mirror of
https://github.com/microsoft/vscode.git
synced 2026-04-20 08:38:56 +01:00
* extend 1es pipeline template * oops * fix template references * argh * hmm * hm * hm * use outputs for compilation artifact * this * use 1ES.PublishPipelineArtifact@1 instead of publish * more 1ES.PublishPipelineArtifact@1 adoption * provide windows pool for sdl sources * sdl * fix pools * fix macos * disable sbom for intermediate artifacts * use mariner linux * try inline tsa options * fix credscan * hm * sudo it * more suppressions * be explicit with SBOM build drop paths * fix indentation * fix file extensions * fix cli sbom build drop paths * fix more build * fix unzip cli * careful with _manifest in artifacts * do not close file * add logging * debug * use snapcraft container * remove size check * fix macos cli step * fix snap permissions * fix macos * better logs * fix snap * more cred scan suppressions * even more supressiong * alpine-arm64: try using x64 * Revert "alpine-arm64: try using x64" This reverts commitbf2003bf60. * test docker * I wonder * logs * hm * fix indentation * hm * hm * fix snap finds * remove auth * use hostArchitecture * snap: limit find * hm * sudo * Add validateToolOutput: None to the build pipeline * bring back sdl-scan * try all tools: true * use release * Update Azure Pipelines YAML file for Linux product build and test * hm * hm * same for win32 * hm * hm * Revert "hm" This reverts commit1b9dcae85b. * use branch * fix template file * fix template paths
158 lines
6.1 KiB
YAML
158 lines
6.1 KiB
YAML
parameters:
|
|
- name: VSCODE_BUILD_LINUX
|
|
type: boolean
|
|
default: false
|
|
- name: VSCODE_BUILD_LINUX_ARM64
|
|
type: boolean
|
|
default: false
|
|
- name: VSCODE_BUILD_LINUX_ARMHF
|
|
type: boolean
|
|
default: false
|
|
- name: VSCODE_CHECK_ONLY
|
|
type: boolean
|
|
default: false
|
|
- name: VSCODE_QUALITY
|
|
type: string
|
|
|
|
steps:
|
|
- task: NodeTool@0
|
|
inputs:
|
|
versionSource: fromFile
|
|
versionFilePath: .nvmrc
|
|
nodejsMirror: https://github.com/joaomoreno/node-mirror/releases/download
|
|
|
|
- ${{ if ne(parameters.VSCODE_QUALITY, 'oss') }}:
|
|
- template: ../cli/cli-apply-patches.yml@self
|
|
|
|
- task: Npm@1
|
|
displayName: Download openssl prebuilt
|
|
inputs:
|
|
command: custom
|
|
customCommand: pack @vscode-internal/openssl-prebuilt@0.0.11
|
|
customRegistry: useFeed
|
|
customFeed: "Monaco/openssl-prebuilt"
|
|
workingDir: $(Build.ArtifactStagingDirectory)
|
|
|
|
- script: |
|
|
set -e
|
|
mkdir $(Build.ArtifactStagingDirectory)/openssl
|
|
tar -xvzf $(Build.ArtifactStagingDirectory)/vscode-internal-openssl-prebuilt-0.0.11.tgz --strip-components=1 --directory=$(Build.ArtifactStagingDirectory)/openssl
|
|
displayName: Extract openssl prebuilt
|
|
|
|
- ${{ if ne(parameters.VSCODE_QUALITY, 'oss') }}:
|
|
- script: node build/setup-npm-registry.js $NPM_REGISTRY
|
|
condition: and(succeeded(), ne(variables['NPM_REGISTRY'], 'none'))
|
|
displayName: Setup NPM Registry
|
|
|
|
- script: |
|
|
set -e
|
|
npm config set registry "$NPM_REGISTRY" --location=project
|
|
# npm >v7 deprecated the `always-auth` config option, refs npm/cli@72a7eeb
|
|
# following is a workaround for yarn to send authorization header
|
|
# for GET requests to the registry.
|
|
echo "always-auth=true" >> .npmrc
|
|
yarn config set registry "$NPM_REGISTRY"
|
|
condition: and(succeeded(), ne(variables['NPM_REGISTRY'], 'none'))
|
|
displayName: Setup NPM & Yarn
|
|
|
|
- task: npmAuthenticate@0
|
|
inputs:
|
|
workingFile: .npmrc
|
|
condition: and(succeeded(), ne(variables['NPM_REGISTRY'], 'none'))
|
|
displayName: Setup NPM Authentication
|
|
|
|
- script: |
|
|
set -e
|
|
|
|
for i in {1..5}; do # try 5 times
|
|
yarn --cwd build --frozen-lockfile --check-files && break
|
|
if [ $i -eq 3 ]; then
|
|
echo "Yarn failed too many times" >&2
|
|
exit 1
|
|
fi
|
|
echo "Yarn failed $i, trying again..."
