[Java] Check determinism of the leaktracking Linux bin as well
[ldk-java] / .github / workflows / build.yml
1 name: Continuous Integration Checks
2
3 on: [push, pull_request]
4
5 jobs:
6   wasm_bindings:
7     runs-on: ubuntu-latest
8     # Ubuntu's version of clang doesn't support....anything that should work.
9     # Ubuntu is an utter trash OS and should generally never be used for anything.
10     # We also require at least rustc 1.51 (ie https://github.com/rust-lang/rust/pull/79998),
11     # so we use debian testing
12     container: debian:bookworm
13     strategy:
14       fail-fast: false
15     steps:
16       - name: Install build utilities and test that clang can build for wasm
17         run: |
18           apt-get update
19           apt-get -y dist-upgrade
20           apt-get -y install cargo libstd-rust-dev-wasm32 lld git g++ clang curl node-typescript npm python3 wasi-libc
21           echo "int main() {}" > genbindings_wasm_test_file.c
22           clang -nostdlib -o /dev/null --target=wasm32-wasi -Wl,--no-entry genbindings_wasm_test_file.c
23           rm genbindings_wasm_test_file.c
24       - name: Checkout source code
25         uses: actions/checkout@v2
26         with:
27           fetch-depth: 0
28       - name: Install cbindgen
29         run: |
30           git clone https://github.com/eqrion/cbindgen
31           cd cbindgen/
32           git checkout v0.20.0
33           cargo update -p indexmap --precise "1.6.2" --verbose
34           cargo install --locked --path .
35       - name: Checkout Rust-Lightning and LDK-C-Bindings git
36         run: |
37           git config --global safe.directory '*'
38           git config --global user.email "ldk-ci@example.com"
39           git config --global user.name "LDK CI"
40           # Note this is a different endpoint, as we need one non-upstream commit!
41           git clone https://github.com/lightningdevkit/rust-lightning
42           cd rust-lightning
43           git checkout origin/0.0.118-bindings
44           cd ..
45           git clone https://github.com/lightningdevkit/ldk-c-bindings
46           cd ldk-c-bindings
47           git checkout 0.0.118
48           cd lightning-c-bindings
49           cargo update -p memchr --precise "2.5.0" --verbose
50       - name: Rebuild C bindings without STD
51         run: |
52           cd ldk-c-bindings
53           git config --global safe.directory "*"
54           ./genbindings.sh ../rust-lightning false
55       - name: Build and Test TS Debug Bindings for Node
56         run: |
57           # We need FinalizationRegistry and top-level await support, which requires node 14.6/8,
58           # however Debian ships with Node 12
59           # Thus, we install the binary nodejs from nodejs.org and test with that.
60           curl https://nodejs.org/dist/v16.13.1/node-v16.13.1-linux-x64.tar.xz > nodejs.tar.xz
61           tar xvvf nodejs.tar.xz
62           export PATH=$(pwd)/$(echo node-*/bin):$PATH
63           ./genbindings.sh ./ldk-c-bindings/ wasm true false
64       - name: Build and Test TS Release Bindings for Node
65         run: |
66           export PATH=$(pwd)/$(echo node-*/bin):$PATH
67           ./genbindings.sh ./ldk-c-bindings/ wasm false false
68       - name: Install Playwright for Web Tests
69         run: |
70           export HOME=/root/ # Github actions is apparently broken
71           export PATH=$(pwd)/$(echo node-*/bin):$PATH
72           # npx playwright install-deps is broken so we do it manually, see https://github.com/microsoft/playwright/issues/11165
