Merge pull request #134 from TheBlueMatt/main
[ldk-java] / .github / workflows / build.yml
1 name: Continuous Integration Checks
2
3 on: [push, pull_request]
4
5 jobs:
6   wasm_bindings:
7     runs-on: ubuntu-latest
8     # Ubuntu's version of clang doesn't support....anything that should work.
9     # Ubuntu is an utter trash OS and should generally never be used for anything.
10     # We also require at least rustc 1.51 (ie https://github.com/rust-lang/rust/pull/79998),
11     # so we use debian testing
12     container: debian:bookworm
13     strategy:
14       fail-fast: false
15     steps:
16       - name: Install build utilities and test that clang can build for wasm
17         run: |
18           apt-get update
19           apt-get -y dist-upgrade
20           apt-get -y install cargo libstd-rust-dev-wasm32 lld git g++ clang curl node-typescript npm python3 wasi-libc
21           echo "int main() {}" > genbindings_wasm_test_file.c
22           clang -nostdlib -o /dev/null --target=wasm32-wasi -Wl,--no-entry genbindings_wasm_test_file.c
23           rm genbindings_wasm_test_file.c
24       - name: Checkout source code
25         uses: actions/checkout@v2
26         with:
27           fetch-depth: 0
28       - name: Install cbindgen
29         run: |
30           git clone https://github.com/eqrion/cbindgen
31           cd cbindgen/
32           git checkout v0.20.0
33           cargo update -p indexmap --precise "1.6.2" --verbose
34           cargo install --locked --path .
35       - name: Checkout Rust-Lightning and LDK-C-Bindings git
36         run: |
37           git config --global safe.directory '*'
38           git config --global user.email "ldk-ci@example.com"
39           git config --global user.name "LDK CI"
40           # Note this is a different endpoint, as we need one non-upstream commit!
41           git clone https://git.bitcoin.ninja/rust-lightning
42           cd rust-lightning
43           git checkout origin/2023-04-0.0.115-java-bindings
44           cd ..
45           git clone https://github.com/lightningdevkit/ldk-c-bindings
46           cd ldk-c-bindings
47           git checkout 0.0.115
48       - name: Rebuild C bindings without STD
49         run: |
50           cd ldk-c-bindings
51           git config --global safe.directory "*"
52           ./genbindings.sh ../rust-lightning false
53       - name: Build and Test TS Debug Bindings for Node
54         run: |
55           # We need FinalizationRegistry and top-level await support, which requires node 14.6/8,
56           # however Debian ships with Node 12
57           # Thus, we install the binary nodejs from nodejs.org and test with that.
58           curl https://nodejs.org/dist/v16.13.1/node-v16.13.1-linux-x64.tar.xz > nodejs.tar.xz
59           tar xvvf nodejs.tar.xz
60           export PATH=$(pwd)/$(echo node-*/bin):$PATH
61           ./genbindings.sh ./ldk-c-bindings/ wasm true false
62       - name: Build and Test TS Release Bindings for Node
63         run: |
64           export PATH=$(pwd)/$(echo node-*/bin):$PATH
65           ./genbindings.sh ./ldk-c-bindings/ wasm false false
66       - name: Install Playwright for Web Tests
67         run: |
68           export HOME=/root/ # Github actions is apparently broken
69           export PATH=$(pwd)/$(echo node-*/bin):$PATH
70           # npx playwright install-deps is broken so we do it manually, see https://github.com/microsoft/playwright/issues/11165
