_ Git - ldk-java/blob - .github/workflows/build.yml

   1 name: Continuous Integration Checks
   2
   3 on: [push, pull_request]
   4
   5 jobs:
   6   wasm_bindings:
   7     runs-on: ubuntu-latest
   8     # Ubuntu's version of clang doesn't support....anything that should work.
   9     # Ubuntu is an utter trash OS and should generally never be used for anything.
  10     # We also require at least rustc 1.51 (ie https://github.com/rust-lang/rust/pull/79998),
  11     # so we use debian testing
  12     container: debian:bookworm
  13     strategy:
  14       fail-fast: false
  15     steps:
  16       - name: Install build utilities and test that clang can build for wasm
  17         run: |
  18           apt-get update
  19           apt-get -y dist-upgrade
  20           apt-get -y install cargo libstd-rust-dev-wasm32 lld git g++ clang curl node-typescript npm python3 wasi-libc
  21           echo "int main() {}" > genbindings_wasm_test_file.c
  22           clang -nostdlib -o /dev/null --target=wasm32-wasi -Wl,--no-entry genbindings_wasm_test_file.c
  23           rm genbindings_wasm_test_file.c
  24       - name: Checkout source code
  25         uses: actions/checkout@v2
  26         with:
  27           fetch-depth: 0
  28       - name: Install cbindgen
  29         run: |
  30           git clone https://github.com/eqrion/cbindgen
  31           cd cbindgen/
  32           git checkout v0.20.0
  33           cargo update -p indexmap --precise "1.6.2" --verbose
  34           cargo install --locked --path .
  35       - name: Checkout Rust-Lightning and LDK-C-Bindings git
  36         run: |
  37           git config --global safe.directory '*'
  38           git config --global user.email "ldk-ci@example.com"
  39           git config --global user.name "LDK CI"
  40           # Note this is a different endpoint, as we need one non-upstream commit!
  41           git clone https://github.com/lightningdevkit/rust-lightning
  42           cd rust-lightning
  43           git checkout origin/0.0.117-bindings
  44           cd ..
  45           git clone https://github.com/lightningdevkit/ldk-c-bindings
  46           cd ldk-c-bindings
  47           git checkout 0.0.117
  48           cd lightning-c-bindings
  49           cargo update -p memchr --precise "2.5.0" --verbose
  50       - name: Rebuild C bindings without STD
  51         run: |
  52           cd ldk-c-bindings
  53           git config --global safe.directory "*"
  54           ./genbindings.sh ../rust-lightning false
  55       - name: Build and Test TS Debug Bindings for Node
  56         run: |
  57           # We need FinalizationRegistry and top-level await support, which requires node 14.6/8,
  58           # however Debian ships with Node 12
  59           # Thus, we install the binary nodejs from nodejs.org and test with that.
  60           curl https://nodejs.org/dist/v16.13.1/node-v16.13.1-linux-x64.tar.xz > nodejs.tar.xz
  61           tar xvvf nodejs.tar.xz
  62           export PATH=$(pwd)/$(echo node-*/bin):$PATH
  63           ./genbindings.sh ./ldk-c-bindings/ wasm true false
  64       - name: Build and Test TS Release Bindings for Node
  65         run: |
  66           export PATH=$(pwd)/$(echo node-*/bin):$PATH
  67           ./genbindings.sh ./ldk-c-bindings/ wasm false false
  68       - name: Install Playwright for Web Tests
  69         run: |
  70           export HOME=/root/ # Github actions is apparently broken
  71           export PATH=$(pwd)/$(echo node-*/bin):$PATH
  72           # npx playwright install-deps is broken so we do it manually, see https://github.com/microsoft/playwright/issues/11165
