.gitlab-ci-main.yml

   1 # see https://docs.gitlab.com/ce/ci/yaml/README.html for all available options
   2
   3 # Stages explained
   4 #
   5 # images: Build the images with the bootstrap script
   6 # build_first: Build a few things first to find silly errors (fast job)
   7 #              (don't pay for 35 machines until something compiles)
   8 # build: The main parallel job
   9 #              (keep these to 1hour as we are billed per hour)
  10 # test_only: Tests using the build from prior stages, these typically
  11 #            have an explicit dependency defined to a specific build job,
  12 #            which means that start as soon as the build job finished.
  13 # test_private: Like test_only, but running on private runners
  14 # report: Code coverage reporting
  15
  16 stages:
  17   - images
  18   - build_first
  19   - build
  20   - test_only
  21   - test_private
  22   - report
  23
  24 variables:
  25   # We want to be resilient to runner failures
  26   ARTIFACT_DOWNLOAD_ATTEMPTS: "3"
  27   EXECUTOR_JOB_SECTION_ATTEMPTS: "3"
  28   GET_SOURCES_ATTEMPTS: "3"
  29   RESTORE_CACHE_ATTEMPTS: "3"
  30   #
  31   GIT_STRATEGY: fetch
  32   GIT_DEPTH: "3"
  33   #
  34   # we run autobuild.py inside a samba CI docker image located on gitlab's registry
  35   # overwrite this variable if you want use your own image registry.
  36   #
  37   # Or better ask for access to the shared development repository, see
  38   # https://wiki.samba.org/index.php/Samba_CI_on_gitlab#Getting_Access
  39   #
  40   SAMBA_CI_CONTAINER_REGISTRY: registry.gitlab.com/samba-team/devel/samba
  41   #
  42   # Set this to the contents of bootstrap/sha1sum.txt
  43   # which is generated by bootstrap/template.py --render
  44   #
  45   SAMBA_CI_CONTAINER_TAG: d849801e805f8772b78251d07a28eb332c24660
  46   #
  47   # We use the ubuntu1804 image as default as
  48   # it matches what we have on sn-devel-184.
  49   #
  50   SAMBA_CI_CONTAINER_IMAGE: ubuntu1804
  51   #
  52   # The following images are available
  53   # Please see the samba-o3 sections at the end of this file!
  54   # We should run that for each available image
  55   #
  56   SAMBA_CI_CONTAINER_IMAGE_ubuntu1804: ubuntu1804
  57   SAMBA_CI_CONTAINER_IMAGE_ubuntu2004: ubuntu2004
  58   SAMBA_CI_CONTAINER_IMAGE_debian9: debian9
  59   SAMBA_CI_CONTAINER_IMAGE_debian10: debian10
  60   SAMBA_CI_CONTAINER_IMAGE_debian11: debian11
  61   SAMBA_CI_CONTAINER_IMAGE_opensuse153: opensuse153
  62   SAMBA_CI_CONTAINER_IMAGE_fedora35: fedora35
  63   SAMBA_CI_CONTAINER_IMAGE_f35mit120: f35mit120
  64   SAMBA_CI_CONTAINER_IMAGE_centos7: centos7
  65   SAMBA_CI_CONTAINER_IMAGE_centos8s: centos8s
  66
  67 include:
  68   # The image creation details are specified in a separate file
  69   # See bootstrap/README.md for details
  70   - 'bootstrap/.gitlab-ci.yml'
  71
  72 .shared_runner_build_image:
  73   extends: .shared_runner_build
  74   variables:
  75     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE}
  76   image: ${SAMBA_CI_CONTAINER_REGISTRY}/samba-ci-${SAMBA_CI_JOB_IMAGE}:${SAMBA_CI_CONTAINER_TAG}
  77
  78 .shared_template:
  79   extends: .shared_runner_build_image
  80   # All Samba jobs are interruptible, this avoids burning CPU when a
  81   # newer branch is pushed.
