CVE-2022-37966 s4:libnet: allow python bindings to force setting an nthash via SAMR...
[samba.git] / .gitlab-ci-main.yml
1 # see https://docs.gitlab.com/ce/ci/yaml/README.html for all available options
2
3 # Stages explained
4 #
5 # images: Build the images with the bootstrap script
6 # build_first: Build a few things first to find silly errors (fast job)
7 #              (don't pay for 35 machines until something compiles)
8 # build: The main parallel job
9 #              (keep these to 1hour as we are billed per hour)
10 # test_only: Tests using the build from prior stages, these typically
11 #            have an explicit dependency defined to a specific build job,
12 #            which means that start as soon as the build job finished.
13 # test_private: Like test_only, but running on private runners
14 # report: Code coverage reporting
15
16 stages:
17   - images
18   - build_first
19   - build
20   - test_only
21   - test_private
22   - report
23
24 variables:
25   # We want to be resilient to runner failures
26   ARTIFACT_DOWNLOAD_ATTEMPTS: "3"
27   EXECUTOR_JOB_SECTION_ATTEMPTS: "3"
28   GET_SOURCES_ATTEMPTS: "3"
29   RESTORE_CACHE_ATTEMPTS: "3"
30   #
31   GIT_STRATEGY: fetch
32   GIT_DEPTH: "3"
33   #
34   # we run autobuild.py inside a samba CI docker image located on gitlab's registry
35   # overwrite this variable if you want use your own image registry.
36   #
37   # Or better ask for access to the shared development repository, see
38   # https://wiki.samba.org/index.php/Samba_CI_on_gitlab#Getting_Access
39   #
40   SAMBA_CI_CONTAINER_REGISTRY: registry.gitlab.com/samba-team/devel/samba
41   #
42   # Set this to the contents of bootstrap/sha1sum.txt
43   # which is generated by bootstrap/template.py --render
44   #
45   SAMBA_CI_CONTAINER_TAG: fbf9c4c8a2055936d4ca279878df7811af46d86d
46   #
47   # We use the ubuntu1804 image as default as
48   # it matches what we have on sn-devel-184.
49   #
50   SAMBA_CI_CONTAINER_IMAGE: ubuntu1804
51   #
52   # The following images are available
53   # Please see the samba-o3 sections at the end of this file!
54   # We should run that for each available image
55   #
56   SAMBA_CI_CONTAINER_IMAGE_ubuntu1604: ubuntu1604
57   SAMBA_CI_CONTAINER_IMAGE_ubuntu1804: ubuntu1804
58   SAMBA_CI_CONTAINER_IMAGE_ubuntu2004: ubuntu2004
59   SAMBA_CI_CONTAINER_IMAGE_debian9: debian9
60   SAMBA_CI_CONTAINER_IMAGE_debian10: debian10
61   SAMBA_CI_CONTAINER_IMAGE_debian11: debian11
62   SAMBA_CI_CONTAINER_IMAGE_opensuse151: opensuse151
63   SAMBA_CI_CONTAINER_IMAGE_opensuse152: opensuse152
64   SAMBA_CI_CONTAINER_IMAGE_fedora33: fedora33
65   SAMBA_CI_CONTAINER_IMAGE_fedora34: fedora34
66   SAMBA_CI_CONTAINER_IMAGE_centos7: centos7
67   SAMBA_CI_CONTAINER_IMAGE_centos8s: centos8s
68
69 include:
70   # The image creation details are specified in a separate file
71   # See bootstrap/README.md for details
72   - 'bootstrap/.gitlab-ci.yml'
73
74 .shared_runner_build_image:
75   extends: .shared_runner_build
76   variables:
77     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE}
78   image: ${SAMBA_CI_CONTAINER_REGISTRY}/samba-ci-${SAMBA_CI_JOB_IMAGE}:${SAMBA_CI_CONTAINER_TAG}
79
80 .shared_template:
81   extends: .shared_runner_build_image
82   # All Samba jobs are interruptible, this avoids burning CPU when a
83   # newer branch is pushed.
