.gitlab-ci-main.yml

   1 # see https://docs.gitlab.com/ce/ci/yaml/README.html for all available options
   2
   3 # Stages explained
   4 #
   5 # images: Build the images with the bootstrap script
   6 # build_first: Build a few things first to find silly errors (fast job)
   7 #              (don't pay for 35 machines until something compiles)
   8 # build: The main parallel job
   9 #              (keep these to 1hour as we are billed per hour)
  10 # test_only: Tests using the build from prior stages, these typically
  11 #            have an explicit dependency defined to a specific build job,
  12 #            which means that start as soon as the build job finished.
  13 # test_private: Like test_only, but running on private runners
  14 # report: Code coverage reporting
  15
  16 stages:
  17   - images
  18   - build_first
  19   - build
  20   - test_only
  21   - test_private
  22   - report
  23
  24 variables:
  25   # We want to be resilient to runner failures
  26   ARTIFACT_DOWNLOAD_ATTEMPTS: "3"
  27   EXECUTOR_JOB_SECTION_ATTEMPTS: "3"
  28   GET_SOURCES_ATTEMPTS: "3"
  29   RESTORE_CACHE_ATTEMPTS: "3"
  30   #
  31   GIT_STRATEGY: fetch
  32   GIT_DEPTH: "3"
  33   #
  34   # we run autobuild.py inside a samba CI docker image located on gitlab's registry
  35   # overwrite this variable if you want use your own image registry.
  36   #
  37   # Or better ask for access to the shared development repository, see
  38   # https://wiki.samba.org/index.php/Samba_CI_on_gitlab#Getting_Access
  39   #
  40   SAMBA_CI_CONTAINER_REGISTRY: registry.gitlab.com/samba-team/devel/samba
  41   #
  42   # Set this to the contents of bootstrap/sha1sum.txt
  43   # which is generated by bootstrap/template.py --render
  44   #
  45   SAMBA_CI_CONTAINER_TAG: bac18584d47ffc1acb5a697d83f2232598b6afbf
  46   #
  47   # We use the ubuntu1804 image as default as
  48   # it matches what we have on sn-devel-184.
  49   #
  50   SAMBA_CI_CONTAINER_IMAGE: ubuntu1804
  51   #
  52   # The following images are available
  53   # Please see the samba-o3 sections at the end of this file!
  54   # We should run that for each available image
  55   #
  56   SAMBA_CI_CONTAINER_IMAGE_ubuntu1604: ubuntu1604
  57   SAMBA_CI_CONTAINER_IMAGE_ubuntu1804: ubuntu1804
  58   SAMBA_CI_CONTAINER_IMAGE_ubuntu2004: ubuntu2004
  59   SAMBA_CI_CONTAINER_IMAGE_debian9: debian9
  60   SAMBA_CI_CONTAINER_IMAGE_debian10: debian10
  61   SAMBA_CI_CONTAINER_IMAGE_debian11: debian11
  62   SAMBA_CI_CONTAINER_IMAGE_opensuse151: opensuse151
  63   SAMBA_CI_CONTAINER_IMAGE_opensuse152: opensuse152
  64   SAMBA_CI_CONTAINER_IMAGE_fedora34: fedora34
  65   SAMBA_CI_CONTAINER_IMAGE_fedora35: fedora35
  66   SAMBA_CI_CONTAINER_IMAGE_centos7: centos7
  67   SAMBA_CI_CONTAINER_IMAGE_centos8s: centos8s
  68
  69 include:
  70   # The image creation details are specified in a separate file
  71   # See bootstrap/README.md for details
  72   - 'bootstrap/.gitlab-ci.yml'
  73
  74 .shared_runner_build_image:
  75   extends: .shared_runner_build
  76   variables:
  77     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE}
  78   image: ${SAMBA_CI_CONTAINER_REGISTRY}/samba-ci-${SAMBA_CI_JOB_IMAGE}:${SAMBA_CI_CONTAINER_TAG}
  79
  80 .shared_template:
  81   extends: .shared_runner_build_image
  82   # All Samba jobs are interruptible, this avoids burning CPU when a
  83   # newer branch is pushed.
