Jamil
ef3b4e5dfe
feat(linux-gui): Bump GUI to 1.1.5 for arm64 support ( #5800 )
2024-07-08 21:58:10 -07:00
Jamil
cd1b46c8f5
fix(ci): Install GH CLI on arm runners ( #5802 )
...
`main` failure:
https://github.com/firezone/firezone/actions/runs/9847918080/job/27190842443
Opened an issue:
https://github.com/actions/runner-images/issues/10192
gh cli instructions:
https://github.com/cli/cli/blob/trunk/docs/install_linux.md#debian-ubuntu-linux-raspberry-pi-os-apt
2024-07-09 02:56:24 +00:00
Thomas Eizinger
9caca475dc
test(connlib): introduce routing table to tunnel_test ( #5786 )
...
Currently, `tunnel_test` uses a rather naive approach when dispatching
`Transmit`s. In particular, it checks client, gateway and relay
separately whether they "want" a certain packet. In a real network,
these packets are routed based on their IP.
To mimic something similar, we introduce a `Host` abstraction that wraps
each component: client, gateway and relay. Additionally, we introduce a
`RoutingTable` where we can add and remove hosts. With these things in
place, routing a `Transmit` is as easy as looking up the destination IP
in the routing table and dispatching to the corresponding host.
Our hosts are type-safe: client, gateway and relay have different types.
Thus, we abstract over them using a `HostId` in order to know, which
host a certain message is for. Following these patches, we can easily
introduce multiple gateways and relays to this test by simply making
more entries in this routing table. This will increase the test coverage
of connlib.
Lastly, this patch massively increases the performance of `tunnel_test`.
It turns out that previously, we spent a lot of CPU cycles accessing
"random" IPs from very large iterators. With this patch, we take a
limited range of 100 IPs that we sample from, thus drastically
increasing performance of this test. The configured 1000 testcases
execute in 3s on my machine now (with opt-level 1 which is what we use
in CI).
---------
Signed-off-by: Thomas Eizinger <thomas@eizinger.io >
2024-07-09 01:48:54 +00:00
Reactor Scram
e0326be807
ci(gui-client/linux): see if we can build the GUI Client for ARM ( #5793 )
...
This would make it a little easier to replicate prod issues on old
releases
```[tasklist]
### Tasks
- [x] Add comment to changelog
- [x] Check Vercel preview
- [x] Request review
- [x] Update arches link
- [x] `apt-get update`
- [x] Re-request review
```
2024-07-08 21:30:48 +00:00
Jamil
1b7338e5c3
fix(website): fix sha of deployed portal ( #5782 )
...
Needs a storage key, not an env var to read.
2024-07-06 17:25:00 -07:00
Jamil
e39ce22b36
chore: Publish new linux/windows clients ( #5767 )
...
Adds the DNS fix.
2024-07-05 13:19:30 -07:00
Reactor Scram
d0f68fc133
test(gui-client): multi-process smoke test for GUI + IPC service ( #5672 )
...
```[tasklist]
### Tasks
- [x] Check the GUI saves its settings file
- [x] Check the IPC service writes the device ID to disk
- [x] Check the GUI writes a log file (skipped - we already check if the exported zip has any files in it)
- [x] Run the crash file through `minidump-stackwalk`
- [x] Reach feature parity with the original smoke tests
- [x] Ready for review
- [x] Finish #5452
- [ ] Start on #5453
```
2024-07-04 21:10:31 +00:00
Jamil
086c730aaf
chore: Bump clients to 1.1.2 for DNS record type forward ( #5703 )
...
Apps are already in review with App Stores
2024-07-04 01:31:26 +00:00
Jamil
3b0f54ec3c
ci: Push infra images to ghcr.io ( #5669 )
...
Fixes #5447
---------
Signed-off-by: Jamil <jamilbk@users.noreply.github.com >
2024-07-03 19:36:06 +00:00
dependabot[bot]
c5bf5f118c
build(deps): Bump docker/build-push-action from 5 to 6 ( #5652 )
...
