src/ci/github-actions/ci.yml

   1 ######################################################
   2 #   WARNING! Action needed when changing this file   #
   3 ######################################################
   4
   5 # Due to GitHub Actions limitations, we can't use YAML Anchors directly in the
   6 # CI configuration stored on the repository. To work around that this file is
   7 # expanded by a tool in the repository, and the expansion is committed as well.
   8 #
   9 # After you make any change to the file you'll need to run this command:
  10 #
  11 #   ./x.py run src/tools/expand-yaml-anchors
  12 #
  13 # ...and commit the file it updated in addition to this one. If you forget this
  14 # step CI will fail.
  15
  16 ---
  17
  18 ###############################
  19 #   YAML Anchors Definition   #
  20 ###############################
  21
  22 # This key contains most of the YAML anchors that will be used later in the
  23 # document. YAML anchors allows us to greatly reduce duplication inside the CI
  24 # configuration by reusing parts of the configuration.
  25 #
  26 # YAML anchors work by defining an anchor with `&anchor-name` and reusing its
  27 # content in another place with `*anchor-name`. The special `<<` map key merges
  28 # the content of the map with the content of the anchor (or list of anchors).
  29 #
  30 # The expand-yaml-anchors tool will automatically remove this block from the
  31 # output YAML file.
  32 x--expand-yaml-anchors--remove:
  33
  34   - &shared-ci-variables
  35     CI_JOB_NAME: ${{ matrix.name }}
  36
  37   - &public-variables
  38     SCCACHE_BUCKET: rust-lang-ci-sccache2
  39     TOOLSTATE_REPO: https://github.com/rust-lang-nursery/rust-toolstate
  40     CACHE_DOMAIN: ci-caches.rust-lang.org
  41
  42   - &prod-variables
  43     SCCACHE_BUCKET: rust-lang-ci-sccache2
  44     DEPLOY_BUCKET: rust-lang-ci2
  45     TOOLSTATE_REPO: https://github.com/rust-lang-nursery/rust-toolstate
  46     TOOLSTATE_ISSUES_API_URL: https://api.github.com/repos/rust-lang/rust/issues
  47     TOOLSTATE_PUBLISH: 1
  48     # AWS_SECRET_ACCESS_KEYs are stored in GitHub's secrets storage, named
  49     # AWS_SECRET_ACCESS_KEY_<keyid>. Including the key id in the name allows to
  50     # rotate them in a single branch while keeping the old key in another
  51     # branch, which wouldn't be possible if the key was named with the kind
  52     # (caches, artifacts...).
  53     CACHES_AWS_ACCESS_KEY_ID: AKIA46X5W6CZI5DHEBFL
  54     ARTIFACTS_AWS_ACCESS_KEY_ID: AKIA46X5W6CZN24CBO55
  55     CACHE_DOMAIN: ci-caches.rust-lang.org
  56
  57   - &dummy-variables
  58     SCCACHE_BUCKET: rust-lang-gha-caches
  59     DEPLOY_BUCKET: rust-lang-gha
  60     TOOLSTATE_REPO: https://github.com/pietroalbini/rust-toolstate
  61     TOOLSTATE_ISSUES_API_URL: https://api.github.com/repos/pietroalbini/rust-toolstate/issues
  62     TOOLSTATE_PUBLISH: 1
  63     # AWS_SECRET_ACCESS_KEYs are stored in GitHub's secrets storage, named
  64     # AWS_SECRET_ACCESS_KEY_<keyid>. Including the key id in the name allows to
  65     # rotate them in a single branch while keeping the old key in another
  66     # branch, which wouldn't be possible if the key was named with the kind
  67     # (caches, artifacts...).
