.gitlab-ci-main.yml

   1 # see https://docs.gitlab.com/ce/ci/yaml/README.html for all available options
   2
   3 # Stages explained
   4 #
   5 # images: Build the images with the bootstrap script
   6 # build_first: Build a few things first to find silly errors (fast job)
   7 #              (don't pay for 35 machines until something compiles)
   8 # build: The main parallel job
   9 #              (keep these to 1hour as we are billed per hour)
  10 # test_only: Tests using the build from prior stages, these typically
  11 #            have an explicit dependency defined to a specific build job,
  12 #            which means that start as soon as the build job finished.
  13 # test_private: Like test_only, but running on private runners
  14 # report: Code coverage reporting
  15
  16 stages:
  17   - images
  18   - build_first
  19   - build
  20   - test_only
  21   - test_private
  22   - report
  23
  24 variables:
  25   # We want to be resilient to runner failures
  26   ARTIFACT_DOWNLOAD_ATTEMPTS: "3"
  27   EXECUTOR_JOB_SECTION_ATTEMPTS: "3"
  28   GET_SOURCES_ATTEMPTS: "3"
  29   RESTORE_CACHE_ATTEMPTS: "3"
  30   #
  31   GIT_STRATEGY: fetch
  32   GIT_DEPTH: "3"
  33   #
  34   # Use GZip by default, it is fast and is good enough.  Other options include --xz
  35
  36   SAMBA_TESTBASE_TAR_OPTIONS: -z
  37
  38   #
  39   # we run autobuild.py inside a samba CI docker image located on gitlab's registry
  40   # overwrite this variable if you want use your own image registry.
  41   #
  42   # Or better ask for access to the shared development repository, see
  43   # https://wiki.samba.org/index.php/Samba_CI_on_gitlab#Getting_Access
  44   #
  45   SAMBA_CI_CONTAINER_REGISTRY: registry.gitlab.com/samba-team/devel/samba
  46   #
  47   # Set this to the contents of bootstrap/sha1sum.txt
  48   # which is generated by bootstrap/template.py --render
  49   #
  50   SAMBA_CI_CONTAINER_TAG: d7e721bceae90834dfe04e8a9ba864a55d1c49e1
  51   #
  52   # We use the ubuntu2204 image as default as
  53   # it matches what we have on atb-devel-224
  54   #
  55   SAMBA_CI_CONTAINER_IMAGE: ubuntu2204
  56   #
  57   # The following images are available
  58   # Please see the samba-o3 sections at the end of this file!
  59   # We should run that for each available image
  60   #
  61   SAMBA_CI_CONTAINER_IMAGE_ubuntu2004: ubuntu2004
  62   SAMBA_CI_CONTAINER_IMAGE_ubuntu2204: ubuntu2204
  63   SAMBA_CI_CONTAINER_IMAGE_debian11: debian11
  64   SAMBA_CI_CONTAINER_IMAGE_debian11_32bit: debian11-32bit
  65   SAMBA_CI_CONTAINER_IMAGE_debian12: debian12
  66   SAMBA_CI_CONTAINER_IMAGE_opensuse155: opensuse155
  67   SAMBA_CI_CONTAINER_IMAGE_centos8s: centos8s
  68   SAMBA_CI_CONTAINER_IMAGE_centos9s: centos9s
  69   SAMBA_CI_CONTAINER_IMAGE_fedora40: fedora40
  70
  71 include:
  72   # The image creation details are specified in a separate file
  73   # See bootstrap/README.md for details
  74   - 'bootstrap/.gitlab-ci.yml'
  75
  76 .shared_runner_build_image:
  77   extends: .shared_runner_build
  78   variables:
  79     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE}
  80   image: ${SAMBA_CI_CONTAINER_REGISTRY}/samba-ci-${SAMBA_CI_JOB_IMAGE}:${SAMBA_CI_CONTAINER_TAG}
  81
  82 .shared_template:
  83   extends: .shared_runner_build_image
  84   # All Samba jobs are interruptible, this avoids burning CPU when a
  85   # newer branch is pushed.