Bumps
[docker/build-push-action](https://github.com/docker/build-push-action )
from 5 to 6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/build-push-action/releases ">docker/build-push-action's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<ul>
<li>Export build record and generate <a
href="https://docs.docker.com/build/ci/github-actions/build-summary/ ">build
summary</a> by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1120 ">docker/build-push-action#1120</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.24.0 to 0.26.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1132 ">docker/build-push-action#1132</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1136 ">docker/build-push-action#1136</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1138 ">docker/build-push-action#1138</a></li>
<li>Bump braces from 3.0.2 to 3.0.3 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1137 ">docker/build-push-action#1137</a></li>
</ul>
<blockquote>
<p>[!NOTE]
This major release adds support for generating <a
href="https://docs.docker.com/build/ci/github-actions/build-summary/ ">Build
summary</a> and exporting build record for your build. You can disable
this feature by setting <a
href="https://docs.docker.com/build/ci/github-actions/build-summary/#disable-job-summary ">
<code>DOCKER_BUILD_NO_SUMMARY: true</code> environment variable in your
workflow</a>.</p>
</blockquote>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.4.0...v6.0.0 ">https://github.com/docker/build-push-action/compare/v5.4.0...v6.0.0 </a></p>
<h2>v5.4.0</h2>
<ul>
<li>Show builder information before building by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1128 ">docker/build-push-action#1128</a></li>
<li>Handle attestations correctly with provenance and sbom inputs by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1086 ">docker/build-push-action#1086</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.19.0 to 0.24.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1088 ">docker/build-push-action#1088</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1105 ">docker/build-push-action#1105</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1121 ">docker/build-push-action#1121</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1127 ">docker/build-push-action#1127</a></li>
<li>Bump undici from 5.28.3 to 5.28.4 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1090 ">docker/build-push-action#1090</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.3.0...v5.4.0 ">https://github.com/docker/build-push-action/compare/v5.3.0...v5.4.0 </a></p>
<h2>v5.3.0</h2>
<ul>
<li>Bump <code>@docker/actions-toolkit</code> from 0.18.0 to 0.19.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1080 ">docker/build-push-action#1080</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.2.0...v5.3.0 ">https://github.com/docker/build-push-action/compare/v5.2.0...v5.3.0 </a></p>
<h2>v5.2.0</h2>
<ul>
<li>Disable quotes detection for <code>outputs</code> input by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1074 ">docker/build-push-action#1074</a></li>
<li>Warn about ignored inputs by <a
href="https://github.com/favonia "><code>@favonia</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/1019 ">docker/build-push-action#1019</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.14.0 to 0.18.0 in
<a
href="https://redirect.github.com/docker/build-push-action/pull/1070 ">docker/build-push-action#1070</a></li>
<li>Bump undici from 5.26.3 to 5.28.3 in <a
href="https://redirect.github.com/docker/build-push-action/pull/1057 ">docker/build-push-action#1057</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.1.0...v5.2.0 ">https://github.com/docker/build-push-action/compare/v5.1.0...v5.2.0 </a></p>
<h2>v5.1.0</h2>
<ul>
<li>Add <code>annotations</code> input by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/build-push-action/pull/992 ">docker/build-push-action#992</a></li>
<li>Add <code>secret-envs</code> input by <a
href="https://github.com/elias-lundgren "><code>@elias-lundgren</code></a>
in <a
href="https://redirect.github.com/docker/build-push-action/pull/980 ">docker/build-push-action#980</a></li>
<li>Bump <code>@babel/traverse</code> from 7.17.3 to 7.23.2 in <a
href="https://redirect.github.com/docker/build-push-action/pull/991 ">docker/build-push-action#991</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.13.0-rc.1 to
0.14.0 in <a
href="https://redirect.github.com/docker/build-push-action/pull/990 ">docker/build-push-action#990</a>
<a