  68     CACHES_AWS_ACCESS_KEY_ID: AKIA46X5W6CZOMUQATD5
  69     ARTIFACTS_AWS_ACCESS_KEY_ID: AKIA46X5W6CZH5AYXDVF
  70     CACHE_DOMAIN: ci-caches-gha.rust-lang.org
  71
  72   - &base-job
  73     env: {}
  74
  75   - &job-linux-xl
  76     os: ubuntu-latest-xl
  77     <<: *base-job
  78
  79   - &job-macos-xl
  80     os: macos-latest  # We don't have an XL builder for this
  81     <<: *base-job
  82
  83   - &job-windows-xl
  84     os: windows-latest-xl
  85     <<: *base-job
  86
  87   - &job-aarch64-linux
  88     os: [self-hosted, ARM64, linux]
  89
  90   - &step
  91     if: success() && !env.SKIP_JOB
  92
  93   - &base-ci-job
  94     timeout-minutes: 600
  95     runs-on: "${{ matrix.os }}"
  96     env: *shared-ci-variables
  97     steps:
  98       - name: disable git crlf conversion
  99         run: git config --global core.autocrlf false
 100
 101       - name: checkout the source code
 102         uses: actions/checkout@v1
 103         with:
 104           fetch-depth: 2
 105
 106       - name: configure GitHub Actions to kill the build when outdated
 107         uses: rust-lang/simpleinfra/github-actions/cancel-outdated-builds@master
 108         with:
 109           github_token: "${{ secrets.github_token }}"
 110         if: success() && !env.SKIP_JOB && github.ref != 'refs/heads/try'
 111         <<: *step
 112
 113       # Rust Log Analyzer can't currently detect the PR number of a GitHub
 114       # Actions build on its own, so a hint in the log message is needed to
 115       # point it in the right direction.
 116       - name: configure the PR in which the error message will be posted
 117         run: echo "[CI_PR_NUMBER=$num]"
 118         env:
 119           num: ${{ github.event.number }}
 120         if: success() && !env.SKIP_JOBS && github.event_name == 'pull_request'
 121
 122       - name: add extra environment variables
 123         run: src/ci/scripts/setup-environment.sh
 124         env:
 125           # Since it's not possible to merge `${{ matrix.env }}` with the other
 126           # variables in `job.<name>.env`, the variables defined in the matrix
 127           # are passed to the `setup-environment.sh` script encoded in JSON,
 128           # which then uses log commands to actually set them.
 129           EXTRA_VARIABLES: ${{ toJson(matrix.env) }}
 130         <<: *step
 131
 132       - name: decide whether to skip this job
 133         run: src/ci/scripts/should-skip-this.sh
 134         <<: *step
 135
 136       - name: collect CPU statistics
 137         run: src/ci/scripts/collect-cpu-stats.sh
 138         <<: *step
 139
 140       - name: show the current environment
 141         run: src/ci/scripts/dump-environment.sh
 142         <<: *step
 143
 144       - name: install awscli
 145         run: src/ci/scripts/install-awscli.sh
 146         <<: *step
 147
 148       - name: install sccache
 149         run: src/ci/scripts/install-sccache.sh
 150         <<: *step
 151
 152       - name: install clang
 153         run: src/ci/scripts/install-clang.sh
 154         <<: *step
 155
 156       - name: install WIX
 157         run: src/ci/scripts/install-wix.sh
 158         <<: *step
 159
 160       - name: ensure the build happens on a partition with enough space
 161         run: src/ci/scripts/symlink-build-dir.sh
 162         <<: *step
 163
 164       - name: disable git crlf conversion
 165         run: src/ci/scripts/disable-git-crlf-conversion.sh
 166         <<: *step
 167
 168       - name: install MSYS2
 169         run: src/ci/scripts/install-msys2.sh
 170         <<: *step
 171
 172       - name: install MinGW
 173         run: src/ci/scripts/install-mingw.sh
 174         <<: *step
 175
 176       - name: install ninja
 177         run: src/ci/scripts/install-ninja.sh
 178         <<: *step
 179
 180       - name: enable ipv6 on Docker
 181         run: src/ci/scripts/enable-docker-ipv6.sh
 182         <<: *step
 183
 184       # Disable automatic line ending conversion (again). On Windows, when we're
 185       # installing dependencies, something switches the git configuration directory or
 186       # re-enables autocrlf. We've not tracked down the exact cause -- and there may
 187       # be multiple -- but this should ensure submodules are checked out with the
 188       # appropriate line endings.
