Wire-up rust-openssl into GitHub CI (for the time being)

Author: skmcgrail

.github/workflows/integrations.yml

@@ -48,4 +48,28 @@ jobs:
       - name: Run librdkafka build
         run: |
           ./tests/ci/integration/run_librdkafka_integration.sh
-          
+  rust-openssl:
+    if: github.repository_owner == 'aws'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout aws-lc
+        uses: actions/checkout@v4
+        with:
+          path: aws-lc
+      - name: Checkout rust-openssl
+        uses: actions/checkout@v4
+        with:
+          repository: sfackler/rust-openssl
+          path: rust-openssl
+      - uses: dtolnay/rust-toolchain@stable
+        id: toolchain
+      - name: Set Rust toolchain override
+        run: rustup override set ${{ steps.toolchain.outputs.name }}
+      - name: Install bindgen-cli
+        run: cargo install --locked bindgen-cli
+      - name: Run rust-openssl integration tests
+        env:
+          RUST_OPENSSL_SRC_DIR: "${GITHUB_WORKSPACE}/rust-openssl"
+        run: |
+          pushd "${GITHUB_WORKSPACE}/aws-lc"
+          ./tests/ci/integration/run_rust_openssl_integration.sh

tests/ci/integration/run_bind9_integration.sh

@@ -1,7 +1,9 @@
-#!/bin/bash -exu
+#!/usr/bin/env bash
 # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0 OR ISC
 
+set -exu
+
 source tests/ci/common_posix_setup.sh
 
 # Set up environment.

tests/ci/integration/run_rust_openssl_integration.sh

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+# SPDX-License-Identifier: Apache-2.0 OR ISC
+
+set -exo pipefail
+
+source tests/ci/common_posix_setup.sh
+
+if [[ -z "${RUST_OPENSSL_SRC_DIR}" ]]; then
+    echo "RUST_OPENSSL_SRC_DIR environment variable must be set"
+    exit 1
+fi
+
+# Create build directory and navigate to it
+AWS_LC_SRC_DIR="${SRC_DIR}"
+AWS_LC_BUILD_DIR="${SYS_ROOT}/aws-lc-build"
+AWS_LC_SHARED_INSTALL_DIR="${SYS_ROOT}/aws-lc-install-shared"
+AWS_LC_STATIC_INSTALL_DIR="${SYS_ROOT}/aws-lc-install-static"
+
+function validate_rust_openssl() {
+    OPENSSL_DIR="${1}"
+    OPENSSL_STATIC="${2}"
+    cargo -v -C "${RUST_OPENSSL_SRC_DIR}" clean
+    env OPENSSL_DIR="${OPENSSL_DIR}" OPENSSL_STATIC="${OPENSSL_STATIC}" \
+        cargo -v -C "${RUST_OPENSSL_SRC_DIR}" test -p openssl-sys --release --no-default-features "${@:3}"
+    env OPENSSL_DIR="${OPENSSL_DIR}" OPENSSL_STATIC="${OPENSSL_STATIC}" \
+        cargo -v -C "${RUST_OPENSSL_SRC_DIR}" test -p openssl --release --no-default-features "${@:3}"
+}
+
+AWS_LC_BUILD_ARGS=("-DBUILD_TESTING=OFF" "-DBUILD_TOOL=OFF" "-DCMAKE_BUILD_TYPE=RelWithDebInfo")
+
+aws_lc_build "${AWS_LC_SRC_DIR}" "${AWS_LC_BUILD_DIR}" "${AWS_LC_INSTALL_DIR}" "${AWS_LC_BUILD_ARGS[@]}" -DBUILD_SHARED_LIBS=0
+aws_lc_build "${AWS_LC_SRC_DIR}" "${AWS_LC_BUILD_DIR}" "${AWS_LC_SHARED_INSTALL_DIR}" "${AWS_LC_BUILD_ARGS[@]}" -DBUILD_SHARED_LIBS=1
+
+validate_rust_openssl "${AWS_LC_SHARED_INSTALL_DIR}" 0
+validate_rust_openssl "${AWS_LC_STATIC_INSTALL_DIR}" 1
+
+validate_rust_openssl "${AWS_LC_SHARED_INSTALL_DIR}" 0 -F bindgen
+validate_rust_openssl "${AWS_LC_STATIC_INSTALL_DIR}" 1 -F bindgen

tests/ci/integration/run_strongswan_integration.sh

@@ -1,7 +1,9 @@
-#!/bin/bash -exu
+#!/usr/bin/env bash
 # Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0 OR ISC
 
+set -exu
+
 source tests/ci/common_posix_setup.sh
 
 # Set up environment.