  86   interruptible: true
  87   timeout: 2h
  88
  89   # Otherwise we run twice, once on push and once on MR
  90   # https://forum.gitlab.com/t/new-rules-syntax-and-detached-pipelines/37292
  91   rules:
  92     - if: $CI_MERGE_REQUEST_ID
  93       when: never
  94     - when: on_success
  95
  96   variables:
  97     AUTOBUILD_JOB_NAME: $CI_JOB_NAME
  98   stage: build
  99   cache:
 100     key: ccache.${CI_JOB_NAME}.${SAMBA_CI_JOB_IMAGE}.${SAMBA_CI_FLAVOR}
 101     paths:
 102       - ccache
 103
 104   # This is overridden in many cases, but ensures none of the other
 105   # main jobs start until and unless this build finishes.  However
 106   # this also ensures we do not download artifacts from any build
 107   # unless we specifically depend on it, saving bandwidth
 108
 109   needs:
 110     - job: samba-def-build
 111       artifacts: false
 112
 113   before_script:
 114     - uname -a
 115     - ls -l /sys/module/
 116     - ls -l /sys/kernel/security/
 117     - if [ -e /sys/kernel/security/lsm ]; then cat /sys/kernel/security/lsm ; echo; fi
 118     - if [ -e /proc/config.gz ]; then sudo zcat /proc/config.gz; echo; fi
 119     - lsb_release -a
 120     - cat /etc/os-release
 121     - id
 122     - cat /proc/self/status
 123     - lscpu
 124     - cat /proc/cpuinfo
 125     - mount
 126     - df -h
 127     - cat /proc/swaps
 128     - free -h
 129       # ld will fail if coverage enabled, force link ld to ld.bfd
 130     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then sudo ln -sf $(which ld.bfd) $(which ld); fi
 131       # See bootstrap/.gitlab-ci.yml how to generate a new image
 132     - echo "SAMBA_CI_CONTAINER_REGISTRY[${SAMBA_CI_CONTAINER_REGISTRY}]"
 133     - echo "SAMBA_CI_CONTAINER_TAG[${SAMBA_CI_CONTAINER_TAG}]"
 134     - echo "SAMBA_CI_JOB_IMAGE[${SAMBA_CI_JOB_IMAGE}]"
 135     - echo "CI_JOB_IMAGE[${CI_JOB_IMAGE}]"
 136     - bootstrap/template.py --sha1sum > /tmp/sha1sum-template.txt
 137     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-template.txt
 138     - echo "${SAMBA_CI_CONTAINER_TAG}" > /tmp/sha1sum-tag.txt
 139     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-tag.txt
 140     - diff -u bootstrap/sha1sum.txt /sha1sum.txt
 141     - echo "${CI_COMMIT_SHA} ${CI_COMMIT_TITLE}" > /tmp/commit.txt
 142     - export CCACHE_BASEDIR="${PWD}"
 143     - export CCACHE_DIR="${PWD}/ccache" && mkdir -pv "$CCACHE_DIR"
 144     - export CC="ccache cc"
 145     - export CXX="ccache c++"
 146     - ccache -z -M 500M
 147     - ccache -s
 148       # We are already running .gitlab-ci directives from this repo, remove additional checks that break our CI
 149     - git config --global --add safe.directory `pwd`
 150     - git config --global --add safe.directory /builds/samba-team/devel/samba/.git
 151   after_script:
 152     - mount
 153     - df -h
 154     - cat /proc/swaps
 155     - free -h
 156     - CCACHE_BASEDIR="${PWD}" CCACHE_DIR="${PWD}/ccache" ccache -s -c
 157   artifacts:
 158     expire_in: 1 week
 159     paths:
 160       - "*.stdout"
 161       - "*.stderr"
 162       - "*.info"
 163       - public
 164       - system-info.txt
 165   retry:
 166     max: 2
 167     when:
 168       - runner_system_failure
 169       - stuck_or_timeout_failure
 170       - api_failure
 171       - runner_unsupported
 172       - stale_schedule
 173       - archived_failure
 174       - scheduler_failure
 175       - data_integrity_failure
 176
 177   script:
 178     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 179     # autobuild name, which means we can define a default template that runs most autobuild jobs
 180     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /builds/samba-testbase
 181
 182 # Ensure when adding a new job below that you also add it to
 183 # the dependencies for 'pages' below for the code coverage page
 184 # generation.