  84   interruptible: true
  85   timeout: 2h
  86
  87   # Otherwise we run twice, once on push and once on MR
  88   # https://forum.gitlab.com/t/new-rules-syntax-and-detached-pipelines/37292
  89   rules:
  90     - if: $CI_MERGE_REQUEST_ID
  91       when: never
  92     - when: on_success
  93
  94   variables:
  95     AUTOBUILD_JOB_NAME: $CI_JOB_NAME
  96   stage: build
  97   cache:
  98     key: ccache.${CI_JOB_NAME}.${SAMBA_CI_JOB_IMAGE}.${SAMBA_CI_FLAVOR}
  99     paths:
 100       - ccache
 101
 102   # This is overridden in many cases, but ensures none of the other
 103   # main jobs start until and unless this build finishes.  However
 104   # this also ensures we do not download artifacts from any build
 105   # unless we specifically depend on it, saving bandwidth
 106
 107   needs:
 108     - job: samba-def-build
 109       artifacts: false
 110
 111   before_script:
 112     - uname -a
 113     - lsb_release -a
 114     - cat /etc/os-release
 115     - lscpu
 116     - cat /proc/cpuinfo
 117     - mount
 118     - df -h
 119     - cat /proc/swaps
 120     - free -h
 121       # ld will fail if coverage enabled, force link ld to ld.bfd
 122     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then sudo ln -sf $(which ld.bfd) $(which ld); fi
 123       # See bootstrap/.gitlab-ci.yml how to generate a new image
 124     - echo "SAMBA_CI_CONTAINER_REGISTRY[${SAMBA_CI_CONTAINER_REGISTRY}]"
 125     - echo "SAMBA_CI_CONTAINER_TAG[${SAMBA_CI_CONTAINER_TAG}]"
 126     - echo "SAMBA_CI_JOB_IMAGE[${SAMBA_CI_JOB_IMAGE}]"
 127     - echo "CI_JOB_IMAGE[${CI_JOB_IMAGE}]"
 128     - bootstrap/template.py --sha1sum > /tmp/sha1sum-template.txt
 129     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-template.txt
 130     - echo "${SAMBA_CI_CONTAINER_TAG}" > /tmp/sha1sum-tag.txt
 131     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-tag.txt
 132     - diff -u bootstrap/sha1sum.txt /sha1sum.txt
 133     - echo "${CI_COMMIT_SHA} ${CI_COMMIT_TITLE}" > /tmp/commit.txt
 134     - export CCACHE_BASEDIR="${PWD}"
 135     - export CCACHE_DIR="${PWD}/ccache" && mkdir -pv "$CCACHE_DIR"
 136     - export CC="ccache cc"
 137     - export CXX="ccache c++"
 138     - ccache -z -M 500M
 139     - ccache -s
 140   after_script:
 141     - mount
 142     - df -h
 143     - cat /proc/swaps
 144     - free -h
 145     - CCACHE_BASEDIR="${PWD}" CCACHE_DIR="${PWD}/ccache" ccache -s -c
 146   artifacts:
 147     expire_in: 1 week
 148     paths:
 149       - "*.stdout"
 150       - "*.stderr"
 151       - "*.info"
 152       - public
 153       - system-info.txt
 154   retry:
 155     max: 2
 156     when:
 157       - runner_system_failure
 158       - stuck_or_timeout_failure
 159       - api_failure
 160       - runner_unsupported
 161       - stale_schedule
 162       - archived_failure
 163       - scheduler_failure
 164       - data_integrity_failure
 165
 166   script:
 167     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 168     # autobuild name, which means we can define a default template that runs most autobuild jobs
 169     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 170
 171 # Ensure when adding a new job below that you also add it to
 172 # the dependencies for 'pages' below for the code coverage page
 173 # generation.