73           apt-get install -y --no-install-recommends fonts-liberation libenchant-2-2 libicu72 libjpeg62-turbo libasound2 libatk-bridge2.0-0 libatk1.0-0 libatspi2.0-0 libcairo2 libcups2 libdbus-1-3 libdrm2 libegl1 libgbm1 libglib2.0-0 libgtk-3-0 libnspr4 libnss3 libpango-1.0-0 libx11-6 libx11-xcb1 libxcb1 libxcomposite1 libxdamage1 libxext6 libxfixes3 libxrandr2 libxshmfence1 xvfb fonts-noto-color-emoji fonts-unifont libfontconfig libfreetype6 xfonts-scalable fonts-ipafont-gothic fonts-wqy-zenhei fonts-tlwg-loma-otf ffmpeg libcairo-gobject2 libdbus-glib-1-2 libfontconfig1 libgdk-pixbuf2.0-0 libpangocairo-1.0-0 libpangoft2-1.0-0 libxcb-shm0 libxcursor1 libxi6 libxrender1 libxt6 gstreamer1.0-libav gstreamer1.0-plugins-bad gstreamer1.0-plugins-base gstreamer1.0-plugins-good libepoxy0 libevdev2 libgl1 libgles2 libgstreamer-gl1.0-0 libgstreamer1.0-0 libharfbuzz-icu0 libharfbuzz0b libhyphen0 libnotify4 libopenjp2-7 libopus0 libpng16-16 libsecret-1-0 libsoup2.4-1 libwayland-client0 libwayland-egl1 libwayland-server0 libwebp7 libwebpdemux2 libwoff1 libxkbcommon0 libxml2 libxslt1.1
74           mkdir -p $HOME/.cache/ms-playwright # `playwright install` is too dumb to create this for us
75           chmod -R 777 $HOME/
76           npm i -D playwright@1.37.0-alpha-jul-31-2023
77           npx playwright@1.37.0-alpha-jul-31-2023 install
78       - name: Build and Test TS Debug Bindings for Web
79         run: |
80           export HOME=/root/ # Github actions is apparently broken
81           export PATH=$(pwd)/$(echo node-*/bin):$PATH
82           git config --global safe.directory "*"
83           ./genbindings.sh ./ldk-c-bindings/ wasm true true
84           cd ts
85           rm liblightningjs.wasm && ln -s $(pwd)/../liblightningjs_debug.wasm ./liblightningjs.wasm
86           python3 -m http.server &
87           SERVER_PID=$!
88           node test/browser.mjs
89           kill $SERVER_PID
90       - name: Build and Test TS Release Bindings for Web
91         run: |
92           export HOME=/root/ # Github actions is apparently broken
93           export PATH=$(pwd)/$(echo node-*/bin):$PATH
94           ./genbindings.sh ./ldk-c-bindings/ wasm false true
95           cd ts
96           rm liblightningjs.wasm && ln -s $(pwd)/../liblightningjs_release.wasm ./liblightningjs.wasm
97           python3 -m http.server &
98           SERVER_PID=$!
99           node test/browser.mjs
100           kill $SERVER_PID
101       - name: Check latest TS files are in git
102         run: |
103           git checkout ts/package.json
104           git checkout node-net/package.json
105           git diff --exit-code
106
107   java_bindings:
108     runs-on: ubuntu-latest
109     # Ubuntu's version of rustc uses its own LLVM instead of being a real native package.
110     # This leaves us with an incompatible LLVM version when linking. Instead, use a real OS.
111     container: debian:bookworm
112     strategy:
113       fail-fast: false
114     steps:
115       - name: Install native Rust toolchain, Valgrind, and build utilitis
116         run: |
117           apt-get update
118           apt-get -y dist-upgrade
119           apt-get -y install cargo valgrind lld git g++ clang openjdk-17-jdk maven faketime zip unzip llvm curl
120       - name: Checkout source code
121         uses: actions/checkout@v2
122         with:
123           fetch-depth: 0
124       - name: Install cbindgen
125         run: |
126           git config --global safe.directory '*'
127           git clone https://github.com/eqrion/cbindgen
128           cd cbindgen/
129           git checkout v0.20.0
130           cargo update -p indexmap --precise "1.6.2" --verbose
131           cargo install --locked --path .
