wolfssl/scripts
Juliusz Sosinowicz 3a6c31a51e CI: pool the per-config runner matrices into parallel make-check jobs
Replace the one-runner-per-configuration matrices across the
make-check workflow family with a generic pooled runner,
.github/scripts/parallel-make-check.py. Each workflow keeps its
configuration list as JSON next to the invocation; one runner (or a
small fixed set of shards, balanced by measured per-config minutes)
builds every config in its own out-of-tree (VPATH) build directory off
a single checkout/autogen, on a pool of one-per-CPU worker threads,
longest first. Concurrent checks are isolated with bubblewrap network
namespaces, compilations are cached with ccache, the first failure
aborts the rest (fail-fast, with --no-fail-fast to run everything),
and per-config timings plus pool efficiency land in the step summary.
Failure logs upload as artifacts. smoke-test.yml is likewise reworked
into a single pooled job that runs its nine configs on one runner.

Converted workflows (runner jobs per full pass):
  os-check.yml             101 -> 8  (92 Ubuntu configs -> 4 shards;
                           the macOS matrix, the user-settings jobs and
                           the standalone
                           macos-apple-native-cert-validation.yml fold
                           into one macOS runner; Windows unchanged)
  pq-all.yml                21 -> 2 shards
  disable-pk-algs.yml       15 -> 1
  wolfCrypt-Wconversion.yml 11 -> 1
  trackmemory.yml            7 -> 1
  cryptocb-only.yml          8 -> 1  (incl. the two new SHA512 entries)
  multi-compiler.yml         6 -> 1
  smallStackSize.yml         6 -> 1
  multi-arch.yml             6 -> 1
  async.yml                  5 -> 1
  psk.yml                    5 -> 1
  no-malloc.yml              3 -> 1
  wolfsm.yml                 3 -> 1
  opensslcoexist.yml         2 -> 1

Measured against current upstream passing runs (job execution time,
queue excluded): ~200 runner jobs / ~374 runner-minutes per full pass
become 23 jobs / ~168 runner-minutes, with more coverage than before.
multi-arch's old matrix combined an "include" list of four
architectures with an "opts" axis; GitHub's include-merge rules made
each arch entry overwrite the previous one, so only the armel
combinations actually ran. The pooled list restores the intended
aarch64/armhf/riscv64 coverage (23 combinations; riscv64 x sp-math is
omitted as invalid - configure rejects sp-math without SP, and
--enable-riscv-asm, unlike --enable-sp-asm, does not bring SP in).

Out-of-tree build fixes this depends on:
- Makefile.am: symlink the read-only test data (certs/, tests/ config
  files, sniffer captures and helpers, examples/crypto_policies,
  input, quit) into the build tree via a BUILT_SOURCES stamp, removed
  again in distclean-local. ChangeToWolfRoot() and the script tests
  resolve everything relative to the working directory, so out-of-tree
  make check and make distcheck now pass.
- scripts/multi-msg-record.py: locate the client binary from the build
  tree working directory rather than the script's source directory.
- configure.ac + wolfssl/include.am: run
  support/gen-debug-trace-error-codes.sh from $srcdir; it reads the
  error-code headers from the source tree and generates into the build
  tree.
- tests/swdev: a WOLFBUILD variable points the sub-make at the build
  tree for the configure-generated headers (wolfssl/options.h,
  wolfssl/version.h); the in-tree-only guards are dropped.