71           apt-get install -y --no-install-recommends fonts-liberation libenchant-2-2 libicu72 libjpeg62-turbo libasound2 libatk-bridge2.0-0 libatk1.0-0 libatspi2.0-0 libcairo2 libcups2 libdbus-1-3 libdrm2 libegl1 libgbm1 libglib2.0-0 libgtk-3-0 libnspr4 libnss3 libpango-1.0-0 libx11-6 libx11-xcb1 libxcb1 libxcomposite1 libxdamage1 libxext6 libxfixes3 libxrandr2 libxshmfence1 xvfb fonts-noto-color-emoji fonts-unifont libfontconfig libfreetype6 xfonts-scalable fonts-ipafont-gothic fonts-wqy-zenhei fonts-tlwg-loma-otf ffmpeg libcairo-gobject2 libdbus-glib-1-2 libfontconfig1 libgdk-pixbuf2.0-0 libpangocairo-1.0-0 libpangoft2-1.0-0 libxcb-shm0 libxcursor1 libxi6 libxrender1 libxt6 gstreamer1.0-libav gstreamer1.0-plugins-bad gstreamer1.0-plugins-base gstreamer1.0-plugins-good libepoxy0 libevdev2 libgl1 libgles2 libgstreamer-gl1.0-0 libgstreamer1.0-0 libharfbuzz-icu0 libharfbuzz0b libhyphen0 libnotify4 libopenjp2-7 libopus0 libpng16-16 libsecret-1-0 libsoup2.4-1 libwayland-client0 libwayland-egl1 libwayland-server0 libwebp7 libwebpdemux2 libwoff1 libxkbcommon0 libxml2 libxslt1.1
72           mkdir -p $HOME/.cache/ms-playwright # `playwright install` is too dumb to create this for us
73           chmod -R 777 $HOME/
74           npm i -D playwright
75           npx playwright install
76       - name: Build and Test TS Debug Bindings for Web
77         run: |
78           export HOME=/root/ # Github actions is apparently broken
79           export PATH=$(pwd)/$(echo node-*/bin):$PATH
80           git config --global safe.directory "*"
81           ./genbindings.sh ./ldk-c-bindings/ wasm true true
82           cd ts
83           rm liblightningjs.wasm && ln -s $(pwd)/../liblightningjs_debug.wasm ./liblightningjs.wasm
84           python3 -m http.server &
85           SERVER_PID=$!
86           node test/browser.mjs
87           kill $SERVER_PID
88       - name: Build and Test TS Release Bindings for Web
89         run: |
90           export HOME=/root/ # Github actions is apparently broken
91           export PATH=$(pwd)/$(echo node-*/bin):$PATH
92           ./genbindings.sh ./ldk-c-bindings/ wasm false true
93           cd ts
94           rm liblightningjs.wasm && ln -s $(pwd)/../liblightningjs_release.wasm ./liblightningjs.wasm
95           python3 -m http.server &
96           SERVER_PID=$!
97           node test/browser.mjs
98           kill $SERVER_PID
99       - name: Check latest TS files are in git
100         run: |
101           git checkout ts/package.json
102           git checkout node-net/package.json
103           git diff --exit-code
104
105   java_bindings:
106     runs-on: ubuntu-latest
107     # Ubuntu's version of rustc uses its own LLVM instead of being a real native package.
108     # This leaves us with an incompatible LLVM version when linking. Instead, use a real OS.
109     container: debian:bullseye
110     strategy:
111       fail-fast: false
112     steps:
113       - name: Install native Rust toolchain, Valgrind, and build utilitis
114         run: |
115           apt-get update
116           apt-get -y dist-upgrade
117           apt-get -y install cargo valgrind lld git g++ clang openjdk-11-jdk maven faketime zip unzip llvm curl
118       - name: Checkout source code
119         uses: actions/checkout@v2
120         with:
121           fetch-depth: 0
122       - name: Install cbindgen
123         run: |
124           git config --global safe.directory '*'
125           git clone https://github.com/eqrion/cbindgen
126           cd cbindgen/
127           git checkout v0.20.0
128           cargo update -p indexmap --precise "1.6.2" --verbose
129           cargo install --locked --path .
130       - name: Checkout Rust-Lightning and LDK-C-Bindings git
131         run: |
132           git config --global user.email "ldk-ci@example.com"
133           git config --global user.name "LDK CI"
134           # Note this is a different endpoint, as we need one non-upstream commit!