  73           apt-get install -y --no-install-recommends fonts-liberation libenchant-2-2 libicu72 libjpeg62-turbo libasound2 libatk-bridge2.0-0 libatk1.0-0 libatspi2.0-0 libcairo2 libcups2 libdbus-1-3 libdrm2 libegl1 libgbm1 libglib2.0-0 libgtk-3-0 libnspr4 libnss3 libpango-1.0-0 libx11-6 libx11-xcb1 libxcb1 libxcomposite1 libxdamage1 libxext6 libxfixes3 libxrandr2 libxshmfence1 xvfb fonts-noto-color-emoji fonts-unifont libfontconfig libfreetype6 xfonts-scalable fonts-ipafont-gothic fonts-wqy-zenhei fonts-tlwg-loma-otf ffmpeg libcairo-gobject2 libdbus-glib-1-2 libfontconfig1 libgdk-pixbuf2.0-0 libpangocairo-1.0-0 libpangoft2-1.0-0 libxcb-shm0 libxcursor1 libxi6 libxrender1 libxt6 gstreamer1.0-libav gstreamer1.0-plugins-bad gstreamer1.0-plugins-base gstreamer1.0-plugins-good libepoxy0 libevdev2 libgl1 libgles2 libgstreamer-gl1.0-0 libgstreamer1.0-0 libharfbuzz-icu0 libharfbuzz0b libhyphen0 libnotify4 libopenjp2-7 libopus0 libpng16-16 libsecret-1-0 libsoup2.4-1 libwayland-client0 libwayland-egl1 libwayland-server0 libwebp7 libwebpdemux2 libwoff1 libxkbcommon0 libxml2 libxslt1.1
  74           mkdir -p $HOME/.cache/ms-playwright # `playwright install` is too dumb to create this for us
  75           chmod -R 777 $HOME/
  76           npm i -D playwright@1.37.0-alpha-jul-31-2023
  77           npx playwright@1.37.0-alpha-jul-31-2023 install
  78       - name: Build and Test TS Debug Bindings for Web
  79         run: |
  80           export HOME=/root/ # Github actions is apparently broken
  81           export PATH=$(pwd)/$(echo node-*/bin):$PATH
  82           git config --global safe.directory "*"
  83           ./genbindings.sh ./ldk-c-bindings/ wasm true true
  84           cd ts
  85           rm liblightningjs.wasm && ln -s $(pwd)/../liblightningjs_debug.wasm ./liblightningjs.wasm
  86           python3 -m http.server &
  87           SERVER_PID=$!
  88           node test/browser.mjs
  89           kill $SERVER_PID
  90       - name: Build and Test TS Release Bindings for Web
  91         run: |
  92           export HOME=/root/ # Github actions is apparently broken
  93           export PATH=$(pwd)/$(echo node-*/bin):$PATH
  94           ./genbindings.sh ./ldk-c-bindings/ wasm false true
  95           cd ts
  96           rm liblightningjs.wasm && ln -s $(pwd)/../liblightningjs_release.wasm ./liblightningjs.wasm
  97           python3 -m http.server &
  98           SERVER_PID=$!
  99           node test/browser.mjs
 100           kill $SERVER_PID
 101       - name: Check latest TS files are in git
 102         run: |
 103           git checkout ts/package.json
 104           git checkout node-net/package.json
 105           git diff --exit-code
 106
 107   java_bindings:
 108     runs-on: ubuntu-latest
 109     # Ubuntu's version of rustc uses its own LLVM instead of being a real native package.
 110     # This leaves us with an incompatible LLVM version when linking. Instead, use a real OS.
 111     container: debian:bullseye
 112     strategy:
 113       fail-fast: false
 114     steps:
 115       - name: Install native Rust toolchain, Valgrind, and build utilitis
 116         run: |
 117           apt-get update
 118           apt-get -y dist-upgrade
 119           apt-get -y install cargo valgrind lld git g++ clang openjdk-11-jdk maven faketime zip unzip llvm curl
 120       - name: Checkout source code
 121         uses: actions/checkout@v2
 122         with:
 123           fetch-depth: 0
 124       - name: Install cbindgen
 125         run: |
 126           git config --global safe.directory '*'
 127           git clone https://github.com/eqrion/cbindgen
 128           cd cbindgen/
 129           git checkout v0.20.0
 130           cargo update -p indexmap --precise "1.6.2" --verbose
 131           cargo install --locked --path .
