Simone
f373c0c24b
P0 bugs: - Invoke-CIJob.ps1: skip --depth 1 when $Commit specified (shallow clone + checkout specific commit was silently failing) - Get-BuildArtifacts.ps1: check .Length -eq 0 not rounded sizeKB (false fail on artifacts smaller than 50 bytes) - build-nsis.yml: upgrade upload-artifact v3 -> v4 (v3 deprecated) P0 security: - Remove hardcoded default password CIBuild!ChangeMe2026 from all scripts, README, TODO; prompt Read-Host -AsSecureString at runtime instead - Setup-TemplateVM.ps1: replace `net user $u $p /add` (password in argv / audit log 4688) with New-LocalUser + local ConvertTo-SecureString - Prepare-TemplateSetup.ps1: save and restore WSMan AllowUnencrypted + TrustedHosts in finally block (was permanently mutating host WinRM config) - Setup-TemplateVM.ps1: remove duplicate MaxMemoryPerShellMB (winrm set + Set-Item both setting same value) P1 doc (stale Host-Only / VMnet11 era): - Setup-TemplateVM.ps1: rewrite NETWORK REQUIREMENT block + final steps (system uses VMnet8 NAT permanently, not VMnet11 Host-Only) - Invoke-CIJob.ps1 Phase 1 comment: correct network model - ARCHITECTURE.md: remove Git from toolchain list (not installed); clarify zip-transfer rationale (no PAT in VM, not network isolation) - BEST-PRACTICES.md: rewrite Step 8 as NAT topology verification P1 minor: - Invoke-RemoteBuild.ps1: remove wasted first New-Item (created then immediately removed and recreated) - Wait-VMReady.ps1: remove unused $elapsed; simplify try/catch around native command (exit codes don't throw) - Install-Runner.ps1: add deprecation notice pointing to Setup-Host.ps1 P2 operational: - Add scripts/Cleanup-OrphanedBuildVMs.ps1 with -WhatIf support - Get-BuildArtifacts.ps1 -IncludeLogs: add -Recurse (msbuild logs in subdir) - Add gitea/workflows/lint.yml (PSScriptAnalyzer on .ps1 push/PR) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
47 lines
1.5 KiB
YAML
47 lines
1.5 KiB
YAML
# Build (Local CI) — pipeline per nsis-plugin-nsinnounp
|
|
#
|
|
# Eseguito dal runner locale windows-build su WS1-W11.
|
|
# L'orchestratore (Invoke-CIJob.ps1) gira sull'host e:
|
|
# 1. Clona il repo sull'host (con submoduli)
|
|
# 2. Crea una VM efimera da snapshot BaseClean
|
|
# 3. Copia il sorgente nella VM via WinRM (zip transfer)
|
|
# 4. Esegue python build_plugin.py nella VM
|
|
# 5. Raccoglie artifacts.zip sull'host
|
|
# 6. Distrugge la VM
|
|
#
|
|
# Trigger: push su tag v*, oppure run manuale
|
|
|
|
name: Build (Local CI)
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- 'v*'
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: windows-build
|
|
|
|
steps:
|
|
- name: Run CI Job
|
|
shell: pwsh
|
|
run: |
|
|
& 'N:\Code\Workspace\Local-CI-CD-System\scripts\Invoke-CIJob.ps1' `
|
|
-JobId '${{ github.run_id }}' `
|
|
-RepoUrl 'ssh://gitea-ci/Simone/nsis-plugin-nsinnounp.git' `
|
|
-Branch '${{ github.ref_name }}' `
|
|
-Commit '${{ github.sha }}' `
|
|
-TemplatePath $env:GITEA_CI_TEMPLATE_PATH `
|
|
-Submodules `
|
|
-BuildCommand 'python build_plugin.py --final --dist-dir dist' `
|
|
-GuestArtifactSource 'dist'
|
|
if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
|
|
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: nsis-plugin-nsinnounp-${{ github.ref_name }}
|
|
path: F:\CI\Artifacts\${{ github.run_id }}\artifacts.zip
|
|
if-no-files-found: error
|