-
-
Notifications
You must be signed in to change notification settings - Fork 62
141 lines (134 loc) · 3.78 KB
/
selinux.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
on:
push:
paths:
- contrib/selinux/*
- .github/workflows/selinux.yml
pull_request:
paths:
- contrib/selinux/*
- .github/workflows/selinux.yml
jobs:
build-el7:
env:
ACTIONS_RUNNER_FORCE_ACTIONS_NODE_VERSION: node16
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
runs-on: ubuntu-latest
container: centos:7
steps:
- name: Prepare
run: |
sed -i \
-e 's,^# *baseurl=http://mirror.centos.org/centos/,baseurl=https://vault.centos.org/centos/,g' \
-e 's,^mirrorlist=http://mirrorlist.centos.org,#&1,' \
/etc/yum.repos.d/*.repo
yum install -y selinux-policy-devel
- uses: actions/checkout@v2
- name: Build
run: |
make -C contrib/selinux AUDITD_VERSIONS=2
- name: Archive policy
uses: actions/upload-artifact@v3
with:
name: selinux-el7
path: contrib/selinux/laurel.pp
build-el8:
runs-on: ubuntu-latest
container: rockylinux:8
steps:
- name: Prepare
run: |
dnf install -y selinux-policy-devel findutils
- uses: actions/checkout@v2
- name: Build
run: |
make -C contrib/selinux AUDITD_VERSIONS=3
- name: Archive policy
uses: actions/upload-artifact@v3
with:
name: selinux-el8
path: contrib/selinux/laurel.pp
build-el9:
runs-on: ubuntu-latest
container: rockylinux:9
steps:
- name: Prepare
run: |
dnf install -y selinux-policy-devel findutils
- uses: actions/checkout@v2
- name: Build
run: |
make -C contrib/selinux AUDITD_VERSIONS=3
- name: Archive policy
uses: actions/upload-artifact@v3
with:
name: selinux-el9
path: contrib/selinux/laurel.pp
build-al2:
env:
ACTIONS_RUNNER_FORCE_ACTIONS_NODE_VERSION: node16
ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
runs-on: ubuntu-latest
container: amazonlinux:2
steps:
- name: Prepare
run: |
yum install -y selinux-policy-devel findutils tar
- uses: actions/checkout@v2
- name: Build
run: |
make -C contrib/selinux AUDITD_VERSIONS=2
- name: Archive policy
uses: actions/upload-artifact@v3
with:
name: selinux-al2
path: contrib/selinux/laurel.pp
build-al2023:
runs-on: ubuntu-latest
container: amazonlinux:2023
steps:
- name: Prepare
run: |
yum install -y selinux-policy-devel findutils tar
- uses: actions/checkout@v2
- name: Build
run: |
make -C contrib/selinux AUDITD_VERSIONS=3
- name: Archive policy
uses: actions/upload-artifact@v3
with:
name: selinux-al2023
path: contrib/selinux/laurel.pp
build-bookworm:
runs-on: ubuntu-latest
container: debian:bookworm-slim
steps:
- name: Prepare
run: |
apt-get -qqy update
apt-get -qqy install selinux-policy-dev
- uses: actions/checkout@v2
- name: Build
run: |
make -C contrib/selinux AUDITD_VERSIONS=3
- name: Archive policy
uses: actions/upload-artifact@v3
with:
name: selinux-bookworm
path: contrib/selinux/laurel.pp
build-jammy:
runs-on: ubuntu-latest
container: ubuntu:jammy
steps:
- name: Prepare
run: |
apt-get -qqy update
apt-get -qqy install selinux-policy-dev
- uses: actions/checkout@v2
- name: Build
run: |
make -C contrib/selinux AUDITD_VERSIONS=3
- name: Archive policy
uses: actions/upload-artifact@v3
with:
name: selinux-jammy
path: contrib/selinux/laurel.pp