Build system

Author: daniel-noland

.cargo/config.toml

@@ -1,26 +1,12 @@
-[target.'cfg(debug_assertions)']
-runner = 'sudo -E'
-rustflags = [
-	"-C", "linker=clang",
-	"-C", "link-arg=-fuse-ld=lld",
-	"-C", "link-arg=--ld-path=/home/dnoland/.rustup/toolchains/nightly-x86_64-unknown-linux-gnu/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld/ld.lld",
-	"-C", "opt-level=0",
-	"-C", "lto=false",
-]
+[env]
+COMPILE_ENV = { value = "compile-env", relative = true, force = false }
+PATH = { value = "compile-env/bin", relative = true, force = true }
+LD_LIBRARY_PATH = { value = "compile-env/lib", relative = true, force = true }
+LIBCLANG_PATH = { value = "compile-env/lib", relative = true, force = true }
 
-[target.'cfg(not(debug_assertions))']
-rustflags = [
-	"-C", "linker=clang",
-	"-C", "link-arg=-fuse-ld=lld",
-	"-C", "link-arg=--ld-path=/home/dnoland/.rustup/toolchains/nightly-x86_64-unknown-linux-gnu/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld/ld.lld",
-	"-C", "opt-level=3",
-	"-C", "codegen-units=1",
-	"-C", "linker-plugin-lto",
-	"-C", "lto=thin",
-	"-C", "embed-bitcode=yes",
-	# Full RELRO as a basic security measure
-	# <https://www.redhat.com/en/blog/hardening-elf-binaries-using-relocation-read-only-relro>
-	"-C", "relro-level=full",
-	#	"-Z", "sanitizer=cfi",
-	#	"-Z", "sanitizer=safestack",
-]
+[build]
+target = "x86_64-unknown-linux-gnu"
+
+[alias]
+just = ["just", "cargo"]
+sterile = ["just", "sterile", "cargo"]

.config/nextest.toml

@@ -0,0 +1,26 @@
+[profile.default]
+retries = 3
+test-threads = "num-cpus"
+status-level = "all"
+final-status-level = "all"
+failure-output = "immediate"
+success-output = "immediate"
+fail-fast = "false"
+
+[profile.default.junit]
+path = "default.xml"
+store-success-output = true
+store-failure-output = true
+
+[profile.dev]
+
+[profile.dev.junit]
+path = "dev.xml"
+store-success-output = true
+store-failure-output = true
+
+[profile.release]
+[profile.release.junit]
+path = "release.xml"
+store-success-output = true
+store-failure-output = true

.devcontainer/devcontainer.json

@@ -6,10 +6,11 @@ updates:
     directories:
       - /
     schedule:
-      interval: "daily"
+      interval: "weekly"
+    versioning-strategy: "widen"
     groups:
       dev-dependencies:
-        applies-to: version-updates
+        applies-to: "version-updates"
         patterns:
           - "*"
         update-types:

.github/dependabot.yml

@@ -0,0 +1,80 @@
+# The primary point of this workflow is to ensure that the developer experience is good.
+# We take a very vanilla ubuntu image, install all necessary dependencies via "normal" means,
+# and then run the build and test steps as described in the README.md file.
+
+# The artifacts produced by these builds are not intended to be used for anything other than
+# ensuring that the developer experience is good.
+
+# Production artifacts are produced in a sterile environment (in another CI workflow).
+
+
+name: "bump.yml"
+on:
+  workflow_dispatch:
+    inputs:
+      debug_enabled:
+        type: "boolean"
+        description: "Run with tmate enabled"
+        required: false
+        default: false
+  schedule:
+    # Check for updates at 3:18am every day.
+    # I avoid midnight because everyone uses midnight and
+    # I don't need to contribute to load spikes.
+    - cron: "18 3 * * *"
+
+concurrency:
+  group: "${{ github.workflow }}:${{ github.ref }}"
+  cancel-in-progress: true
+
+permissions:
+  contents: "write"
+  pull-requests: "write"
+  packages: "read"
+  id-token: "write"
+jobs:
+  update:
+    runs-on: "ubuntu-latest"
+    steps:
+      - name: "login to ghcr.io"
+        uses: "docker/login-action@v3"
+        with:
+          registry: "ghcr.io"
+          username: "${{ github.actor }}"
+          password: "${{ secrets.GITHUB_TOKEN }}"
+      - name: "Checkout"
+        uses: "actions/checkout@v4"
+      - name: "install rust"
+        uses: "dtolnay/rust-toolchain@stable"
+      - uses: "cargo-bins/cargo-binstall@main"
+      - name: "install cargo-deny"
+        run: |
+          cargo binstall --no-confirm cargo-deny
+      - name: "deny check"
+        run: |
+          cargo deny check
+      - name: "install envsubst"
+        run: |
+          sudo apt-get update
+          sudo apt-get --yes --no-install-recommends gettext
+      - run: |
+          ./scripts/update-versions.sh
+      - name: "Create Pull Request"
+        uses: "peter-evans/create-pull-request@v7"
+        with:
+          branch: "bump/dpdk-sys"
+          title: "bump/dpdk-sys"
+          labels: |
+            automated
+            dependencies
+          signoff: "true"
+          commit-message: "bump/dpdk-sys"
+          sign-commits: "true"
+          body: "bump dpdk-sys"
+
+      - name: "Setup tmate session for debug"
+        if: ${{ failure() && github.event_name == 'workflow_dispatch' && inputs.debug_enabled }}
+        uses: "mxschmitt/action-tmate@v3"
+        timeout-minutes: 60
+        with:
+          limit-access-to-actor: true