 132       - name: Checkout Rust-Lightning and LDK-C-Bindings git
 133         run: |
 134           git config --global user.email "ldk-ci@example.com"
 135           git config --global user.name "LDK CI"
 136           # Note this is a different endpoint, as we need one non-upstream commit!
 137           git clone https://github.com/lightningdevkit/rust-lightning
 138           cd rust-lightning
 139           git checkout origin/0.0.117-bindings
 140           cd ..
 141           git clone https://github.com/lightningdevkit/ldk-c-bindings
 142           cd ldk-c-bindings
 143           git checkout 0.0.117
 144           cd lightning-c-bindings
 145           cargo update -p memchr --precise "2.5.0" --verbose
 146       - name: Pin proc-macro and quote to meet MSRV
 147         run: |
 148           cd ldk-c-bindings/c-bindings-gen
 149           cargo update -p quote --precise "1.0.30" --verbose
 150           cargo update -p proc-macro2 --precise "1.0.65" --verbose
 151       - name: Rebuild C bindings, and check the sample app builds + links
 152         run: |
 153           cd ldk-c-bindings
 154           ./genbindings.sh ../rust-lightning true
 155       - name: Build Java Debug Bindings
 156         run: ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-11-openjdk-amd64/include/ -I/usr/lib/jvm/java-11-openjdk-amd64/include/linux/" true false
 157       - name: Run Java Tests against Debug Bindings
 158         run: |
 159           mv liblightningjni_debug_Linux-amd64.so liblightningjni.so
 160           export ASAN_OPTIONS=detect_leaks=0
 161           LD_PRELOAD=/usr/lib/llvm-11/lib/clang/11.0.1/lib/linux/libclang_rt.asan-x86_64.so LD_LIBRARY_PATH=. mvn test
 162       - name: Build Java Release Bindings
 163         run: |
 164           ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-11-openjdk-amd64/include/ -I/usr/lib/jvm/java-11-openjdk-amd64/include/linux/" false false
 165       - name: Check latest headers are in git
 166         run: |
 167           git checkout pom.xml
 168           git diff --exit-code
 169
 170   java_determinism:
 171     runs-on: ubuntu-latest
 172     # Ubuntu's version of rustc uses its own LLVM instead of being a real native package.
 173     # This leaves us with an incompatible LLVM version when linking. Instead, use a real OS.
 174     container: debian:bullseye
 175     strategy:
 176       fail-fast: false
 177     steps:
 178       - name: Install native Rust toolchain, Valgrind, and build utilitis
 179         run: |
 180           apt-get update
 181           apt-get -y dist-upgrade
 182           apt-get -y install cargo valgrind lld git g++ clang openjdk-11-jdk maven faketime zip unzip llvm curl
 183       - name: Checkout source code
 184         uses: actions/checkout@v2
 185         with:
 186           fetch-depth: 0
 187       - name: Install cbindgen
 188         run: |
 189           git config --global safe.directory '*'
 190           git clone https://github.com/eqrion/cbindgen
 191           cd cbindgen/
 192           git checkout v0.20.0
 193           cargo update -p indexmap --precise "1.6.2" --verbose
 194           cargo install --locked --path .
 195       - name: Checkout Rust-Lightning and LDK-C-Bindings git
 196         run: |
 197           git config --global user.email "ldk-ci@example.com"
 198           git config --global user.name "LDK CI"
 199           # Note this is a different endpoint, as we need one non-upstream commit!
 200           git clone https://github.com/lightningdevkit/rust-lightning
 201           cd rust-lightning
 202           git checkout origin/0.0.117-bindings
 203           cd ..