 189       - name: disable git crlf conversion
 190         run: src/ci/scripts/disable-git-crlf-conversion.sh
 191         <<: *step
 192
 193       - name: checkout submodules
 194         run: src/ci/scripts/checkout-submodules.sh
 195         <<: *step
 196
 197       - name: ensure line endings are correct
 198         run: src/ci/scripts/verify-line-endings.sh
 199         <<: *step
 200
 201       - name: run the build
 202         run: src/ci/scripts/run-build-from-ci.sh
 203         env:
 204           AWS_ACCESS_KEY_ID: ${{ env.CACHES_AWS_ACCESS_KEY_ID }}
 205           AWS_SECRET_ACCESS_KEY: ${{ secrets[format('AWS_SECRET_ACCESS_KEY_{0}', env.CACHES_AWS_ACCESS_KEY_ID)] }}
 206           TOOLSTATE_REPO_ACCESS_TOKEN: ${{ secrets.TOOLSTATE_REPO_ACCESS_TOKEN }}
 207         <<: *step
 208
 209       - name: upload artifacts to S3
 210         run: src/ci/scripts/upload-artifacts.sh
 211         env:
 212           AWS_ACCESS_KEY_ID: ${{ env.ARTIFACTS_AWS_ACCESS_KEY_ID }}
 213           AWS_SECRET_ACCESS_KEY: ${{ secrets[format('AWS_SECRET_ACCESS_KEY_{0}', env.ARTIFACTS_AWS_ACCESS_KEY_ID)] }}
 214         # Adding a condition on DEPLOY=1 or DEPLOY_ALT=1 is not needed as all deploy
 215         # builders *should* have the AWS credentials available. Still, explicitly
 216         # adding the condition is helpful as this way CI will not silently skip
 217         # deploying artifacts from a dist builder if the variables are misconfigured,
 218         # erroring about invalid credentials instead.
 219         if: success() && !env.SKIP_JOB && (github.event_name == 'push' || env.DEPLOY == '1' || env.DEPLOY_ALT == '1')
 220         <<: *step
 221
 222   # These snippets are used by the try-success, try-failure, auto-success and auto-failure jobs.
 223   # Check out their documentation for more information on why they're needed.
 224
 225   - &base-outcome-job
 226     name: bors build finished
 227     runs-on: ubuntu-latest
 228
 229   - &base-success-job
 230     steps:
 231       - name: mark the job as a success
 232         run: exit 0
 233         shell: bash
 234     <<: *base-outcome-job
 235
 236   - &base-failure-job
 237     steps:
 238       - name: mark the job as a failure
 239         run: exit 1
 240         shell: bash
 241     <<: *base-outcome-job
 242
 243 ###########################
 244 #   Builders definition   #
 245 ###########################
 246
 247 name: CI
 248 on:
 249   push:
 250     branches:
 251       - auto
 252       - try
 253       - try-perf
 254       - master
 255   pull_request:
 256     branches:
 257       - "**"
 258
 259 defaults:
 260   run:
 261     # On Linux, macOS, and Windows, use the system-provided bash as the default
 262     # shell. (This should only make a difference on Windows, where the default
 263     # shell is PowerShell.)
 264     shell: bash
 265
 266 jobs:
 267   pr:
 268     <<: *base-ci-job
 269     name: PR
 270     env:
 271       <<: [*shared-ci-variables, *public-variables]
 272     if: github.event_name == 'pull_request'
 273     strategy:
 274       matrix:
 275         include:
 276           - name: mingw-check
 277             <<: *job-linux-xl
 278
 279           - name: x86_64-gnu-llvm-8
 280             <<: *job-linux-xl
 281
 282           - name: x86_64-gnu-tools
 283             env:
 284               CI_ONLY_WHEN_SUBMODULES_CHANGED: 1
 285             <<: *job-linux-xl
 286
 287   try:
 288     <<: *base-ci-job
 289     name: try
 290     env:
 291       <<: [*shared-ci-variables, *prod-variables]
 292     if: github.event_name == 'push' && (github.ref == 'refs/heads/try' || github.ref == 'refs/heads/try-perf') && github.repository == 'rust-lang-ci/rust'
 293     strategy:
 294       matrix:
 295         include:
 296           - name: dist-x86_64-linux
 297             <<: *job-linux-xl
 298
 299   auto:
 300     <<: *base-ci-job
 301     name: auto
 302     env:
 303       <<: [*shared-ci-variables, *prod-variables]
 304     if: github.event_name == 'push' && github.ref == 'refs/heads/auto' && github.repository == 'rust-lang-ci/rust'
 305     strategy:
 306       matrix:
 307         include:
 308           #############################
 309           #   Linux/Docker builders   #
 310           #############################
 311
 312           - name: arm-android
 313             <<: *job-linux-xl
 314
 315           - name: armhf-gnu
 316             <<: *job-linux-xl
 317
 318           - name: dist-aarch64-linux
 319             <<: *job-linux-xl
 320
 321           - name: dist-android