132       - name: Checkout Rust-Lightning and LDK-C-Bindings git
133         run: |
134           git config --global user.email "ldk-ci@example.com"
135           git config --global user.name "LDK CI"
136           # Note this is a different endpoint, as we need one non-upstream commit!
137           git clone https://github.com/lightningdevkit/rust-lightning
138           cd rust-lightning
139           git checkout origin/0.0.118-bindings
140           cd ..
141           git clone https://github.com/lightningdevkit/ldk-c-bindings
142           cd ldk-c-bindings
143           git checkout 0.0.118
144           cd lightning-c-bindings
145           cargo update -p memchr --precise "2.5.0" --verbose
146       - name: Pin proc-macro and quote to meet MSRV
147         run: |
148           cd ldk-c-bindings/c-bindings-gen
149           cargo update -p quote --precise "1.0.30" --verbose
150           cargo update -p proc-macro2 --precise "1.0.65" --verbose
151       - name: Rebuild C bindings, and check the sample app builds + links
152         run: |
153           cd ldk-c-bindings
154           ./genbindings.sh ../rust-lightning true
155       - name: Build Java Debug Bindings
156         run: ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-17-openjdk-amd64/include/ -I/usr/lib/jvm/java-17-openjdk-amd64/include/linux/" true false
157       - name: Run Java Tests against Debug Bindings
158         run: |
159           mv liblightningjni_debug_Linux-amd64.so liblightningjni.so
160           export ASAN_OPTIONS=detect_leaks=0
161           LD_PRELOAD=/usr/lib/llvm-14/lib/clang/14.0.6/lib/linux/libclang_rt.asan-x86_64.so LD_LIBRARY_PATH=. mvn test
162       - name: Build Java Release Bindings
163         run: |
164           ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-17-openjdk-amd64/include/ -I/usr/lib/jvm/java-17-openjdk-amd64/include/linux/" false false
165       - name: Check latest headers are in git
166         run: |
167           git checkout pom.xml
168           git diff --exit-code
169
170   java_determinism:
171     runs-on: ubuntu-latest
172     # Ubuntu's version of rustc uses its own LLVM instead of being a real native package.
173     # This leaves us with an incompatible LLVM version when linking. Instead, use a real OS.
174     container: debian:bookworm
175     strategy:
176       fail-fast: false
177     steps:
178       - name: Install native Rust toolchain, Valgrind, and build utilitis
179         run: |
180           apt-get update
181           apt-get -y dist-upgrade
182           apt-get -y install cargo valgrind lld git g++ clang openjdk-17-jdk maven faketime zip unzip llvm curl
183       - name: Checkout source code
184         uses: actions/checkout@v2
185         with:
186           fetch-depth: 0
187       - name: Install cbindgen
188         run: |
189           git config --global safe.directory '*'
190           git clone https://github.com/eqrion/cbindgen
191           cd cbindgen/
192           git checkout v0.20.0
193           cargo update -p indexmap --precise "1.6.2" --verbose
194           cargo install --locked --path .
195       - name: Checkout Rust-Lightning and LDK-C-Bindings git
196         run: |
197           git config --global user.email "ldk-ci@example.com"
198           git config --global user.name "LDK CI"
199           # Note this is a different endpoint, as we need one non-upstream commit!
200           git clone https://github.com/lightningdevkit/rust-lightning
201           cd rust-lightning
202           git checkout origin/0.0.118-bindings
203           cd ..