 185
 186 others:
 187   extends: .shared_template
 188   script:
 189     - script/autobuild.py pidl     $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /builds/samba-testbase/pidl
 190     - script/autobuild.py replace  $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /builds/samba-testbase/replace
 191     - script/autobuild.py talloc   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /builds/samba-testbase/talloc
 192     - script/autobuild.py tdb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /builds/samba-testbase/tdb
 193     - script/autobuild.py tevent   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /builds/samba-testbase/tevent
 194     - script/autobuild.py samba-xc $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /builds/samba-testbase/samba-xc
 195     - script/autobuild.py docs-xml $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /builds/samba-testbase/docs-xml
 196
 197 .shared_template_build_only:
 198   extends: .shared_template
 199   timeout: 2h
 200   needs:
 201   artifacts:
 202     expire_in: 1 week
 203     paths:
 204       - "*.stdout"
 205       - "*.stderr"
 206       - "*.info"
 207       - system-info.txt
 208       - samba-testbase.tar
 209   script:
 210     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 211     # autobuild name, which means we can define a default template that runs most autobuild jobs
 212     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /builds/samba-testbase
 213     # On success we need to pack everything into an artifacts file
 214     # which needs to be in the git checkout.
 215     # As tar doesn't handle hardlink of read-only files,
 216     # we remember the acls and add write permissions
 217     # before creating the archive. The consumer will apply
 218     # the acls again.
 219     - cp -a /sha1sum.txt /builds/samba-testbase/image-sha1sum.txt
 220     - cp -a /tmp/commit.txt /builds/samba-testbase/commit.txt
 221     - ln -s /builds/samba-testbase/${AUTOBUILD_JOB_NAME}/ /builds/samba-testbase/build_subdir_link
 222     - pushd /builds && getfacl -R samba-testbase > samba-testbase.acl.dump && popd
 223     - chmod -R +w /builds/samba-testbase
 224     - mv /builds/samba-testbase.acl.dump /builds/samba-testbase/
 225     - tar $SAMBA_TESTBASE_TAR_OPTIONS -cf samba-testbase.tar /builds/samba-testbase
 226     - ls -la samba-testbase.tar
 227     - sha1sum samba-testbase.tar
 228
 229 .shared_template_test_only:
 230   extends:
 231     - .shared_template
 232     - .shared_runner_test
 233   stage: test_only
 234   script:
 235     # Print the Kerberos version to check we ended up with the right one
 236     # in the runner. We do not have configure output to recognize it
 237     # otherwise.
 238     - if [ -x "$(command -v krb5-config)" ]; then krb5-config --version; fi
 239     # We unpack the artifacts file created by the .shared_template_build_only
 240     # run we depend on
 241     - ls -la samba-testbase.tar
 242     - sha1sum samba-testbase.tar
 243     - tar $SAMBA_TESTBASE_TAR_OPTIONS -xf samba-testbase.tar -C /
 244     - diff -u /builds/samba-testbase/image-sha1sum.txt /sha1sum.txt
 245     - diff -u /builds/samba-testbase/commit.txt /tmp/commit.txt
 246     - mv /builds/samba-testbase/samba-testbase.acl.dump /builds/samba-testbase.acl.dump
 247     - pushd /builds && setfacl --restore=/builds/samba-testbase.acl.dump && popd
 248     - ls -la /builds/samba-testbase/
 249     - ls -la /builds/samba-testbase/build_subdir_link
 250     - ls -la /builds/samba-testbase/build_subdir_link/
 251     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then find /builds/samba-testbase/build_subdir_link/ -type d -printf "'%p'\n" | xargs chmod u+w; fi
 252     - ls -la /builds/samba-testbase/build_subdir_link/
 253     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
 254     # autobuild name, which means we can define a default template that runs most autobuild jobs
 255     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --skip-dependencies --verbose --nocleanup --keeplogs --tail --full-testbase /builds/samba-testbase
 256
 257 samba-def-build:
 258   extends: .shared_template_build_only
 259   stage: build_first
 260
 261 .needs_samba-def-build:
 262   extends: .shared_template_test_only
 263   needs:
 264     - job: samba-def-build
 265       artifacts: true
 266     - job: samba-codecheck
 267
