Add initial support for MLKEM768 (without any new Security Policies) #302
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: seccomp | |
on: | |
pull_request: | |
branches: [main] | |
merge_group: | |
types: [checks_requested] | |
branches: [main] | |
jobs: | |
ubuntu: | |
runs-on: ubuntu-latest | |
steps: | |
- name: install dependencies | |
run: | | |
sudo apt update | |
sudo apt install cmake | |
# For default libcrypto | |
sudo apt install libssl-dev | |
# For seccomp | |
sudo apt install libseccomp-dev | |
# For aws-lc | |
sudo apt install clang golang | |
- name: checkout s2n-tls | |
uses: actions/checkout@v4 | |
- name: checkout aws-lc | |
uses: actions/checkout@v4 | |
with: | |
repository: aws/aws-lc | |
path: awslc | |
- name: build awslc | |
# See https://github.com/aws/aws-lc/blob/main/BUILDING.md#building | |
working-directory: awslc | |
run: | | |
cmake -B build | |
make -C build | |
cmake --install build --prefix install | |
- name: seccomp with default libcrypto | |
# TODO: There are still issues with openssl running with seccomp. | |
# Disable for now. | |
if: false | |
run: | | |
cmake -Bbuild \ | |
-DSECCOMP=1 \ | |
-DCMAKE_BUILD_TYPE=Release \ | |
-DCMAKE_INSTALL_PREFIX=install | |
cmake --build build -j $(nproc) | |
CTEST_PARALLEL_LEVEL=$(nproc) ctest --test-dir build | |
cmake --install build | |
./build/bin/s2nc localhost 8000 | grep "libcrypto" | grep -v "AWS-LC" | |
rm -rf build | |
- name: seccomp with aws-lc | |
run: | | |
cmake -Bbuild \ | |
-DSECCOMP=1 \ | |
-DCMAKE_BUILD_TYPE=Release \ | |
-DCMAKE_PREFIX_PATH=awslc/install \ | |
-DCMAKE_INSTALL_PREFIX=install | |
cmake --build build -j $(nproc) | |
CTEST_PARALLEL_LEVEL=$(nproc) ctest --test-dir build | |
cmake --install build | |
./build/bin/s2nc localhost 8000 | grep "libcrypto" | grep "AWS-LC" | |
rm -rf build |