135           git clone https://git.bitcoin.ninja/rust-lightning
136           cd rust-lightning
137           git checkout origin/2023-04-0.0.115-java-bindings
138           cd ..
139           git clone https://github.com/lightningdevkit/ldk-c-bindings
140           cd ldk-c-bindings
141           git checkout 0.0.115
142       - name: Rebuild C bindings, and check the sample app builds + links
143         run: |
144           cd ldk-c-bindings
145           ./genbindings.sh ../rust-lightning true
146       - name: Build Java Debug Bindings
147         run: ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-11-openjdk-amd64/include/ -I/usr/lib/jvm/java-11-openjdk-amd64/include/linux/" true false
148       - name: Run Java Tests against Debug Bindings
149         run: |
150           mv liblightningjni_debug_Linux-amd64.so liblightningjni.so
151           export ASAN_OPTIONS=detect_leaks=0
152           LD_PRELOAD=/usr/lib/llvm-11/lib/clang/11.0.1/lib/linux/libclang_rt.asan-x86_64.so LD_LIBRARY_PATH=. mvn test
153       - name: Build Java Release Bindings
154         run: |
155           ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-11-openjdk-amd64/include/ -I/usr/lib/jvm/java-11-openjdk-amd64/include/linux/" false false
156       - name: Check latest headers are in git
157         run: |
158           git checkout pom.xml
159           git diff --exit-code
160
161   java_determinism:
162     runs-on: ubuntu-latest
163     # Ubuntu's version of rustc uses its own LLVM instead of being a real native package.
164     # This leaves us with an incompatible LLVM version when linking. Instead, use a real OS.
165     container: debian:bullseye
166     strategy:
167       fail-fast: false
168     steps:
169       - name: Install native Rust toolchain, Valgrind, and build utilitis
170         run: |
171           apt-get update
172           apt-get -y dist-upgrade
173           apt-get -y install cargo valgrind lld git g++ clang openjdk-11-jdk maven faketime zip unzip llvm curl
174       - name: Checkout source code
175         uses: actions/checkout@v2
176         with:
177           fetch-depth: 0
178       - name: Install cbindgen
179         run: |
180           git config --global safe.directory '*'
181           git clone https://github.com/eqrion/cbindgen
182           cd cbindgen/
183           git checkout v0.20.0
184           cargo update -p indexmap --precise "1.6.2" --verbose
185           cargo install --locked --path .
186       - name: Checkout Rust-Lightning and LDK-C-Bindings git
187         run: |
188           git config --global user.email "ldk-ci@example.com"
189           git config --global user.name "LDK CI"
190           # Note this is a different endpoint, as we need one non-upstream commit!
191           git clone https://git.bitcoin.ninja/rust-lightning
192           cd rust-lightning
193           git checkout origin/2023-04-0.0.115-java-bindings
194           cd ..
195           git clone https://github.com/lightningdevkit/ldk-c-bindings
196           cd ldk-c-bindings
197           git checkout 0.0.115
198       - name: Rebuild C bindings, and check the sample app builds + links
199         run: |
200           cd ldk-c-bindings
201           ./genbindings.sh ../rust-lightning true
202       - name: Checkout latest MacOS binaries
203         shell: bash
204         run: |
205           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
206           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
207           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
208           SNAPSHOT_LINK="$(curl "https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
209           curl -o bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
210           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
211           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
212           tar xvvf ../../bins-snapshot.tgz
213           mv ldk-java-bins-*/* ./
214           rm -r ldk-java-bins-*
215           cd ../..
