169 Commits (6ee956333fda82b17f6dddbe5eb7388ae9b43b70)

Author	SHA1	Message	Date
Mihai Parparita	38bbb30aaf	.github/workflows: remove tsconnect-pkg-publish.yml ... Moved to the corp repo with tailscale/corp#7990 Updates tailscale/corp#10165 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
dependabot[bot]	60a028a4f6	.github: Bump peter-evans/create-pull-request from 4.1.4 to 4.2.4 ... Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 4.1.4 to 4.2.4. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](ad43dccb4d...38e0b6e68b) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	927e2e3e7c	.github: Bump actions/setup-go from 3 to 4 ... Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3 to 4. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
Maisem Ali	95494a155e	.github: use unique names for jobs ... Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
M. J. Fromberger	c09578d060	.github: update tibdex/github-app-token to release v1.8.0 (#7495) ... The main motivation for this change is to stop using the deprecated set-output function which triggers deprecation warnings in the action. Change-Id: I80496c44ea1166b9c40d5cd9e450129778ad4aaf Signed-off-by: M. J. Fromberger <fromberger@tailscale.com>	2 years ago
David Anderson	b0eba129e6	.github/workflows: add a pass/fail verdict job to the test workflow ... Github requires explicitly listing every single job within a workflow that is required for status checks, instead of letting you list entire workflows. This is ludicrous, and apparently this nonsense is the workaround. Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	0ab6a7e7f5	.github/workflows: try to make the merge queue actually run CI ... Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	5a2fa3aa95	.github/workflows: add armv5 and armv7 cross tests ... armv5 because that's what we ship to most downstreams right now, armv7 becuase that's what we want to ship more of. Fixes https://github.com/tailscale/tailscale/issues/7269 Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	093139fafd	.github/workflows: fix non-collapsing CI status in PRs ... CI status doesn't collapse into "everything OK" if a job gets skipped. Instead, always run the job, but skip its only step in PRs. Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	306c8a713c	.github/workflows: run CI and CodeQL in the merge queue ... Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	149de5e6d6	build_dist.sh: use cmd/mkversion to get version data ... Replaces the former shell goop, which was a shell reimplementation of a subset of version/mkversion. Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
Maisem Ali	4a99481a11	.github/workflows: set TS_FUZZ_CURRENTLY_BROKEN to false ... Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
David Anderson	6de3459bc8	.github/workflows: fix typo ... Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	f145c2b65b	.github/workflows: add workflow to update go.mod Nix SRI hash ... So that I just get a quick PR to approve and merge instead of periodically discovering that the SRI hash has bitrotted. Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	2eb25686d7	.github/workflows: simplify build-only go test invocation ... Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	253333b8a3	.github/workflows: support disabling fuzz testing safely ... OSS-Fuzz doesn't update their version of Go as quickly as we do, so we sometimes end up with OSS-Fuzz being unable to build our code for a few weeks. We don't want CI to be red for that entire time, but we also don't want to forget to reenable fuzzing when OSS-Fuzz does start working again. This change makes two configurations worthy of a CI pass: - Fuzzing works, and we expected it to work. This is a normal happy state. - Fuzzing didn't compile, and we expected it to not compile. This is the "OSS-Fuzz temporarily broken" state. If fuzzing is unexpectedly broken, or unexpectedly not broken, that's a CI failure because we need to either address a fuzz finding, or update TS_FUZZ_CURRENTLY_BROKEN to reflect the state of OSS-Fuzz. Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	5e186f9fbf	.github/workflows: pin version of Windows we run on ... Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	471053a054	.github/workflows: pin version of Ubuntu we run on ... Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	2a43fa4421	.github/workflows: use variant=race instead of race=true for race test ... Github's matrix runner formats the race variant as '(amd64, true)' if we use race=true. So, change the way the variable is defined so that it says '(amd64, race)' even if that makes the if statements a bit more complex. Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	9fc3d00c17	.github/workflows: add back forgotten android CI job ... Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	4022796484	.github/workflows: unify and matrixify all our CI steps ... Instead of having a dozen files that contribute CI steps with inconsistent configs, this one file lists out everything that, for us, constitutes "a CI run". It also enables the slack notification webhook to notify us exactly once on a mass breakage, rather than once for every sub-job that fails. Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
David Anderson	ea8b896c6c	.github/workflows: remove 'ci skip' boilerplate ... We've never used the "[ci skip]" magic commit header in our history, across all our repos. This seems to be boilerplate we imported years ago and have since been copying around our CI configs. Signed-off-by: David Anderson <danderson@tailscale.com>	2 years ago
Mihai Parparita	2f4df30c75	.github/workflows: re-enable CIFuzz job ... Having an empty `on` spec results in the job still running, but it immediately fails with a "No jobs were run" message. Go back to the original `on: [pull_request]` spec, and disable the workflow in the GitHub UI instead. This reverts commit f7b3156f16. Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Maisem Ali	2a094181df	.github/workflows: use ./tool/go in go mod tidy ... Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
Brad Fitzpatrick	f7b3156f16	.github/workflows: delete CIFuzz job ... It doesn't yet support Go 1.20. We can bring it back later. Updates #7123 Change-Id: I6c4a4090e910d06f34c3f4d612e737989fe85812 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Brad Fitzpatrick	b1248442c3	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork ... Updates #7123 Updates #5309 Change-Id: I90bcd87a2fb85a91834a0dd4be6e03db08438672 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
M. J. Fromberger	3eae75b1b8	ci: make gofmt check fail for a non-empty diff (#7131) ... Fixes #7130. Change-Id: If47eb472ea98a8d8b250c5c681c7862d252645fb Signed-off-by: M. J. Fromberger <fromberger@tailscale.com>	2 years ago
Nick Kirby	fac1632ed9	Update CodeQL action to v2 ... There's an error in the `Perform CodeQL Analysis` step saying to upgrade to v2 as v1 was deprecated on 18th January. Signed-off-by: Nick Kirby <nrkirb@gmail.com>	2 years ago
Andrew Dunham	aea251d42a	cmd/testwrapper: move from corp; mark magicsock test as flaky ... Signed-off-by: Andrew Dunham <andrew@du.nham.ca> Change-Id: Ibab5860f5797b3db151d3c27855333e43a9088a4	2 years ago
缘生	9c67395334	feat(build): add support on Loongnix-Server (loong64) (#6233) ... Makefile, .github/workflow: add tests, targets for GOARCH=loong64 (Loongnix) Signed-off-by: ysicing <i@ysicing.me>	2 years ago
Maisem Ali	732c3d2ed0	.github/workflows: use ubuntu-22.04 for qemu tests ... Fixes #6507 Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
Aoang	60f77ba515	Fix vm ci tests clogging in fork repository pull request ... fix: https://github.com/tailscale/tailscale/issues/5771 Signed-off-by: Aoang <aoang@x2oe.com>	2 years ago
Will Norris	7b745a1a50	.github: run CI on release branches ... Signed-off-by: Will Norris <will@tailscale.com>	2 years ago
Mihai Parparita	37da617380	.github/workflows: use fast compression for NPM package CI check ... Starting with #5946 we're compressing main.wasm when building the package, but that should not show down the CI check. Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
dependabot[bot]	3a33895f1b	.github: Bump peter-evans/create-pull-request from 4.1.1 to 4.1.4 (#5965) ... * .github: Bump peter-evans/create-pull-request from 4.1.1 to 4.1.4 * Update semantic version comment. Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 4.1.1 to 4.1.4. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](18f90432be...ad43dccb4d) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: M. J. Fromberger <fromberger@tailscale.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: M. J. Fromberger <fromberger@tailscale.com>	2 years ago
Josh Soref	7686446c60	Drop duplicated `$` ... Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>	2 years ago
