gbucchino/openssh-portable
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
13,702 Commits 76 Branches 165 Tags
faa646a9bf6c8d0ec2d8a52dcd155979c8f7eb8e
Commit Graph
310 Commits
Author SHA1 Message Date
El Mehdi Abenhazou faa646a9bf ci: pin upstream.yml actions to full commit SHAs 
Signed-off-by: El Mehdi Abenhazou <[email protected]>
 2026-06-22 18:55:25 +10:00
El Mehdi Abenhazou 983096a7b2 ci: pin GitHub Actions to full commit SHAs 
Pinning actions/checkout, actions/upload-artifact, and
cygwin/cygwin-install-action to their full commit SHA instead of
mutable branch/tag references (main, master).

Using mutable refs means a compromised or malicious update to the
action repository could silently alter the workflow behavior.
Pinning to SHA makes the exact version immutable and auditable.

Signed-off-by: El Mehdi Abenhazou <[email protected]>
 2026-06-22 18:54:58 +10:00
Darren Tucker c9ebebb22f Reformat setup_ci command line. 
This prevents setup_ci from running twice on Cygwin due to different
parsing of the command line since on Windows it's run via Powershell.
 2026-06-02 23:28:52 +10:00
Darren Tucker 7e5590cf8f Replace shell-level timeout with dedicated command. 
It turns out the systems we run this workflow on all have timeout(1),
 2026-06-02 18:57:23 +10:00
Darren Tucker 41bb8c1823 Add a single retry to VM package install steps. 
These are potentially flaky due to network issues, so hopefully this
will reduce the number of manual retries needed.
 2026-06-02 18:11:42 +10:00
Darren Tucker 7b776066bc Update LibreSSL test 4.3.1->4.3.2. 2026-06-01 17:39:40 +10:00
Darren Tucker 0a561f9067 Run hardenedmalloc test on ubuntu-latest. 
Needed for newer clang that supports -std=c23.
 2026-05-26 10:48:19 +10:00
Darren Tucker 66847768ff Add OpenBSD 7.9 test VM. 2026-05-21 18:39:54 +10:00
Darren Tucker 18b9db789e Add interop tests against Dropbear >= 2020.79 2026-05-21 18:01:01 +10:00
Darren Tucker 55df196e39 Retire OmniOS r151046 & r151054 test configs. 
They require packages from an external mirror which has been unreliable
lately, so stop relying on it.
 2026-05-12 19:53:54 +10:00
Darren Tucker 6d9116d4df Handle missing packages for FreeBSD 12.4. 
(Most) FreeBSD mirrors no longer have packages for 12.x, so install the
only thing we need (sudo) from source on.
 2026-05-12 19:47:13 +10:00
Darren Tucker 99f1e0c2f9 OmniOS: check for gcc before installing. 2026-05-12 18:50:20 +10:00
Darren Tucker ded80eb0ff Add VM test versions for : OmniOS and FreeBSD. 
Add OmniOS r151056 and r151058 (with build-essentials, so hopefully
faster and lower dependency) and FreeBSD 12.4 for better coverage.
 2026-05-12 18:07:45 +10:00
Darafei Praliaskouski 56e73cd804 ci: avoid rsync dependency in NetBSD VM jobs 2026-05-11 18:16:59 +10:00
Darren Tucker 4ea08a0353 Improve NetBSD PAM tests. 
- Set random password and use for password auth test.
 - When testing PAM builds, test with and without UsePAM.
 2026-05-05 00:09:12 +10:00
Darren Tucker 504d01d81f Improve FreeBSD PAM tests. 
- Set random password and use for password auth test.
 - When testing PAM builds, test with and without UsePAM.
 2026-05-05 00:09:11 +10:00
Darren Tucker a05de3f67f Update to FreeBSD 14.4, add 15.0. 2026-05-05 00:09:11 +10:00
Darren Tucker 6296749fe1 Improve Solaris PAM tests. 
- Set up and run tests with SUDO.
 - Set random password to use for password & kbdint auth tests.
 - Only run t-exec when re-testing with PAM, don't rerun unit tests.
 - When testing PAM builds, test with and without UsePAM.
 2026-05-05 00:09:07 +10:00
Darren Tucker f9d62eaa53 Only run t-exec when re-testing with PAM. 
There's no point rerunning unit tests.
