RL9 update

.editorconfig

@@ -8,7 +8,7 @@ max_line_length = 120
 tab_width = 4
 trim_trailing_whitespace = true
 
-[*.{md,yaml,yml}]
+[*.{json,md,yaml,yml,sh}]
 indent_size = 2
 tab_width = 2
 

.github/actions/archive-deps/action.yml

@@ -0,0 +1,40 @@
+name: "Archive Dependencies"
+description: "Archive dependencies for use in subsequent steps"
+
+inputs:
+  OS_FAMILY:
+    description: "Dependency build OS family"
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    - name: "Dependencies - Archive - LUA"
+      uses: "actions/upload-artifact@v4"
+      with:
+        name: "lua-dist-${{ inputs.OS_FAMILY }}.tar.gz"
+        path: "deps/lua/lua-dist.tar.gz"
+
+    - name: "Dependencies - Archive - PCRE2"
+      uses: "actions/upload-artifact@v4"
+      with:
+        name: "pcre2-dist-${{ inputs.OS_FAMILY }}.tar.gz"
+        path: "deps/pcre2/pcre2-dist.tar.gz"
+
+    - name: "Dependencies - Archive - AWS-LC"
+      uses: "actions/upload-artifact@v4"
+      with:
+        name: "awslc-dist-${{ inputs.OS_FAMILY }}.tar.gz"
+        path: "deps/awslc/awslc-dist.tar.gz"
+
+    - name: "Dependencies - Archive - QuicTLS"
+      uses: "actions/upload-artifact@v4"
+      with:
+        name: "quictls-dist-${{ inputs.OS_FAMILY }}.tar.gz"
+        path: "deps/quictls/quictls-dist.tar.gz"
+
+    - name: "Dependencies - Archive - VTest"
+      uses: "actions/upload-artifact@v4"
+      with:
+        name: "vtest-dist-${{ inputs.OS_FAMILY }}.tar.gz"
+        path: "deps/vtest/vtest-dist.tar.gz"

.github/actions/retrieve-deps/action.yml

@@ -0,0 +1,64 @@
+name: "Retrieve Dependencies"
+description: "Retrieve previously built dependencies"
+
+inputs:
+  OS_FAMILY:
+    description: "Dependency build OS family"
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    - name: "Dependencies - Retrieve - LUA"
+      uses: "actions/download-artifact@v4"
+      with:
+        name: "lua-dist-${{ inputs.OS_FAMILY }}.tar.gz"
+        path: "deps/lua"
+
+    - name: "Dependencies - Retrieve - PCRE2"
+      uses: "actions/download-artifact@v4"
+      with:
+        name: "pcre2-dist-${{ inputs.OS_FAMILY }}.tar.gz"
+        path: "deps/pcre2"
+
+    - name: "Dependencies - Retrieve - AWS-LC"
+      uses: "actions/download-artifact@v4"
+      with:
+        name: "awslc-dist-${{ inputs.OS_FAMILY }}.tar.gz"
+        path: "deps/awslc"
+
+    - name: "Dependencies - Retrieve - QuicTLS"
+      uses: "actions/download-artifact@v4"
+      with:
+        name: "quictls-dist-${{ inputs.OS_FAMILY }}.tar.gz"
+        path: "deps/quictls"
+
+    - name: "Dependencies - Retrieve - VTest"
+      uses: "actions/download-artifact@v4"
+      with:
+        name: "vtest-dist-${{ inputs.OS_FAMILY }}.tar.gz"
+        path: "deps/vtest"
+
+    - name: "Dependencies - Unpack"
+      shell: "bash"
+      run: |
+        set -euo pipefail
+
+        function unpack_dep() {
+          local dep="$1"
+          local tarball="deps/$dep/$dep-dist.tar.gz"
+          echo "Unpacking dependency name=$dep tarball=$tarball"
+          if ! [ -f "$tarball" ]; then
+            echo "tarball not found in deps/$dep:"
+            ls -l "deps/$dep"
+            exit 1
+          fi
+          mkdir -pv "deps/$dep/dist"
+          tar -C "deps/$dep/dist" -xf "$tarball"
+        }
+
+        unpack_dep "lua"
+        unpack_dep "pcre2"
+        unpack_dep "awslc"
+        unpack_dep "quictls"
+        unpack_dep "vtest"