href="https://redirect.github.com/docker/build-push-action/pull/1006 ">docker/build-push-action#1006</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0 ">https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="15560696de "><code>1556069</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1158 ">#1158</a>
from docker/dependabot/npm_and_yarn/docker/actions-t...</li>
<li><a
href="57e1d34ac3 "><code>57e1d34</code></a>
chore: update generated content</li>
<li><a
href="309982ebc9 "><code>309982e</code></a>
chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.27.0 to
0.28.0</li>
<li><a
href="9476c25b2a "><code>9476c25</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1153 ">#1153</a>
from crazy-max/export-retention</li>
<li><a
href="97be5a4928 "><code>97be5a4</code></a>
chore: update generated content</li>
<li><a
href="9cac6c8ea0 "><code>9cac6c8</code></a>
use default retention days for build export artifact</li>
<li><a
href="31159d49c0 "><code>31159d4</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1149 ">#1149</a>
from docker/dependabot/npm_and_yarn/docker/actions-t...</li>
<li><a
href="07e1c3e148 "><code>07e1c3e</code></a>
chore: update generated content</li>
<li><a
href="f7febd621d "><code>f7febd6</code></a>
chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.26.2 to
0.27.0</li>
<li><a
href="f6010ea701 "><code>f6010ea</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/build-push-action/issues/1147 ">#1147</a>
from docker/dependabot/npm_and_yarn/docker/actions-t...</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/build-push-action/compare/v5...v6 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-01 13:23:59 +00:00
Jamil
25b6528942
chore: Bump versions and update changelog ( #5636 )
...
Signed-off-by: Jamil <jamilbk@users.noreply.github.com >
2024-06-29 09:06:10 -07:00
Thomas Eizinger
04476880e7
ci: only set up runtime tauri deps for smoke tests ( #5632 )
...
Setting up Tauri's runtime dependencies takes about a minute and is
unnecessary for the Rust unit tests. The Rust Windows unit tests jobs
are amongst the slowest and thus impact the overall CI runtime.
See
https://github.com/firezone/firezone/actions/runs/9719218798/job/26828616349
for a recent run on `main`.
---------
Signed-off-by: Thomas Eizinger <thomas@eizinger.io >
Co-authored-by: Jamil <jamilbk@users.noreply.github.com >
2024-06-29 05:35:11 +00:00
Thomas Eizinger
839292b1e3
ci: use sccache for building Tauri clients ( #5617 )
...
Using sccache results in a more efficient cache usage. GitHub's built-in
cache appears to grow over time and takes ~3minutes to download for the
Windows Tauri builds where it is ~2GB large.
Whilst researching bad performance on Windows runners in general, I came
across the hint to disable Windows defender which appears to slow things
down massively in the case of sccache which performs many small network
downloads and file writes.
This PR harmonizes our cache usage and prefers sccache over GitHub's
cache for everything apart from `cross` builds. The runtimes are either
roughly the same or noticeably better. Overally, the GUI smoke tests are
usually among the last ones to finish, meaning these changes should have
an overall net-positive impact on CI time.
|[`main`](https://github.com/firezone/firezone/actions/runs/9707704927 )|[`head`](https://github.com/firezone/firezone/actions/runs/9709368060 )|
|---|---|
|||
|||
|||
|||
|||
|||
2024-06-28 22:28:21 +00:00
Thomas Eizinger
d3a091f90b
ci: pre-install required tools for smoke tests ( #5620 )
...
Currently, the smoke tests rebuild the `dump_syms` and
`minidump-stackwalk` tools from scratch every time which is slow,
especially on Windows.
We can speed this up by utilising the `taiki-e/install-action` GitHub
action which discovers and downloads the latest binary releases of those
projects and installs them into $PATH.
I think those binaries might also be cached as part of the Rust cache
action (https://github.com/Swatinem/rust-cache ) so the visible speed-up
is only within a few seconds and comes from the binaries not being
re-built inside the script.
Caching those binaries on Github still requires us to build them at
least once and also rebuild them in case the cache gets invalidated.
Hence I still think this is a good idea on its own.
2024-06-28 21:19:43 +00:00
Jamil
d529ace29c
chore: Bump Windows to 1.1.1, update changelog with dl links ( #5610 )
...
Fixes #5597
2024-06-27 20:53:00 -07:00
Reactor Scram
0d3b1314a0
ci(kotlin): replace deprecated Github actions ( #5600 )
...
