Update leadership.md (#18975) #16730
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow tests packaging of Fleet-osquery with the | |
| # `fleetctl package` command. It fetches the targets: orbit, | |
| # osquery and fleet-desktop from the default (Fleet's) TUF server, | |
| # https://tuf.fleetctl.com. | |
| name: Test packaging | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - patch-* | |
| - prepare-* | |
| pull_request: | |
| paths: | |
| - 'cmd/fleetctl/**.go' | |
| - 'pkg/**.go' | |
| - 'server/service/**.go' | |
| - 'server/context/**.go' | |
| - 'orbit/**.go' | |
| - 'ee/fleetctl/**.go' | |
| - 'tools/fleetctl-docker/**' | |
| - 'tools/wix-docker/**' | |
| - 'tools/bomutils-docker/**' | |
| - '.github/workflows/test-packaging.yml' | |
| workflow_dispatch: # Manual | |
| # This allows a subsequently queued workflow run to interrupt previous runs | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.run_id}} | |
| cancel-in-progress: true | |
| defaults: | |
| run: | |
| # fail-fast using bash -eo pipefail. See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#exit-codes-and-error-action-preference | |
| shell: bash | |
| permissions: | |
| contents: read | |
| jobs: | |
| test-packaging: | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| # note: in order to test both the wix and the docker flow for msi | |
| # packages, this worker needs to run on an x86_64 architecture. | |
| # `macos-latest` uses arm64 by default now, so please be careful when | |
| # updating this version. | |
| os: [ubuntu-latest, macos-13] | |
| go-version: ['${{ vars.GO_VERSION }}'] | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 | |
| with: | |
| egress-policy: audit | |
| - name: Pull fleetdm/wix | |
| # Run in background while other steps complete to speed up the workflow | |
| run: docker pull fleetdm/wix:latest & | |
| - name: Run Colima | |
| if: startsWith(matrix.os, 'macos') | |
| timeout-minutes: 10 | |
| # notes: | |
| # - docker to install the docker CLI and interact with the Colima | |
| # container runtime | |
| # - colima is pre-installed in macos-12 runners, but not in macos-13 or | |
| # macos-14 runners | |
| run: | | |
| brew install docker colima | |
| colima start --mount $TMPDIR:w | |
| - name: Install Go | |
| uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 | |
| with: | |
| go-version: ${{ matrix.go-version }} | |
| - name: Checkout Code | |
| uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
| - name: Install wine and wix | |
| if: startsWith(matrix.os, 'macos') | |
| run: | | |
| ./scripts/macos-install-wine.sh -n | |
| wget https://github.com/wixtoolset/wix3/releases/download/wix3112rtm/wix311-binaries.zip -nv -O wix.zip | |
| mkdir wix | |
| unzip wix.zip -d wix | |
| rm -f wix.zip | |
| echo wix installed at $(pwd)/wix | |
| # It seems faster not to cache Go dependencies | |
| - name: Install Go Dependencies | |
| run: make deps-go | |
| - name: Build fleetctl | |
| run: make fleetctl | |
| - name: Build DEB | |
| run: ./build/fleetctl package --type deb --enroll-secret=foo --fleet-url=https://localhost:8080 | |
| - name: Build DEB with Fleet Desktop | |
| run: ./build/fleetctl package --type deb --enroll-secret=foo --fleet-url=https://localhost:8080 --fleet-desktop | |
| - name: Build RPM | |
| run: ./build/fleetctl package --type rpm --enroll-secret=foo --fleet-url=https://localhost:8080 | |
| - name: Build RPM with Fleet Desktop | |
| run: ./build/fleetctl package --type rpm --enroll-secret=foo --fleet-url=https://localhost:8080 --fleet-desktop | |
| - name: Build MSI | |
| run: ./build/fleetctl package --type msi --enroll-secret=foo --fleet-url=https://localhost:8080 | |
| - name: Build MSI with Fleet Desktop | |
| run: ./build/fleetctl package --type msi --enroll-secret=foo --fleet-url=https://localhost:8080 --fleet-desktop | |
| - name: Build PKG | |
| run: ./build/fleetctl package --type pkg --enroll-secret=foo --fleet-url=https://localhost:8080 | |
| - name: Build PKG with Fleet Desktop | |
| run: ./build/fleetctl package --type pkg --enroll-secret=foo --fleet-url=https://localhost:8080 --fleet-desktop | |
| - name: Build MSI (using local Wix) | |
| if: startsWith(matrix.os, 'macos') | |
| run: ./build/fleetctl package --type msi --enroll-secret=foo --fleet-url=https://localhost:8080 --fleet-desktop --local-wix-dir ./wix |