fix(android): preserve protected state and secure VPN restoration #161
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: validation | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - 'product/**' | |
| pull_request: | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: validation-${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| gate: | |
| name: gate (${{ matrix.os }}) | |
| runs-on: ${{ matrix.os }} | |
| timeout-minutes: 30 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ubuntu-latest, windows-latest] | |
| steps: | |
| - name: Check out source | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - name: Set up Go | |
| uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 | |
| with: | |
| go-version-file: go.mod | |
| cache-dependency-path: go.sum | |
| - name: Run cache-proof validation gate | |
| run: go run ./cmd/gate | |
| android-phase14: | |
| name: Android Phase 17 live data-plane assurance (${{ matrix.os }}) | |
| runs-on: ${{ matrix.os }} | |
| timeout-minutes: 45 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ubuntu-latest, windows-latest] | |
| steps: | |
| - name: Check out source | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - name: Set up Go | |
| uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 | |
| with: | |
| go-version-file: go.mod | |
| cache-dependency-path: go.sum | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0 | |
| with: | |
| distribution: temurin | |
| java-version: '17' | |
| cache: gradle | |
| - name: Install pinned Android SDK components (Linux) | |
| if: runner.os == 'Linux' | |
| run: >- | |
| "$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" | |
| "platforms;android-36" | |
| "build-tools;36.0.0" | |
| "ndk;28.2.13676358" | |
| "cmake;3.22.1" | |
| - name: Install pinned Android SDK components (Windows) | |
| if: runner.os == 'Windows' | |
| shell: pwsh | |
| run: | | |
| & "$env:ANDROID_HOME\cmdline-tools\latest\bin\sdkmanager.bat" ` | |
| "platforms;android-36" ` | |
| "build-tools;36.0.0" ` | |
| "ndk;28.2.13676358" ` | |
| "cmake;3.22.1" | |
| - name: Verify modules | |
| run: go mod verify | |
| - name: Run Android-only cache-proof gate | |
| run: go run ./cmd/gate -android-only | |
| - name: Preserve bounded Windows authority-reissue failure details | |
| if: failure() && runner.os == 'Windows' | |
| shell: pwsh | |
| run: | | |
| go run ./cmd/phase9devicegate diagnose-junit ` | |
| -in android/app/build/test-results/testInternalUnitTest/TEST-org.kurdistanvpn.app.RuntimeAuthorityReissueServiceTest.xml ` | |
| -out .tools/phase17/windows-authority-reissue-failure.txt | |
| if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE } | |
| Get-Content -LiteralPath .tools/phase17/windows-authority-reissue-failure.txt |