  82   interruptible: true
  83   timeout: 2h
  84
  85   # Otherwise we run twice, once on push and once on MR
  86   # https://forum.gitlab.com/t/new-rules-syntax-and-detached-pipelines/37292
  87   rules:
  88     - if: $CI_MERGE_REQUEST_ID
  89       when: never
  90     - when: on_success
  91
  92   variables:
  93     AUTOBUILD_JOB_NAME: $CI_JOB_NAME
  94   stage: build
  95   cache:
  96     key: ccache.${CI_JOB_NAME}.${SAMBA_CI_JOB_IMAGE}.${SAMBA_CI_FLAVOR}
  97     paths:
  98       - ccache
  99
 100   # This is overridden in many cases, but ensures none of the other
 101   # main jobs start until and unless this build finishes.  However
 102   # this also ensures we do not download artifacts from any build
 103   # unless we specifically depend on it, saving bandwidth
 104
 105   needs:
 106     - job: samba-def-build
 107       artifacts: false
 108
 109   before_script:
 110     - uname -a
 111     - lsb_release -a
 112     - cat /etc/os-release
 113     - lscpu
 114     - cat /proc/cpuinfo
 115     - mount
 116     - df -h
 117     - cat /proc/swaps
 118     - free -h
 119       # ld will fail if coverage enabled, force link ld to ld.bfd
 120     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then sudo ln -sf $(which ld.bfd) $(which ld); fi
 121       # See bootstrap/.gitlab-ci.yml how to generate a new image
 122     - echo "SAMBA_CI_CONTAINER_REGISTRY[${SAMBA_CI_CONTAINER_REGISTRY}]"
 123     - echo "SAMBA_CI_CONTAINER_TAG[${SAMBA_CI_CONTAINER_TAG}]"
 124     - echo "SAMBA_CI_JOB_IMAGE[${SAMBA_CI_JOB_IMAGE}]"
 125     - echo "CI_JOB_IMAGE[${CI_JOB_IMAGE}]"
 126     - bootstrap/template.py --sha1sum > /tmp/sha1sum-template.txt
 127     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-template.txt
 128     - echo "${SAMBA_CI_CONTAINER_TAG}" > /tmp/sha1sum-tag.txt
 129     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-tag.txt
 130     - diff -u bootstrap/sha1sum.txt /sha1sum.txt
 131     - echo "${CI_COMMIT_SHA} ${CI_COMMIT_TITLE}" > /tmp/commit.txt
 132     - export CCACHE_BASEDIR="${PWD}"
 133     - export CCACHE_DIR="${PWD}/ccache" && mkdir -pv "$CCACHE_DIR"
 134     - export CC="ccache cc"
 135     - export CXX="ccache c++"
 136     - ccache -z -M 500M
 137     - ccache -s
 138   after_script:
 139     - mount
 140     - df -h
 141     - cat /proc/swaps
 142     - free -h
 143     - CCACHE_BASEDIR="${PWD}" CCACHE_DIR="${PWD}/ccache" ccache -s -c
 144   artifacts:
 145     expire_in: 1 week
 146     paths:
 147       - "*.stdout"
 148       - "*.stderr"
 149       - "*.info"
 150       - public
 151       - system-info.txt
 152   retry:
 153     max: 2
 154     when:
 155       - runner_system_failure
 156       - stuck_or_timeout_failure
 157       - api_failure
 158       - runner_unsupported
 159       - stale_schedule
 160       - archived_failure
 161       - scheduler_failure
 162       - data_integrity_failure
 163
 164   script:
 165     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 166     # autobuild name, which means we can define a default template that runs most autobuild jobs
 167     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 168
 169 # Ensure when adding a new job below that you also add it to
 170 # the dependencies for 'pages' below for the code coverage page
 171 # generation.