 204           git clone https://github.com/lightningdevkit/ldk-c-bindings
 205           cd ldk-c-bindings
 206           git checkout 0.0.117
 207           cd lightning-c-bindings
 208           cargo update -p memchr --precise "2.5.0" --verbose
 209       - name: Pin proc-macro and quote to meet MSRV
 210         run: |
 211           cd ldk-c-bindings/c-bindings-gen
 212           cargo update -p quote --precise "1.0.30" --verbose
 213           cargo update -p proc-macro2 --precise "1.0.65" --verbose
 214       - name: Rebuild C bindings, and check the sample app builds + links
 215         run: |
 216           cd ldk-c-bindings
 217           ./genbindings.sh ../rust-lightning true
 218       - name: Checkout latest MacOS binaries
 219         shell: bash
 220         run: |
 221           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 222           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 223           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
 224           SNAPSHOT_LINK="$(curl "https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
 225           curl -o bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
 226           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 227           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 228           tar xvvf ../../bins-snapshot.tgz
 229           mv ldk-java-bins-*/* ./
 230           rm -r ldk-java-bins-*
 231           cd ../..
 232           mkdir -p src/main/resources/
 233       - name: Copy latest MacOS leaktracking libs
 234         run: |
 235           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 236           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"liblightningjni_MacOSX-aarch64-leaktracking.nativelib src/main/resources/liblightningjni_MacOSX-aarch64.nativelib
 237           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"liblightningjni_MacOSX-x86_64-leaktracking.nativelib src/main/resources/liblightningjni_MacOSX-x86_64.nativelib
 238       - name: Build Leaktracking Java Release Bindings
 239         run: |
 240           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 241           ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-11-openjdk-amd64/include/ -I/usr/lib/jvm/java-11-openjdk-amd64/include/linux/" leaks false
 242       - name: Build deterministic release jar
 243         run: |
 244           ./build-release-jar.sh
 245           mv ldk-java.jar ldk-java-leaktracking.jar
 246       - name: Copy latest MacOS libs
 247         shell: bash
 248         run: |
 249           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 250           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/liblightningjni_MacOSX-"{aarch64,x86_64}.nativelib src/main/resources/
 251       - name: Build Java Release Bindings
 252         run: |
 253           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 254           ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-11-openjdk-amd64/include/ -I/usr/lib/jvm/java-11-openjdk-amd64/include/linux/" false false
 255       - name: Build deterministic release jar
 256         run: ./build-release-jar.sh
 257       - name: Check latest library and jars are in bins repo
 258         run: |
 259           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 260           mkdir ldk-java-bins/new/
 261           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"liblightningjni_Mac*.nativelib ldk-java-bins/new/
 262           cp src/main/resources/liblightningjni_Linux-amd64.nativelib ldk-java-bins/new/
 263           cp ldk-java-sources.jar ldk-java-bins/new/
 264           cp ldk-java.jar ldk-java-bins/new/
 265           cp ldk-java-leaktracking.jar ldk-java-bins/new/
 266           cp ldk-java-classes.jar ldk-java-bins/new/
 267           cd ldk-java-bins
 268           rm "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/liblightningjs.wasm" # TODO: Test this
 269           if ! diff -r "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/" new/; then
 270             apt-get -y install diffoscope
 271             diffoscope new/ldk-java-sources.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-sources.jar" || echo
 272             diffoscope new/ldk-java-classes.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-classes.jar" || echo
 273             diffoscope new/ldk-java.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java.jar" || echo
 274             diffoscope new/ldk-java-leaktracking.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-leaktracking.jar" || echo
 275             exit 1
 276           fi
 277       - name: Run Java Tests against built release jar
 278         run: |
 279           mvn install:install-file -Dfile=ldk-java.jar -DgroupId=org.lightningdevkit -DartifactId=ldk-java -Dversion=1.0-SNAPSHOT -Dpackaging=jar
 280           cd javatester
 281           mvn package
 282           java -ea -jar target/ldk-java-tests-1.0-SNAPSHOT-jar-with-dependencies.jar
 283
 284   macos_determinism:
 285     runs-on: ubuntu-latest
 286     # Ubuntu's version of rustc uses its own LLVM instead of being a real native package.
 287     # This leaves us with an incompatible LLVM version when linking. Instead, use a real OS.
