartConfiguration.tcl;
|
||||||
sed -i "s,^MemoryCheckSuppressionFile:\W*$,MemoryCheckSuppressionFile:$MEMCHECK_SUPP," $CONFIG_FILE;
|
sed -i "s,^MemoryCheckSuppressionFile:\W*$,MemoryCheckSuppressionFile:$MEMCHECK_SUPP," $CONFIG_FILE;
|
||||||
ulimit -s unlimited;
|
ulimit -s unlimited;
|
||||||
yes "C" | ctest -D ExperimentalMemCheck -VV -I $MEMCHECK_RANGE | ../script/demangle_cpptype.py;
|
yes "C" | ctest -D ExperimentalMemCheck -VV -I $MEMCHECK_RANGE | ../script/demangle_cpptype.py;
|
||||||
fi
|
fi
|
||||||
- if [[ $LEANREPO == BLESSED && $PUSH_TO_CDASH == TRUE ]]; then
|
- if [[ $REPO == BLESSED && $PUSH_TO_CDASH == TRUE ]]; then
|
||||||
GIT_COMMIT=`git log --oneline -n 1 | cut -d ' ' -f 1`;
|
GIT_COMMIT=`git log --oneline -n 1 | cut -d ' ' -f 1`;
|
||||||
GIT_SUBJECT=`git log --oneline -n 1 | cut -d ' ' -f 2-`;
|
GIT_SUBJECT=`git log --oneline -n 1 | cut -d ' ' -f 2-`;
|
||||||
GIT_SUBJECT=${GIT_SUBJECT//\"/\\\"};
|
GIT_SUBJECT=${GIT_SUBJECT//\"/\\\"};
|
||||||
|
@ -278,11 +277,11 @@ after_script:
|
||||||
find Testing \( -name "LastTest_*.log" -o -name "LastDynamicAnalysis_*.log" \) -exec sh -c 'TMP=`mktemp /tmp/ctesttmp_XXXX`; ../script/demangle_cpptype.py {} > $TMP; mv -v $TMP {}' ";";
|
find Testing \( -name "LastTest_*.log" -o -name "LastDynamicAnalysis_*.log" \) -exec sh -c 'TMP=`mktemp /tmp/ctesttmp_XXXX`; ../script/demangle_cpptype.py {} > $TMP; mv -v $TMP {}' ";";
|
||||||
ctest -D ExperimentalSubmit;
|
ctest -D ExperimentalSubmit;
|
||||||
fi
|
fi
|
||||||
- if [[ $LEANREPO == BLESSED && $PACKAGE == TRUE ]]; then
|
- if [[ $REPO == BLESSED && $PACKAGE == TRUE ]]; then
|
||||||
make package;
|
make package;
|
||||||
fi
|
fi
|
||||||
- cd ..
|
- cd ..
|
||||||
- if [[ $LEANREPO == BLESSED && $BUILD_DOXYGEN == TRUE ]]; then
|
- if [[ $REPO == BLESSED && $BUILD_DOXYGEN == TRUE ]]; then
|
||||||
sudo apt-get -qq install graphviz doxygen parallel;
|
sudo apt-get -qq install graphviz doxygen parallel;
|
||||||
script/doxygen.sh > /dev/null;
|
script/doxygen.sh > /dev/null;
|
||||||
DOXYGEN_DIR=doc/html;
|
DOXYGEN_DIR=doc/html;
|
||||||
|
@ -290,7 +289,7 @@ after_script:
|
||||||
find $DOXYGEN_DIR -type f | split -l 100 - doxygen_files.txt.;
|
find $DOXYGEN_DIR -type f | split -l 100 - doxygen_files.txt.;
|
||||||
ls -1 doxygen_files.txt.* | parallel -u -j 10 ./script/dropbox_upload.py --destpath /Public --dropbox-token ${DROPBOX_KEY} --copylist {};
|
ls -1 doxygen_files.txt.* | parallel -u -j 10 ./script/dropbox_upload.py --destpath /Public --dropbox-token ${DROPBOX_KEY} --copylist {};
|
||||||
fi
|
fi
|
||||||
- if [[ $LEANREPO == BLESSED && $UPLOAD ]]; then
|
- if [[ $REPO == BLESSED && $UPLOAD ]]; then
|
||||||
UPLOAD_DIR=bin;
|
UPLOAD_DIR=bin;
|
||||||
BINARY=lean_${UPLOAD};
|
BINARY=lean_${UPLOAD};
|
||||||
NOW=`TZ='America/Los_Angeles' date +"%Y%m%d_%H%M"`;
|
NOW=`TZ='America/Los_Angeles' date +"%Y%m%d_%H%M"`;
|
||||||
|
@ -302,7 +301,7 @@ after_script:
|
||||||
ARCHIVE_BINARY=${ARCHIVE_BINARY}_tcmalloc;
|
ARCHIVE_BINARY=${ARCHIVE_BINARY}_tcmalloc;
|
||||||
fi;
|
fi;
|
||||||
mkdir ${UPLOAD_DIR};
|
mkdir ${UPLOAD_DIR};
|
||||||
if [[ $LEANREPO == BLESSED && $PACKAGE == TRUE ]]; then
|
if [[ $REPO == BLESSED && $PACKAGE == TRUE ]]; then
|
||||||
cp -v build/lean*.tar.gz ${UPLOAD_DIR}/;
|
cp -v build/lean*.tar.gz ${UPLOAD_DIR}/;
|
||||||
fi;
|
fi;
|
||||||
cp -v build/shell/lean ${UPLOAD_DIR}/${BINARY};
|
cp -v build/shell/lean ${UPLOAD_DIR}/${BINARY};
|
||||||
|
|
Loading…
Reference in a new issue