e2eec593aa
dpdk: add live run test suite
...
Add live tests to verify that mempool, mempool cache sizes, and
potentially other DPDK features are initialized correctly during the
startup.
Follows up on bugs found in mempool settings on real/bonded devices.
The tests are placed in the new folder qa/live/ after a comment
in https://github.com/OISF/suricata/pull/14896 which indicated other
live tests are going to be moved there as well.
Ticket: 8321
(cherry picked from commit d4434ef4e8
2 months ago
7c082f08c8
rust/cargo: ignore RUSTSEC-2026-0009 for time crate
...
cargo audit reports this security issue with the time crate but Suricata
remains unaffected as no influenced fn is used by Suricata.
Advisory: https://rustsec.org/advisories/RUSTSEC-2026-0009
The MSRV for newer time crate versions are higher than the MSRV for
Suricata right now: 1.75.0
Hence, the best course of action is to suppress this warning.
Ticket: 8269
(cherry picked from commit 11b2860f23
2 months ago
34c93ef67d
ci: update rust version to 1.93
...
(cherry picked from commit b944e3b1ed
3 months ago
64fa747b6a
github-ci: build-test DPDK v23.11.x and v24.11.x
...
Ticket: 7978
(cherry picked from commit 7ca95eeec0
6 months ago
1f0b3dad24
github-ci: bump up tested DPDK versions
...
Ubuntu 20.04, distro suited at the time for 8.0.x, still contains
DPDK 19.11 in the pkg repository, so it keeps being build-tested as
opposed to the 9.0.x version.
(cherry picked from commit ee0b08692c
6 months ago
7e3b646707
ci: remove cargo update test
...
Being the stable branch, cargo update doesn't make much sense unless we
have a specific reason to update a crate. The audit check has been
left, which will alert us to crates that may need an update.
6 months ago
4e120c0a2d
ci/mt: Include MT tests in CI workflows
...
Add the MT live tests to the CI workflow.
(cherry picked from commit 846eb44a9d
7 months ago
3420968d93
mt/ci: Add MT live test
...
Add MT live test capability:
- multi-tenant.sh: harness that sets up and steps through MT steps
- suricata-mt.yaml: Adds MT capability to Suricata
- tenant-1.yaml: Per-tenant configuration file
(cherry picked from commit 51c9609c7c
7 months ago
ef91b8544c
github-actions: add validate cherry-pick line check
7 months ago
dae9264120
doc: really enforce more the completeness of json schema
...
Completes commit f1f32a39ee
7 months ago
cf4a86185d
github-actions: bump codecov/codecov-action from 5.5.0 to 5.5.1
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.5.0 to 5.5.1.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](fdcc847654...5a1091511a
7 months ago
5aa30fccc8
github-actions: bump actions/github-script from 7.0.1 to 8.0.0
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 7.0.1 to 8.0.0.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](60a0d83039...ed597411d8
7 months ago
f18c8883cf
github-actions: bump github/codeql-action from 3.30.0 to 3.30.3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.30.0 to 3.30.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.30.0...v3.30.3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.30.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
7 months ago
46203de0e9
doc: adjust for master to main rename
7 months ago
63767252be
github-action: adjust for master to main rename
7 months ago
266809a0f2
ci: check json schema sets always additionalProperties
...
Even if it is set to true.
Avoids forgetting adding fields and thinking it is tested
7 months ago
6d52bcbcb1
ci: do not run undefined for clusterfuzzlite
...
as it takes too long to build
8 months ago
0662736167
github-ci: pass CARGO and RUSTC to S-V
...
S-V needs cargo to build the EVE validator.
8 months ago
6d74656bef
rust: respect RUSTC and CARGO env vars like CC
...
To support alternative cargo and rustc programs (such as cargo-1.82),
respect CARGO and RUSTC environment variables during ./configure much
like CC.
RUSTFMT is also respected as that is required for the tests, and Cargo
can't figure this out like it can for rustc (perhaps a bug in the
packaging).
For cbindgen, we have also have to make sure the cargo environment
variable is set for each invocation.
To build with Ubuntu's Rust 1.82 packaging:
CARGO=cargo-1.82 RUSTC=rustc-1.82 RUSTDOC=rustdoc-1.82 \
./configure
Note that setting RUSTDOC is only required for commands like "make
check" to pass.