216           mkdir -p src/main/resources/
217       - name: Copy latest MacOS leaktracking libs
218         run: |
219           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
220           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"liblightningjni_MacOSX-aarch64-leaktracking.nativelib src/main/resources/liblightningjni_MacOSX-aarch64.nativelib
221           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"liblightningjni_MacOSX-x86_64-leaktracking.nativelib src/main/resources/liblightningjni_MacOSX-x86_64.nativelib
222       - name: Build Leaktracking Java Release Bindings
223         run: |
224           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
225           ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-11-openjdk-amd64/include/ -I/usr/lib/jvm/java-11-openjdk-amd64/include/linux/" leaks false
226       - name: Build deterministic release jar
227         run: |
228           ./build-release-jar.sh
229           mv ldk-java.jar ldk-java-leaktracking.jar
230       - name: Copy latest MacOS libs
231         shell: bash
232         run: |
233           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
234           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/liblightningjni_MacOSX-"{aarch64,x86_64}.nativelib src/main/resources/
235       - name: Build Java Release Bindings
236         run: |
237           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
238           ./genbindings.sh ./ldk-c-bindings/ "-I/usr/lib/jvm/java-11-openjdk-amd64/include/ -I/usr/lib/jvm/java-11-openjdk-amd64/include/linux/" false false
239       - name: Build deterministic release jar
240         run: ./build-release-jar.sh
241       - name: Check latest library and jars are in bins repo
242         run: |
243           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
244           mkdir ldk-java-bins/new/
245           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"liblightningjni_Mac*.nativelib ldk-java-bins/new/
246           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"LDK-release.aar ldk-java-bins/new/
247           cp src/main/resources/liblightningjni_Linux-amd64.nativelib ldk-java-bins/new/
248           cp ldk-java-sources.jar ldk-java-bins/new/
249           cp ldk-java.jar ldk-java-bins/new/
250           cp ldk-java-leaktracking.jar ldk-java-bins/new/
251           cp ldk-java-classes.jar ldk-java-bins/new/
252           cp ldk-java-javadoc.jar ldk-java-bins/new/
253           cd ldk-java-bins
254           rm "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/liblightningjs.wasm" # TODO: Test this
255           if ! diff -r "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/" new/; then
256             apt-get -y install diffoscope
257             diffoscope new/ldk-java-sources.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-sources.jar" || echo
258             diffoscope new/ldk-java-javadoc.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-javadoc.jar" || echo
259             diffoscope new/ldk-java-classes.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-classes.jar" || echo
260             diffoscope new/ldk-java.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java.jar" || echo
261             diffoscope new/ldk-java-leaktracking.jar "${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-leaktracking.jar" || echo
262             exit 1
263           fi
264       - name: Run Java Tests against built release jar
265         run: |
266           mvn install:install-file -Dfile=ldk-java.jar -DgroupId=org.lightningdevkit -DartifactId=ldk-java -Dversion=1.0-SNAPSHOT -Dpackaging=jar
267           cd javatester
268           mvn package
269           java -ea -jar target/ldk-java-tests-1.0-SNAPSHOT-jar-with-dependencies.jar
270
271   macos_determinism:
272     runs-on: ubuntu-latest
273     # Ubuntu's version of rustc uses its own LLVM instead of being a real native package.
274     # This leaves us with an incompatible LLVM version when linking. Instead, use a real OS.
275     container: debian:bookworm
276     strategy:
277       fail-fast: false
278     steps:
279       - name: Install native Rust toolchain, Valgrind, and build utilitis
280         run: |
281           apt-get update
282           apt-get -y dist-upgrade
283           apt-get -y install cargo valgrind openjdk-17-jdk lld git g++ clang llvm curl rust-src
284       - name: Checkout source code
285         uses: actions/checkout@v2
286         with:
287           fetch-depth: 0
288       - name: Install cbindgen
289         run: |
290           git config --global safe.directory '*'
291           git clone https://github.com/eqrion/cbindgen
292           cd cbindgen/
293           git checkout v0.20.0
294           cargo update -p indexmap --precise "1.6.2" --verbose
295           cargo install --locked --path .
296       - name: Checkout Rust-Lightning and LDK-C-Bindings git
297         run: |
298           git config --global user.email "ldk-ci@example.com"
299           git config --global user.name "LDK CI"
300           # Note this is a different endpoint, as we need one non-upstream commit!