 268 samba-mit-build:
 269   extends: .shared_template_build_only
 270   variables:
 271     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora40}
 272   stage: build_first
 273
 274 .needs_samba-mit-build:
 275   extends: .shared_template_test_only
 276   variables:
 277     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora40}
 278   needs:
 279     - job: samba-mit-build
 280       artifacts: true
 281     - job: samba-codecheck
 282
 283 samba-h5l-build:
 284   extends: .shared_template_build_only
 285
 286 .needs_samba-h5l-build:
 287   extends: .shared_template_test_only
 288   needs:
 289     - job: samba-h5l-build
 290       artifacts: true
 291
 292 samba-without-smb1-build:
 293   extends: .shared_template_build_only
 294
 295 .needs_samba-without-smb1-build:
 296   extends: .shared_template_test_only
 297   needs:
 298     - job: samba-without-smb1-build
 299       artifacts: true
 300
 301 samba-nt4-build:
 302   extends: .shared_template_build_only
 303
 304 .needs_samba-nt4-build:
 305   extends: .shared_template_test_only
 306   needs:
 307     - job: samba-nt4-build
 308       artifacts: true
 309
 310 samba-no-opath-build:
 311   extends: .shared_template_build_only
 312
 313 .needs_samba-no-opath-build:
 314   extends: .shared_template_test_only
 315   needs:
 316     - job: samba-no-opath-build
 317       artifacts: true
 318
 319 samba:
 320   extends: .shared_template
 321
 322 samba-mitkrb5:
 323   extends: .shared_template
 324   variables:
 325     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora40}
 326
 327 samba-minimal-smbd:
 328   extends: .shared_template
 329
 330 samba-nopython:
 331   extends: .shared_template
 332
 333 samba-admem:
 334   extends: .needs_samba-def-build
 335
 336 samba-ad-dc-2:
 337   extends: .needs_samba-def-build
 338
 339 samba-ad-dc-3:
 340   extends: .needs_samba-def-build
 341
 342 samba-ad-dc-4a:
 343   extends: .needs_samba-def-build
 344
 345 samba-ad-dc-4b:
 346   extends: .needs_samba-def-build
 347
 348 samba-ad-dc-5:
 349   extends: .needs_samba-def-build
 350
 351 samba-ad-dc-6:
 352   extends: .needs_samba-def-build
 353
 354 samba-ad-back1:
 355   extends: .needs_samba-def-build
 356
 357 samba-ad-back2:
 358   extends: .needs_samba-def-build
 359
 360 samba-schemaupgrade:
 361   extends: .needs_samba-def-build
 362
 363 samba-libs:
 364   extends: .shared_template
 365
 366 samba-fuzz:
 367   extends: .shared_template
 368   variables:
 369     # We match what Google is running over at oss-fuzz
 370     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 371
 372 ctdb:
 373   extends: .shared_template
 374
 375 samba-ctdb:
 376   extends: .shared_template
 377
 378 samba-ad-dc-ntvfs:
 379   extends: .needs_samba-def-build
 380
 381 samba-admem-mit:
 382   extends: .needs_samba-mit-build
 383
 384 samba-addc-mit-4a:
 385   extends: .needs_samba-mit-build
 386
 387 samba-addc-mit-4b:
 388   extends: .needs_samba-mit-build
 389
 390 # This task is run first to ensure we compile before we start the
 391 # main run as it is the fastest full compile of Samba.
 392 samba-fips:
 393   extends: .shared_template
 394   variables:
 395     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora40}
 396
 397 samba-codecheck:
 398   extends: .shared_template
 399   needs:
 400   stage: build_first
 401
 402 .private_test_only:
 403   extends: .private_runner_test
 404   stage: test_private
 405   rules:
 406       # See above, to avoid a duplicate CI on the MR (these rules override the others)
 407     - if: $CI_MERGE_REQUEST_ID
 408       when: never
 409
 410       # These jobs are only run if the gitlab repo has private runners available.
 411       # To enable private jobs, you must add the following var and value to
 412       # your gitlab repo by navigating to:
 413       # settings -> CI/CD -> Environment variables
 414     - if: $SUPPORT_PRIVATE_TEST == "yes"
 415
 416 .needs_ext4_support:
 417   # All runners provide an ext4 filesystem
 418   #
 419   # Note: we don't use
 420   # extends: .shared_template_test_only
 421   # as that somehow resets the needs section
 422   # and generates problems for something
 423   # like this (which is used below)
 424   #
 425   # .needs_samba-SOME-build-ext4:
 426   #   extends:
 427   #     - .needs_samba-SOME-build
 428   #     - .needs_ext4_support
 429   #
 430   # So we only set stage again instead...
