name: Run tests on: [push, pull_request] jobs: build-linux-km: name: Linux kernel module strategy: matrix: distro: - {name: "alpine", tag: "3.18", variant: "-lts", image_prefix: "docker.io/library/"} - {name: "alpine", tag: "3.17", variant: "-lts", image_prefix: "docker.io/library/"} - {name: "alpine", tag: "3.16", variant: "-lts", image_prefix: "docker.io/library/"} - {name: "alpine", tag: "3.15", variant: "-lts", image_prefix: "docker.io/library/"} - {name: "alpine", tag: "3.14", variant: "-lts", image_prefix: "docker.io/library/"} - {name: "archlinux", tag: "latest", image_prefix: "docker.io/library/"} - {name: "archlinux", tag: "latest", variant: "-lts", image_prefix: "docker.io/library/"} - {name: "archlinux", tag: "latest", variant: "-zen", image_prefix: "docker.io/library/"} - {name: "archlinux", tag: "base", image_prefix: "docker.io/library/"} - {name: "centos", tag: "stream9", image_prefix: "quay.io/centos/"} - {name: "centos", tag: "stream8", image_prefix: "quay.io/centos/"} - {name: "centos", tag: "7", image_prefix: "quay.io/centos/"} - {name: "debian", tag: "bookworm-slim", image_prefix: "docker.io/library/"} - {name: "debian", tag: "11", image_prefix: "docker.io/library/"} - {name: "debian", tag: "10", image_prefix: "docker.io/library/"} - {name: "ubuntu", tag: "23.04", image_prefix: "docker.io/library/"} - {name: "ubuntu", tag: "22.04", image_prefix: "docker.io/library/"} - {name: "ubuntu", tag: "20.04", image_prefix: "docker.io/library/"} - {name: "ubuntu", tag: "18.04", image_prefix: "docker.io/library/"} - {name: "ubuntu", tag: "16.04", image_prefix: "docker.io/library/"} runs-on: ubuntu-22.04 container: image: docker://${{ matrix.distro.image_prefix }}${{ matrix.distro.name }}:${{ matrix.distro.tag }} steps: - uses: actions/checkout@v3 - name: Install Alpine dependencies if: matrix.distro.name == 'alpine' run: | apk --no-cache --update add linux${{ matrix.distro.variant }} linux${{ matrix.distro.variant }}-dev nasm # DKMS is not yet packaged in Alpine apk --no-cache --update add bash gcc git make git clone --depth=1 --branch=v3.0.5 https://github.com/dell/dkms /opt/dkms make -C /opt/dkms install - name: Install Arch Linux dependencies if: matrix.distro.name == 'archlinux' run: | pacman -Syu --noconfirm dkms linux${{ matrix.distro.variant }}-headers nasm - name: Install CentOS dependencies if: matrix.distro.name == 'centos' run: | if [ "${{ matrix.distro.tag }}" = 7 ] ; then yum install -y kernel kernel-devel nasm yum install -y elfutils-libelf-devel gcc git make elif [ "${{ matrix.distro.tag }}" = stream8 ] ; then dnf install -y --enablerepo=powertools kernel kernel-devel nasm dnf install -y elfutils-libelf-devel gcc git make elif [ "${{ matrix.distro.tag }}" = stream9 ] ; then dnf install -y --enablerepo=crb kernel kernel-devel nasm dnf install -y elfutils-libelf-devel gcc git make fi # DKMS is not longer packaged in CentOS Stream if ! command -v dkms > /dev/null 2>&1 ; then git clone --depth=1 --branch=v3.0.5 https://github.com/dell/dkms /opt/dkms make -C /opt/dkms install fi - name: Install