.github/actions/setup-os/action.yml

@@ -1,14 +1,19 @@
-name: Setup Debian-based OS dependencies
-description: |
-  Because we live in a dumb world where I have to care about the source OS' libc version of the programs I compile...
+name: Setup OS dependencies
 
-  Fuck static linking forever
+inputs:
+  OS_FAMILY:
+    description: "Dependency build OS family"
+    required: true
 
 runs:
   using: "composite"
-
   steps:
-    - name: Install OS dependencies
-      shell: bash
-      run: |
-        ./tool/setup-debian.sh
+    - name: "Install OS dependencies"
+      shell: "bash"
+      run: "./tool/setup-${{ inputs.OS_FAMILY }}.sh"
+    - name: "Ensure execution environment has sane ulimits"
+      shell: "bash"
+      run: "./tool/check-docker-ulimit.sh"
+    - name: "Allow Git read operations"
+      shell: "bash"
+      run: "git config --global --add safe.directory '*'"

.github/workflows/ci.yml

@@ -4,35 +4,16 @@ on:
     tags: [ "*" ]
 
 jobs:
-  haproxy-dependencies:
-    uses: "./.github/workflows/haproxy-deps.yml"
+  debian:
+    uses: "./.github/workflows/pipeline.yml"
     with:
-      DEBIAN_CODENAME: "bookworm"
+      OS_FAMILY: "debian"
+      OS_IMAGE: "ghcr.io/mangadex-pub/containers-base/debian:bookworm-develroot"
+      OS_PACKAGING: "deb"
 
-  dist-stable:
-    needs: [ "haproxy-dependencies" ]
-    uses: "./.github/workflows/haproxy-dist.yml"
-    secrets: "inherit" # for Docker image publication
+  rockylinux:
+    uses: "./.github/workflows/pipeline.yml"
     with:
-      DEBIAN_CODENAME: "bookworm"
-      HAPROXY_FLAVOUR: "stable"
-      # https://git.haproxy.org/?p=haproxy-3.1.git;a=commit;h=v3.1.3
-      HAPROXY_GITREPO: "https://git.haproxy.org/?p=haproxy-3.1.git"
-      HAPROXY_VERSION: "3.1-stable"
-      HAPROXY_GITREF: "v3.1.3"
-      HAPROXY_DATAPLANEAPI_VERSION: "v3.0"
-      HAPROXY_OPTIMIZATION: "-O2"
-
-  dist-dev:
-    needs: [ "haproxy-dependencies" ]
-    uses: "./.github/workflows/haproxy-dist.yml"
-    secrets: "inherit" # for Docker image publication
-    with:
-      DEBIAN_CODENAME: "bookworm"
-      HAPROXY_FLAVOUR: "dev"
-      # https://git.haproxy.org/?p=haproxy.git;a=commit;h=8235a24782e528b9bf8ca9dd69c0a147556dfcb5
-      HAPROXY_GITREPO: "https://git.haproxy.org/?p=haproxy.git"
-      HAPROXY_VERSION: "3.2-dev"
-      HAPROXY_GITREF: "8235a24782e528b9bf8ca9dd69c0a147556dfcb5"
-      HAPROXY_DATAPLANEAPI_VERSION: "master"
-      HAPROXY_OPTIMIZATION: "-Og"
+      OS_FAMILY: "rockylinux"
+      OS_IMAGE: "ghcr.io/mangadex-pub/containers-base/rockylinux:9-develroot"
+      OS_PACKAGING: "rpm"