 288     container: debian:bookworm
 289     strategy:
 290       fail-fast: false
 291     steps:
 292       - name: Install native Rust toolchain, Valgrind, and build utilitis
 293         run: |
 294           apt-get update
 295           apt-get -y dist-upgrade
 296           apt-get -y install cargo valgrind openjdk-17-jdk lld git g++ clang llvm curl rust-src
 297       - name: Checkout source code
 298         uses: actions/checkout@v2
 299         with:
 300           fetch-depth: 0
 301       - name: Install cbindgen
 302         run: |
 303           git config --global safe.directory '*'
 304           git clone https://github.com/eqrion/cbindgen
 305           cd cbindgen/
 306           git checkout v0.20.0
 307           cargo update -p indexmap --precise "1.6.2" --verbose
 308           cargo install --locked --path .
 309       - name: Checkout Rust-Lightning and LDK-C-Bindings git
 310         run: |
 311           git config --global user.email "ldk-ci@example.com"
 312           git config --global user.name "LDK CI"
 313           # Note this is a different endpoint, as we need one non-upstream commit!
 314           git clone https://github.com/lightningdevkit/rust-lightning
 315           cd rust-lightning
 316           git checkout origin/0.0.117-bindings
 317           cd ..
 318           git clone https://github.com/lightningdevkit/ldk-c-bindings
 319           cd ldk-c-bindings
 320           git checkout 0.0.117
 321       - name: Fetch MacOS SDK
 322         run: |
 323           curl -o Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers.tar.gz https://bitcoincore.org/depends-sources/sdks/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers.tar.gz
 324           tar xvvf Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers.tar.gz
 325       - name: Rebuild C bindings, and check the sample app builds + links
 326         run: |
 327           # rust-src doesn't distribute the rustlib Cargo.lock, but an empty
 328           # file seems to suffice to make `-Zbuild-std` happy.
 329           touch /usr/lib/rustlib/src/rust/Cargo.lock
 330           export MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
 331           cd ldk-c-bindings
 332           ./genbindings.sh ../rust-lightning true
 333       - name: Fetch MacOS OpenJDK 18 for x86_64
 334         run: |
 335           curl -o openjdk-18.0.1.1_macos-x64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-x64_bin.tar.gz
 336           if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-x64_bin.tar.gz | awk '{ print $1 }')" != "f02d17ec5a387555f8489abc352d973b6c10364409b597046025938e2266d72a" ]; then
 337             echo "Bad hash"
 338             exit 1
 339           fi
 340           mkdir jdk-x86_64
 341           cd jdk-x86_64
 342           tar xvvf ../openjdk-18.0.1.1_macos-x64_bin.tar.gz
 343       - name: Fetch MacOS OpenJDK 18 for aarch64
 344         run: |
 345           curl -o openjdk-18.0.1.1_macos-aarch64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
 346           if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-aarch64_bin.tar.gz | awk '{ print $1 }')" != "29773ad68063bdad7fbaeb762cd873d3f243e86de380d3ac5335cdb929371fb5" ]; then
 347             echo "Bad hash"
 348             exit 1
 349           fi
 350           mkdir jdk-aarch64
 351           cd jdk-aarch64
 352           tar xvvf ../openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
 353       - name: Build MacOS aarch64 Java leaktracking Release Bindings
 354         run: |
 355           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
 356           JAVA_HOME=jdk-aarch64/jdk-18.0.1.1.jdk/Contents/Home
 357           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 358           CC=clang LDK_TARGET=aarch64-apple-darwin LDK_TARGET_CPU=apple-a14 ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" leaks false
 359           mv src/main/resources/liblightningjni_MacOSX-aarch64.nativelib src/main/resources/liblightningjni_MacOSX-aarch64-leaktracking.nativelib
 360       - name: Build MacOS x86_64 Java leaktracking Release Bindings
 361         run: |
 362           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
 363           JAVA_HOME=jdk-x86_64/jdk-18.0.1.1.jdk/Contents/Home
 364           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 365           CC=clang LDK_TARGET=x86_64-apple-darwin LDK_TARGET_CPU=sandybridge ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" leaks false
 366           mv src/main/resources/liblightningjni_MacOSX-x86_64.nativelib src/main/resources/liblightningjni_MacOSX-x86_64-leaktracking.nativelib
 367       - name: Build MacOS aarch64 Java Release Bindings
 368         run: |
 369           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
 370           JAVA_HOME=jdk-aarch64/jdk-18.0.1.1.jdk/Contents/Home
 371           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 372           CC=clang LDK_TARGET=aarch64-apple-darwin LDK_TARGET_CPU=apple-a14 ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" false false
 373       - name: Build MacOS x86_64 Java Release Bindings
 374         run: |
 375           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
 376           JAVA_HOME=jdk-x86_64/jdk-18.0.1.1.jdk/Contents/Home
 377           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 378           CC=clang LDK_TARGET=x86_64-apple-darwin LDK_TARGET_CPU=sandybridge ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" false false
 379       - name: Checkout latest binaries
 380         run: |
 381           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 382           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 383           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
 384           SNAPSHOT_LINK="$(curl "https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
 385           curl -o bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
 386           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 387           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 388           tar xvvf ../../bins-snapshot.tgz
 389           mv ldk-java-bins-*/* ./
 390           rm -r ldk-java-bins-*
 391           cd ../..