Closes #5599
https://github.com/gradle/actions/blob/main/docs/deprecation-upgrade-guide.md#the-action-gradlegradle-build-action-has-been-replaced-by-gradleactionssetup-gradle
2024-06-27 16:23:16 +00:00
Jamil
b5de55ac26
chore: Bump clients to 1.1.0, Gateway to 1.1.1 ( #5591 )
2024-06-27 02:43:48 -07:00
Jamil
444faaf911
fix(ci): restore version naming in _build_artifacts.yml ( #5592 )
...
Reverts part of #5487 to fix empty version numbers in release artifacts.
2024-06-27 02:08:31 -07:00
Jamil
9abee60f4f
ci: fix changelog link YAML ( #5587 )
...
Fixes the newline in the release changelog. This is maintained on the
website now.
2024-06-27 07:41:19 +00:00
Thomas Eizinger
7e0a1f8511
ci(android): name jobs consistenly ( #5580 )
...
Renames the old `build` job to `build-release` for consistency with
`build-debug`.
---------
Signed-off-by: Thomas Eizinger <thomas@eizinger.io >
2024-06-27 04:48:41 +00:00
Thomas Eizinger
24dd85f8b1
ci(android): build and upload debug APK ( #5574 )
...
In order to make it easier to test PRs that affect Android, this patch
adds an additional CI job that builds a debug APK that can be installed
on any Android device right away.
2024-06-27 03:53:35 +00:00
Jamil
2d7162aa7b
feat(website): Add deployed sha to changelog page ( #5520 )
...
It would be good to track the currently deployed SHA in production.
refs #5447
2024-06-24 14:02:01 -07:00
Reactor Scram
28378fe24e
refactor(headless-client): remove FIREZONE_PACKAGE_VERSION ( #5487 )
...
Closes #5481
With this, I can connect to the staging portal without a build.rs or any
extra env var setup
<img width="387" alt="image"
src="https://github.com/firezone/firezone/assets/13400041/9c080b36-3a76-49c7-b706-20723697edc7 ">
```[tasklist]
### Next steps
- [x] Split out a refactor PR for `ConnectArgs` (#5488 )
- [x] Try doing this for other Clients
- [x] Check Gateway
- [x] Check Tauri Client
- [x] Change to `app_version`
- [x] Open for review
- [ ] Use `option_env` so that `FIREZONE_PACKAGE_VERSION` can still override the Cargo.toml version for local testing
- [ ] Check Android Client
- [ ] Check Apple Client
```
---------
Signed-off-by: Reactor Scram <ReactorScram@users.noreply.github.com >
2024-06-21 23:06:41 +00:00
Jamil
b4cde74bee
chore: Bump client next versions to 1.1.0 ( #5485 )
2024-06-21 16:31:43 +00:00
Jamil
559d8cce7a
feat(website): Add changelog page ( #5399 )
...
Now that component versions are split, it would be good to have a single
source-of-truth for all components we publish and support.
Fixes https://github.com/firezone/firezone/issues/4892
Supersedes #5398
2024-06-20 14:22:47 -07:00
Jamil
04585874cf
chore: Bump cur Gateway version to 1.1.0 ( #5461 )
2024-06-19 23:44:16 -07:00
Jamil
113347558a
chore: Next Gateway version 1.1.0 ( #5458 )
...
This will draft the 1.1.0 release and version artifacts correctly.
2024-06-20 04:17:05 +00:00
Jamil
13b26fecf4
ci: Bump GUI client to 1.0.9 ( #5431 )
2024-06-18 14:48:17 -07:00
Jamil
de38a3537d
ci: Use offline evergreen installer ( #5429 )
...
May help to alleviate some flakiness regarding the `setup-tauri` action,
and speed up CI runs since the whole installer will be cached, not just
the bootstrapper stub.
https://github.com/firezone/firezone/actions/runs/9570220149/job/26384496768
2024-06-18 20:59:54 +00:00
Jamil
b64cfdced3
ci: Address missed PR feedback regarding retrying failing elixir unit tests ( #5421 )
...
fixes #5420
2024-06-18 16:35:54 +00:00
Jamil
a45acc04db
fix(connlib): set default firezone_tunnel log level from trace to debug for development and some ci ( #5411 )
...
