sbpf-linker 0.2.0

Upstream BPF linker for SBPF V0/V3 programs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146

name: CI

on:
  push:
    branches: [master]
  pull_request:
    branches: [master]

env:
  CARGO_TERM_COLOR: always
  RUST_TOOLCHAIN: nightly-2026-08-18

permissions:
  contents: read
  packages: read

jobs:
  fmt:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@master
        with:
          toolchain: nightly
          components: rustfmt
      - run: cargo fmt --all -- --check

  clippy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@master
        with:
          toolchain: nightly
          components: clippy
      - uses: Swatinem/rust-cache@v2
      - run: >-
          cargo clippy --no-default-features
          --features bpf-linker/llvm-23,bpf-linker/no-llvm-linking
          --all-targets -- -D warnings

  cargo-install:
    name: cargo install (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os:
          - ubuntu-24.04
          - macos-15
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@master
        with:
          toolchain: ${{ env.RUST_TOOLCHAIN }}
      - uses: Swatinem/rust-cache@v2
      - name: Install from source using Rust's LLVM
        run: >-
          cargo install --path . --locked
          --root target/cargo-install
      - name: Verify installed binary
        run: |
          output=$(rustup run "$RUST_TOOLCHAIN" \
            target/cargo-install/bin/sbpf-linker --version)
          echo "$output"
          grep -F "LLVM 23" <<< "$output"
      - name: Verify LLVM is loaded through the runtime proxy
        run: |
          case "$RUNNER_OS" in
            Linux)
              ! readelf -d target/cargo-install/bin/sbpf-linker |
                grep -F libLLVM
              ;;
            macOS)
              ! otool -L target/cargo-install/bin/sbpf-linker |
                grep -F libLLVM
              ;;
          esac

  test-harness:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@master
        with:
          toolchain: ${{ env.RUST_TOOLCHAIN }}
          components: rust-src
      - uses: Swatinem/rust-cache@v2
      - name: Install FileCheck
        run: sudo apt-get update && sudo apt-get install -y llvm-18-tools
      - run: cargo test -- --nocapture
        
  coverage:
    name: coverage (nightly)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: dtolnay/rust-toolchain@master
        with:
          toolchain: ${{ env.RUST_TOOLCHAIN }}
          components: rust-src, llvm-tools-preview

      - uses: Swatinem/rust-cache@v2

      - name: Install FileCheck
        run: |
          sudo apt-get update
          sudo apt-get install -y llvm-18-tools

      - name: Install cargo-llvm-cov
        uses: taiki-e/install-action@cargo-llvm-cov

      # The harness normally builds this sysroot itself. '
      # Build it first so host coverage flags do not reach the nested bpfel Cargo build.  
      # TODO: if ci duration becomes an issue, extract sysroot creation into an xtask command to avoid running
      # the compile-test suite twice.
      - name: Build BPF sysroot
        run: cargo test --test tests compile_test -- --nocapture

      - name: Generate code coverage
        env:
          BPFEL_SYSROOT_DIR: ${{ github.workspace }}/target/sysroot
          MINIMUM_LINE_COVERAGE: 83
        run: |
          set -o pipefail

          coverage_status=0 
          cargo llvm-cov \
            --package sbpf-linker \
            --all-targets \
            --color never \
            --fail-under-lines "$MINIMUM_LINE_COVERAGE" \
            | tee coverage.txt || coverage_status=$?

          {
            echo "## Code coverage"
            echo
            echo "Required line coverage: **${MINIMUM_LINE_COVERAGE}%**"
            echo
            echo '```text'
            cat coverage.txt
            echo '```'
          } >> "$GITHUB_STEP_SUMMARY"

          exit "$coverage_status"