301           git clone https://git.bitcoin.ninja/rust-lightning
302           cd rust-lightning
303           git checkout origin/2023-04-0.0.115-java-bindings
304           cd ..
305           git clone https://github.com/lightningdevkit/ldk-c-bindings
306           cd ldk-c-bindings
307           git checkout 0.0.115
308       - name: Fetch MacOS SDK
309         run: |
310           curl -o Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers.tar.gz https://bitcoincore.org/depends-sources/sdks/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers.tar.gz
311           tar xvvf Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers.tar.gz
312       - name: Rebuild C bindings, and check the sample app builds + links
313         run: |
314           # rust-src doesn't distribute the rustlib Cargo.lock, but an empty
315           # file seems to suffice to make `-Zbuild-std` happy.
316           touch /usr/lib/rustlib/src/rust/Cargo.lock
317           export MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
318           cd ldk-c-bindings
319           ./genbindings.sh ../rust-lightning true
320       - name: Fetch MacOS OpenJDK 18 for x86_64
321         run: |
322           curl -o openjdk-18.0.1.1_macos-x64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-x64_bin.tar.gz
323           if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-x64_bin.tar.gz | awk '{ print $1 }')" != "f02d17ec5a387555f8489abc352d973b6c10364409b597046025938e2266d72a" ]; then
324             echo "Bad hash"
325             exit 1
326           fi
327           mkdir jdk-x86_64
328           cd jdk-x86_64
329           tar xvvf ../openjdk-18.0.1.1_macos-x64_bin.tar.gz
330       - name: Fetch MacOS OpenJDK 18 for aarch64
331         run: |
332           curl -o openjdk-18.0.1.1_macos-aarch64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
333           if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-aarch64_bin.tar.gz | awk '{ print $1 }')" != "29773ad68063bdad7fbaeb762cd873d3f243e86de380d3ac5335cdb929371fb5" ]; then
334             echo "Bad hash"
335             exit 1
336           fi
337           mkdir jdk-aarch64
338           cd jdk-aarch64
339           tar xvvf ../openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
340       - name: Build MacOS aarch64 Java leaktracking Release Bindings
341         run: |
342           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
343           JAVA_HOME=jdk-aarch64/jdk-18.0.1.1.jdk/Contents/Home
344           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
345           CC=clang LDK_TARGET=aarch64-apple-darwin LDK_TARGET_CPU=apple-a14 ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" leaks false
346           mv src/main/resources/liblightningjni_MacOSX-aarch64.nativelib src/main/resources/liblightningjni_MacOSX-aarch64-leaktracking.nativelib
347       - name: Build MacOS x86_64 Java leaktracking Release Bindings
348         run: |
349           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
350           JAVA_HOME=jdk-x86_64/jdk-18.0.1.1.jdk/Contents/Home
351           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
352           CC=clang LDK_TARGET=x86_64-apple-darwin LDK_TARGET_CPU=sandybridge ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" leaks false
353           mv src/main/resources/liblightningjni_MacOSX-x86_64.nativelib src/main/resources/liblightningjni_MacOSX-x86_64-leaktracking.nativelib
354       - name: Build MacOS aarch64 Java Release Bindings
355         run: |
356           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
357           JAVA_HOME=jdk-aarch64/jdk-18.0.1.1.jdk/Contents/Home
358           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
359           CC=clang LDK_TARGET=aarch64-apple-darwin LDK_TARGET_CPU=apple-a14 ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" false false
360       - name: Build MacOS x86_64 Java Release Bindings
361         run: |
362           MACOS_SDK="$PWD/Xcode-12.2-12B45b-extracted-SDK-with-libcxx-headers"
363           JAVA_HOME=jdk-x86_64/jdk-18.0.1.1.jdk/Contents/Home
364           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
365           CC=clang LDK_TARGET=x86_64-apple-darwin LDK_TARGET_CPU=sandybridge ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$MACOS_SDK" false false
366       - name: Checkout latest binaries
367         run: |
368           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
369           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
370           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
371           SNAPSHOT_LINK="$(curl "https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
372           curl -o bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
373           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
374           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
375           tar xvvf ../../bins-snapshot.tgz
376           mv ldk-java-bins-*/* ./
377           rm -r ldk-java-bins-*
378           cd ../..