 172
 173 others:
 174   extends: .shared_template
 175   script:
 176     - script/autobuild.py ldb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/ldb
 177     - script/autobuild.py pidl     $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/pidl
 178     - script/autobuild.py replace  $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/replace
 179     - script/autobuild.py talloc   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/talloc
 180     - script/autobuild.py tdb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tdb
 181     - script/autobuild.py tevent   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tevent
 182     - script/autobuild.py samba-xc $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/samba-xc
 183     - script/autobuild.py docs-xml $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/docs-xml
 184
 185 .shared_template_build_only:
 186   extends: .shared_template
 187   timeout: 2h
 188   needs:
 189   artifacts:
 190     expire_in: 1 week
 191     paths:
 192       - "*.stdout"
 193       - "*.stderr"
 194       - "*.info"
 195       - system-info.txt
 196       - samba-testbase.tar.gz
 197   script:
 198     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 199     # autobuild name, which means we can define a default template that runs most autobuild jobs
 200     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 201     # On success we need to pack everything into an artifacts file
 202     # which needs to be in the git checkout.
 203     # As tar doesn't handle hardlink of read-only files,
 204     # we remember the acls and add write permissions
 205     # before creating the archive. The consumer will apply
 206     # the acls again.
 207     - cp -a /sha1sum.txt /tmp/samba-testbase/image-sha1sum.txt
 208     - cp -a /tmp/commit.txt /tmp/samba-testbase/commit.txt
 209     - ln -s /tmp/samba-testbase/${AUTOBUILD_JOB_NAME}/ /tmp/samba-testbase/build_subdir_link
 210     - pushd /tmp && getfacl -R samba-testbase > samba-testbase.acl.dump && popd
 211     - chmod -R +w /tmp/samba-testbase
 212     - mv /tmp/samba-testbase.acl.dump /tmp/samba-testbase/
 213     - tar cfz samba-testbase.tar.gz /tmp/samba-testbase
 214     - ls -la samba-testbase.tar.gz
 215     - sha1sum samba-testbase.tar.gz
 216
 217 .shared_template_test_only:
 218   extends:
 219     - .shared_template
 220     - .shared_runner_test
 221   stage: test_only
 222   script:
 223     # Print the Kerberos version to check we ended up with the right one
 224     # in the runner. We do not have configure output to recognize it
 225     # otherwise.
 226     - if [ -x "$(command -v krb5-config)" ]; then krb5-config --version; fi
 227     # We unpack the artifacts file created by the .shared_template_build_only
 228     # run we depend on
 229     - ls -la samba-testbase.tar.gz
 230     - sha1sum samba-testbase.tar.gz
 231     - tar xfz samba-testbase.tar.gz -C /
 232     - diff -u /tmp/samba-testbase/image-sha1sum.txt /sha1sum.txt
 233     - diff -u /tmp/samba-testbase/commit.txt /tmp/commit.txt
 234     - mv /tmp/samba-testbase/samba-testbase.acl.dump /tmp/samba-testbase.acl.dump
 235     - pushd /tmp && setfacl --restore=/tmp/samba-testbase.acl.dump && popd
 236     - ls -la /tmp/samba-testbase/
 237     - ls -la /tmp/samba-testbase/build_subdir_link
 238     - ls -la /tmp/samba-testbase/build_subdir_link/
 239     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then find /tmp/samba-testbase/build_subdir_link/ -type d -printf "'%p'\n" | xargs chmod u+w; fi
 240     - ls -la /tmp/samba-testbase/build_subdir_link/
 241     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 242     # autobuild name, which means we can define a default template that runs most autobuild jobs
 243     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --skip-dependencies --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 244
 245 samba-def-build:
 246   extends: .shared_template_build_only
 247   stage: build_first
 248
 249 .needs_samba-def-build:
 250   extends: .shared_template_test_only
 251   needs:
 252     - job: samba-def-build
 253       artifacts: true
 254
 255 samba-mit-build:
 256   extends: .shared_template_build_only
 257   variables:
 258     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 259   stage: build_first
 260
 261 samba-mit120-build:
 262   extends: .shared_template_build_only
 263   variables:
 264     AUTOBUILD_JOB_NAME: samba-mit-build
 265     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_f35mit120}
 266   stage: build_first
 267
 268 .needs_samba-mit-build:
 269   extends: .shared_template_test_only
 270   variables:
 271     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 272   needs:
 273     - job: samba-mit-build
 274       artifacts: true
 275
 276 .needs_samba-mit120-build:
 277   extends: .shared_template_test_only
 278   variables:
 279     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_f35mit120}
 280   needs:
 281     - job: samba-mit120-build
 282       artifacts: true
 283
 284 samba-h5l-build:
 285   extends: .shared_template_build_only
 286
 287 .needs_samba-h5l-build:
 288   extends: .shared_template_test_only
 289   needs:
 290     - job: samba-h5l-build
 291       artifacts: true
 292
 293 samba-nt4-build:
 294   extends: .shared_template_build_only
 295
 296 .needs_samba-nt4-build:
 297   extends: .shared_template_test_only
 298   needs:
 299     - job: samba-nt4-build
 300       artifacts: true
 301
 302 samba-no-opath-build:
 303   extends: .shared_template_build_only
 304
 305 .needs_samba-no-opath-build:
 306   extends: .shared_template_test_only
 307   needs:
 308     - job: samba-no-opath-build
 309       artifacts: true
 310
 311 samba:
 312   extends: .shared_template
 313
 314 samba-mitkrb5:
 315   extends: .shared_template
 316   variables:
 317     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 318
 319 samba-minimal-smbd:
 320   extends: .shared_template
 321
 322 samba-nopython:
 323   extends: .shared_template
 324
 325 samba-admem:
 326   extends: .needs_samba-def-build
 327
 328 samba-ad-dc-2:
 329   extends: .needs_samba-def-build
 330
 331 samba-ad-dc-3:
 332   extends: .needs_samba-def-build
 333
 334 samba-ad-dc-4a:
 335   extends: .needs_samba-def-build
 336
 337 samba-ad-dc-4b:
 338   extends: .needs_samba-def-build
 339
 340 samba-ad-dc-5:
 341   extends: .needs_samba-def-build
 342
 343 samba-ad-dc-6:
 344   extends: .needs_samba-def-build
 345
 346 samba-ad-back1:
 347   extends: .needs_samba-def-build
 348
 349 samba-ad-back2:
 350   extends: .needs_samba-def-build
 351
 352 samba-schemaupgrade:
 353   extends: .needs_samba-def-build
 354
 355 samba-libs:
 356   extends: .shared_template
 357
 358 samba-fuzz:
 359   extends: .shared_template
 360   variables:
 361     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 362
 363 ctdb:
 364   extends: .shared_template
 365
 366 samba-ctdb:
 367   extends: .shared_template
 368
 369 samba-ad-dc-ntvfs:
 370   extends: .needs_samba-def-build
 371
 372 samba-admem-mit:
 373   extends: .needs_samba-mit-build
 374
 375 samba-addc-mit-4a:
 376   extends: .needs_samba-mit-build
 377
 378 samba-addc-mit-4b:
 379   extends: .needs_samba-mit-build
 380
 381 # This task is run first to ensure we compile before we start the
 382 # main run as it is the fastest full compile of Samba.
 383 samba-fips:
 384   extends: .shared_template
 385   variables:
 386     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 387
 388 .private_test_only:
 389   extends: .private_runner_test
 390   stage: test_private
 391   rules:
 392       # See above, to avoid a duplicate CI on the MR (these rules override the others)
 393     - if: $CI_MERGE_REQUEST_ID
 394       when: never
 395
 396       # These jobs are only run if the gitlab repo has private runners available.