"Encapsulated packet" is now spamming dev clients, so this level is
changed to `debug` by default in dev builds.
```
2024-06-17 14:04:15.419 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
2024-06-17 14:04:15.419 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
2024-06-17 14:04:15.420 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
2024-06-17 14:04:15.420 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
2024-06-17 14:04:15.420 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
2024-06-17 14:04:15.420 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
2024-06-17 14:04:15.421 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
2024-06-17 14:04:15.421 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
2024-06-17 14:04:15.422 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
2024-06-17 14:04:15.422 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
2024-06-17 14:04:15.422 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
2024-06-17 14:04:15.423 6911-7520 connlib dev.firezone.android V firezone_tunnel::client: s0_name: encapsulates0_target=firezone_tunnel::clients0_file=connlib/tunnel/src/client.rss0_line=441s0_dst=fd00:2021:1111:8000::2Encapsulated packet
```
2024-06-18 04:48:52 +00:00
Jamil
bfbf570191
ci: Increase default assert_receive timeout to 500ms from 100ms ( #5417 )
...
We seem to be hitting `assert_receive`-style much more frequently after
"upgrading" to Enterprise Cloud (our credits expired, I was able to
renew them).
This updates the global timeout to 500ms for `assert_receive` to reduce
the likelihood `assert_push` and friends will time out on slow GH
runners.
E.g.
https://github.com/firezone/firezone/actions/runs/9556532328/job/26341986456
---------
Signed-off-by: Jamil <jamilbk@users.noreply.github.com >
2024-06-17 18:35:11 -07:00
Jamil
1974ef9332
fix(infra): Copy artifacts from github.sha to edge in prod when deploying ( #5416 )
...
This will allow us to run prod smoke tests using the `SHA` from `main`
when deploying, without having to release/publish the Gateway first.
Fixes this issue seen in logs:
```
{
"insertId": "tz43hng1m3lbbe",
"jsonPayload": {
"message": "Jun 17 22:36:57 gateway-cn9m firezone-gateway-init[3413]: curl: (22) The requested URL returned error: 404"
},
"resource": {
"type": "gce_instance",
"labels": {
"project_id": "firezone-prod",
"zone": "us-east1-d",
"instance_id": "8536982484474988766"
}
},
"timestamp": "2024-06-17T22:36:57.601613147Z",
"labels": {
"compute.googleapis.com/resource_name": "gateway-cn9m"
},
"logName": "projects/firezone-prod/logs/syslog",
"receiveTimestamp": "2024-06-17T22:36:57.745513999Z"
},
{
"insertId": "tz43hng1m3lbbd",
"jsonPayload": {
"message": "Jun 17 22:36:57 gateway-cn9m firezone-gateway-init[3411]: Downloading 6c310610f3 version from https://storage.googleapis.com/firezone-prod-artifacts/firezone-gateway ..."
},
"resource": {
"type": "gce_instance",
"labels": {
"project_id": "firezone-prod",
"zone": "us-east1-d",
"instance_id": "8536982484474988766"
}
},
"timestamp": "2024-06-17T22:36:57.501343894Z",
"labels": {
"compute.googleapis.com/resource_name": "gateway-cn9m"
},
"logName": "projects/firezone-prod/logs/syslog",
"receiveTimestamp": "2024-06-17T22:36:57.745513999Z"
}
```
2024-06-17 18:29:06 -07:00
Jamil
6c310610f3
chore(ci): version-check move to ubuntu ( #5410 )
2024-06-17 13:57:32 -07:00
Jamil
21585cb2b0
ci: bump Gateway / headless to 1.0.8 ( #5409 )
2024-06-17 13:36:37 -07:00
Jamil
bcccd1cae6
ci: Auth to GCP before copying artifacts ( #5405 )
2024-06-17 10:43:04 -07:00
Jamil
1930e62404
ci: Fix typo in publish workflow ( #5404 )
...
