diff --git a/.github/workflows/check-world.yml b/.github/workflows/check-world.yml index 4788cbaf9db..ca6cfa46002 100644 --- a/.github/workflows/check-world.yml +++ b/.github/workflows/check-world.yml @@ -689,3 +689,72 @@ jobs: - name: Build run: make -C mitls-fstar/src/tls -skj$(nproc) test + + + ### Nix jobs, for some Inria projects + # + # NOTE: these jobs are not containerized + # 1- it should not be needed since Nix takes care of isolating the environment + # 2- it would actually fail to setup Nix due to permissions in the container, and I haven't + # found a clear reference on what the permissions/uids should be. + # + # The fstar-nix job is here to + # 1- Test the nix build in this workflow too + # 2- Reuse the built F* in the following projects, via the magic-nix-cache (note the 'needs') + + fstar-nix: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - uses: DeterminateSystems/nix-installer-action@main + - uses: DeterminateSystems/magic-nix-cache-action@main + - name: Build + run: nix build -L + + comparse: + needs: fstar-nix + runs-on: ubuntu-latest + steps: + - uses: DeterminateSystems/nix-installer-action@main + - uses: DeterminateSystems/magic-nix-cache-action@main + + - uses: actions/checkout@master + with: + repository: TWal/comparse + + - name: Update fstar flake and check + run: | + nix flake update --override-input fstar-flake "github:${{github.repository}}?rev=${{github.sha}}" + nix flake check + + dy-star: + needs: fstar-nix + runs-on: ubuntu-latest + steps: + - uses: DeterminateSystems/nix-installer-action@main + - uses: DeterminateSystems/magic-nix-cache-action@main + + - uses: actions/checkout@master + with: + repository: REPROSEC/dolev-yao-star-extrinsic + + - name: Update fstar flake and check + run: | + nix flake update --override-input fstar-flake "github:${{github.repository}}?rev=${{github.sha}}" + nix flake check + + mls-star: + needs: fstar-nix + runs-on: ubuntu-latest + steps: + - uses: DeterminateSystems/nix-installer-action@main + - uses: DeterminateSystems/magic-nix-cache-action@main + + - uses: actions/checkout@master + with: + repository: Inria-Prosecco/mls-star + + - name: Update fstar flake and check + run: | + nix flake update --override-input fstar-flake "github:${{github.repository}}?rev=${{github.sha}}" + nix flake check