Brad Fitzpatrick	d8eb111ac8	.github/workflows: add cross-android ... This would've caught the regression from 7c49db02a before it was submitted so 42f1d92ae0 wouldn't have been necessary to fix it. Updates #4482 Change-Id: Ia4a9977e21853f68df96f043672c86a86c0181db Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Denton Gentry	6dcc6313a6	CI: add `go mod tidy` workflow ... Fixes https://github.com/tailscale/tailscale/issues/4567 Signed-off-by: Denton Gentry <dgentry@tailscale.com>	2 years ago
Denton Gentry	78dbb59a00	CI: make all workflows get Go version from go.mod ... The next time we update the toolchain, all of the CI Actions will automatically use it when go.mod is updated. Signed-off-by: Denton Gentry <dgentry@tailscale.com>	2 years ago
Mihai Parparita	2c18517121	cmd/tsconnect: add npm publish workflow ... Adds an on-demand GitHub Action that publishes the package to the npm registry (currently under tailscale-connect, will be moved to @tailscale/connect once we get control of the npm org). Makes the package.json for the NPM package be dynamically generated to have the current Tailscale client version. Updates #5415 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Will Norris	3d328b82ee	.github/actions: add signoff to go-licenses commits ... also set git committer, which is apparently what this action uses for signoff rather than git author. Remove branch-suffix, which isn't proving useful, and add installation_id, which isn't technically necessary in the tailscale/tailscale repo, but makes this consistent with the workflows in other repos. Signed-off-by: Will Norris <will@tailscale.com>	2 years ago
Will Norris	5c7e960fa8	licenses: add GitHub Action to update license notices (#5433) ... This will update a licenses/tailscale.md file with all of our go dependencies and their respective licenses. Notices for other clients will be triggered by similar actions in other repos. Co-authored-by: Andrew Dunham <andrew@tailscale.com> Signed-off-by: Will Norris <will@tailscale.com> Signed-off-by: Andrew Dunham <andrew@tailscale.com>	2 years ago
Mihai Parparita	1a093ef482	cmd/tsconnect: extract NPM package for reusing in other projects ... `src/` is broken up into several subdirectories: - `lib/` and `types`/ for shared code and type definitions (more code will be moved here) - `app/` for the existing Preact-app - `pkg/` for the new NPM package A new `build-pkg` esbuild-based command is added to generate the files for the NPM package. To generate type definitions (something that esbuild does not do), we set up `dts-bundle-generator`. Includes additional cleanups to the Wasm type definitions (we switch to string literals for enums, since exported const enums are hard to use via packages). Also allows the control URL to be set a runtime (in addition to the current build option), so that we don't have to rebuild the package for dev vs. prod use. Updates #5415 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Maisem Ali	d4916a8be3	.github/workflows: cancel previous CI runs on PR update ... Currently scheduled runs are not canceled when we update PRs, those results are unused and the resources are just wasted. Instead of doing that, this PR makes it so that when a PR is updated (force-pushed or new commit added) the previous runs are canceled. https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#example-using-a-fallback-value Signed-off-by: Maisem Ali <maisem@tailscale.com>	2 years ago
Brad Fitzpatrick	0476c8ebc6	.github/workflows: delete flaky windows-race.yml ... It flakes more often than it runs. It provides no value and builds failure blindness, making people get used to submitting on red. Bye. Change-Id: If5491c70737b4c9851c103733b1855af2a90a9e9 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Brad Fitzpatrick	c8dd39fcbc	.github/workflows: use a matrix for staticcheck GOOS/GOARCHes ... Change-Id: Ic4eda169729117afc4031bbefbe265195b38c19b Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
David Crawshaw	93324cc7b3	cmd/derper: add depaware.txt ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	2 years ago
Mihai Parparita	f04bc31820	cmd/tsconnect: add -fast-compression option ... Changes Gzip and Brotli to optimize for speed instead of size. This signficantly speeds up Brotli, and is useful when iterating locally or running the build during a CI job (where we just care that it can successfully build). Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Mihai Parparita	9dfcdbf478	.github/workflows: put back CLI in cross-wasm GitHub action ... Since we're keeping the JS support in the CLI (see https://github.com/tailscale/tailscale/pull/5265#issuecomment-1203078243), make sure it keeps building. Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Brad Fitzpatrick	e1309e1323	all: require Go 1.19 ... Updates #5210 Change-Id: I2e950b4776636b4ea89b6566b60e4a87596a3a43 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Brad Fitzpatrick	97b8c4fa1b	ipn/store/awsstore: add "ts_omit_aws" build tag to reduce binary size ... Drops tailscaled from 23M to 21M. Change-Id: I731c542d03113ac94abb695e3c8fcacbc5542712 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Brad Fitzpatrick	7c671b0220	.github/workflows: add gofmt (goimports) check ... Change-Id: Iceb3182827b9c65f28f0351e0e254abe4a95e4de Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	2 years ago
