NeoDOS/.github/workflows/ci.yml at develop · NeoDOS-Project/NeoDOS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
name: CI

# Compile-oriented CI: verify the kernel builds, the dependency invariants hold
# and the skills stay in sync. It never publishes artifacts, builds disk images
# or boots a VM — that stays local (see AGENTS.md rule 1 and the scheduler
# validation policy).

on:
  pull_request:
    branches: [develop, master]
  push:
    branches: [develop]

permissions:
  contents: read

concurrency:
  group: ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  # Keep in sync with neodos-kernel/rust-toolchain.toml. Pinned so a nightly
  # update cannot turn the build red on its own.
  KERNEL_TOOLCHAIN: nightly-2026-07-14
  # Pinned NeoDev commit (no releases / no crates.io package upstream).
  NEODEV_REV: ef75018c6d489ce320a14db5974ea0487c9d60d8

jobs:
  kernel:
    name: Build kernel
    runs-on: ubuntu-latest
    env:
      # neodos-kernel/rust-toolchain.toml says `channel = "nightly"`, which would
      # otherwise override the pinned toolchain installed below and make cargo
      # use an arbitrary nightly without the x86_64-unknown-none target
      # ("can't find crate for `core`"). RUSTUP_TOOLCHAIN takes precedence over
      # the rust-toolchain file, so the build uses the pinned toolchain + target.
      # NOTE: the `env` context is not allowed in `jobs.<id>.env`, so this value
      # is written out and must be kept in sync with KERNEL_TOOLCHAIN above.
      RUSTUP_TOOLCHAIN: nightly-2026-07-14
    steps:
      - uses: actions/checkout@v4

      - uses: dtolnay/rust-toolchain@master
        with:
          toolchain: ${{ env.KERNEL_TOOLCHAIN }}
          targets: x86_64-unknown-none

      - name: Ensure x86_64-unknown-none target
        working-directory: neodos-kernel
        run: rustup target add x86_64-unknown-none

      - name: Show toolchain
        working-directory: neodos-kernel
        run: rustup show active-toolchain && rustc --version

      - uses: Swatinem/rust-cache@v2
        with:
          workspaces: neodos-kernel

      - name: cargo build (dev profile)
        working-directory: neodos-kernel
        run: cargo build

  deps:
    name: check-deps
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      # NeoDev is an external tool (NeoDOS-Project/NeoDev) with no published
      # release, so it is built from a pinned revision and cached by that rev.
      - name: Cache neodev
        id: cache-neodev
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/bin/neodev
            ~/.cargo/registry
          key: neodev-${{ runner.os }}-${{ env.NEODEV_REV }}

      - name: Install neodev
        if: steps.cache-neodev.outputs.cache-hit != 'true'
        run: cargo install --git https://github.com/NeoDOS-Project/NeoDev.git --rev "$NEODEV_REV" --locked

      - name: neodev check-deps
        run: neodev check-deps

  guards:
    name: Static guards
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: scripts/check-skills.sh
        run: ./scripts/check-skills.sh
      - name: scripts/check-irq-locks.sh (INV-3 / Rule 3.5.1)
        run: ./scripts/check-irq-locks.sh

  keyboard-layouts:
    name: Keyboard layouts
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      # xkbcompile is a host-side std tool; the layouts come from xkb-data.
      - uses: dtolnay/rust-toolchain@stable

      - name: Install xkb-data
        run: sudo apt-get update && sudo apt-get install -y xkb-data

      - name: scripts/check-keyboard-layouts.sh (#702)
        run: ./scripts/check-keyboard-layouts.sh