Add LibreSSL 3.9.2 builder (#82)

.github/workflows/linux-builder-update.yml

@@ -62,6 +62,35 @@ jobs:
           topic: ${{ github.repository }} scheduled job failure
           content: ${{ github.server_url}}/${{ github.repository }}/actions/runs/${{ github.run_id }} failed.
 
+  x86-64-unknown-linux-builder-with-libressl_3_9_2:
+    needs:
+      - x86-64-unknown-linux-builder
+
+    name: Update x86-64-unknown-linux-builder-with-libressl-3.9.2
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/[email protected]
+      - name: Login to GitHub Container Registry
+        # v2.2.0
+        uses: docker/login-action@5139682d94efc37792e6b54386b5b470a68a4737
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build and push
+        run: bash x86-64-unknown-linux-builder-with-libressl-3.9.2/build-and-push.bash
+      - name: Send alert on failure
+        if: ${{ failure() }}
+        uses: zulip/github-actions-zulip/send-message@e4c8f27c732ba9bd98ac6be0583096dea82feea5
+        with:
+          api-key: ${{ secrets.ZULIP_SCHEDULED_JOB_FAILURE_API_KEY }}
+          email: ${{ secrets.ZULIP_SCHEDULED_JOB_FAILURE_EMAIL }}
+          organization-url: 'https://ponylang.zulipchat.com/'
+          to: notifications
+          type: stream
+          topic: ${{ github.repository }} scheduled job failure
+          content: ${{ github.server_url}}/${{ github.repository }}/actions/runs/${{ github.run_id }} failed.
+
   x86-64-unknown-linux-builder-with-openssl_1_1_1w:
     needs:
       - x86-64-unknown-linux-builder
@@ -182,6 +211,7 @@ jobs:
     needs:
       - x86-64-unknown-linux-builder
       - x86-64-unknown-linux-builder-with-libressl_3_9_1
+      - x86-64-unknown-linux-builder-with-libressl_3_9_2
       - x86-64-unknown-linux-builder-with-openssl_1_1_1w
       - x86-64-unknown-linux-builder-with-openssl_3_3_0
       - x86-64-unknown-linux-builder-with-openssl_3_3_2
@@ -254,6 +284,7 @@ jobs:
           - shared-docker-ci-x86-64-unknown-linux-builder
           - shared-docker-ci-x86-64-unknown-linux-builder-with-libressl-3.7.3
           - shared-docker-ci-x86-64-unknown-linux-builder-with-libressl-3.9.1
+          - shared-docker-ci-x86-64-unknown-linux-builder-with-libressl-3.9.2
           - shared-docker-ci-x86-64-unknown-linux-builder-with-openssl_1.1.1w
           - shared-docker-ci-x86-64-unknown-linux-builder-with-openssl_3.1.3
           - shared-docker-ci-x86-64-unknown-linux-builder-with-openssl_3.2.0

.github/workflows/pr.yml

@@ -62,6 +62,14 @@ jobs:
       - name: Docker build
         run: "docker build --pull --file=x86-64-unknown-linux-builder-with-libressl-3.9.1/Dockerfile ."
 
+  validate-x86-64-unknown-linux-builder-with-libressl-3_9_2-image-builds:
+    name: Validate x86-64-unknown-linux-builder-with-libressl-3.9.2 Docker image builds
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/[email protected]
+      - name: Docker build
+        run: "docker build --pull --file=x86-64-unknown-linux-builder-with-libressl-3.9.2/Dockerfile ."
+
   validate-x86-64-unknown-linux-builder-with-openssl_1_1_1w-image-builds:
     name: Validate x86-64-unknown-linux-builder-with-openssl_1.1.1w Docker image builds
     runs-on: ubuntu-latest

x86-64-unknown-linux-builder-with-libressl-3.9.2/Dockerfile

@@ -0,0 +1,11 @@
+ARG FROM_TAG=release
+FROM ghcr.io/ponylang/shared-docker-ci-x86-64-unknown-linux-builder:${FROM_TAG}
+
+RUN cd /tmp && \
+  wget https://cdn.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.9.2.tar.gz && \
+  tar xf libressl-3.9.2.tar.gz && \
+  cd libressl-3.9.2/ && \
+  ./configure && \
+  make install && \
+  cd /tmp && \
+  rm -rf libressl*

x86-64-unknown-linux-builder-with-libressl-3.9.2/README.md

@@ -0,0 +1,3 @@
+# x86-64-unknown-linux-builder-with-libressl-3.9.2
+
+The x86-64-unknown-linux-builder with libressl 3.9.2 SSL implementation installed as well. Rebuilt daily.

x86-64-unknown-linux-builder-with-libressl-3.9.2/build-and-push.bash

@@ -0,0 +1,29 @@
+#!/bin/bash
+
+set -o errexit
+set -o nounset
+
+#
+# *** You should already be logged in to GitHub Container Registry when you run
+#     this ***
+#
+
+DOCKERFILE_DIR="$(dirname "$0")"
+
+## GitHub Container Registry
+
+NAME="ghcr.io/ponylang/shared-docker-ci-x86-64-unknown-linux-builder-with-libressl-3.9.2"
+
+# built from x86-64-unknown-linux-builder release tag
+FROM_TAG=release
+TAG_AS=release
+docker build --pull --build-arg FROM_TAG="${FROM_TAG}" \
+  -t "${NAME}:${TAG_AS}" "${DOCKERFILE_DIR}"
+docker push "${NAME}:${TAG_AS}"
+
+# built from x86-64-unknown-linux-builder latest tag
+FROM_TAG=latest
+TAG_AS=latest
+docker build --pull --build-arg FROM_TAG="${FROM_TAG}" \
+  -t "${NAME}:${TAG_AS}" "${DOCKERFILE_DIR}"
+docker push "${NAME}:${TAG_AS}"