379       - name: Check latest MacOS libraries are in the bins repo
380         shell: bash
381         run: |
382           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
383           for F in liblightningjni_MacOSX-{x86_64,aarch64}{,-leaktracking}.nativelib; do
384             if ! diff "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/$F" "src/main/resources/$F"; then
385               apt-get -y install diffoscope
386               # Sadly these binaries are still non-deterministic, but only due
387               # to a few-byte tag, thus we use diffoscope to ensure there
388               # aren't any "real" differences and move on.
389               diffoscope "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/$F" "src/main/resources/$F" || echo
390             fi
391           done
392
393   android:
394     runs-on: ubuntu-latest
395     # Frankly, I'm not really sure why debian and ubuntu differ in the results here, they really shouldn't
396     container: debian:bullseye
397     strategy:
398       fail-fast: false
399     steps:
400       - name: Install rust targets
401         run: |
402           apt-get update
403           apt-get -y dist-upgrade
404           apt-get -y install git g++ clang faketime zip unzip curl openjdk-11-jdk
405           curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs > rustup.sh
406           chmod +x ./rustup.sh
407           ./rustup.sh -y
408           . $HOME/.cargo/env
409           # Temporarily use 1.67.1 to fix https://github.com/rust-lang/rust/issues/108943
410           rustup install 1.67.1
411           rustup default 1.67.1
412           rustup target add armv7-linux-androideabi
413           rustup target add aarch64-linux-android
414           rustup target add i686-linux-android
415           rustup target add x86_64-linux-android
416       - name: Checkout source code
417         uses: actions/checkout@v2
418         with:
419           fetch-depth: 0
420       - name: Install android NDK compilers
421         run: |
422           git config --global safe.directory '*'
423           curl https://dl.google.com/android/repository/android-ndk-r22b-linux-x86_64.zip > android-ndk-r22b-linux-x86_64.zip
424           if [ "$(sha256sum android-ndk-r22b-linux-x86_64.zip | awk '{ print $1 }')" != "ac3a0421e76f71dd330d0cd55f9d99b9ac864c4c034fc67e0d671d022d4e806b" ]; then
425             echo "Bad hash"
426             exit 1
427           fi
428           unzip android-ndk-r22b-linux-x86_64.zip
429       - name: Install cbindgen
430         run: |
431           . $HOME/.cargo/env
432           cargo install cbindgen
433       - name: Checkout Rust-Lightning and LDK-C-Bindings git
434         run: |
435           git config --global user.email "ldk-ci@example.com"
436           git config --global user.name "LDK CI"
437           # Note this is a different endpoint, as we need one non-upstream commit!
438           git clone https://git.bitcoin.ninja/rust-lightning
439           cd rust-lightning
440           git checkout origin/2023-04-0.0.115-java-bindings
441           cd ..
