Validation Workflow #6
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Validation Workflow | |
| on: | |
| push: | |
| branches: [ master ] | |
| pull_request_target: | |
| branches: [ master ] | |
| workflow_dispatch: | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| max-parallel: 4 | |
| matrix: | |
| python-version: ["3.8", "3.9", "3.10"] | |
| defaults: | |
| run: | |
| shell: "bash -l {0}" | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - uses: cvmfs-contrib/github-action-cvmfs@v2 | |
| with: | |
| cvmfs_repositories: 'grid.cern.ch' | |
| - name: Set conda environment | |
| uses: conda-incubator/setup-miniconda@v2 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| mamba-version: "*" | |
| channels: conda-forge,defaults | |
| channel-priority: true | |
| auto-update-conda: true | |
| activate-environment: py_env | |
| environment-file: py_env.yml | |
| auto-activate-base: false | |
| - name: Verify environment | |
| run: | | |
| conda info | |
| conda env list | |
| conda list | |
| - name: Set up proxy | |
| # https://awesome-workshop.github.io/gitlab-cms/03-vomsproxy/index.html | |
| # continue-on-error: true | |
| env: | |
| # To genereate secrets use (strip all \n) | |
| # base64 -i ~/.globus/usercert.pem | awk NF=NF RS= OFS= | |
| # base64 -i ~/.globus/userkey.pem | awk NF=NF RS= OFS= | |
| # Cross check roundtrip by adding ``| base64 -d `` and see if same as input | |
| GRID_USERKEY: ${{ secrets.GRID_USERKEY }} | |
| GRID_USERCERT: ${{ secrets.GRID_USERCERT }} | |
| # Read automatically by voms-proxy-init | |
| X509_VOMS_DIR: /cvmfs/grid.cern.ch/etc/grid-security/vomsdir/ | |
| X509_VOMSES: /cvmfs/grid.cern.ch/etc/grid-security/vomses/ | |
| X509_DEFAULT_USER_CERT: $HOME/.globus/usercert.pem | |
| X509_DEFAULT_USER_KEY: $HOME/.globus/userkey.pem | |
| run: | | |
| mkdir $HOME/.globus | |
| printf $GRID_USERKEY | base64 -d > $HOME/.globus/userkey.pem | |
| printf $GRID_USERCERT | base64 -d > $HOME/.globus/usercert.pem | |
| # DEBUG: dump decoded cert, cert is public, but don't dump key! | |
| # base64 -i $HOME/.globus/usercert.pem | |
| chmod 400 $HOME/.globus/userkey.pem | |
| openssl rand -out $HOME/.rnd -hex 256 | |
| # printf "${{secrets.GRID_PASSWORD}}" | voms-proxy-init --voms cms:/cms/dcms --vomses ${X509_VOMSES} --debug --pwstdin | |
| printf "${{secrets.GRID_PASSWORD}}" | voms-proxy-init --voms cms --vomses ${X509_VOMSES} --debug --pwstdin | |
| - name: Test xrootd | |
| run: | | |
| xrdcp root://eoscms.cern.ch//eos/cms/store/group/phys_btag/nano-commissioning/test_w_dj.root . | |