 397       # To enable private jobs, you must add the following var and value to
 398       # your gitlab repo by navigating to:
 399       # settings -> CI/CD -> Environment variables
 400     - if: $SUPPORT_PRIVATE_TEST == "yes"
 401
 402 .needs_samba-def-build-private:
 403   extends:
 404     - .needs_samba-def-build
 405     - .private_test_only
 406
 407 .needs_samba-mit-build-private:
 408   extends:
 409     - .needs_samba-mit-build
 410     - .private_test_only
 411
 412 .needs_samba-mit120-build-private:
 413   extends:
 414     - .needs_samba-mit120-build
 415     - .private_test_only
 416
 417 .needs_samba-h5l-build-private:
 418   extends:
 419     - .needs_samba-h5l-build
 420     - .private_test_only
 421
 422 .needs_samba-nt4-build-private:
 423   extends:
 424     - .needs_samba-nt4-build
 425     - .private_test_only
 426
 427 .needs_samba-no-opath-build-private:
 428   extends:
 429     - .needs_samba-no-opath-build
 430     - .private_test_only
 431
 432 samba-fileserver:
 433   extends: .needs_samba-h5l-build-private
 434
 435 # This is a full build without the AD DC so we test the build with MIT
 436 # Kerberos from the default system (Ubuntu 18.04 at this stage).
 437 # Runtime behaviour checked via the ktest (static ccache and keytab)
 438 # environment
 439 samba-ktest-mit:
 440  extends: .shared_template
 441
 442 samba-ad-dc-1:
 443   extends: .needs_samba-def-build-private
 444
 445 samba-nt4:
 446   extends: .needs_samba-nt4-build-private
 447
 448 samba-addc-mit-1:
 449   extends: .needs_samba-mit-build-private
 450
 451 samba-addc-mit120:
 452   extends: .needs_samba-mit120-build-private
 453   variables:
 454     AUTOBUILD_JOB_NAME: samba-addc-mit-1
 455
 456 samba-no-opath1:
 457   extends: .needs_samba-no-opath-build-private
 458
 459 samba-no-opath2:
 460   extends: .needs_samba-no-opath-build-private
 461
 462 # 'pages' is a special job which can publish artifacts in `public` dir to gitlab pages
 463 pages:
 464   extends: .shared_runner_build_image
 465   stage: report
 466   dependencies:  # tell gitlab to download artifacts for these jobs
 467     - others
 468     - samba
 469     - samba-mitkrb5
 470     - samba-admem
 471     - samba-ad-dc-2
 472     - samba-ad-dc-3
 473     - samba-ad-dc-4a
 474     - samba-ad-dc-4b
 475     - samba-ad-dc-5
 476     - samba-ad-dc-6
 477     - samba-libs
 478     - samba-minimal-smbd
 479     - samba-nopython
 480     - samba-fuzz
 481     # - ctdb  # TODO
 482     - samba-ctdb
 483     - samba-ad-dc-ntvfs
 484     - samba-admem-mit
 485     - samba-addc-mit-4a
 486     - samba-addc-mit-4b
 487     - samba-ad-back1
 488     - samba-ad-back2
 489     - samba-fileserver
 490     - samba-ad-dc-1
 491     - samba-nt4
 492     - samba-schemaupgrade
 493     - samba-addc-mit-1
 494     - samba-fips
 495     - samba-no-opath1
 496     - samba-no-opath2
 497     - ubuntu1804-samba-o3
 498   script:
 499     - ls -la *.info
 500     - ./configure.developer
 501     - make -j
 502     - ls -la *.info
 503     - lcov $(ls *.info | xargs -I{} echo -n "-a {} ") -o all.info
 504     - ls -la *.info
 505     - genhtml all.info --ignore-errors source --output-directory public --prefix=$(pwd) --title "coverage report for $CI_COMMIT_REF_NAME $CI_COMMIT_SHORT_SHA"
 506   artifacts:
 507     expire_in: 30 days
 508     paths:
 509       - public
 510   only:
 511     variables:
 512       - $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == "--enable-coverage"
 513
 514 # Coverity Scan
 515 coverity:
 516   extends: .shared_runner_build_image
 517   variables:
 518     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 519   stage: build
 520   script:
 521     - wget https://scan.coverity.com/download/linux64 --post-data "token=$COVERITY_SCAN_TOKEN&project=$COVERITY_SCAN_PROJECT_NAME" -O /tmp/coverity_tool.tgz
 522     - tar xf /tmp/coverity_tool.tgz
 523     - ./configure.developer --with-cluster-support --with-system-mitkrb5 --with-experimental-mit-ad-dc
