PR Woodpecker CI workflow #3477

Open
phnt wants to merge 13 commits from phnt/pleroma-fe:woodpecker-pr-ci into develop
Owner

This should be the whole PR workflow from Gitlab minus E2E test which needs a Pleroma Docker image, which does not exist yet. Soon™ after BE also receives a similar PR pipeline.
Publishing fo releases from develop/stable/tagged is not implemented here and will come after PR pipelines are both merged.

Also runs the workflows except changelog on push to default branch.

Pre-merge

  • The test workflow depends on a 3rd-party plugin which isn't that popular for uploading failed test artifacts. I've looked through it, and it doesn't seem to do whacky things, but just in case the version is pinned to the current latest version, this also means:
  • Creating a Forgejo user that has write access to "packages", but shouldn't have write access to anything else. Probably doesn't even need read access to anything else. This user has to be a member of the pleroma organization
  • Creating pleroma-ci-user secret for the organization in Woodpecker where the name of the bot account is stored
  • Creating pleroma-ci-password secret for the organization in Woodpecker where the password for the bot account is stored
  • Pipelines should be at minimum required be manually approved when coming from forks. Ideally all pipelines should be manually approved thanks to possibility of leaking secrets with malicious PRs, that includes from maintainers.

Not really a fan of the 3rd-party dependency. Other ways that don't require a 3rd-party plugin welcome :)

cc @lambadalambda I don't wanna meddle with the CI backend even though I probably have the perms.

This should be the whole PR workflow from Gitlab minus E2E test which needs a Pleroma Docker image, which does not exist yet. Soon™ after BE also receives a similar PR pipeline. **Publishing fo releases from develop/stable/tagged is not implemented here and will come after PR pipelines are both merged.** Also runs the workflows except `changelog` on push to default branch. # Pre-merge * The `test` workflow depends on a [3rd-party plugin](https://woodpecker-ci.org/plugins/gitea-generic-package) which isn't that popular for uploading failed test artifacts. I've looked through it, and it doesn't seem to do whacky things, but just in case the version is pinned to the current latest version, this also means: - [ ] Creating a Forgejo user that has write access to "packages", but shouldn't have write access to anything else. Probably doesn't even need read access to anything else. This user has to be a member of the `pleroma` organization - [ ] Creating pleroma-ci-user secret for the organization in Woodpecker where the name of the bot account is stored - [ ] Creating pleroma-ci-password secret for the organization in Woodpecker where the password for the bot account is stored - [ ] **Pipelines should be at minimum required be manually approved when coming from forks. Ideally all pipelines should be manually approved thanks to possibility of leaking secrets with malicious PRs, that includes from maintainers.** Not really a fan of the 3rd-party dependency. Other ways that don't require a 3rd-party plugin welcome :) cc @lambadalambda I don't wanna meddle with the CI backend even though I probably have the perms.
Author
Owner

Also I guess before this gets merged, agents should be tagged accordingly for the himem test workflow so I can add it as a label here. Filtering by platform is done automatically I think, after

label:
  - platform: linux/amd64

is added to the workflow.

Also I guess before this gets merged, agents should be tagged accordingly for the himem test workflow so I can add it as a label here. Filtering by platform is done automatically I think, after ``` label: - platform: linux/amd64 ``` is added to the workflow.
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u woodpecker-pr-ci:phnt-woodpecker-pr-ci
git switch phnt-woodpecker-pr-ci

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch develop
git merge --no-ff phnt-woodpecker-pr-ci
git switch phnt-woodpecker-pr-ci
git rebase develop
git switch develop
git merge --ff-only phnt-woodpecker-pr-ci
git switch phnt-woodpecker-pr-ci
git rebase develop
git switch develop
git merge --no-ff phnt-woodpecker-pr-ci
git switch develop
git merge --squash phnt-woodpecker-pr-ci
git switch develop
git merge --ff-only phnt-woodpecker-pr-ci
git switch develop
git merge phnt-woodpecker-pr-ci
git push origin develop
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pleroma/pleroma-fe!3477
No description provided.