84   interruptible: true
85   timeout: 2h
86
87   # Otherwise we run twice, once on push and once on MR
88   # https://forum.gitlab.com/t/new-rules-syntax-and-detached-pipelines/37292
89   rules:
90     - if: $CI_MERGE_REQUEST_ID
91       when: never
92     - when: on_success
93
94   variables:
95     AUTOBUILD_JOB_NAME: $CI_JOB_NAME
96   stage: build
97   cache:
98     key: ccache.${CI_JOB_NAME}.${SAMBA_CI_JOB_IMAGE}.${SAMBA_CI_FLAVOR}
99     paths:
100       - ccache
101
102   # This is overridden in many cases, but ensures none of the other
103   # main jobs start until and unless this build finishes.  However
104   # this also ensures we do not download artifacts from any build
105   # unless we specifically depend on it, saving bandwidth
106
107   needs:
108     - job: samba-def-build
109       artifacts: false
110
111   before_script:
112     - uname -a
113     - lsb_release -a
114     - cat /etc/os-release
115     - lscpu
116     - cat /proc/cpuinfo
117     - mount
118     - df -h
119     - cat /proc/swaps
120     - free -h
121       # ld will fail if coverage enabled, force link ld to ld.bfd
122     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then sudo ln -sf $(which ld.bfd) $(which ld); fi
123       # See bootstrap/.gitlab-ci.yml how to generate a new image
124     - echo "SAMBA_CI_CONTAINER_REGISTRY[${SAMBA_CI_CONTAINER_REGISTRY}]"
125     - echo "SAMBA_CI_CONTAINER_TAG[${SAMBA_CI_CONTAINER_TAG}]"
126     - echo "SAMBA_CI_JOB_IMAGE[${SAMBA_CI_JOB_IMAGE}]"
127     - echo "CI_JOB_IMAGE[${CI_JOB_IMAGE}]"
128     - bootstrap/template.py --sha1sum > /tmp/sha1sum-template.txt
129     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-template.txt
130     - echo "${SAMBA_CI_CONTAINER_TAG}" > /tmp/sha1sum-tag.txt
131     - diff -u bootstrap/sha1sum.txt /tmp/sha1sum-tag.txt
132     - diff -u bootstrap/sha1sum.txt /sha1sum.txt
133     - echo "${CI_COMMIT_SHA} ${CI_COMMIT_TITLE}" > /tmp/commit.txt
134     - export CCACHE_BASEDIR="${PWD}"
135     - export CCACHE_DIR="${PWD}/ccache" && mkdir -pv "$CCACHE_DIR"
136     - export CC="ccache cc"
137     - export CXX="ccache c++"
138     - ccache -z -M 500M
139     - ccache -s
140       # We are already running .gitlab-ci directives from this repo, remove additional checks that break our CI
141     - git config --global --add safe.directory `pwd`
142   after_script:
143     - mount
144     - df -h
145     - cat /proc/swaps
146     - free -h
147     - CCACHE_BASEDIR="${PWD}" CCACHE_DIR="${PWD}/ccache" ccache -s -c
148   artifacts:
149     expire_in: 1 week
150     paths:
151       - "*.stdout"
152       - "*.stderr"
153       - "*.info"
154       - public
155       - system-info.txt
156   retry:
157     max: 2
158     when:
159       - runner_system_failure
160       - stuck_or_timeout_failure
161       - api_failure
162       - runner_unsupported
163       - stale_schedule
164       - archived_failure
165       - scheduler_failure
166       - data_integrity_failure
167
168   script:
169     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
170     # autobuild name, which means we can define a default template that runs most autobuild jobs
171     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
172
173 # Ensure when adding a new job below that you also add it to
174 # the dependencies for 'pages' below for the code coverage page
175 # generation.
176
177 others:
178   extends: .shared_template
179   script:
180     - script/autobuild.py ldb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/ldb
181     - script/autobuild.py pidl     $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/pidl
182     - script/autobuild.py replace  $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/replace
183     - script/autobuild.py talloc   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/talloc
184     - script/autobuild.py tdb      $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tdb
185     - script/autobuild.py tevent   $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/tevent
186     - script/autobuild.py samba-xc $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/samba-xc
187     - script/autobuild.py docs-xml $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase/docs-xml
188
189 .shared_template_build_only:
190   extends: .shared_template
191   timeout: 2h
192   needs:
193   artifacts:
194     expire_in: 1 week
195     paths:
196       - "*.stdout"
197       - "*.stderr"
198       - "*.info"
199       - system-info.txt
200       - samba-testbase.tar.gz
201   script:
202     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
203     # autobuild name, which means we can define a default template that runs most autobuild jobs
204     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE  --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
205     # On success we need to pack everything into an artifacts file
206     # which needs to be in the git checkout.
207     # As tar doesn't handle hardlink of read-only files,
208     # we remember the acls and add write permissions
209     # before creating the archive. The consumer will apply
210     # the acls again.