Ticket: #7877
8 months ago
88009793cc
github-actions: bump actions/download-artifact from 4.3.0 to 5.0.0
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.3.0 to 5.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](d3f86a106a...634f93cb29
8 months ago
2c5c8c6dff
github-actions: bump codecov/codecov-action from 5.4.3 to 5.5.0
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.4.3 to 5.5.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](18283e04ce...fdcc847654
8 months ago
362394ac8e
github-actions: bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
8 months ago
55249b7df2
github-actions: bump github/codeql-action from 3.29.5 to 3.30.0
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.29.5 to 3.30.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.29.5...v3.30.0 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.30.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
8 months ago
f910e3045f
github-ci: add Debian 13 job with xdp and vectorscan
8 months ago
a024ede9ba
github-actions: bump github/codeql-action from 3.29.2 to 3.29.5
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.29.2 to 3.29.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.29.2...v3.29.5 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
ffa1766742
github-ci: finish removing cppclean
...
Completes commit 2d308c000d
9 months ago
3c98ea85d6
github-ci: add almalinux 10 build
...
Based on the current AlmaLinux 9 build, with plugin tests, etc.
Remove cppclean as its not installed and was previously disabled with
commit 2d308c000d
9 months ago
bb846de074
github-ci: add flto build
...
Ubuntu and Fedora packing system build with -flto=auto by default, so
update one test to use -flto=auto. Also build with -O2 as that
combination can cause issues such as
https://redmine.openinfosecfoundation.org/issues/7824 .
Also adds vectorscan to the build.
9 months ago
6bbba953df
ci: use debian 12 for xdp
...
As bullseye is EOL so it is being removed from the mirrors
https://lists.debian.org/debian-backports/2024/07/msg00003.html
[Edit by JI: Add xdp to distcheck build as well.]
9 months ago
2e69e0d5c1
github-ci: remove debian:10 build, it is EOL
9 months ago
ed4cf9a803
github-actions: bump github/codeql-action from 3.28.18 to 3.29.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.18 to 3.29.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.28.18...v3.29.2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
10 months ago
055d270b98
ci: test with latest rust stable version 1.88
10 months ago
8ba16e2813
ci: do not run workflows for etc/schema.json
...
As it is rather a documentation file than code
10 months ago
17ed6f7b8e
windows: use _tzname instead of tzname
...
tzname is a POSIX variable, WIN32 has prefixed many POSIX variables
with "_". While Mingw64 supports both, UCRT64 emits a compiler warning
on the usage of "tzname".
This triggered a rather large clang-format update.
10 months ago
106e09ed57
github-ci: add windows ucrt build
...
MSYS2 now recommends the UCRT environment as the default, so we should
probably add a CI job for it.
10 months ago
4cadeb17e1
github: upload scan-build artifacts
10 months ago
35c86ce800
actions: test hwloc build
11 months ago
49cd1206e8
github-ci: install hwloc as a mandatory dependency
11 months ago
f0eaebe3a6
rust: set MSRV to 1.75.0
...
This is the Rust version found on Ubuntu LTS releases as of today, and
is the oldest we need to support.
Ticket: #6573
11 months ago
7c88d37570
ci: check cargo fmt for htp
11 months ago
3bc88d8330
github-actions: bump github/codeql-action from 3.28.16 to 3.28.18
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.16 to 3.28.18.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.28.16...v3.28.18 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.28.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
11 months ago
c8ef5fe192
github-actions: bump ossf/scorecard-action from 2.4.1 to 2.4.2
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](f49aabe0b5...05b42c6244
11 months ago
e75c121a63
github-actions: bump codecov/codecov-action from 5.4.2 to 5.4.3
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.4.2 to 5.4.3.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](ad3126e916...18283e04ce
11 months ago
5a5b48179a
github-ci: enable asan for suricata-lua-sys in fuzz build
11 months ago
0c1ded33da
github-ci/macos: don't pass CFLAGS to make
...
With autoconf, CFLAGS should only need to be passed to
./configure. They're then memorized in the generated Makefiles.
11 months ago
ab87089686
github-ci: cache npcap binary download
11 months ago
dbc2f9d1db
github-ci: add check for schema property ordering
11 months ago
061ed2d6a4
github-ci: use rust 1.85.0 for clippy check on templates
...
Currently our CI clippy test is based on 1.85.0, but the clippy test for
the templates was using latest stable. Unify the clippy checks to
1.85.0.
11 months ago
3b5a99d239
github-ci: use all profraw files in coverage test
12 months ago
7b46ec8c24
github-ci: add --list-app-layer-hooks checks
12 months ago
Lukas Sismis
Shivani Bhardwaj
Philippe Antoine
Jason Ish
Jeff Lucovsky
Victor Julien
dependabot[bot]
Eric Leblond