 392       - name: Check latest MacOS libraries are in the bins repo
 393         shell: bash
 394         run: |
 395           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 396           for F in liblightningjni_MacOSX-{x86_64,aarch64}{,-leaktracking}.nativelib; do
 397             if ! diff "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/$F" "src/main/resources/$F"; then
 398               apt-get -y install diffoscope
 399               # Sadly these binaries are still non-deterministic, but only due
 400               # to a few-byte tag, thus we use diffoscope to ensure there
 401               # aren't any "real" differences and move on.
 402               diffoscope "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/$F" "src/main/resources/$F" || echo
 403             fi
 404           done
 405
 406   android:
 407     runs-on: ubuntu-latest
 408     # Frankly, I'm not really sure why debian and ubuntu differ in the results here, they really shouldn't
 409     container: debian:bullseye
 410     strategy:
 411       fail-fast: false
 412     steps:
 413       - name: Install rust targets
 414         run: |
 415           apt-get update
 416           apt-get -y dist-upgrade
 417           apt-get -y install git g++ clang faketime zip unzip curl openjdk-11-jdk
 418           curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs > rustup.sh
 419           chmod +x ./rustup.sh
 420           ./rustup.sh -y
 421           . $HOME/.cargo/env
 422           # Temporarily use 1.67.1 to fix https://github.com/rust-lang/rust/issues/108943
 423           rustup install 1.67.1
 424           rustup default 1.67.1
 425           rustup target add armv7-linux-androideabi
 426           rustup target add aarch64-linux-android
 427           rustup target add i686-linux-android
 428           rustup target add x86_64-linux-android
 429       - name: Checkout source code
 430         uses: actions/checkout@v2
 431         with:
 432           fetch-depth: 0
 433       - name: Install android NDK compilers
 434         run: |
 435           git config --global safe.directory '*'
 436           curl https://dl.google.com/android/repository/android-ndk-r22b-linux-x86_64.zip > android-ndk-r22b-linux-x86_64.zip
 437           if [ "$(sha256sum android-ndk-r22b-linux-x86_64.zip | awk '{ print $1 }')" != "ac3a0421e76f71dd330d0cd55f9d99b9ac864c4c034fc67e0d671d022d4e806b" ]; then
 438             echo "Bad hash"
 439             exit 1
 440           fi
 441           unzip android-ndk-r22b-linux-x86_64.zip
 442       - name: Install cbindgen
 443         run: |
 444           . $HOME/.cargo/env
 445           cargo install cbindgen
 446       - name: Checkout Rust-Lightning and LDK-C-Bindings git
 447         run: |
 448           git config --global user.email "ldk-ci@example.com"
 449           git config --global user.name "LDK CI"
 450           # Note this is a different endpoint, as we need one non-upstream commit!