211     - cp -a /sha1sum.txt /tmp/samba-testbase/image-sha1sum.txt
212     - cp -a /tmp/commit.txt /tmp/samba-testbase/commit.txt
213     - ln -s /tmp/samba-testbase/${AUTOBUILD_JOB_NAME}/ /tmp/samba-testbase/build_subdir_link
214     - pushd /tmp && getfacl -R samba-testbase > samba-testbase.acl.dump && popd
215     - chmod -R +w /tmp/samba-testbase
216     - mv /tmp/samba-testbase.acl.dump /tmp/samba-testbase/
217     - tar cfz samba-testbase.tar.gz /tmp/samba-testbase
218     - ls -la samba-testbase.tar.gz
219     - sha1sum samba-testbase.tar.gz
220
221 .shared_template_test_only:
222   extends:
223     - .shared_template
224     - .shared_runner_test
225   stage: test_only
226   script:
227     # We unpack the artifacts file created by the .shared_template_build_only
228     # run we depend on
229     - ls -la samba-testbase.tar.gz
230     - sha1sum samba-testbase.tar.gz
231     - tar xfz samba-testbase.tar.gz -C /
232     - diff -u /tmp/samba-testbase/image-sha1sum.txt /sha1sum.txt
233     - diff -u /tmp/samba-testbase/commit.txt /tmp/commit.txt
234     - mv /tmp/samba-testbase/samba-testbase.acl.dump /tmp/samba-testbase.acl.dump
235     - pushd /tmp && setfacl --restore=/tmp/samba-testbase.acl.dump && popd
236     - ls -la /tmp/samba-testbase/
237     - ls -la /tmp/samba-testbase/build_subdir_link
238     - ls -la /tmp/samba-testbase/build_subdir_link/
239     - if [ -n "$SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE" ]; then find /tmp/samba-testbase/build_subdir_link/ -type d -printf "'%p'\n" | xargs chmod u+w; fi
240     - ls -la /tmp/samba-testbase/build_subdir_link/
241     # gitlab predefines CI_JOB_NAME for each job. The gitlab job usually matches the
242     # autobuild name, which means we can define a default template that runs most autobuild jobs
243     - script/autobuild.py $AUTOBUILD_JOB_NAME $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE --skip-dependencies --verbose --nocleanup --keeplogs --tail --full-testbase /tmp/samba-testbase
244
245 samba-def-build:
246   extends: .shared_template_build_only
247   stage: build_first
248
249 .needs_samba-def-build:
250   extends: .shared_template_test_only
251   needs:
252     - job: samba-def-build
253       artifacts: true
254
255 samba-mit-build:
256   extends: .shared_template_build_only
257   variables:
258     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora34}
259   stage: build_first
260
261 .needs_samba-mit-build:
262   extends: .shared_template_test_only
263   variables:
264     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora34}
265   needs:
266     - job: samba-mit-build
267       artifacts: true
268
269 samba-h5l-build:
270   extends: .shared_template_build_only
271
272 .needs_samba-h5l-build:
273   extends: .shared_template_test_only
274   needs:
275     - job: samba-h5l-build
276       artifacts: true
277
278 samba-nt4-build:
279   extends: .shared_template_build_only
280
281 .needs_samba-nt4-build:
282   extends: .shared_template_test_only
283   needs:
284     - job: samba-nt4-build
285       artifacts: true
286
287 samba-no-opath-build:
288   extends: .shared_template_build_only
289
290 .needs_samba-no-opath-build:
291   extends: .shared_template_test_only
292   needs:
293     - job: samba-no-opath-build
294       artifacts: true
295
296 samba:
297   extends: .shared_template
298
299 samba-mitkrb5:
300   extends: .shared_template
301   variables:
302     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora34}
303
304 samba-minimal-smbd:
305   extends: .shared_template
306
307 samba-nopython:
308   extends: .shared_template
309
310 samba-admem:
311   extends: .needs_samba-def-build
312
313 samba-ad-dc-2:
314   extends: .needs_samba-def-build
315
316 samba-ad-dc-3:
317   extends: .needs_samba-def-build
318
319 samba-ad-dc-4a:
320   extends: .needs_samba-def-build
321
322 samba-ad-dc-4b:
323   extends: .needs_samba-def-build
324
325 samba-ad-dc-5:
326   extends: .needs_samba-def-build
327
328 samba-ad-dc-6:
329   extends: .needs_samba-def-build
330
331 samba-ad-back1:
332   extends: .needs_samba-def-build
333
334 samba-ad-back2:
335   extends: .needs_samba-def-build
336
337 samba-schemaupgrade:
338   extends: .needs_samba-def-build
339
340 samba-libs:
341   extends: .shared_template
342
343 samba-fuzz:
344   extends: .shared_template
345   variables:
346     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu1604}
347
348 ctdb:
349   extends: .shared_template
350
351 samba-ctdb:
352   extends: .shared_template
353
354 samba-ad-dc-ntvfs:
355   extends: .needs_samba-def-build
356
357 samba-admem-mit:
358   extends: .needs_samba-mit-build
359
360 samba-addc-mit-4a:
361   extends: .needs_samba-mit-build
362
363 samba-addc-mit-4b:
364   extends: .needs_samba-mit-build
365
366 # This task is run first to ensure we compile before we start the
367 # main run as it is the fastest full compile of Samba.