Should be an `_` not `-` 🙃
2024-06-17 09:30:46 -07:00
Jamil
5eb6cbc15f
ci: Bump versions and fix publish workflow (again) ( #5402 )
...
- Bump gui client version
- Fix issue discovered during publishing gui client
2024-06-17 08:44:13 -07:00
Jamil
ee45b39ec4
ci: Fix dupe id ( #5400 )
2024-06-17 08:17:26 -07:00
Jamil
7c20243733
fix(ci): Copy artifacts to prod on publish, not deploy ( #5388 )
...
Fixes hopefully the last remaining issue from #4397
Fixes #5370
2024-06-17 07:30:53 -07:00
Jamil
eda1df56c2
ci: Bump Android/Apple cur versions to 1.0.4/1.0.5 ( #5397 )
2024-06-17 06:55:33 -07:00
Thomas Eizinger
44bb24178e
ci: run compatibility tests between latest client and HEAD gateway ( #5369 )
...
Currently, our CI tests that the latest released client and gateway are
compatible with the current portal. To allow for smooth upgrades of
deployed infrastructure, we also need to test that any changes we are
making to the gateway are compatible with the latest release of the
client. This allows customers to upgrade their gateways ahead of time
before we publish updates of the clients.
This PR adds a matrix to the compatibility tests to ensure just that.
---------
Signed-off-by: Jamil <jamilbk@users.noreply.github.com >
Co-authored-by: Jamil <jamilbk@users.noreply.github.com >
2024-06-16 22:32:20 +00:00
Jamil
2cc890f644
fix(ci): apt-get update before install ( #5387 )
2024-06-16 14:40:59 -07:00
Jamil
2294391d22
ci: Don't clobber assets for published releases ( #5352 )
...
Adds a sanity check to prevent clobbering assets on published releases.
Otherwise, assets will continue to be pushed to the published release
until the version is bumped.
2024-06-13 06:41:38 +00:00
Jamil
05a046ac1d
ci: Bump versions for published releases ( #5351 )
2024-06-12 22:11:30 -07:00
Jamil
7c5c7a856a
fix: Use correct component versions by overriding from FIREZONE_PACKAGE_VERSION ( #5344 )
...
Now that #4397 is complete, we need a way to bake in the desired
component version so that it's reported properly to the portal.
This PR adds a global override, "FIREZONE_PACKAGE_VERSION" that can be
optionally set to bake the version in. If left blank, the behavior is
unchanged, "CARGO_PKG_VERSION" is used instead, which is populated from
`connlib-shared`'s Cargo.toml.
## Problem
<img width="520" alt="Screenshot 2024-06-12 at 11 34 45 AM"
src="https://github.com/firezone/firezone/assets/167144/b04fcbe5-dcba-4a0d-b93f-7abd923b4f04 ">
<img width="439" alt="Screenshot 2024-06-12 at 11 34 36 AM"
src="https://github.com/firezone/firezone/assets/167144/7b1828fe-4073-4a1f-8cbd-5e55ba241745 ">
2024-06-12 22:09:48 +00:00
Jamil
8700a680d5
chore: Bump versions to point to new artifacts ( #5337 )
...
Currently dl links are broken due to the updated format.
2024-06-12 00:01:59 -07:00
Jamil
a11697ca18
ci: Use github.ref_name instead of github.event_name ( #5334 )
...
`github.event_name` is never `workflow_call`, so we need a better value
to use for the conditional for drafting releases.
2024-06-11 21:29:11 -07:00
Jamil
adaaa0cbd3
ci: fix release drafter call conditional ( #5333 )
...
https://github.com/actions/runner/discussions/1884
2024-06-11 21:15:57 -07:00
Jamil
9880ecb12f
ci: Update publish to publish from staging artifacts ( #5330 )
...
Now that #4397 is done, deploying infra to production no longer happens
before publishing Gateway/Client docker images, so we need to push those
from their respective staging artifacts instead.
2024-06-11 18:57:16 -07:00