Mihai Parparita	7e4883b261	.github/workflows: add tsconnect static build to wasm GitHub action ... Technically not the same as the wasm cross-compilation, but it's closely connected to it. Also includes some fixes to tool/yasm to make it actually work on non-ARM platforms. Fixes #5134 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Mihai Parparita	de2dcda2e0	.github/workflows: update module that we try to build in cross-wasm ... We now have the actual module that we need to build, so switch to building it directly instead of its (expected) dependencies. Also fix a copy/paste error in a jsdeps comment. Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
Mihai Parparita	6f58497647	.github/workflows: downgrade MinGW to work around windows-race failures ... Updates #4926 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	2 years ago
James Tucker	c88bd53b1b	.github/workflows: windows-race: print gcc version ... Signed-off-by: James Tucker <james@tailscale.com>	2 years ago
Mihai Parparita	bded712e58	.github/workflows: fix duplicated build target in Wasm action ... Signed-off-by: Mihai Parparita <mihai@tailscale.com>	3 years ago
Mihai Parparita	7cfc6130e5	.github/workflows: add cross-builder for Wasm ... For now just checks that we can build cmd/tailscale/cli, will be broadened once we can actually build more things. Updates #3157 Signed-off-by: Mihai Parparita <mihai@tailscale.com>	3 years ago
Brad Fitzpatrick	a49d8d5200	Revert ".github/workflows: work around golang/go#51629" ... This reverts commit 2a412ac9ee. Updates #4194 Change-Id: I0098b66b71d20bea301ca79058c1cdd201237dd0 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	3 years ago
dependabot[bot]	a121b9f263	.github: Bump actions/checkout from 2 to 3 ... Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
dependabot[bot]	257d75beb1	.github: Bump actions/setup-go from 2.1.5 to 3 ... Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2.1.5 to 3. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v2.1.5...v3) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
dependabot[bot]	f2b0faf91e	.github: Bump actions/upload-artifact from 2.3.1 to 3 ... Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2.3.1 to 3. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v2.3.1...v3) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
dependabot[bot]	7fbb6a76ad	.github: Bump actions/cache from 2 to 3 ... Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3. - [Release notes](https://github.com/actions/cache/releases) - [Commits](https://github.com/actions/cache/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
David Anderson	2a412ac9ee	.github/workflows: work around golang/go#51629 ... Incidentally, simplify the go generate CI workflow, by marking the dnsfallback update non-hermetic (so CI will skip it) rather than manually filter it out of `go list`. Updates #4194 Signed-off-by: David Anderson <danderson@tailscale.com>	3 years ago
Josh Bleecher Snyder	4b1e02057a	.github/workflows: request Go 1.18 ... Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>	3 years ago
James Tucker	858286d97f	github/windows: improve caching in -race builder (#4172) ... Signed-off-by: James Tucker <james@tailscale.com> Co-authored-by: James Tucker <james@tailscale.com>	3 years ago
James Tucker	36b148c2d2	github/windows: improve cache performance (#4171) ... - Remove the expanded module files, as Go can likely expand the zips faster than tar can expand the extra copies. - Add the go-build cache. - Remove the extra restore key to avoid extra cache lookups on miss. Signed-off-by: James Tucker <james@tailscale.com> Co-authored-by: James Tucker <james@tailscale.com>	3 years ago
Brad Fitzpatrick	69392411d9	.github/workflows: add some iOS CI coverage ... Updates #3812 Change-Id: Ia779c6a2e9a0fd02418bf5479fdb76d4c80c55a4 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	3 years ago