368 samba-fips:
369   extends: .shared_template
370   variables:
371     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora34}
372
373 .private_test_only:
374   extends: .private_runner_test
375   stage: test_private
376   rules:
377       # See above, to avoid a duplicate CI on the MR (these rules override the others)
378     - if: $CI_MERGE_REQUEST_ID
379       when: never
380
381       # These jobs are only run if the gitlab repo has private runners available.
382       # To enable private jobs, you must add the following var and value to
383       # your gitlab repo by navigating to:
384       # settings -> CI/CD -> Environment variables
385     - if: $SUPPORT_PRIVATE_TEST == "yes"
386
387 .needs_samba-def-build-private:
388   extends:
389     - .needs_samba-def-build
390     - .private_test_only
391
392 .needs_samba-mit-build-private:
393   extends:
394     - .needs_samba-mit-build
395     - .private_test_only
396
397 .needs_samba-h5l-build-private:
398   extends:
399     - .needs_samba-h5l-build
400     - .private_test_only
401
402 .needs_samba-nt4-build-private:
403   extends:
404     - .needs_samba-nt4-build
405     - .private_test_only
406
407 .needs_samba-no-opath-build-private:
408   extends:
409     - .needs_samba-no-opath-build
410     - .private_test_only
411
412 samba-fileserver:
413   extends: .needs_samba-h5l-build-private
414
415 # This is a full build without the AD DC so we test the build with MIT
416 # Kerberos from the default system (Ubuntu 18.04 at this stage).
417 # Runtime behaviour checked via the ktest (static ccache and keytab)
418 # environment
419 samba-ktest-mit:
420  extends: .shared_template
421
422 samba-ad-dc-1:
423   extends: .needs_samba-def-build-private
424
425 samba-nt4:
426   extends: .needs_samba-nt4-build-private
427
428 samba-addc-mit-1:
429   extends: .needs_samba-mit-build-private
430
431 samba-no-opath1:
432   extends: .needs_samba-no-opath-build-private
433
434 samba-no-opath2:
435   extends: .needs_samba-no-opath-build-private
436
437 # 'pages' is a special job which can publish artifacts in `public` dir to gitlab pages
438 pages:
439   extends: .shared_runner_build_image
440   stage: report
441   dependencies:  # tell gitlab to download artifacts for these jobs
442     - others
443     - samba
444     - samba-mitkrb5
445     - samba-admem
446     - samba-ad-dc-2
447     - samba-ad-dc-3
448     - samba-ad-dc-4a
449     - samba-ad-dc-4b
450     - samba-ad-dc-5
451     - samba-ad-dc-6
452     - samba-libs
453     - samba-minimal-smbd
454     - samba-nopython
455     - samba-fuzz
456     # - ctdb  # TODO
457     - samba-ctdb
458     - samba-ad-dc-ntvfs
459     - samba-admem-mit
460     - samba-addc-mit-4a
461     - samba-addc-mit-4b
462     - samba-ad-back1
463     - samba-ad-back2
464     - samba-fileserver
465     - samba-ad-dc-1
466     - samba-nt4
467     - samba-schemaupgrade
468     - samba-addc-mit-1
469     - samba-fips
470     - samba-no-opath1
471     - samba-no-opath2
472     - ubuntu1804-samba-o3
473   script:
474     - ls -la *.info
475     - ./configure.developer
476     - make -j
477     - ls -la *.info
478     - lcov $(ls *.info | xargs -I{} echo -n "-a {} ") -o all.info
479     - ls -la *.info
480     - genhtml all.info --output-directory public --prefix=$(pwd) --title "coverage report for $CI_COMMIT_REF_NAME $CI_COMMIT_SHORT_SHA"
481   artifacts:
482     expire_in: 30 days
483     paths:
484       - public
485   only:
486     variables:
487       - $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == "--enable-coverage"
488
489 # Coverity Scan
490 coverity:
491   extends: .shared_runner_build_image
492   variables:
493     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora34}
494   stage: build
495   script:
496     - wget https://scan.coverity.com/download/linux64 --post-data "token=$COVERITY_SCAN_TOKEN&project=$COVERITY_SCAN_PROJECT_NAME" -O /tmp/coverity_tool.tgz
497     - tar xf /tmp/coverity_tool.tgz
498     - ./configure.developer --with-cluster-support --with-system-mitkrb5 --with-experimental-mit-ad-dc