204           git clone https://github.com/lightningdevkit/ldk-c-bindings
205           cd ldk-c-bindings
206           git checkout 0.0.118
207           cd lightning-c-bindings
208           cargo update -p memchr --precise "2.5.0" --verbose
209       - name: Pin proc-macro and quote to meet MSRV
210         run: |
211           cd ldk-c-bindings/c-bindings-gen
212           cargo update -p quote --precise "1.0.30" --verbose
213           cargo update -p proc-macro2 --precise "1.0.65" --verbose
214       - name: Rebuild C bindings, and check the sample app builds + links
215         run: |
216           cd ldk-c-bindings
217           ./genbindings.sh ../rust-lightning true
218       - name: Checkout latest MacOS binaries
219         shell: bash
220         run: |
221           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
222           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
223           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
224           SNAPSHOT_LINK="$(curl "https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
225           curl -o bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
226           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
227           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
228           tar xvvf ../../bins-snapshot.tgz
229           mv ldk-java-bins-*/* ./
230           rm -r ldk-java-bins-*
231           cd ../..
232           mkdir -p src/main/resources/
233       - name: Copy latest MacOS leaktracking libs
234         run: |
235           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
236           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"liblightningjni_MacOSX-aarch64-leaktracking.nativelib src/main/resources/liblightningjni_MacOSX-aarch64.nativelib
237           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"liblightningjni_MacOSX-x86_64-leaktracking.nativelib src/main/resources/liblightningjni_MacOSX-x86_64.nativelib
238       - name: Build Leaktracking Java Release Bindings
239         run: |
240           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
241           ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-17-openjdk-amd64/include/ -I/usr/lib/jvm/java-17-openjdk-amd64/include/linux/" leaks false
242       - name: Build deterministic release jar
243         run: |
244           ./build-release-jar.sh
245           mv ldk-java.jar ldk-java-leaktracking.jar
246       - name: Copy latest MacOS libs
247         shell: bash
248         run: |
249           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
250           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/liblightningjni_MacOSX-"{aarch64,x86_64}.nativelib src/main/resources/
251       - name: Build Java leaktracking Bindings
252         run: |
253           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
254           ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-17-openjdk-amd64/include/ -I/usr/lib/jvm/java-17-openjdk-amd64/include/linux/" leaks false
255           mkdir ldk-java-bins/new/
256           cp src/main/resources/liblightningjni_Linux-amd64.nativelib ldk-java-bins/new/liblightningjni_Linux-amd64-leaktracking.nativelib
257       - name: Build Java Release Bindings
258         run: |
259           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
260           ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-17-openjdk-amd64/include/ -I/usr/lib/jvm/java-17-openjdk-amd64/include/linux/" false false
261       - name: Build deterministic release jar
262         run: ./build-release-jar.sh
263       - name: Check latest library and jars are in bins repo
264         run: |
265           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
266           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"liblightningjni_Mac*.nativelib ldk-java-bins/new/
267           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"LDK-release.aar ldk-java-bins/new/
268           cp src/main/resources/liblightningjni_Linux-amd64.nativelib ldk-java-bins/new/
269           cp ldk-java-sources.jar ldk-java-bins/new/
270           cp ldk-java.jar ldk-java-bins/new/
271           cp ldk-java-leaktracking.jar ldk-java-bins/new/
272           cp ldk-java-classes.jar ldk-java-bins/new/
273           cd ldk-java-bins
274           rm "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/liblightningjs.wasm" # TODO: Test this
275           if ! diff -r "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/" new/; then
276             apt-get -y install diffoscope
277             diffoscope new/ldk-java-sources.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-sources.jar" || echo
278             diffoscope new/ldk-java-classes.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-classes.jar" || echo
279             diffoscope new/ldk-java.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java.jar" || echo
280             diffoscope new/ldk-java-leaktracking.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-leaktracking.jar" || echo
281             exit 1
282           fi
283       - name: Run Java Tests against built release jar
284         run: |
285           mvn install:install-file -Dfile=ldk-java.jar -DgroupId=org.lightningdevkit -DartifactId=ldk-java -Dversion=1.0-SNAPSHOT -Dpackaging=jar
286           cd javatester
287           mvn package
288           java -ea -jar target/ldk-java-tests-1.0-SNAPSHOT-jar-with-dependencies.jar
289
290   macos_determinism:
291     runs-on: ubuntu-latest
292     # Ubuntu's version of rustc uses its own LLVM instead of being a real native package.
