mirror of https://github.com/grpc/grpc.git
[Security - Testing] OpenSSL 1.0.2 and 1.1.1 CI Testing (#35236)
Enable OpenSSL 1.0.2 tests and add a container for 1.1.1 so that it is tested during portability testing as well. Closes #35236 PiperOrigin-RevId: 590345568pull/35300/head
Gregory Cooke
1 year ago
committed by
Copybara-Service
parent
4bf0109f52
commit
12c0058bf2
10 changed files with 185 additions and 6 deletions
@ -0,0 +1,31 @@ |
||||
%YAML 1.2 |
||||
--- | |
||||
# Copyright 2023 the gRPC authors. |
||||
# |
||||
# Licensed under the Apache License, Version 2.0 (the "License"); |
||||
# you may not use this file except in compliance with the License. |
||||
# You may obtain a copy of the License at |
||||
# |
||||
# http://www.apache.org/licenses/LICENSE-2.0 |
||||
# |
||||
# Unless required by applicable law or agreed to in writing, software |
||||
# distributed under the License is distributed on an "AS IS" BASIS, |
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
# See the License for the specific language governing permissions and |
||||
# limitations under the License. |
||||
|
||||
FROM debian:11 |
||||
|
||||
<%include file="../../apt_get_basic.include"/> |
||||
<%include file="../../run_tests_python_deps.include"/> |
||||
<%include file="../../cxx_test_deps.include"/> |
||||
<%include file="../../cxx_deps.include"/> |
||||
<%include file="../../cmake.include"/> |
||||
<%include file="../../ccache.include"/> |
||||
<%include file="../../run_tests_addons.include"/> |
||||
|
||||
# Install openssl 1.1.1 by installing libssl-dev on debian:11 |
||||
RUN apt-get update && apt-get install -y build-essential zlib1g-dev libssl-dev |
||||
|
||||
# Define the default command. |
||||
CMD ["bash"] |
||||
@ -0,0 +1 @@ |
||||
us-docker.pkg.dev/grpc-testing/testing-images-public/cxx_debian11_openssl111_x64:d32295b6e0b45141a49a47608734f1e057a1ec74@sha256:63f2cd5ae453aa2a850fc59b9ec8e8a865e63d9f99a2b796de65669f3bf21275 |
||||
@ -0,0 +1,125 @@ |
||||
# Copyright 2023 the gRPC authors. |
||||
# |
||||
# Licensed under the Apache License, Version 2.0 (the "License"); |
||||
# you may not use this file except in compliance with the License. |
||||
# You may obtain a copy of the License at |
||||
# |
||||
# http://www.apache.org/licenses/LICENSE-2.0 |
||||
# |
||||
# Unless required by applicable law or agreed to in writing, software |
||||
# distributed under the License is distributed on an "AS IS" BASIS, |
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
# See the License for the specific language governing permissions and |
||||
# limitations under the License. |
||||
|
||||
FROM debian:11 |
||||
|
||||
#================= |
||||
# Basic C core dependencies |
||||
|
||||
# C/C++ dependencies according to https://github.com/grpc/grpc/blob/master/BUILDING.md |
||||
RUN apt-get update && apt-get install -y \ |
||||
build-essential \ |
||||
autoconf \ |
||||
libtool \ |
||||
pkg-config \ |
||||
&& apt-get clean |
||||
|
||||
# GCC |
||||
RUN apt-get update && apt-get install -y \ |
||||
gcc \ |
||||
g++ \ |
||||
&& apt-get clean |
||||
|
||||
# libc6 |
||||
RUN apt-get update && apt-get install -y \ |
||||
libc6 \ |
||||
libc6-dbg \ |
||||
libc6-dev \ |
||||
&& apt-get clean |
||||
|
||||
# Tools |
||||
RUN apt-get update && apt-get install -y \ |
||||
bzip2 \ |
||||
curl \ |
||||
dnsutils \ |
||||
git \ |
||||
lcov \ |
||||
make \ |
||||
strace \ |
||||
time \ |
||||
unzip \ |
||||
wget \ |
||||
zip \ |
||||
&& apt-get clean |
||||
|
||||
#================= |
||||
# Setup git to access working directory across docker boundary. |
||||
# This avoids the "fatal: detected dubious ownership in repository XYZ" |
||||
# git error. |
||||
|
||||
RUN git config --global --add safe.directory '*' |
||||
RUN git config --global protocol.file.allow always |
||||
|
||||
|
||||
#==================== |
||||
# run_tests.py python dependencies |
||||
|
||||
# Basic python dependencies to be able to run tools/run_tests python scripts |
||||
# These dependencies are not sufficient to build gRPC Python, gRPC Python |
||||
# deps are defined elsewhere (e.g. python_deps.include) |
||||
RUN apt-get update && apt-get install -y \ |
||||
python3 \ |
||||
python3-pip \ |
||||
python3-setuptools \ |
||||
python3-yaml \ |
||||
&& apt-get clean |
||||
|
||||
# use pinned version of pip to avoid sudden breakages |
||||
RUN python3 -m pip install --upgrade pip==19.3.1 |
||||
|
||||
# TODO(jtattermusch): currently six is needed for tools/run_tests scripts |
||||
# but since our python2 usage is deprecated, we should get rid of it. |
||||
RUN python3 -m pip install six==1.16.0 |
||||
|
||||
# Google Cloud Platform API libraries |
||||
# These are needed for uploading test results to BigQuery (e.g. by tools/run_tests scripts) |
||||
RUN python3 -m pip install --upgrade google-auth==1.23.0 google-api-python-client==1.12.8 oauth2client==4.1.0 |
||||
|
||||
|
||||
# Some cxx tests depend on the twisted package |
||||
RUN python3 -m pip install twisted |
||||
|
||||
#================= |
||||
# C++ dependencies |
||||
RUN apt-get update && apt-get -y install libc++-dev clang && apt-get clean |
||||
|
||||
#================= |
||||
# Install cmake |
||||
# Note that this step should be only used for distributions that have new enough cmake to satisfy gRPC's cmake version requirement. |
||||
|
||||
RUN apt-get update && apt-get install -y cmake && apt-get clean |
||||
|
||||
#================= |
||||
# Install ccache |
||||
|
||||
# Install ccache from source since ccache 3.x packaged with most linux distributions |
||||
# does not support Redis backend for caching. |
||||
RUN curl -sSL -o ccache.tar.gz https://github.com/ccache/ccache/releases/download/v4.7.5/ccache-4.7.5.tar.gz \ |
||||
&& tar -zxf ccache.tar.gz \ |
||||
&& cd ccache-4.7.5 \ |
||||
&& mkdir build && cd build \ |
||||
&& cmake -DCMAKE_BUILD_TYPE=Release -DZSTD_FROM_INTERNET=ON -DHIREDIS_FROM_INTERNET=ON .. \ |
||||
&& make -j4 && make install \ |
||||
&& cd ../.. \ |
||||
&& rm -rf ccache-4.7.5 ccache.tar.gz |
||||
|
||||
|
||||
RUN mkdir /var/local/jenkins |
||||
|
||||
|
||||
# Install openssl 1.1.1 by installing libssl-dev on debian:11 |
||||
RUN apt-get update && apt-get install -y build-essential zlib1g-dev libssl-dev |
||||
|
||||
# Define the default command. |
||||
CMD ["bash"] |
||||
Loading…
Reference in new issue