 2026-05-05 00:09:06 +10:00
Darren Tucker 05af6553e9 Add Solaris 11.4-clang-19 test. 2026-05-05 00:09:05 +10:00
Darren Tucker cb654c2ce7 Add RUN_ONLY_PLATFORM to run a subset of tests. 2026-05-05 00:09:05 +10:00
Renaud Allard 7ab5e4073a vm.yml: fix solaris PAM tests 
Add missing SSHD_CONFOPTS="UsePam yes" to the solaris PAM test
step so it actually tests PAM functionality instead of re-running
the default tests with a PAM-enabled binary.
 2026-04-30 09:28:17 +10:00
Darren Tucker 6185d1e6f7 Rename obsd arm64 snapshot VM for consistency. 2026-04-28 09:10:44 +10:00
Darren Tucker 2be9cec2fc Update OpenSSL tested versions. 2026-04-27 21:53:36 +10:00
Darren Tucker b41203e500 Comment out new PAM valgrind test until debugged. 2026-04-27 21:47:55 +10:00
Darren Tucker 6c5235cb66 Reorder steps to change perms before displaying. 2026-04-27 21:47:49 +10:00
Darren Tucker ba110a56a7 Allow setting TEST_SSH_TRACE via Github. 2026-04-27 21:47:48 +10:00
Darren Tucker 8751cd9c5c Add tests for libressl-4.3.1. 2026-04-27 21:47:47 +10:00
Darren Tucker 713ec5c5ae Test against OpenSSL 3.6.2, 4.0.0 and 4.0-stable. 2026-04-16 20:55:23 +10:00
Darren Tucker f2da6737e2 Match case with other messages. 2026-04-16 19:32:34 +10:00
Darren Tucker d3efbba14f Add a VM-based test for OpenBSD-current. 2026-03-26 18:56:18 +11:00
Darren Tucker 4bb4f1601e Add a Valgrind test of the PAM config. 2026-03-26 18:56:15 +11:00
Darren Tucker 12da685dfc Upstream tests don't use the config file. 2026-03-26 18:56:14 +11:00
Darren Tucker c9fcea8865 Enable BSM audit test on FreeBSD VMs. 2026-02-18 11:22:37 -05:00
Darren Tucker f1a9628cd7 Move BSM audit test to selfhosted runner. 
The vmactions VM on Github does not have the required libraries
installed.
 2026-02-18 10:59:02 -05:00
Darren Tucker b046330617 Add test coverage for all of the --audit= configs. 2026-02-18 09:49:41 -05:00
Darren Tucker 6243936918 Remove openindiana VM test. 
When it works it's by far the slowest (>1h to install packages) and the
package installation is flaky.  We can bring it back if their infra ever
improves.
 2026-02-09 09:06:19 +11:00
Darren Tucker 249476f45d Test KERBEROS5=yes builds on OpenBSD. 2026-02-09 04:05:31 +11:00
Darren Tucker 86e0f4aa2c Split sudo out to its own install line. 2026-02-07 04:29:41 +11:00
Darren Tucker dfbb8526b5 Remove obsolete comments. 2026-02-07 04:29:38 +11:00
Darren Tucker f0b7ecf7f5 Run tests on older OmniOS version too. 2026-02-07 04:29:37 +11:00
Darren Tucker 01bddc0663 Add OpenIndiana VM test target. 2026-02-07 04:29:35 +11:00
Darren Tucker d05b704086 Add OpenBSD 7.8 VM test target. 2025-12-07 20:45:54 +11:00
Darren Tucker 7cb3ea4dcc Simplify git command to avoid yaml syntax error. 2025-11-13 10:23:45 +11:00
Damien Miller d128133144 octal-escape the colon character 
Apparently these are YAML magic when followed by whitespace
 2025-11-07 15:49:55 +11:00
Damien Miller 5a104d81a2 try single quotes instead of escaped quotes 2025-11-07 15:44:18 +11:00
Damien Miller 48d8293956 escape quotes in yaml 2025-11-07 15:42:57 +11:00
Darren Tucker 7e5d404cf7 Support using git for OpenBSD src tree tests. 2025-11-01 08:34:39 +11:00
Darren Tucker d87e7f0bed Add OpenBSD 7.8 test target. 2025-11-01 08:34:39 +11:00
Darren Tucker 75faa8a167 Update LibreSSL versions and add 4.2.0. 2025-10-20 18:29:24 +11:00