 174
 175 others:
 176   extends: .shared_template
 177   script:
 178     - script/autobuild.py ldb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/ldb
 179     - script/autobuild.py pidl     $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/pidl
 180     - script/autobuild.py replace  $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/replace
 181     - script/autobuild.py talloc   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/talloc
 182     - script/autobuild.py tdb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tdb
 183     - script/autobuild.py tevent   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tevent
 184     - script/autobuild.py samba-xc $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/samba-xc
 185     - script/autobuild.py docs-xml $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/docs-xml
 186
 187 .shared_template_build_only:
 188   extends: .shared_template
 189   timeout: 2h
 190   needs:
 191   artifacts:
 192     expire_in: 1 week
 193     paths:
 194       - "*.stdout"
 195       - "*.stderr"
 196       - "*.info"
 197       - system-info.txt
 198       - samba-testbase.tar.gz
 199   script:
 200     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 201     # autobuild name, which means we can define a default template that runs most autobuild jobs
 202     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 203     # On success we need to pack everything into an artifacts file
 204     # which needs to be in the git checkout.
 205     # As tar doesn't handle hardlink of read-only files,
 206     # we remember the acls and add write permissions
 207     # before creating the archive. The consumer will apply
 208     # the acls again.
 209     - cp -a /sha1sum.txt /tmp/samba-testbase/image-sha1sum.txt
 210     - cp -a /tmp/commit.txt /tmp/samba-testbase/commit.txt
 211     - ln -s /tmp/samba-testbase/${AUTOBUILD_JOB_NAME}/ /tmp/samba-testbase/build_subdir_link
 212     - pushd /tmp && getfacl -R samba-testbase > samba-testbase.acl.dump && popd
 213     - chmod -R +w /tmp/samba-testbase
 214     - mv /tmp/samba-testbase.acl.dump /tmp/samba-testbase/
 215     - tar cfz samba-testbase.tar.gz /tmp/samba-testbase
 216     - ls -la samba-testbase.tar.gz
 217     - sha1sum samba-testbase.tar.gz
 218
 219 .shared_template_test_only:
 220   extends:
 221     - .shared_template
 222     - .shared_runner_test
 223   stage: test_only
 224   script:
 225     # Print the Kerberos version to check we ended up with the right one
 226     # in the runner. We do not have configure output to recognize it
 227     # otherwise.
 228     - if [ -x "$(command -v krb5-config)" ]; then krb5-config --version; fi
 229     # We unpack the artifacts file created by the .shared_template_build_only
 230     # run we depend on
 231     - ls -la samba-testbase.tar.gz
 232     - sha1sum samba-testbase.tar.gz
 233     - tar xfz samba-testbase.tar.gz -C /
 234     - diff -u /tmp/samba-testbase/image-sha1sum.txt /sha1sum.txt
 235     - diff -u /tmp/samba-testbase/commit.txt /tmp/commit.txt
 236     - mv /tmp/samba-testbase/samba-testbase.acl.dump /tmp/samba-testbase.acl.dump
 237     - pushd /tmp && setfacl --restore=/tmp/samba-testbase.acl.dump && popd
 238     - ls -la /tmp/samba-testbase/
 239     - ls -la /tmp/samba-testbase/build_subdir_link
 240     - ls -la /tmp/samba-testbase/build_subdir_link/
 241     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then find /tmp/samba-testbase/build_subdir_link/ -type d -printf "'%p'\n" | xargs chmod u+w; fi
 242     - ls -la /tmp/samba-testbase/build_subdir_link/