Debian dependencies if: matrix.distro.name == 'debian' run: | apt-get update -q apt-get install -qqy dkms nasm - name: Install Ubuntu dependencies if: matrix.distro.name == 'ubuntu' run: | apt-get update -q apt-get install -qqy dkms linux-headers-generic nasm - name: Compute packaged kernel version id: versions run: | KERNEL_VER='' if [ "${{ matrix.distro.name }}" = alpine ] ; then # Parse "lib/modules/5.15.53-0-lts/build" KERNEL_VER="$(apk info --contents "linux${{ matrix.distro.variant }}-dev" | sed -n 's:^lib/modules/\([^/][^/]*\)/.*:\1:p' | head -n 1)" elif [ "${{ matrix.distro.name }}" = archlinux ] ; then # Parse "/usr/lib/modules/5.18.0-arch1-1/build/" KERNEL_VER="$(pacman -Qql "linux${{ matrix.distro.variant }}-headers" | sed -n 's:^/usr/lib/modules/\([^/]\+\)/.*:\1:p' | head -n 1)" elif [ "${{ matrix.distro.name }}" = centos ] ; then # Parse "Source RPM : kernel-3.10.0-1160.71.1.el7.src.rpm" KERNEL_VER="$(LANG=C rpm -qi kernel-devel | sed -n 's/^Source RPM *: kernel-\(.*\).src.rpm$/\1.x86_64/p' | tail -n 1)" elif [ "${{ matrix.distro.name }}" = debian ] ; then # Parse "Depends: linux-headers-5.10.0-15-amd64 (= 5.10.120-1)" KERNEL_VER="$(LANG=C dpkg --status linux-headers-amd64 | sed -n 's/^Depends: linux-headers-\(\S*\)\( .*\)\?$/\1/p' | head -n 1)" elif [ "${{ matrix.distro.name }}" = ubuntu ] ; then # Parse "Depends: linux-headers-5.15.0-40-generic" KERNEL_VER="$(LANG=C dpkg --status linux-headers-generic | sed -n 's/^Depends: linux-headers-\(\S*\)\( .*\)\?$/\1/p' | head -n 1)" fi if [ -z "${KERNEL_VER}" ] ; then echo >&2 "Error: no kernel package found" exit 1 fi echo "Found packaged kernel ${KERNEL_VER}" echo "KERNEL_VER=${KERNEL_VER}" >> "$GITHUB_ENV" CHIPSEC_MODULE_VER="$(cat chipsec/VERSION)" echo "CHIPSEC_MODULE_VER=${CHIPSEC_MODULE_VER}" >> "$GITHUB_ENV" echo "kernel=${KERNEL_VER}" >> "$GITHUB_OUTPUT" echo "chipsec=${CHIPSEC_MODULE_VER}" >> "$GITHUB_OUTPUT" echo "uname_m=$(uname -m)" >> "$GITHUB_OUTPUT" - name: Build Linux driver with DKMS for ${{ steps.versions.outputs.kernel }} run: | echo "Building chipsec ${CHIPSEC_MODULE_VER} for Linux kernel ${KERNEL_VER}" dkms add drivers/linux dkms install -m chipsec -v "${CHIPSEC_MODULE_VER}" -k "${KERNEL_VER}" - name: Show dkms status run: dkms status - name: Show modinfo on the kernel module id: modinfo run: | MODULE="$(ls -1 "/var/lib/dkms/chipsec/${CHIPSEC_MODULE_VER}/${KERNEL_VER}/$(uname -m)/module/chipsec.ko"* | head -n1)" echo "module_path=${MODULE}" >> "$GITHUB_OUTPUT" modinfo "${MODULE}" - name: Upload Linux driver from ${{ steps.modinfo.outputs.module_path }} uses: actions/upload-artifact@v3 with: name: chipsec-${{ steps.versions.outputs.chipsec }}.${{ matrix.distro.name }}-${{ matrix.distro.tag }}${{ matrix.distro.variant }}-${{ steps.versions.outputs.kernel }}.