 431   stage: test_only
 432
 433 .needs_5_15_kernel:
 434   # Our private runners are based on
 435   # ubuntu2204 with a 5.15 kernel.
 436   #
 437   # And they also provide an ext4 filesystem
 438   extends: .private_test_only
 439
 440 .needs_samba-def-build-ext4:
 441   extends:
 442     - .needs_samba-def-build
 443     - .needs_ext4_support
 444
 445 .needs_samba-mit-build-ext4:
 446   extends:
 447     - .needs_samba-mit-build
 448     - .needs_ext4_support
 449
 450 .needs_samba-h5l-build-ext4:
 451   extends:
 452     - .needs_samba-h5l-build
 453     - .needs_ext4_support
 454
 455 .needs_samba-without-smb1-build-5_15:
 456   # Currently this doesn't strictly
 457   # require a kernel >= 5.15, but only
 458   # ext4 support.
 459   #
 460   # But we want to make sure that
 461   # our private runners keep working
 462   # and at least do a single job.
 463   #
 464   # In future we'll be able to run
 465   # tests with io_uring in this
 466   # setup, which will requires a
 467   # 5.15 kernel in order to be useful.
 468   extends:
 469     - .needs_samba-without-smb1-build
 470     - .needs_5_15_kernel
 471
 472 .needs_samba-nt4-build-ext4:
 473   extends:
 474     - .needs_samba-nt4-build
 475     - .needs_ext4_support
 476
 477 .needs_samba-no-opath-build-ext4:
 478   extends:
 479     - .needs_samba-no-opath-build
 480     - .needs_ext4_support
 481
 482 samba-fileserver:
 483   extends: .needs_samba-h5l-build-ext4
 484
 485 samba-fileserver-without-smb1:
 486   extends: .needs_samba-without-smb1-build-5_15
 487
 488 # This is a full build without the AD DC so we test the build with MIT
 489 # Kerberos from the default system (Ubuntu 22.04 at this stage).
 490 # Runtime behaviour checked via the ktest (static ccache and keytab)
 491 # environment
 492 samba-ktest-mit:
 493  extends: .shared_template
 494
 495 samba-ad-dc-1:
 496   extends: .needs_samba-def-build-ext4
 497
 498 samba-nt4:
 499   extends: .needs_samba-nt4-build-ext4
 500
 501 samba-addc-mit-1:
 502   extends: .needs_samba-mit-build-ext4
 503
 504 samba-no-opath1:
 505   extends: .needs_samba-no-opath-build-ext4
 506
 507 samba-no-opath2:
 508   extends: .needs_samba-no-opath-build-ext4
 509
 510 # 'pages' is a special job which can publish artifacts in `public` dir to gitlab pages
 511 pages:
 512   extends: .shared_runner_build_image
 513   stage: report
 514   dependencies:  # tell gitlab to download artifacts for these jobs
 515     - others
 516     - samba
 517     - samba-mitkrb5
 518     - samba-admem
 519     - samba-ad-dc-2
 520     - samba-ad-dc-3
 521     - samba-ad-dc-4a
 522     - samba-ad-dc-4b
 523     - samba-ad-dc-5
 524     - samba-ad-dc-6
 525     - samba-libs
 526     - samba-minimal-smbd
 527     - samba-nopython
 528     - samba-fuzz
 529     # - ctdb  # TODO
 530     - samba-ctdb
 531     - samba-ad-dc-ntvfs
 532     - samba-admem-mit
 533     - samba-addc-mit-4a
 534     - samba-addc-mit-4b
 535     - samba-ad-back1
 536     - samba-ad-back2
 537     - samba-fileserver
 538     - samba-fileserver-without-smb1
 539     - samba-ad-dc-1
 540     - samba-nt4
 541     - samba-schemaupgrade
 542     - samba-addc-mit-1
 543     - samba-fips
 544     - samba-no-opath1
 545     - samba-no-opath2
 546     - ubuntu2204-samba-o3
 547   script:
 548     - ls -la *.info
 549     - ./configure.developer
 550     - make -j
 551     - ls -la *.info
 552     - lcov $(ls *.info | xargs -I{} echo -n "-a {} ") -o all.info
 553     - ls -la *.info
 554     - genhtml all.info --ignore-errors source --output-directory public --prefix=$(pwd) --title "coverage report for $CI_COMMIT_REF_NAME $CI_COMMIT_SHORT_SHA"
 555   artifacts:
 556     expire_in: 30 days
 557     paths:
 558       - public
 559   only:
 560     variables:
 561       - $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == "--enable-coverage"
 562
 563 # Coverity Scan
 564 coverity:
 565   extends: .shared_runner_build_image
 566   variables:
 567     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse155}
 568   stage: build
 569   script:
 570     - wget https://scan.coverity.com/download/linux64 --post-data "token=$COVERITY_SCAN_TOKEN&project=$COVERITY_SCAN_PROJECT_NAME" -O /tmp/coverity_tool.tgz
 571     - tar xf /tmp/coverity_tool.tgz
 572     - ./configure.developer --with-cluster-support
 573     - cov-analysis-linux64-*/bin/cov-build --dir cov-int make -j$(nproc)
 574     - tar czf cov-int.tar.gz cov-int
 575     - curl
 576       --form token=$COVERITY_SCAN_TOKEN
 577       --form email=$COVERITY_SCAN_EMAIL
 578       --form file=@cov-int.tar.gz
 579       --form version="`git describe --tags`"
 580       --form description="CI build"
 581       https://scan.coverity.com/builds?project=$COVERITY_SCAN_PROJECT_NAME
 582   only:
 583     refs:
 584       - master
 585       - schedules
 586     variables:
 587       - $COVERITY_SCAN_TOKEN != null
 588       - $COVERITY_SCAN_PROJECT_NAME != null
 589       - $COVERITY_SCAN_EMAIL != null
 590   artifacts:
 591     expire_in: 1 week
 592     when: on_failure
 593     paths:
 594       - cov-int/*.txt
 595
 596 debian11-samba-32bit:
 597   extends: .shared_template
 598   variables:
 599     AUTOBUILD_JOB_NAME: samba-32bit
 600     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian11_32bit}
 601
 602 #
 603 # We build samba-o3 on all supported distributions
 604 #
 605
 606 # This job, which matches the main CI, needs to still do coverage so
 607 # we show the coverage on the "none" environment tests
 608 #
 609 # We want --enable-coverage specified here otherwise we will have a
 610 # different set of build options on the coverage build and can fail
 611 # when -O3 gets combined with --enable-coverage in the scheduled
 612 # builds.
 613
 614 ubuntu2204-samba-o3:
 615   extends: .shared_template
 616   variables:
 617     AUTOBUILD_JOB_NAME: samba-o3
 618     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2204}
 619     SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE: "--enable-coverage"
 620   rules:
 621     # See above, to avoid a duplicate CI on the MR (these rules override the others)
 622     - if: $CI_MERGE_REQUEST_ID
 623       when: never
 624     # do not run o3 builds (which run a lot of VMs) if told not to
 625     # (this uses the same variable as autobuild.py)
 626     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
 627       when: never
 628     - when: on_success
 629
 630 # All other jobs do not want code coverage.
 631 .samba-o3-template:
 632   extends: .shared_template
 633   variables:
 634     AUTOBUILD_JOB_NAME: samba-o3
 635   rules:
 636     # See above, to avoid a duplicate CI on the MR (these rules override the others)
 637     - if: $CI_MERGE_REQUEST_ID
 638       when: never
 639     # do not run o3 builds (which run a lot of VMs) if told not to
 640     # (this uses the same variable as autobuild.py)
 641     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
 642       when: never
 643     # do not run o3 for coverage since they are using different images
 644     - if: $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == ""
 645
 646 ubuntu2004-samba-o3:
 647   extends: .samba-o3-template
 648   variables:
 649     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
 650
 651 debian11-samba-o3:
 652   extends: .samba-o3-template
 653   variables:
 654     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian11}
 655
 656 debian12-samba-o3:
 657   extends: .samba-o3-template
 658   variables:
 659     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian12}
 660
 661 opensuse155-samba-o3:
 662   extends: .samba-o3-template
 663   variables:
 664     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse155}
 665
 666 centos8s-samba-o3:
 667   extends: .samba-o3-template
 668   variables:
 669     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos8s}
 670
 671 centos9s-samba-o3:
 672   extends: .samba-o3-template
 673   variables:
 674     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos9s}
 675
 676 fedora40-samba-o3:
 677   extends: .samba-o3-template
 678   variables:
 679     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora40}
 680
 681 #
 682 # Keep the samba-o3 sections at the end ...
 683 #