 243     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 244     # autobuild name, which means we can define a default template that runs most autobuild jobs
 245     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --skip-dependencies --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
 246
 247 samba-def-build:
 248   extends: .shared_template_build_only
 249   stage: build_first
 250
 251 .needs_samba-def-build:
 252   extends: .shared_template_test_only
 253   needs:
 254     - job: samba-def-build
 255       artifacts: true
 256
 257 samba-mit-build:
 258   extends: .shared_template_build_only
 259   variables:
 260     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 261   stage: build_first
 262
 263 .needs_samba-mit-build:
 264   extends: .shared_template_test_only
 265   variables:
 266     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 267   needs:
 268     - job: samba-mit-build
 269       artifacts: true
 270
 271 samba-h5l-build:
 272   extends: .shared_template_build_only
 273
 274 .needs_samba-h5l-build:
 275   extends: .shared_template_test_only
 276   needs:
 277     - job: samba-h5l-build
 278       artifacts: true
 279
 280 samba-nt4-build:
 281   extends: .shared_template_build_only
 282
 283 .needs_samba-nt4-build:
 284   extends: .shared_template_test_only
 285   needs:
 286     - job: samba-nt4-build
 287       artifacts: true
 288
 289 samba-no-opath-build:
 290   extends: .shared_template_build_only
 291
 292 .needs_samba-no-opath-build:
 293   extends: .shared_template_test_only
 294   needs:
 295     - job: samba-no-opath-build
 296       artifacts: true
 297
 298 samba:
 299   extends: .shared_template
 300
 301 samba-mitkrb5:
 302   extends: .shared_template
 303   variables:
 304     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 305
 306 samba-minimal-smbd:
 307   extends: .shared_template
 308
 309 samba-nopython:
 310   extends: .shared_template
 311
 312 samba-admem:
 313   extends: .needs_samba-def-build
 314
 315 samba-ad-dc-2:
 316   extends: .needs_samba-def-build
 317
 318 samba-ad-dc-3:
 319   extends: .needs_samba-def-build
 320
 321 samba-ad-dc-4a:
 322   extends: .needs_samba-def-build
 323
 324 samba-ad-dc-4b:
 325   extends: .needs_samba-def-build
 326
 327 samba-ad-dc-5:
 328   extends: .needs_samba-def-build
 329
 330 samba-ad-dc-6:
 331   extends: .needs_samba-def-build
 332
 333 samba-ad-back1:
 334   extends: .needs_samba-def-build
 335
 336 samba-ad-back2:
 337   extends: .needs_samba-def-build
 338
 339 samba-schemaupgrade:
 340   extends: .needs_samba-def-build
 341
 342 samba-libs:
 343   extends: .shared_template
 344
 345 samba-fuzz:
 346   extends: .shared_template
 347   variables:
 348     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 349
 350 ctdb:
 351   extends: .shared_template
 352
 353 samba-ctdb:
 354   extends: .shared_template
 355
 356 samba-ad-dc-ntvfs:
 357   extends: .needs_samba-def-build
 358
 359 samba-admem-mit:
 360   extends: .needs_samba-mit-build
 361
 362 samba-addc-mit-4a:
 363   extends: .needs_samba-mit-build
 364
 365 samba-addc-mit-4b:
 366   extends: .needs_samba-mit-build
 367
 368 # This task is run first to ensure we compile before we start the
 369 # main run as it is the fastest full compile of Samba.
 370 samba-fips:
 371   extends: .shared_template
 372   variables:
 373     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 374
 375 .private_test_only:
 376   extends: .private_runner_test
 377   stage: test_private
 378   rules:
 379       # See above, to avoid a duplicate CI on the MR (these rules override the others)
 380     - if: $CI_MERGE_REQUEST_ID
 381       when: never
 382
 383       # These jobs are only run if the gitlab repo has private runners available.