dependabot[bot]	b1b0fd119b	.github: Bump actions/setup-go from 2.1.4 to 2.1.5 ... Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2.1.4 to 2.1.5. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v2.1.4...v2.1.5) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
Josh Bleecher Snyder	1dc1c8b709	.github/workflows: upgrade to setup-go@v2 ... The rest of our workflows use v2.1.4. For reasons I do not understand, we must set GOPATH here. Maybe the GitHub Action builds come with GOPATH already set? Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>	3 years ago
dependabot[bot]	dee0833b27	.github: Bump actions/upload-artifact from 2.2.4 to 2.3.1 ... Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2.2.4 to 2.3.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v2.2.4...v2.3.1) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
dependabot[bot]	05c1be3e47	.github: Bump actions/upload-artifact from 1 to 2.2.4 ... Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 1 to 2.2.4. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v1...v2.2.4) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
Josh Bleecher Snyder	60510a6ae7	.github/workflows: check that repo is clean after build and test ... Linux-only for now, to avoid having to figure out why powershell doesn't like my shell scripting. (Not that I blame it.) That'll be enough to catch most regressions. Fixes #1083 Co-authored-by: Aaron Klotz <aaron@tailscale.com> Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>	3 years ago
AdamKorcz	def659d1ec	Fuzzing: Add CIFuzz ... Signed-off-by: AdamKorcz <adam@adalogics.com>	3 years ago
Brad Fitzpatrick	c18b9d58aa	tstest/archtest: add GOARCH-specific tests, run via qemu-user ... Updates #3233 Change-Id: Ia224c90490d41e50a1d547eeea709b0d9171c1f9 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	3 years ago
Brad Fitzpatrick	7742caef0a	.github/workflows: always ignore go:generate dnsfallback check ... Keep the now-redundant github.ref branch check for the future, in case we want to change the policy for main vs release-branch again later. Save somebody the YAML debugging time.	3 years ago
David Crawshaw	29fa8c17d2	.github: revert dependabot change for vm builder ... In a56520c3c7 dependabot attempted to bump the setup-go action version. It appears to work for most builders, but not the self-hosted VM builder. Revert for now. Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	3 years ago
dependabot[bot]	a56520c3c7	.github: Bump actions/setup-go from 1 to 2.1.4 ... Bumps [actions/setup-go](https://github.com/actions/setup-go) from 1 to 2.1.4. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v1...v2.1.4) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
Dave Anderson	478775de6a	github: add code security scanning	3 years ago
Josh Bleecher Snyder	008f36986e	.github/workflows: remove separate "build stringer" step ... We now use "go run" instead of compiling stringer separately. Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>	3 years ago
Josh Bleecher Snyder	9faee90744	.github/workflows: skip net/dnsfallback go generate check on release branch ... We don't want to force ourselves to update the DERP list every time we want to cut a new release. Having an outdated DERP list on release branches is OK. Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>	3 years ago
Brad Fitzpatrick	ec2b7c7da6	all: bump minimum Go to 1.17 ... In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	3 years ago
David Crawshaw	9b7fc2ed1f	.github: add Ubuntu VM test ... Signed-off-by: David Crawshaw <crawshaw@tailscale.com>	3 years ago
Maisem Ali	ae9b3f38d6	github: set GOOS/GOARCH for `go list` ... Currently we do not set the env variables for `go list ./...` resulting in errors like ``` build constraints exclude all Go files in /home/runner/work/tailscale/tailscale/chirp ``` Signed-off-by: Maisem Ali <maisem@tailscale.com>	3 years ago
Christine Dodrill	dde8e28f00	disable vm tests on every commit to main ... This experiment apparently failed. Signed-off-by: Christine Dodrill <xe@tailscale.com>	3 years ago
Josh Bleecher Snyder	787939a60c	.github/workflows: add 'go generate' CI job ... Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>	3 years ago
Christine Dodrill	b90f149f5e	Run tests on integration test changes (#2373) ... Hopefully this will catch situations like https://github.com/tailscale/tailscale/pull/2372 Signed-off-by: Christine Dodrill <xe@tailscale.com>	3 years ago