${{ steps.versions.outputs.uname_m }} path: ${{ steps.modinfo.outputs.module_path }} if-no-files-found: error windows_driver: name: Windows driver matrix strategy: matrix: versions: - {window: "2019", python: "3.11"} - {window: "2019", python: "3.10"} - {window: "2019", python: "3.9"} - {window: "2019", python: "3.8"} - {window: "2019", python: "3.7"} - {window: "2022", python: "3.11"} - {window: "2022", python: "3.10"} - {window: "2022", python: "3.9"} - {window: "2022", python: "3.8"} - {window: "2022", python: "3.7"} runs-on: windows-${{ matrix.versions.window }} steps: - uses: actions/checkout@v3 - name: Set up Python ${{ matrix.versions.python }} uses: actions/setup-python@v4 with: python-version: ${{ matrix.versions.python }} - name: Install dependencies shell: bash run: pip install -r windows_requirements.txt - name: Build Windows driver shell: bash run: python setup.py build_ext -i - name: Upload Windows Main driver uses: actions/upload-artifact@v3 with: name: drivers_windows_x64__from_py${{ matrix.python }} path: drivers/windows/chipsec/x64 if-no-files-found: error - name: Upload Windows PCI Filter driver uses: actions/upload-artifact@v3 with: name: drivers_windows_x64__from_py${{ matrix.python }} path: drivers/windows/pcifilter/x64 if-no-files-found: error - name: Run Python unit tests shell: bash run: python -m unittest - name: Run xml cfg checker shell: bash run: | python tests/cfg_checker.py - name: Run chipsec tests shell: bash run: | python chipsec_util.py cpu info ubuntu-test: name: Test on Ubuntu matrix strategy: matrix: versions: - {ubuntu: "22.04", python: "3.11"} - {ubuntu: "22.04", python: "3.10"} - {ubuntu: "22.04", python: "3.9"} - {ubuntu: "22.04", python: "3.8"} - {ubuntu: "22.04", python: "3.7"} - {ubuntu: "20.04", python: "3.11"} - {ubuntu: "20.04", python: "3.10"} - {ubuntu: "20.04", python: "3.9"} - {ubuntu: "20.04", python: "3.8"} - {ubuntu: "20.04", python: "3.7"} runs-on: ubuntu-${{ matrix.versions.ubuntu }} steps: - name: Set up Python ${{ matrix.versions.python }} uses: actions/setup-python@v4 with: python-version: ${{ matrix.versions.python }} - uses: actions/checkout@v3 - name: Patch chipsec_main to return true even when some module failed run: | sed 's/^ return modules_failed$/ return 0/' -i chipsec_main.py - name: Install dependencies run: | sudo apt-get update -q sudo apt-get install -qqy dkms nasm python3-setuptools pip install distro pip install -r linux_requirements.txt sudo pip install -r linux_requirements.txt - name: Build the driver with Python run: python3 setup.py build_ext -i - name: Build the driver with DKMS run: | KERNEL_VER="$(uname -r)" CHIPSEC_MODULE_VER="$(cat chipsec/VERSION)" echo "Building chipsec ${CHIPSEC_MODULE_VER} for Linux kernel ${KERNEL_VER}" sudo dkms add drivers/linux sudo dkms install -m chipsec -v "${CHIPSEC_MODULE_VER}" -k "${KERNEL_VER}" - name: Run Python unit tests run: | python3 -m unittest - name: Run xml cfg checker run: | python3 tests/cfg_checker.py - name: pylint pilot for modules folder run: | pylint chipsec/modules - name: Install chipsec run: sudo python3 setup.py install - name: Run chipsec_main test run: | PYTHONEXE="$(which python)" CHIPSECEXIT="$($(sudo ${PYTHONEXE} chipsec_main.py -p PMC_I440FX 1>&2); echo $?)" if echo "0 1 2 4 8" | grep -qw $CHIPSECEXIT; then $(exit 0); else $(exit $CHIPSECEXIT); fi