| Mate Toth-Pal | 5495f20 | 2020-07-16 08:33:48 +0200 | [diff] [blame] | 1 | # Travis configuration. Run FI hardening tests. |
| 2 | |
| 3 | language: minimal |
| 4 | |
| 5 | services: |
| 6 | - docker |
| 7 | |
| 8 | matrix: |
| 9 | include: |
| 10 | - os: linux |
| 11 | language: minimal |
| Mate Toth-Pal | 0eead8c | 2020-11-09 16:43:57 +0100 | [diff] [blame] | 12 | env: BUILD_TYPE=RELEASE SKIP_SIZE=2,4,6,8,10 TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 13 | |
| 14 | - os: linux |
| 15 | language: minimal |
| 16 | env: BUILD_TYPE=RELEASE SKIP_SIZE=2,4,6,8,10 FIH_LEVEL=LOW TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 17 | |
| 18 | - os: linux |
| 19 | language: minimal |
| 20 | env: BUILD_TYPE=RELEASE SKIP_SIZE=2,4,6,8,10 FIH_LEVEL=MEDIUM TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 21 | |
| 22 | - os: linux |
| 23 | language: minimal |
| 24 | env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=2,4,6 TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 25 | |
| 26 | - os: linux |
| 27 | language: minimal |
| 28 | env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=2,4,6 FIH_LEVEL=LOW TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 29 | |
| 30 | - os: linux |
| 31 | language: minimal |
| 32 | env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=2,4,6 FIH_LEVEL=MEDIUM TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 33 | |
| 34 | - os: linux |
| 35 | language: minimal |
| 36 | env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=8,10 TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 37 | |
| 38 | - os: linux |
| 39 | language: minimal |
| 40 | env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=8,10 FIH_LEVEL=LOW TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 41 | |
| 42 | - os: linux |
| 43 | language: minimal |
| 44 | env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=8,10 FIH_LEVEL=MEDIUM TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 45 | |
| 46 | ## Corrupt image hash is not tested as it is in the unprotected TLV section |
| 47 | ## and is easy to calculate a valid hash for a changed image |
| 48 | #- os: linux |
| 49 | # language: minimal |
| 50 | # env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=2,4,6 TEST=fih-tests DAMAGE_TYPE=IMAGE_HASH |
| 51 | |
| 52 | ## Max profile is not tested as it requires HW entropy source which is not |
| 53 | ## present in the QEMU system being used for the tests. |
| 54 | #- os: linux |
| 55 | # language: minimal |
| 56 | # env: FIH_LEVEL=MAX TEST=fih-tests |
| Mate Toth-Pal | 5495f20 | 2020-07-16 08:33:48 +0200 | [diff] [blame] | 57 | |
| 58 | before_install: |
| 59 | - | |
| 60 | if [ "$TRAVIS_PULL_REQUEST" != "false" ]; then |
| 61 | ./ci/check-signed-off-by.sh |
| 62 | if [ $? -ne 0 ]; then |
| 63 | exit 1 |
| 64 | fi |
| 65 | fi |
| 66 | |
| 67 | install: |
| 68 | - ./ci/${TEST}_install.sh |
| 69 | |
| 70 | script: |
| 71 | - ./ci/${TEST}_run.sh |
| 72 | |
| Fabio Utzig | bd0ce62 | 2020-12-14 17:14:53 -0300 | [diff] [blame] | 73 | cache: |
| 74 | directories: |
| 75 | - docker |
| 76 | |
| Mate Toth-Pal | 5495f20 | 2020-07-16 08:33:48 +0200 | [diff] [blame] | 77 | notifications: |
| 78 | slack: |
| 79 | rooms: |
| 80 | - secure: "Tg9ZvJfb6e4QSEsxUvwW2MIqbuNRxD4nAOkgs8eopj/fRtqN6Zk06NVSeMmYcZunDFJXUSzYANBsF98OtaaUlm4WVt2T0ZFBJZrOYfIv18/zXCjYa04sDxur57F1ZYTYKyRpdUkfzPd/rGE4jKLQNcia+r/BTQbJkcZbXeg5/6cUeMP1so8/o0oMhSQP+GH0fLbyLzx3VPE8zu6+j2fCFC7R3idxtfO9VtsKlubfi3HgPgXTs+DEAAA8aoOku2esjFSFXTtdUFGz90YzyShZvtMcRg3Grp9+PZAsJwWk4eKSonKCO0DScfPUlMZbJcV7VsmyTxYKLLsGRZae6ZBH+XLfx5XeqgtgCor3FYx2dUXYfV9y8VvERDdossB0gZ/V2OUGePctDefiORytV6dMa7X3AfSdosgs/tjG4kbf+PMaVULzwF6dd3CdsxdClSl68UQPWA6wC2TEyo1EQea8jgZU6heLustZaQZhBkFkr/6j75XeGBjPw2fgVRkgg/OnTOYmo7N8181wOU+xORIEO1BtYmgRpc0cgpm4H9457diSHG1D2SoNy4tiQPCW2enN00QNGK5pZSL/FGA/ReUcALgAW0QcOljjU2bUSGPxo/VAi5ZyljWgVAGQ5qHJ4jgdfPf7VJUzCVH64G1S5+0gZPpO6vvvPdZtqeXrfBZMOBw=" |
| 81 | on_success: always |