293     # This leaves us with an incompatible LLVM version when linking. Instead, use a real OS.
294     container: debian:bookworm
295     strategy:
296       fail-fast: false
297     steps:
298       - name: Install native Rust toolchain, Valgrind, and build utilitis
299         run: |
300           apt-get update
301           apt-get -y dist-upgrade
302           apt-get -y install cargo valgrind openjdk-17-jdk lld git g++ clang llvm curl rust-src
303       - name: Checkout source code
304         uses: actions/checkout@v2
305         with:
306           fetch-depth: 0
307       - name: Install cbindgen
308         run: |
309           git config --global safe.directory '*'
310           git clone https://github.com/eqrion/cbindgen
311           cd cbindgen/
312           git checkout v0.20.0
313           cargo update -p indexmap --precise "1.6.2" --verbose
314           cargo install --locked --path .
315       - name: Checkout Rust-Lightning and LDK-C-Bindings git
316         run: |
317           git config --global user.email "ldk-ci@example.com"
318           git config --global user.name "LDK CI"
319           # Note this is a different endpoint, as we need one non-upstream commit!
320           git clone https://github.com/lightningdevkit/rust-lightning
321           cd rust-lightning
322           git checkout origin/0.0.118-bindings
323           cd ..
324           git clone https://github.com/lightningdevkit/ldk-c-bindings
325           cd ldk-c-bindings
326           git checkout 0.0.118
327       - name: Fetch MacOS SDK
328         run: |
329           curl -o Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers.tar.gz https://bitcoincore.org/depends-sources/sdks/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers.tar.gz
330           tar xvvf Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers.tar.gz
331       - name: Rebuild C bindings, and check the sample app builds + links
332         run: |
333           # rust-src doesn't distribute the rustlib Cargo.lock, but an empty
334           # file seems to suffice to make `-Zbuild-std` happy.
335           touch /usr/lib/rustlib/src/rust/Cargo.lock
336           export MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
337           cd ldk-c-bindings
338           ./genbindings.sh ../rust-lightning true
339       - name: Fetch MacOS OpenJDK 18 for x86_64
340         run: |
341           curl -o openjdk-18.0.1.1_macos-x64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-x64_bin.tar.gz
342           if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-x64_bin.tar.gz | awk '{ print $1 }')" != "f02d17ec5a387555f8489abc352d973b6c10364409b597046025938e2266d72a" ]; then
343             echo "Bad hash"
344             exit 1
345           fi
346           mkdir jdk-x86_64
347           cd jdk-x86_64
348           tar xvvf ../openjdk-18.0.1.1_macos-x64_bin.tar.gz
349       - name: Fetch MacOS OpenJDK 18 for aarch64
350         run: |
351           curl -o openjdk-18.0.1.1_macos-aarch64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
352           if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-aarch64_bin.tar.gz | awk '{ print $1 }')" != "29773ad68063bdad7fbaeb762cd873d3f243e86de380d3ac5335cdb929371fb5" ]; then
353             echo "Bad hash"
354             exit 1
355           fi
356           mkdir jdk-aarch64
357           cd jdk-aarch64
358           tar xvvf ../openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
359       - name: Build MacOS aarch64 Java leaktracking Release Bindings
360         run: |
361           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
362           JAVA_HOME=jdk-aarch64/jdk-18.0.1.1.jdk/Contents/Home
363           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
364           CC=clang LDK_TARGET=aarch64-apple-darwin LDK_TARGET_CPU=apple-a14 ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" leaks false
365           mv src/main/resources/liblightningjni_MacOSX-aarch64.nativelib src/main/resources/liblightningjni_MacOSX-aarch64-leaktracking.nativelib
366       - name: Build MacOS x86_64 Java leaktracking Release Bindings
367         run: |
368           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
369           JAVA_HOME=jdk-x86_64/jdk-18.0.1.1.jdk/Contents/Home
370           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
371           CC=clang LDK_TARGET=x86_64-apple-darwin LDK_TARGET_CPU=sandybridge ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" leaks false