Christine Dodrill	97279a0fe0	tstest/integration/vms: add Oracle Linux image (#2328) ... Oracle Linux[1] is a CentOS fork. It is not very special. I am adding it to the integration jungle because I am adding it to pkgs and the website directions. [1]: https://www.oracle.com/linux/ Signed-off-by: Christine Dodrill <xe@tailscale.com>	3 years ago
Christine Dodrill	6f3a5802a6	experimental VM test: add -v ... Apparently if you don't add -v the tests don't report anything useful when they break. Joy. Signed-Off-By: Christine Dodrill <xe@tailscale.com>	3 years ago
Christine Dodrill	2adbfc920d	integration vm tests: run on every commit to main (#2159) ... This is an experiment to see how often this test would fail if we run it on every commit. This depends on #2145 to fix a flaky part of the test. Signed-off-by: Christine Dodrill <xe@tailscale.com>	3 years ago
Christine Dodrill	b131a74f99	tstest/integration/vms: build and run NixOS (#2190) ... Okay, so, at a high level testing NixOS is a lot different than other distros due to NixOS' determinism. Normally NixOS wants packages to be defined in either an overlay, a custom packageOverrides or even yolo-inline as a part of the system configuration. This is going to have us take a different approach compared to other distributions. The overall plan here is as following: 1. make the binaries as normal 2. template in their paths as raw strings to the nixos system module 3. run `nixos-generators -f qcow -o $CACHE_DIR/tailscale/nixos/version -c generated-config.nix` 4. pass that to the steps that make the virtual machine It doesn't really make sense for us to use a premade virtual machine image for this as that will make it harder to deterministically create the image. Nix commands generate a lot of output, so their output is hidden behind the `-verbose-nix-output` flag. This unfortunately makes this test suite have a hard dependency on Nix/NixOS, however the test suite has only ever been run on NixOS (and I am not sure if it runs on other distros at all), so this probably isn't too big of an issue. Signed-off-by: Christine Dodrill <xe@tailscale.com>	3 years ago
Christine Dodrill	b402e76185	.github/workflows: add integration test with a custom runner (#2044) ... This runner is in my homelab while we muse about a better, more permanent home for these tests. Updates #1988 Signed-off-by: Christine Dodrill <xe@tailscale.com>	4 years ago
Josh Bleecher Snyder	be56aa4962	workflows: execute benchmarks ... #1817 removed the only place in our CI where we executed our benchmark code. Fix that by executing it everywhere. The benchmarks are generally cheap and fast, so this should add minimal overhead. Signed-off-by: Josh Bleecher Snyder <josharian@gmail.com>	4 years ago
Josh Bleecher Snyder	ac75958d2e	workflows: run staticcheck on more platforms ... To prevent issues like #1786, run staticcheck on the primary GOOSes: linux, mac, and windows. Windows also has a fair amount of GOARCH-specific code. If we ever have GOARCH staticcheck failures on other GOOSes, we can expand the test matrix further. This requires installing the staticcheck binary so that we can execute it with different GOOSes. Signed-off-by: Josh Bleecher Snyder <josharian@gmail.com>	4 years ago
Denton Gentry	b9f8dc7867	workflows: remove coverage ... This workflow has been disabled for some time. It can come back later, when appropriate. Signed-off-by: Denton Gentry <dgentry@tailscale.com>	4 years ago
Alex Brainman	7d8f082ff7	.github/workflows: add --race tests on Linux and Windows ... Updates #50 Updates #833 Signed-off-by: Alex Brainman <alex.brainman@gmail.com>	4 years ago
Brad Fitzpatrick	86d3a6c9a6	Switch to Go 1.16. ... Fixes #1370 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>	4 years ago
Denton Gentry	e692e3866b	Cache go modules. ... Apply Go actions cache, as described in https://markphelps.me/2019/11/speed-up-your-go-builds-with-actions-cache/ Signed-off-by: Denton Gentry <dgentry@tailscale.com>	4 years ago
Denton Gentry	d12add6e22	Adjust coverage options. ... + we don't need an exactly accurate count of the number of times each time ran. Remove -covermode, the default "set" will be fine to just track whether a given line ran at all. + add -benchtime=1x. We only need to run the benchmarks once. + -bench=. to match any character. Signed-off-by: Denton Gentry <dgentry@tailscale.com>	4 years ago
Denton Gentry	332759ef73	Add coveralls.io support. ... We include -bench because some parts of the codebase, like smallzstd, do not have regular unit tests but do have very good benchmark tests that covers all functions. Signed-off-by: Denton Gentry <dgentry@tailscale.com>	4 years ago