 384       # To enable private jobs, you must add the following var and value to
 385       # your gitlab repo by navigating to:
 386       # settings -> CI/CD -> Environment variables
 387     - if: $SUPPORT_PRIVATE_TEST == "yes"
 388
 389 .needs_samba-def-build-private:
 390   extends:
 391     - .needs_samba-def-build
 392     - .private_test_only
 393
 394 .needs_samba-mit-build-private:
 395   extends:
 396     - .needs_samba-mit-build
 397     - .private_test_only
 398
 399 .needs_samba-h5l-build-private:
 400   extends:
 401     - .needs_samba-h5l-build
 402     - .private_test_only
 403
 404 .needs_samba-nt4-build-private:
 405   extends:
 406     - .needs_samba-nt4-build
 407     - .private_test_only
 408
 409 .needs_samba-no-opath-build-private:
 410   extends:
 411     - .needs_samba-no-opath-build
 412     - .private_test_only
 413
 414 samba-fileserver:
 415   extends: .needs_samba-h5l-build-private
 416
 417 # This is a full build without the AD DC so we test the build with MIT
 418 # Kerberos from the default system (Ubuntu 18.04 at this stage).
 419 # Runtime behaviour checked via the ktest (static ccache and keytab)
 420 # environment
 421 samba-ktest-mit:
 422  extends: .shared_template
 423
 424 samba-ad-dc-1:
 425   extends: .needs_samba-def-build-private
 426
 427 samba-nt4:
 428   extends: .needs_samba-nt4-build-private
 429
 430 samba-addc-mit-1:
 431   extends: .needs_samba-mit-build-private
 432
 433 samba-no-opath1:
 434   extends: .needs_samba-no-opath-build-private
 435
 436 samba-no-opath2:
 437   extends: .needs_samba-no-opath-build-private
 438
 439 # 'pages' is a special job which can publish artifacts in `public` dir to gitlab pages
 440 pages:
 441   extends: .shared_runner_build_image
 442   stage: report
 443   dependencies:  # tell gitlab to download artifacts for these jobs
 444     - others
 445     - samba
 446     - samba-mitkrb5
 447     - samba-admem
 448     - samba-ad-dc-2
 449     - samba-ad-dc-3
 450     - samba-ad-dc-4a
 451     - samba-ad-dc-4b
 452     - samba-ad-dc-5
 453     - samba-ad-dc-6
 454     - samba-libs
 455     - samba-minimal-smbd
 456     - samba-nopython
 457     - samba-fuzz
 458     # - ctdb  # TODO
 459     - samba-ctdb
 460     - samba-ad-dc-ntvfs
 461     - samba-admem-mit
 462     - samba-addc-mit-4a
 463     - samba-addc-mit-4b
 464     - samba-ad-back1
 465     - samba-ad-back2
 466     - samba-fileserver
 467     - samba-ad-dc-1
 468     - samba-nt4
 469     - samba-schemaupgrade
 470     - samba-addc-mit-1
 471     - samba-fips
 472     - samba-no-opath1
 473     - samba-no-opath2
 474     - ubuntu1804-samba-o3
 475   script:
 476     - ls -la *.info
 477     - ./configure.developer
 478     - make -j
 479     - ls -la *.info
 480     - lcov $(ls *.info | xargs -I{} echo -n "-a {} ") -o all.info
 481     - ls -la *.info
 482     - genhtml all.info --ignore-errors source --output-directory public --prefix=$(pwd) --title "coverage report for $CI_COMMIT_REF_NAME $CI_COMMIT_SHORT_SHA"
 483   artifacts:
 484     expire_in: 30 days
 485     paths:
 486       - public
 487   only:
 488     variables:
 489       - $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == "--enable-coverage"
 490
 491 # Coverity Scan
 492 coverity:
 493   extends: .shared_runner_build_image
 494   variables:
 495     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora34}
 496   stage: build
 497   script:
 498     - wget https://scan.coverity.com/download/linux64 --post-data "token=$COVERITY_SCAN_TOKEN&project=$COVERITY_SCAN_PROJECT_NAME" -O /tmp/coverity_tool.tgz
 499     - tar xf /tmp/coverity_tool.tgz
 500     - ./configure.developer --with-cluster-support --with-system-mitkrb5 --with-experimental-mit-ad-dc
 501     - cov-analysis-linux64-*/bin/cov-build --dir cov-int make -j$(nproc)
 502     - tar czf cov-int.tar.gz cov-int
 503     - curl
 504       --form token=$COVERITY_SCAN_TOKEN
 505       --form email=$COVERITY_SCAN_EMAIL
 506       --form file=@cov-int.tar.gz