372           mv src/main/resources/liblightningjni_MacOSX-x86_64.nativelib src/main/resources/liblightningjni_MacOSX-x86_64-leaktracking.nativelib
373       - name: Build MacOS aarch64 Java Release Bindings
374         run: |
375           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
376           JAVA_HOME=jdk-aarch64/jdk-18.0.1.1.jdk/Contents/Home
377           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
378           CC=clang LDK_TARGET=aarch64-apple-darwin LDK_TARGET_CPU=apple-a14 ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" false false
379       - name: Build MacOS x86_64 Java Release Bindings
380         run: |
381           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
382           JAVA_HOME=jdk-x86_64/jdk-18.0.1.1.jdk/Contents/Home
383           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
384           CC=clang LDK_TARGET=x86_64-apple-darwin LDK_TARGET_CPU=sandybridge ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" false false
385       - name: Checkout latest binaries
386         run: |
387           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
388           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
389           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
390           SNAPSHOT_LINK="$(curl "https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
391           curl -o bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
392           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
393           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
394           tar xvvf ../../bins-snapshot.tgz
395           mv ldk-java-bins-*/* ./
396           rm -r ldk-java-bins-*
397           cd ../..
398       - name: Check latest MacOS libraries are in the bins repo
399         shell: bash
400         run: |
401           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
402           for F in liblightningjni_MacOSX-{x86_64,aarch64}{,-leaktracking}.nativelib; do
403             if ! diff "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/$F" "src/main/resources/$F"; then
404               apt-get -y install diffoscope
405               # Sadly these binaries are still non-deterministic, but only due
406               # to a few-byte tag, thus we use diffoscope to ensure there
407               # aren't any "real" differences and move on.
408               diffoscope "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/$F" "src/main/resources/$F" || echo
409             fi
410           done
411
412   android:
413     runs-on: ubuntu-latest
414     # Frankly, I'm not really sure why debian and ubuntu differ in the results here, they really shouldn't
415     container: debian:bookworm
416     strategy:
417       fail-fast: false
418     steps:
419       - name: Install rust targets
420         run: |
421           apt-get update
422           apt-get -y dist-upgrade
423           apt-get -y install git g++ clang faketime zip unzip curl openjdk-17-jdk
424           curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs > rustup.sh
425           chmod +x ./rustup.sh
426           ./rustup.sh -y
427           . $HOME/.cargo/env
428           # Temporarily use 1.67.1 to fix https://github.com/rust-lang/rust/issues/108943
429           rustup install 1.67.1
430           rustup default 1.67.1
431           rustup target add armv7-linux-androideabi
432           rustup target add aarch64-linux-android
433           rustup target add i686-linux-android
434           rustup target add x86_64-linux-android
435       - name: Checkout source code
436         uses: actions/checkout@v2
437         with:
438           fetch-depth: 0
439       - name: Install android NDK compilers
440         run: |
441           git config --global safe.directory '*'
442           curl https://dl.google.com/android/repository/android-ndk-r22b-linux-x86_64.zip > android-ndk-r22b-linux-x86_64.zip
443           if [ "$(sha256sum android-ndk-r22b-linux-x86_64.zip | awk '{ print $1 }')" != "ac3a0421e76f71dd330d0cd55f9d99b9ac864c4c034fc67e0d671d022d4e806b" ]; then
444             echo "Bad hash"
445             exit 1
446           fi
447           unzip android-ndk-r22b-linux-x86_64.zip
448       - name: Install cbindgen
449         run: |
450           . $HOME/.cargo/env
451           cargo install cbindgen
452       - name: Checkout Rust-Lightning and LDK-C-Bindings git
453         run: |
454           git config --global user.email "ldk-ci@example.com"
455           git config --global user.name "LDK CI"
456           # Note this is a different endpoint, as we need one non-upstream commit!