Portions of PR #10649 are incorporated: the cross-platform
ccache-setup composite action, repository_owner gates on check-headers
and check-source-text, the docs-only paths-ignore on os-check, and the
libspdm timeout bumps.
2026-06-12 09:47:13 +00:00
..
bench
aria-cmake-build-test.sh portability enhancement: use "#!/usr/bin/env <interpreter>" on all perl scripts and shell scripts that use bash extensions, and use "#!/bin/sh" on the rest. 2024-08-20 13:48:33 -05:00
asn1_oid_sum.pl Finalize ML-DSA renaming 2026-05-26 14:54:30 +02:00
benchmark.test scripts/*.test: in kill -0 PID existence tests, close stderr to silence noise. 2026-04-14 23:23:53 -05:00
benchmark_compare.sh portability enhancement: use "#!/usr/bin/env <interpreter>" on all perl scripts and shell scripts that use bash extensions, and use "#!/bin/sh" on the rest. 2024-08-20 13:48:33 -05:00
cleanup_testfiles.sh
crl-gen-openssl.test Generate CRLs from unit test script 2026-03-10 13:25:12 -07:00
crl-revoked.test src/ssl.c: in wolfSSL_check_domain_name(), use XSTRCMP(), not strcmp(); 2026-05-06 21:40:33 -05:00
dertoc.pl portability enhancement: use "#!/usr/bin/env <interpreter>" on all perl scripts and shell scripts that use bash extensions, and use "#!/bin/sh" on the rest. 2024-08-20 13:48:33 -05:00
dtls.test scripts/*.test: delay reaping servers in cleanup handlers to allow sanitizers to finish rendering backtraces. 2026-04-14 23:09:20 -05:00
dtlscid.test Fix compilation checks in test scripts 2026-02-10 13:14:55 +01:00
external.test Restore original comments 2024-09-05 15:10:50 -07:00
google.test Restore original comments 2024-09-05 15:10:50 -07:00
include.am Add a test for multi-message TLS records 2026-05-14 13:10:13 +02:00
makedistsmall.sh portability enhancement: use "#!/usr/bin/env <interpreter>" on all perl scripts and shell scripts that use bash extensions, and use "#!/bin/sh" on the rest. 2024-08-20 13:48:33 -05:00
memtest.sh portability enhancement: use "#!/usr/bin/env <interpreter>" on all perl scripts and shell scripts that use bash extensions, and use "#!/bin/sh" on the rest. 2024-08-20 13:48:33 -05:00
multi-msg-record.py CI: pool the per-config runner matrices into parallel make-check jobs 2026-06-12 09:47:13 +00:00
multi-msg-record.test Fix comment dash 2026-05-14 13:10:13 +02:00
ocsp-responder-openssl-interop.test Make test scripts work in sandboxed/restricted environments 2026-05-14 13:10:13 +02:00
ocsp-stapling-with-ca-as-responder.test Fix compilation checks in test scripts 2026-02-10 13:14:55 +01:00
ocsp-stapling-with-wolfssl-responder.test Address copilot review 2026-03-11 11:08:44 +01:00
ocsp-stapling.test Remove non-RFC-compliant OCSP responder chain walk. The chain walk 2026-06-02 16:20:37 -06:00
ocsp-stapling2.test Remove non-RFC-compliant OCSP responder chain walk. The chain walk 2026-06-02 16:20:37 -06:00
ocsp-stapling_tls13multi.test Remove non-RFC-compliant OCSP responder chain walk. The chain walk 2026-06-02 16:20:37 -06:00
ocsp.test [scripts/ocsp.test] Remove ${SCRIPT_DIR} from the pathname to ca-google-root.pem. 2024-08-31 18:22:20 +09:00
openssl.test Merge pull request #10058 from julek-wolfssl/hostap-ec-generate.sh 2026-04-23 14:09:09 -06:00
openssl_srtp.test Add bwrap network namespace isolation to scripts with listening ports 2026-04-09 13:56:14 +02:00
pem.test scripts/pem.test: correctly compute and use SRC_DIR, and fix whitespace. 2026-04-20 17:42:29 -05:00
ping.test portability enhancement: use "#!/usr/bin/env <interpreter>" on all perl scripts and shell scripts that use bash extensions, and use "#!/bin/sh" on the rest. 2024-08-20 13:48:33 -05:00
pkcallbacks.test scripts/*.test: in kill -0 PID existence tests, close stderr to silence noise. 2026-04-14 23:23:53 -05:00
psk.test scripts/*.test: in kill -0 PID existence tests, close stderr to silence noise. 2026-04-14 23:23:53 -05:00
resume.test scripts/*.test: in kill -0 PID existence tests, close stderr to silence noise. 2026-04-14 23:23:53 -05:00
rsapss.test Fix all shellcheck items 2026-03-04 15:06:55 -07:00
sniffer-gen.sh Add bwrap network namespace isolation to scripts with listening ports 2026-04-09 13:56:14 +02:00
sniffer-ipv6.pcap
sniffer-static-rsa.pcap
sniffer-testsuite.test portability enhancement: use "#!/usr/bin/env <interpreter>" on all perl scripts and shell scripts that use bash extensions, and use "#!/bin/sh" on the rest. 2024-08-20 13:48:33 -05:00
sniffer-tls12-keylog.out
sniffer-tls12-keylog.pcap
sniffer-tls12-keylog.sslkeylog
sniffer-tls13-dh-resume.pcap
sniffer-tls13-dh.pcap
sniffer-tls13-ecc-resume.pcap
sniffer-tls13-ecc.pcap
sniffer-tls13-hrr.pcap
sniffer-tls13-keylog.out
sniffer-tls13-keylog.pcap
sniffer-tls13-keylog.sslkeylog
sniffer-tls13-x25519-resume.pcap
sniffer-tls13-x25519.pcap
stm32l4-v4_0_1_build.sh portability enhancement: use "#!/usr/bin/env <interpreter>" on all perl scripts and shell scripts that use bash extensions, and use "#!/bin/sh" on the rest. 2024-08-20 13:48:33 -05:00
tls13.test scripts/*.test: in kill -0 PID existence tests, close stderr to silence noise. 2026-04-14 23:23:53 -05:00
trusted_peer.test scripts/*.test: in kill -0 PID existence tests, close stderr to silence noise. 2026-04-14 23:23:53 -05:00
unit.test.in
user_settings_asm.sh