 524     - cov-analysis-linux64-*/bin/cov-build --dir cov-int make -j$(nproc)
 525     - tar czf cov-int.tar.gz cov-int
 526     - curl
 527       --form token=$COVERITY_SCAN_TOKEN
 528       --form email=$COVERITY_SCAN_EMAIL
 529       --form file=@cov-int.tar.gz
 530       --form version="`git describe --tags`"
 531       --form description="CI build"
 532       https://scan.coverity.com/builds?project=$COVERITY_SCAN_PROJECT_NAME
 533   only:
 534     refs:
 535       - master
 536       - schedules
 537     variables:
 538       - $COVERITY_SCAN_TOKEN != null
 539       - $COVERITY_SCAN_PROJECT_NAME != null
 540       - $COVERITY_SCAN_EMAIL != null
 541   artifacts:
 542     expire_in: 1 week
 543     when: on_failure
 544     paths:
 545       - cov-int/*.txt
 546
 547 #
 548 # We build samba-o3 on all supported distributions
 549 #
 550
 551 # This job, which matches the main CI, needs to still do coverage so
 552 # we show the coverage on the "none" environment tests
 553 #
 554 # We want --enable-coverage specified here otherwise we will have a
 555 # different set of build options on the coverage build and can fail
 556 # when -O3 gets combined with --enable-coverage in the scheduled
 557 # builds.
 558
 559 ubuntu1804-samba-o3:
 560   extends: .shared_template
 561   variables:
 562     AUTOBUILD_JOB_NAME: samba-o3
 563     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu1804}
 564     SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE: "--enable-coverage"
 565   rules:
 566     # See above, to avoid a duplicate CI on the MR (these rules override the others)
 567     - if: $CI_MERGE_REQUEST_ID
 568       when: never
 569     # do not run o3 builds (which run a lot of VMs) if told not to
 570     # (this uses the same variable as autobuild.py)
 571     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
 572       when: never
 573
 574 # All other jobs do not want code coverage.
 575 .samba-o3-template:
 576   extends: .shared_template
 577   variables:
 578     AUTOBUILD_JOB_NAME: samba-o3
 579   rules:
 580     # See above, to avoid a duplicate CI on the MR (these rules override the others)
 581     - if: $CI_MERGE_REQUEST_ID
 582       when: never
 583     # do not run o3 builds (which run a lot of VMs) if told not to
 584     # (this uses the same variable as autobuild.py)
 585     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
 586       when: never
 587     # do not run o3 for coverage since they are using different images
 588     - if: $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == ""
 589
 590 ubuntu2004-samba-o3:
 591   extends: .samba-o3-template
 592   variables:
 593     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 594
 595 debian10-samba-o3:
 596   extends: .samba-o3-template
 597   variables:
 598     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian10}
 599
 600 debian11-samba-o3:
 601   extends: .samba-o3-template
 602   variables:
 603     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian11}
 604
 605 opensuse153-samba-o3:
 606   extends: .samba-o3-template
 607   variables:
 608     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse153}
 609
 610 centos7-samba-o3:
 611   extends: .samba-o3-template
 612   variables:
 613     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos7}
 614     # Git on CentOS doesn't support shallow git cloning
 615     GIT_DEPTH: ""
 616     # We need a newer GnuTLS version on CentOS7
 617     PKG_CONFIG_PATH: "/usr/lib64/compat-gnutls37/pkgconfig:/usr/lib64/compat-nettle32/pkgconfig"
 618
 619 centos8s-samba-o3:
 620   extends: .samba-o3-template
 621   variables:
 622     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos8s}
 623
 624 fedora35-samba-o3:
 625   extends: .samba-o3-template
 626   variables:
 627     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 628
 629 #
 630 # Keep the samba-o3 sections at the end ...
 631 #