 451           git clone https://github.com/lightningdevkit/rust-lightning
 452           cd rust-lightning
 453           git checkout origin/0.0.117-bindings
 454           cd ..
 455           git clone https://github.com/lightningdevkit/ldk-c-bindings
 456           cd ldk-c-bindings
 457           git checkout 0.0.117
 458           cd lightning-c-bindings
 459           . $HOME/.cargo/env
 460           cargo update -p memchr --precise "2.5.0" --verbose
 461       - name: Checkout Android AAR binaries and artifacts
 462         run: |
 463           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
 464           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 465           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 466           RELEASE_PAGE="https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main"
 467           SNAPSHOT_LINK="$(curl "$RELEASE_PAGE" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
 468           curl -o bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
 469
 470           ANDROID_PAGE="https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=android-artifacts;hb=refs/heads/main"
 471           SNAPSHOT_LINK="$(curl "$ANDROID_PAGE" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
 472           curl -o android-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
 473
 474           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 475           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 476           tar xvvf ../../bins-snapshot.tgz
 477           mv ldk-java-bins-*/* ./
 478           rm -r ldk-java-bins-*
 479
 480           mkdir -p ../android-artifacts
 481           cd ../android-artifacts
 482           tar xvvf ../../android-snapshot.tgz
 483           mv ldk-java-bins-*/* ./
 484           rm -r ldk-java-bins-*
 485       - name: Build Android aar
 486         run: |
 487           . $HOME/.cargo/env
 488           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 489           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-classes.jar" ./
 490           export ANDROID_TOOLCHAIN="$(pwd)/android-ndk-r22b/toolchains/llvm/prebuilt/linux-x86_64"
 491           export PATH="$PATH:$ANDROID_TOOLCHAIN/bin"
 492           ./android-build.sh ./rust-lightning ./ldk-c-bindings/ ./ldk-java-bins/android-artifacts
 493       - name: Check latest library and jars are in bins repo
 494         run: |
 495           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 496           if ! diff LDK-release.aar "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"LDK-release.aar; then
 497             apt-get -y install diffoscope
 498             diffoscope LDK-release.aar "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/LDK-release.aar"
 499             exit 1
 500           fi
 501
 502   osx:
 503     strategy:
 504       matrix:
 505         include:
 506           - platform: macos-11
 507           - platform: macos-12
 508           - platform: macos-13
 509       fail-fast: false
 510     runs-on: ${{ matrix.platform }}
 511     steps:
 512       - name: Install Rust components
 513         run: |
 514           rustup target install aarch64-apple-darwin
 515           rustup component add rust-src
 516       - name: Checkout source code
 517         uses: actions/checkout@v2
 518         with:
 519           fetch-depth: 0
 520       - name: Install cbindgen
 521         run: cargo install cbindgen
 522       - name: Checkout Rust-Lightning and LDK-C-Bindings git
 523         run: |
 524           git config --global user.email "ldk-ci@example.com"
 525           git config --global user.name "LDK CI"
 526           # Note this is a different endpoint, as we need one non-upstream commit!
 527           git clone https://github.com/rghtningdevkit/ust-lightning
 528           cd rust-lightning
 529           git checkout origin/0.0.117-bindings
 530           cd ..