 507       --form version="`git describe --tags`"
 508       --form description="CI build"
 509       https://scan.coverity.com/builds?project=$COVERITY_SCAN_PROJECT_NAME
 510   only:
 511     refs:
 512       - master
 513       - schedules
 514     variables:
 515       - $COVERITY_SCAN_TOKEN != null
 516       - $COVERITY_SCAN_PROJECT_NAME != null
 517       - $COVERITY_SCAN_EMAIL != null
 518   artifacts:
 519     expire_in: 1 week
 520     when: on_failure
 521     paths:
 522       - cov-int/*.txt
 523
 524 #
 525 # We build samba-o3 on all supported distributions
 526 #
 527
 528 # This job, which matches the main CI, needs to still do coverage so
 529 # we show the coverage on the "none" environment tests
 530 #
 531 # We want --enable-coverage specified here otherwise we will have a
 532 # different set of build options on the coverage build and can fail
 533 # when -O3 gets combined with --enable-coverage in the scheduled
 534 # builds.
 535
 536 ubuntu1804-samba-o3:
 537   extends: .shared_template
 538   variables:
 539     AUTOBUILD_JOB_NAME: samba-o3
 540     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu1804}
 541     SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE: "--enable-coverage"
 542   rules:
 543     # See above, to avoid a duplicate CI on the MR (these rules override the others)
 544     - if: $CI_MERGE_REQUEST_ID
 545       when: never
 546     # do not run o3 builds (which run a lot of VMs) if told not to
 547     # (this uses the same variable as autobuild.py)
 548     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
 549       when: never
 550
 551 # All other jobs do not want code coverage.
 552 .samba-o3-template:
 553   extends: .shared_template
 554   variables:
 555     AUTOBUILD_JOB_NAME: samba-o3
 556   rules:
 557     # See above, to avoid a duplicate CI on the MR (these rules override the others)
 558     - if: $CI_MERGE_REQUEST_ID
 559       when: never
 560     # do not run o3 builds (which run a lot of VMs) if told not to
 561     # (this uses the same variable as autobuild.py)
 562     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
 563       when: never
 564     # do not run o3 for coverage since they are using different images
 565     - if: $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == ""
 566
 567 ubuntu2004-samba-o3:
 568   extends: .samba-o3-template
 569   variables:
 570     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 571
 572 debian10-samba-o3:
 573   extends: .samba-o3-template
 574   variables:
 575     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian10}
 576
 577 debian11-samba-o3:
 578   extends: .samba-o3-template
 579   variables:
 580     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian11}
 581
 582 opensuse151-samba-o3:
 583   extends: .samba-o3-template
 584   variables:
 585     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse151}
 586
 587 opensuse152-samba-o3:
 588   extends: .samba-o3-template
 589   variables:
 590     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse152}
 591
 592 centos7-samba-o3:
 593   extends: .samba-o3-template
 594   variables:
 595     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos7}
 596     # Git on CentOS doesn't support shallow git cloning
 597     GIT_DEPTH: ""
 598     # We need a newer GnuTLS version on CentOS7
 599     PKG_CONFIG_PATH: "/usr/lib64/compat-gnutls37/pkgconfig:/usr/lib64/compat-nettle32/pkgconfig"
 600
 601 centos8s-samba-o3:
 602   extends: .samba-o3-template
 603   variables:
 604     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos8s}
 605
 606 fedora34-samba-o3:
 607   extends: .samba-o3-template
 608   variables:
 609     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora34}
 610
 611 fedora35-samba-o3:
 612   extends: .samba-o3-template
 613   variables:
 614     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora35}
 615
 616 #
 617 # Keep the samba-o3 sections at the end ...
 618 #