442           git clone https://github.com/lightningdevkit/ldk-c-bindings
443           cd ldk-c-bindings
444           git checkout 0.0.115
445       - name: Checkout Android AAR binaries and artifacts
446         run: |
447           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
448           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
449           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
450           RELEASE_PAGE="https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main"
451           SNAPSHOT_LINK="$(curl "$RELEASE_PAGE" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
452           curl -o bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
453
454           ANDROID_PAGE="https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=android-artifacts;hb=refs/heads/main"
455           SNAPSHOT_LINK="$(curl "$ANDROID_PAGE" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
456           curl -o android-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
457
458           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
459           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
460           tar xvvf ../../bins-snapshot.tgz
461           mv ldk-java-bins-*/* ./
462           rm -r ldk-java-bins-*
463
464           mkdir -p ../android-artifacts
465           cd ../android-artifacts
466           tar xvvf ../../android-snapshot.tgz
467           mv ldk-java-bins-*/* ./
468           rm -r ldk-java-bins-*
469       - name: Build Android aar
470         run: |
471           . $HOME/.cargo/env
472           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
473           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java-classes.jar" ./
474           export ANDROID_TOOLCHAIN="$(pwd)/android-ndk-r22b/toolchains/llvm/prebuilt/linux-x86_64"
475           export PATH="$PATH:$ANDROID_TOOLCHAIN/bin"
476           ./android-build.sh ./rust-lightning ./ldk-c-bindings/ ./ldk-java-bins/android-artifacts
477       - name: Check latest library and jars are in bins repo
478         run: |
479           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
480           if ! diff LDK-release.aar "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/"LDK-release.aar; then
481             apt-get -y install diffoscope
482             diffoscope LDK-release.aar "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/LDK-release.aar"
483             exit 1
484           fi
485
486   osx:
487     strategy:
488       matrix:
489         include:
490           - platform: macos-11
491           - platform: macos-12
492           - platform: macos-13
493       fail-fast: false
494     runs-on: ${{ matrix.platform }}
495     steps:
496       - name: Install Rust components
497         run: |
498           rustup target install aarch64-apple-darwin
499           rustup component add rust-src
500       - name: Checkout source code
501         uses: actions/checkout@v2
502         with:
503           fetch-depth: 0
504       - name: Install cbindgen
505         run: cargo install cbindgen
506       - name: Checkout Rust-Lightning and LDK-C-Bindings git
507         run: |
508           git config --global user.email "ldk-ci@example.com"
509           git config --global user.name "LDK CI"
510           # Note this is a different endpoint, as we need one non-upstream commit!
511           git clone https://git.bitcoin.ninja/rust-lightning
512           cd rust-lightning
513           git checkout origin/2023-04-0.0.115-java-bindings
514           cd ..
515           git clone https://github.com/lightningdevkit/ldk-c-bindings
516           cd ldk-c-bindings
517           git checkout 0.0.115
518       - name: Rebuild C bindings and check the sample app builds + links
519         run: |
520           cd ldk-c-bindings
521           CC=clang ./genbindings.sh ../rust-lightning true
522       - name: Fetch OpenJDK 18
523         run: |
524           if [ "$(uname -m)" = "arm64" ]; then
525             wget -O openjdk-18.0.1.1_macos-aarch64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
526             if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-aarch64_bin.tar.gz | awk '{ print $1 }')" != "29773ad68063bdad7fbaeb762cd873d3f243e86de380d3ac5335cdb929371fb5" ]; then
527               echo "Bad hash"
528               exit 1
529             fi
530             tar xvvf openjdk-18.0.1.1_macos-aarch64_bin.tar.gz
531           else
532             wget -O openjdk-18.0.1.1_macos-x64_bin.tar.gz https://download.java.net/java/GA/jdk18.0.1.1/65ae32619e2f40f3a9af3af1851d6e19/2/GPL/openjdk-18.0.1.1_macos-x64_bin.tar.gz
533             if [ "$(shasum -a 256 openjdk-18.0.1.1_macos-x64_bin.tar.gz | awk '{ print $1 }')" != "f02d17ec5a387555f8489abc352d973b6c10364409b597046025938e2266d72a" ]; then
534               echo "Bad hash"
535               exit 1
536             fi
537             tar xvvf openjdk-18.0.1.1_macos-x64_bin.tar.gz
538           fi
539       - name: Checkout latest Linux binaries
540         run: |
541           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
542           echo "Fetching deterministic binaries for LDK-GC ${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
543           # Gitweb only allows snapshots of folders by providing the object hash, which we have to extract:
544           SNAPSHOT_LINK="$(wget -O /dev/stdout "https://git.bitcoin.ninja/index.cgi?p=ldk-java-bins;a=tree;f=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE};hb=refs/heads/main" | grep snapshot | grep -o 'href="[a-zA-Z0-9/?\.=;\-]*"' | sed 's/href="//' | tr -d '"' | grep snapshot)"
545           wget -O bins-snapshot.tgz "https://git.bitcoin.ninja${SNAPSHOT_LINK}"
546           mkdir -p ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
547           cd ldk-java-bins/"${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}"
548           tar xvvf ../../bins-snapshot.tgz
549           mv ldk-java-bins-*/* ./
550           cd ../..