457           git clone https://github.com/lightningdevkit/rust-lightning
458           cd rust-lightning
459           git checkout origin/0.0.118-bindings
460           cd ..
461           git clone https://github.com/lightningdevkit/ldk-c-bindings
462           cd ldk-c-bindings
463           git checkout 0.0.118
464           cd lightning-c-bindings
465           . $HOME/.cargo/env
466           cargo update -p memchr --precise "2.5.0" --verbose
467       - name: Checkout Android AAR binaries and artifacts
468         run: |
469           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
470           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
471           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
472           RELEASE_PAGE="https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main"
473           SNAPSHOT_LINK="$(curl "$RELEASE_PAGE" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
474           curl -o bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
475
476           ANDROID_PAGE="https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=android-artifacts;hb=refs/heads/main"
477           SNAPSHOT_LINK="$(curl "$ANDROID_PAGE" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
478           curl -o android-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
479
480           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
481           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
482           tar xvvf ../../bins-snapshot.tgz
483           mv ldk-java-bins-*/* ./
484           rm -r ldk-java-bins-*
485
486           mkdir -p ../android-artifacts
487           cd ../android-artifacts
488           tar xvvf ../../android-snapshot.tgz
489           mv ldk-java-bins-*/* ./
490           rm -r ldk-java-bins-*
491       - name: Build Android aar
492         run: |
493           . $HOME/.cargo/env
494           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
495           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-classes.jar" ./
496           export ANDROID_TOOLCHAIN="$(pwd)/android-ndk-r22b/toolchains/llvm/prebuilt/linux-x86_64"
497           export PATH="$PATH:$ANDROID_TOOLCHAIN/bin"
498           ./android-build.sh ./rust-lightning ./ldk-c-bindings/ ./ldk-java-bins/android-artifacts
499       - name: Check latest library and jars are in bins repo
500         run: |
501           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
502           if ! diff LDK-release.aar "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"LDK-release.aar; then
503             apt-get -y install diffoscope
504             diffoscope LDK-release.aar "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/LDK-release.aar"
505             exit 1
506           fi
507
508   osx:
509     strategy:
510       matrix:
511         include:
512           - platform: macos-11
513           - platform: macos-12
514           - platform: macos-13
515       fail-fast: false
516     runs-on: ${{ matrix.platform }}
517     steps:
518       - name: Install Rust components
519         run: |
520           rustup target install aarch64-apple-darwin
521           rustup component add rust-src
522       - name: Checkout source code
523         uses: actions/checkout@v2
524         with:
525           fetch-depth: 0
526       - name: Install cbindgen
527         run: cargo install cbindgen
528       - name: Checkout Rust-Lightning and LDK-C-Bindings git
529         run: |
530           git config --global user.email "ldk-ci@example.com"
531           git config --global user.name "LDK CI"
532           # Note this is a different endpoint, as we need one non-upstream commit!
533           git clone https://github.com/rghtningdevkit/ust-lightning
534           cd rust-lightning
535           git checkout origin/0.0.118-bindings
536           cd ..