|
|
done
|
|
displayName: Install build dependencies
|
|
|
|
- script: |
|
|
set -e
|
|
mkdir -p $(Build.SourcesDirectory)/.build
|
|
displayName: Create .build folder for misc dependencies
|
|
|
|
- template: ../cli/install-rust-posix.yml@self
|
|
parameters:
|
|
targets:
|
|
- ${{ if eq(parameters.VSCODE_BUILD_LINUX_ARM64, true) }}:
|
|
- aarch64-unknown-linux-gnu
|
|
- ${{ if eq(parameters.VSCODE_BUILD_LINUX, true) }}:
|
|
- x86_64-unknown-linux-gnu
|
|
- ${{ if eq(parameters.VSCODE_BUILD_LINUX_ARMHF, true) }}:
|
|
- armv7-unknown-linux-gnueabihf
|
|
|
|
- ${{ if eq(parameters.VSCODE_BUILD_LINUX_ARM64, true) }}:
|
|
- template: ../cli/cli-compile.yml@self
|
|
parameters:
|
|
VSCODE_QUALITY: ${{ parameters.VSCODE_QUALITY }}
|
|
VSCODE_CLI_TARGET: aarch64-unknown-linux-gnu
|
|
VSCODE_CLI_ARTIFACT: vscode_cli_linux_arm64_cli
|
|
VSCODE_CHECK_ONLY: ${{ parameters.VSCODE_CHECK_ONLY }}
|
|
VSCODE_CLI_ENV:
|
|
OPENSSL_LIB_DIR: $(Build.ArtifactStagingDirectory)/openssl/arm64-linux/lib
|
|
OPENSSL_INCLUDE_DIR: $(Build.ArtifactStagingDirectory)/openssl/arm64-linux/include
|
|
SYSROOT_ARCH: arm64
|
|
|
|
- ${{ if eq(parameters.VSCODE_BUILD_LINUX, true) }}:
|
|
- template: ../cli/cli-compile.yml@self
|
|
parameters:
|
|
VSCODE_QUALITY: ${{ parameters.VSCODE_QUALITY }}
|
|
VSCODE_CLI_TARGET: x86_64-unknown-linux-gnu
|
|
VSCODE_CLI_ARTIFACT: vscode_cli_linux_x64_cli
|
|
VSCODE_CHECK_ONLY: ${{ parameters.VSCODE_CHECK_ONLY }}
|
|
VSCODE_CLI_ENV:
|
|
OPENSSL_LIB_DIR: $(Build.ArtifactStagingDirectory)/openssl/x64-linux/lib
|
|
OPENSSL_INCLUDE_DIR: $(Build.ArtifactStagingDirectory)/openssl/x64-linux/include
|
|
SYSROOT_ARCH: amd64
|
|
|
|
- ${{ if eq(parameters.VSCODE_BUILD_LINUX_ARMHF, true) }}:
|
|
- template: ../cli/cli-compile.yml@self
|
|
parameters:
|
|
VSCODE_QUALITY: ${{ parameters.VSCODE_QUALITY }}
|
|
VSCODE_CLI_TARGET: armv7-unknown-linux-gnueabihf
|
|
VSCODE_CLI_ARTIFACT: vscode_cli_linux_armhf_cli
|
|
VSCODE_CHECK_ONLY: ${{ parameters.VSCODE_CHECK_ONLY }}
|
|
VSCODE_CLI_ENV:
|
|
OPENSSL_LIB_DIR: $(Build.ArtifactStagingDirectory)/openssl/arm-linux/lib
|
|
OPENSSL_INCLUDE_DIR: $(Build.ArtifactStagingDirectory)/openssl/arm-linux/include
|
|
SYSROOT_ARCH: armhf
|
|
|
|
- ${{ if not(parameters.VSCODE_CHECK_ONLY) }}:
|
|
- ${{ if eq(parameters.VSCODE_BUILD_LINUX_ARMHF, true) }}:
|
|
- task: 1ES.PublishPipelineArtifact@1
|
|
inputs:
|
|
targetPath: $(Build.ArtifactStagingDirectory)/vscode_cli_linux_armhf_cli.tar.gz
|
|
artifactName: vscode_cli_linux_armhf_cli
|
|
sbomBuildDropPath: $(Build.ArtifactStagingDirectory)/cli
|
|
sbomPackageName: "VS Code Linux armhf CLI"
|
|
sbomPackageVersion: $(Build.SourceVersion)
|
|
displayName: Publish vscode_cli_linux_armhf_cli artifact
|
|
|
|
- ${{ if eq(parameters.VSCODE_BUILD_LINUX, true) }}:
|
|
- task: 1ES.PublishPipelineArtifact@1
|
|
inputs:
|
|
targetPath: $(Build.ArtifactStagingDirectory)/vscode_cli_linux_x64_cli.tar.gz
|
|
artifactName: vscode_cli_linux_x64_cli
|
|
sbomBuildDropPath: $(Build.ArtifactStagingDirectory)/cli
|
|
sbomPackageName: "VS Code Linux x64 CLI"
|
|
sbomPackageVersion: $(Build.SourceVersion)
|
|
displayName: Publish vscode_cli_linux_x64_cli artifact
|
|
|
|
- ${{ if eq(parameters.VSCODE_BUILD_LINUX_ARM64, true) }}:
|
|
- task: 1ES.PublishPipelineArtifact@1
|
|
inputs:
|
|
targetPath: $(Build.ArtifactStagingDirectory)/vscode_cli_linux_arm64_cli.tar.gz
|
|
artifactName: vscode_cli_linux_arm64_cli
|
|
sbomBuildDropPath: $(Build.ArtifactStagingDirectory)/cli
|
|
sbomPackageName: "VS Code Linux arm64 CLI"
|
|
sbomPackageVersion: $(Build.SourceVersion)
|
|
displayName: Publish vscode_cli_linux_arm64_cli artifact
|