499     - cov-analysis-linux64-*/bin/cov-build --dir cov-int make -j$(nproc)
500     - tar czf cov-int.tar.gz cov-int
501     - curl
502       --form token=$COVERITY_SCAN_TOKEN
503       --form email=$COVERITY_SCAN_EMAIL
504       --form file=@cov-int.tar.gz
505       --form version="`git describe --tags`"
506       --form description="CI build"
507       https://scan.coverity.com/builds?project=$COVERITY_SCAN_PROJECT_NAME
508   only:
509     refs:
510       - master
511       - schedules
512     variables:
513       - $COVERITY_SCAN_TOKEN != null
514       - $COVERITY_SCAN_PROJECT_NAME != null
515       - $COVERITY_SCAN_EMAIL != null
516   artifacts:
517     expire_in: 1 week
518     when: on_failure
519     paths:
520       - cov-int/*.txt
521
522 #
523 # We build samba-o3 on all supported distributions
524 #
525
526 # This job, which matches the main CI, needs to still do coverage so
527 # we show the coverage on the "none" environment tests
528 #
529 # We want --enable-coverage specified here otherwise we will have a
530 # different set of build options on the coverage build and can fail
531 # when -O3 gets combined with --enable-coverage in the scheduled
532 # builds.
533
534 ubuntu1804-samba-o3:
535   extends: .shared_template
536   variables:
537     AUTOBUILD_JOB_NAME: samba-o3
538     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu1804}
539     SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE: "--enable-coverage"
540   rules:
541     # See above, to avoid a duplicate CI on the MR (these rules override the others)
542     - if: $CI_MERGE_REQUEST_ID
543       when: never
544     # do not run o3 builds (which run a lot of VMs) if told not to
545     # (this uses the same variable as autobuild.py)
546     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
547       when: never
548
549 # All other jobs do not want code coverage.
550 .samba-o3-template:
551   extends: .shared_template
552   variables:
553     AUTOBUILD_JOB_NAME: samba-o3
554   rules:
555     # See above, to avoid a duplicate CI on the MR (these rules override the others)
556     - if: $CI_MERGE_REQUEST_ID
557       when: never
558     # do not run o3 builds (which run a lot of VMs) if told not to
559     # (this uses the same variable as autobuild.py)
560     - if: $AUTOBUILD_SKIP_SAMBA_O3 == "1"
561       when: never
562     # do not run o3 for coverage since they are using different images
563     - if: $SAMBA_CI_AUTOBUILD_ENABLE_COVERAGE == ""
564
565 ubuntu2004-samba-o3:
566   extends: .samba-o3-template
567   variables:
568     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_ubuntu2004}
569
570 debian10-samba-o3:
571   extends: .samba-o3-template
572   variables:
573     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian10}
574
575 debian11-samba-o3:
576   extends: .samba-o3-template
577   variables:
578     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_debian11}
579
580 opensuse151-samba-o3:
581   extends: .samba-o3-template
582   variables:
583     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse151}
584
585 opensuse152-samba-o3:
586   extends: .samba-o3-template
587   variables:
588     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_opensuse152}
589
590 centos7-samba-o3:
591   extends: .samba-o3-template
592   variables:
593     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos7}
594     # Git on CentOS doesn't support shallow git cloning
595     GIT_DEPTH: ""
596     # We need a newer GnuTLS version on CentOS7
597     PKG_CONFIG_PATH: "/usr/lib64/compat-gnutls34/pkgconfig:/usr/lib64/compat-nettle32/pkgconfig"
598
599 centos8s-samba-o3:
600   extends: .samba-o3-template
601   variables:
602     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_centos8s}
603
604 fedora33-samba-o3:
605   extends: .samba-o3-template
606   variables:
607     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora33}
608
609 fedora34-samba-o3:
610   extends: .samba-o3-template
611   variables:
612     SAMBA_CI_JOB_IMAGE: ${SAMBA_CI_CONTAINER_IMAGE_fedora34}
613
614 #
615 # Keep the samba-o3 sections at the end ...
616 #