537           git clone https://github.com/lightningdevkit/ldk-c-bindings
538           cd ldk-c-bindings
539           git checkout 0.0.118
540           cd lightning-c-bindings
541           cargo update -p memchr --precise "2.5.0" --verbose
542       - name: Rebuild C bindings and check the sample app builds + links
543         run: |
544           cd ldk-c-bindings
545           CC=clang ./genbindings.sh ../rust-lightning true
546       - name: Fetch OpenJDK 18
547         run: |
548           if [ "$(uname -m)" = "arm64" ]; then
549             wget -O openjdk-18.0.1.1_macos-aarch64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
550             if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-aarch64_bin.tar.gz | awk '{ print $1 }')" != "29773ad68063bdad7fbaeb762cd873d3f243e86de380d3ac5335cdb929371fb5" ]; then
551               echo "Bad hash"
552               exit 1
553             fi
554             tar xvvf openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
555           else
556             wget -O openjdk-18.0.1.1_macos-x64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-x64_bin.tar.gz
557             if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-x64_bin.tar.gz | awk '{ print $1 }')" != "f02d17ec5a387555f8489abc352d973b6c10364409b597046025938e2266d72a" ]; then
558               echo "Bad hash"
559               exit 1
560             fi
561             tar xvvf openjdk-18.0.1.1_macos-x64_bin.tar.gz
562           fi
563       - name: Checkout latest Linux binaries
564         run: |
565           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
566           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
567           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
568           SNAPSHOT_LINK="$(wget -O /dev/stdout "https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
569           wget -O bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
570           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
571           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
572           tar xvvf ../../bins-snapshot.tgz
573           mv ldk-java-bins-*/* ./
574           cd ../..
575           mkdir -p src/main/resources/
576           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/liblightningjni_Linux-"* src/main/resources/
577       - name: Build Java Release Bindings
578         run: |
579           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
580           export JAVA_HOME=`pwd`/jdk-18.0.1.1.jdk/Contents/Home
581           export PATH=$JAVA_HOME/bin:$PATH
582           ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$(xcrun --show-sdk-path)" false false
583
584           if [ "${{ matrix.platform }}" = "macos-11" ]; then
585             export CC="clang --target=aarch64-apple-darwin"
586             export LDK_TARGET=aarch64-apple-darwin
587             export LDK_TARGET_CPU=apple-a14
588             ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$(xcrun --show-sdk-path)" false false
589             cat src/main/resources/liblightningjni_MacOSX-aarch64.nativelib > /dev/null
590
591           fi
592       - name: Fetch Maven 3.8.4
593         run: |
594           # We don't bother using the upstream mirrors as they remove prior
595           # releases aggressively, causing spurious CI failures when we don't
596           # care about the version used.
597           wget -O apache-maven-3.8.4-bin.tar.gz https://bitcoin.ninja/apache-maven-3.8.4-bin.tar.gz
598           if [ "$(shasum -a 256 apache-maven-3.8.4-bin.tar.gz | awk '{ print $1 }')" != "2cdc9c519427bb20fdc25bef5a9063b790e4abd930e7b14b4e9f4863d6f9f13c" ]; then
599             echo "Bad hash"
600             exit 1
601           fi
602           tar xvvf apache-maven-3.8.4-bin.tar.gz
603           export PATH=apache-maven-3.8.4/bin:$PATH
604       - name: Run Java Tests against built jar
605         run: |
606           export JAVA_HOME=`pwd`/jdk-18.0.1.1.jdk/Contents/Home
607           export PATH=$JAVA_HOME/bin:$PATH
608           mvn -DskipTests=true package
609           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
610           JAR_VERSION=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE:1:100}
611           mvn install:install-file -Dfile=target/ldk-java-${JAR_VERSION}.jar -DgroupId=org.lightningdevkit -DartifactId=ldk-java -Dversion=1.0-SNAPSHOT -Dpackaging=jar
612           cd javatester
613           mvn -q -B package
614           java -ea -jar target/ldk-java-tests-1.0-SNAPSHOT-jar-with-dependencies.jar
615       - name: Run Java Tests against release bins
616         run: |
617           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
618           export JAVA_HOME=`pwd`/jdk-18.0.1.1.jdk/Contents/Home
619           export PATH=$JAVA_HOME/bin:$PATH
620           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java.jar" ./
621           mvn install:install-file -Dfile=ldk-java.jar -DgroupId=org.lightningdevkit -DartifactId=ldk-java -Dversion=1.0-SNAPSHOT -Dpackaging=jar
622           cd javatester
623           mvn clean
624           mvn -q -B package
625           java -ea -jar target/ldk-java-tests-1.0-SNAPSHOT-jar-with-dependencies.jar