build.yml

name: Build
on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main
  workflow_dispatch:
  schedule:
    - cron: 0 0 * * 1

jobs:
  test:
    name: Build and Test
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        go:
          - '1.21'
          - '1.22'

    env:
      DNS_HOST: ns.example.com
      DNS_PORT: 8053
      DNS_REALM: EXAMPLE.COM
      DNS_USERNAME: test
      DNS_PASSWORD: password
      DNS_KEYTAB: ${{ github.workspace }}/testdata/test.keytab
      KRB5_CONFIG: ${{ github.workspace }}/testdata/krb5.conf
      KRB5_KTNAME: ${{ github.workspace }}/testdata/dns.keytab

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: ${{ matrix.go }}

      - name: golangci-lint (gokrb5)
        uses: golangci/golangci-lint-action@v4
        if: github.event_name == 'pull_request'
        with:
          only-new-issues: true

      - name: golangci-lint (apcera)
        uses: golangci/golangci-lint-action@v4
        if: github.event_name == 'pull_request'
        with:
          only-new-issues: true
          args: --build-tags apcera

      - name: golangci-lint (SSPI)
        uses: golangci/golangci-lint-action@v4
        if: github.event_name == 'pull_request'
        with:
          only-new-issues: true
        env:
          GOOS: windows

      - name: Install Kerberos client
        run: |
          sudo apt-get update
          sudo DEBIAN_FRONTEND=noninteractive apt-get install -yq libkrb5-dev krb5-user

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build KDC image
        uses: docker/build-push-action@v5
        with:
          context: "{{defaultContext}}:testdata"
          load: true
          tags: kdc
          target: kdc
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Build DNS image
        uses: docker/build-push-action@v5
        with:
          context: "{{defaultContext}}:testdata"
          load: true
          tags: ns
          target: ns
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Extract keytab
        uses: docker/build-push-action@v5
        with:
          context: "{{defaultContext}}:testdata"
          outputs: type=local,dest=testdata
          target: keytab

      - name: Pull containers into Podman
        run: |
          podman pull docker-daemon:kdc:latest
          podman pull docker-daemon:ns:latest

      - name: Create infrastructure
        run: |
          podman run -d \
            -v /etc/localtime:/etc/localtime:ro \
            -p 127.0.0.1:8088:8088 \
            -p 127.0.0.1:8088:8088/udp \
            -p 127.0.0.1:8464:8464 \
            -p 127.0.0.1:8464:8464/udp \
            --name kdc kdc
          podman run -d \
            -v /etc/localtime:/etc/localtime:ro \
            -p 127.0.0.1:${DNS_PORT}:${DNS_PORT} \
            --name ns --hostname $DNS_HOST ns
          echo 127.0.0.1 $DNS_HOST | sudo tee -a /etc/hosts
          echo $DNS_PASSWORD | KRB5_TRACE=/dev/stdout kinit ${DNS_USERNAME}@${DNS_REALM}

      - name: Test (gokrb5)
        run: go test -v -coverprofile=gokrb5.out ./...

      - name: Test (apcera)
        run: go test -v -coverprofile=apcera.out -tags apcera ./...

      - name: Build (SSPI)
        run: go build ./...
        env:
          GOARCH: amd64
          GOOS: windows

      - name: Install coverage tools
        run: |
          go install github.com/wadey/gocovmerge@latest
          go install github.com/mattn/goveralls@latest

      - name: Merge coverage reports
        run: gocovmerge gokrb5.out apcera.out >cover.out

      - name: Send coverage
        run: goveralls -coverprofile=cover.out -service=github
        env:
          COVERALLS_TOKEN: ${{ secrets.GITHUB_TOKEN }}