 531           git clone https://github.com/lightningdevkit/ldk-c-bindings
 532           cd ldk-c-bindings
 533           git checkout 0.0.117
 534           cd lightning-c-bindings
 535           cargo update -p memchr --precise "2.5.0" --verbose
 536       - name: Rebuild C bindings and check the sample app builds + links
 537         run: |
 538           cd ldk-c-bindings
 539           CC=clang ./genbindings.sh ../rust-lightning true
 540       - name: Fetch OpenJDK 18
 541         run: |
 542           if [ "$(uname -m)" = "arm64" ]; then
 543             wget -O openjdk-18.0.1.1_macos-aarch64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
 544             if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-aarch64_bin.tar.gz | awk '{ print $1 }')" != "29773ad68063bdad7fbaeb762cd873d3f243e86de380d3ac5335cdb929371fb5" ]; then
 545               echo "Bad hash"
 546               exit 1
 547             fi
 548             tar xvvf openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
 549           else
 550             wget -O openjdk-18.0.1.1_macos-x64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-x64_bin.tar.gz
 551             if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-x64_bin.tar.gz | awk '{ print $1 }')" != "f02d17ec5a387555f8489abc352d973b6c10364409b597046025938e2266d72a" ]; then
 552               echo "Bad hash"
 553               exit 1
 554             fi
 555             tar xvvf openjdk-18.0.1.1_macos-x64_bin.tar.gz
 556           fi
 557       - name: Checkout latest Linux binaries
 558         run: |
 559           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 560           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 561           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
 562           SNAPSHOT_LINK="$(wget -O /dev/stdout "https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
 563           wget -O bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
 564           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 565           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
 566           tar xvvf ../../bins-snapshot.tgz
 567           mv ldk-java-bins-*/* ./
 568           cd ../..
 569           mkdir -p src/main/resources/
 570           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/liblightningjni_Linux-"* src/main/resources/
 571       - name: Build Java Release Bindings
 572         run: |
 573           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 574           export JAVA_HOME=`pwd`/jdk-18.0.1.1.jdk/Contents/Home
 575           export PATH=$JAVA_HOME/bin:$PATH
 576           ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$(xcrun --show-sdk-path)" false false
 577
 578           if [ "${{ matrix.platform }}" = "macos-11" ]; then
 579             export CC="clang --target=aarch64-apple-darwin"
 580             export LDK_TARGET=aarch64-apple-darwin
 581             export LDK_TARGET_CPU=apple-a14
 582             ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$(xcrun --show-sdk-path)" false false
 583             cat src/main/resources/liblightningjni_MacOSX-aarch64.nativelib > /dev/null
 584
 585           fi
 586       - name: Fetch Maven 3.8.4
 587         run: |
 588           # We don't bother using the upstream mirrors as they remove prior
 589           # releases aggressively, causing spurious CI failures when we don't
 590           # care about the version used.
 591           wget -O apache-maven-3.8.4-bin.tar.gz https://bitcoin.ninja/apache-maven-3.8.4-bin.tar.gz
 592           if [ "$(shasum -a 256 apache-maven-3.8.4-bin.tar.gz | awk '{ print $1 }')" != "2cdc9c519427bb20fdc25bef5a9063b790e4abd930e7b14b4e9f4863d6f9f13c" ]; then
 593             echo "Bad hash"
 594             exit 1
 595           fi
 596           tar xvvf apache-maven-3.8.4-bin.tar.gz
 597           export PATH=apache-maven-3.8.4/bin:$PATH
 598       - name: Run Java Tests against built jar
 599         run: |
 600           export JAVA_HOME=`pwd`/jdk-18.0.1.1.jdk/Contents/Home
 601           export PATH=$JAVA_HOME/bin:$PATH
 602           mvn -DskipTests=true package
 603           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 604           JAR_VERSION=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE:1:100}
 605           mvn install:install-file -Dfile=target/ldk-java-${JAR_VERSION}.jar -DgroupId=org.lightningdevkit -DartifactId=ldk-java -Dversion=1.0-SNAPSHOT -Dpackaging=jar
 606           cd javatester
 607           mvn -q -B package
 608           java -ea -jar target/ldk-java-tests-1.0-SNAPSHOT-jar-with-dependencies.jar
 609       - name: Run Java Tests against release bins
 610         run: |
 611           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
 612           export JAVA_HOME=`pwd`/jdk-18.0.1.1.jdk/Contents/Home
 613           export PATH=$JAVA_HOME/bin:$PATH
 614           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java.jar" ./
 615           mvn install:install-file -Dfile=ldk-java.jar -DgroupId=org.lightningdevkit -DartifactId=ldk-java -Dversion=1.0-SNAPSHOT -Dpackaging=jar
 616           cd javatester
 617           mvn clean
 618           mvn -q -B package
 619           java -ea -jar target/ldk-java-tests-1.0-SNAPSHOT-jar-with-dependencies.jar