551           mkdir -p src/main/resources/
552           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/liblightningjni_Linux-"* src/main/resources/
553       - name: Build Java Release Bindings
554         run: |
555           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
556           export JAVA_HOME=`pwd`/jdk-18.0.1.1.jdk/Contents/Home
557           export PATH=$JAVA_HOME/bin:$PATH
558           ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$(xcrun --show-sdk-path)" false false
559
560           if [ "${{ matrix.platform }}" = "macos-11" ]; then
561             export CC="clang --target=aarch64-apple-darwin"
562             export LDK_TARGET=aarch64-apple-darwin
563             export LDK_TARGET_CPU=apple-a14
564             ./genbindings.sh ./ldk-c-bindings/ "-I$JAVA_HOME/include/ -I$JAVA_HOME/include/darwin -isysroot$(xcrun --show-sdk-path)" false false
565             cat src/main/resources/liblightningjni_MacOSX-aarch64.nativelib > /dev/null
566
567           fi
568       - name: Fetch Maven 3.8.4
569         run: |
570           # We don't bother using the upstream mirrors as they remove prior
571           # releases aggressively, causing spurious CI failures when we don't
572           # care about the version used.
573           wget -O apache-maven-3.8.4-bin.tar.gz https://bitcoin.ninja/apache-maven-3.8.4-bin.tar.gz
574           if [ "$(shasum -a 256 apache-maven-3.8.4-bin.tar.gz | awk '{ print $1 }')" != "2cdc9c519427bb20fdc25bef5a9063b790e4abd930e7b14b4e9f4863d6f9f13c" ]; then
575             echo "Bad hash"
576             exit 1
577           fi
578           tar xvvf apache-maven-3.8.4-bin.tar.gz
579           export PATH=apache-maven-3.8.4/bin:$PATH
580       - name: Run Java Tests against built jar
581         run: |
582           export JAVA_HOME=`pwd`/jdk-18.0.1.1.jdk/Contents/Home
583           export PATH=$JAVA_HOME/bin:$PATH
584           mvn -DskipTests=true package
585           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
586           JAR_VERSION=${LDK_GARBAGECOLLECTED_GIT_OVERRIDE:1:100}
587           mvn install:install-file -Dfile=target/ldk-java-${JAR_VERSION}.jar -DgroupId=org.lightningdevkit -DartifactId=ldk-java -Dversion=1.0-SNAPSHOT -Dpackaging=jar
588           cd javatester
589           mvn -q -B package
590           java -ea -jar target/ldk-java-tests-1.0-SNAPSHOT-jar-with-dependencies.jar
591       - name: Run Java Tests against release bins
592         run: |
593           export LDK_GARBAGECOLLECTED_GIT_OVERRIDE="$(git describe --tag HEAD)"
594           export JAVA_HOME=`pwd`/jdk-18.0.1.1.jdk/Contents/Home
595           export PATH=$JAVA_HOME/bin:$PATH
596           cp "ldk-java-bins/${LDK_GARBAGECOLLECTED_GIT_OVERRIDE}/ldk-java.jar" ./
597           mvn install:install-file -Dfile=ldk-java.jar -DgroupId=org.lightningdevkit -DartifactId=ldk-java -Dversion=1.0-SNAPSHOT -Dpackaging=jar
598           cd javatester
599           mvn clean
600           mvn -q -B package
601           java -ea -jar target/ldk-java-tests-1.0-SNAPSHOT-jar-with-dependencies.jar