 322             <<: *job-linux-xl
 323
 324           - name: dist-arm-linux
 325             <<: *job-linux-xl
 326
 327           - name: dist-armhf-linux
 328             <<: *job-linux-xl
 329
 330           - name: dist-armv7-linux
 331             <<: *job-linux-xl
 332
 333           - name: dist-i586-gnu-i586-i686-musl
 334             <<: *job-linux-xl
 335
 336           - name: dist-i686-freebsd
 337             <<: *job-linux-xl
 338
 339           - name: dist-i686-linux
 340             <<: *job-linux-xl
 341
 342           - name: dist-mips-linux
 343             <<: *job-linux-xl
 344
 345           - name: dist-mips64-linux
 346             <<: *job-linux-xl
 347
 348           - name: dist-mips64el-linux
 349             <<: *job-linux-xl
 350
 351           - name: dist-mipsel-linux
 352             <<: *job-linux-xl
 353
 354           - name: dist-powerpc-linux
 355             <<: *job-linux-xl
 356
 357           - name: dist-powerpc64-linux
 358             <<: *job-linux-xl
 359
 360           - name: dist-powerpc64le-linux
 361             <<: *job-linux-xl
 362
 363           - name: dist-riscv64-linux
 364             <<: *job-linux-xl
 365
 366           - name: dist-s390x-linux
 367             <<: *job-linux-xl
 368
 369           - name: dist-various-1
 370             <<: *job-linux-xl
 371
 372           - name: dist-various-2
 373             <<: *job-linux-xl
 374
 375           - name: dist-x86_64-freebsd
 376             <<: *job-linux-xl
 377
 378           - name: dist-x86_64-illumos
 379             <<: *job-linux-xl
 380
 381           - name: dist-x86_64-linux
 382             <<: *job-linux-xl
 383
 384           - name: dist-x86_64-linux-alt
 385             env:
 386               IMAGE: dist-x86_64-linux
 387             <<: *job-linux-xl
 388
 389           - name: dist-x86_64-musl
 390             <<: *job-linux-xl
 391
 392           - name: dist-x86_64-netbsd
 393             <<: *job-linux-xl
 394
 395           - name: i686-gnu
 396             <<: *job-linux-xl
 397
 398           - name: i686-gnu-nopt
 399             <<: *job-linux-xl
 400
 401           - name: mingw-check
 402             <<: *job-linux-xl
 403
 404           - name: test-various
 405             <<: *job-linux-xl
 406
 407           - name: wasm32
 408             <<: *job-linux-xl
 409
 410           - name: x86_64-gnu
 411             <<: *job-linux-xl
 412
 413           - name: x86_64-gnu-aux
 414             <<: *job-linux-xl
 415
 416           - name: x86_64-gnu-debug
 417             <<: *job-linux-xl
 418
 419           - name: x86_64-gnu-distcheck
 420             <<: *job-linux-xl
 421
 422           - name: x86_64-gnu-full-bootstrap
 423             <<: *job-linux-xl
 424
 425           - name: x86_64-gnu-llvm-8
 426             env:
 427               RUST_BACKTRACE: 1
 428             <<: *job-linux-xl
 429
 430           - name: x86_64-gnu-nopt
 431             <<: *job-linux-xl
 432
 433           - name: x86_64-gnu-tools
 434             env:
 435               DEPLOY_TOOLSTATES_JSON: toolstates-linux.json
 436             <<: *job-linux-xl
 437
 438           ######################
 439           #  Windows Builders  #
 440           ######################
 441
 442           - name: x86_64-msvc-1
 443             env:
 444               RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-msvc --enable-profiler
 445               SCRIPT: make ci-subset-1
 446               # FIXME(#59637)
 447               NO_DEBUG_ASSERTIONS: 1
 448               NO_LLVM_ASSERTIONS: 1
 449             <<: *job-windows-xl
 450
 451           - name: x86_64-msvc-2
 452             env:
 453               RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-msvc --enable-profiler
 454               SCRIPT: make ci-subset-2
 455             <<: *job-windows-xl
 456
 457           - name: i686-msvc-1
 458             env:
 459               RUST_CONFIGURE_ARGS: --build=i686-pc-windows-msvc
 460               SCRIPT: make ci-subset-1
 461               # FIXME(#59637)
 462               NO_DEBUG_ASSERTIONS: 1
 463               NO_LLVM_ASSERTIONS: 1
 464             <<: *job-windows-xl
 465
 466           - name: i686-msvc-2
 467             env:
 468               RUST_CONFIGURE_ARGS: --build=i686-pc-windows-msvc
 469               SCRIPT: make ci-subset-2
 470               # FIXME(#59637)
 471               NO_DEBUG_ASSERTIONS: 1
 472               NO_LLVM_ASSERTIONS: 1
 473             <<: *job-windows-xl
 474
 475           - name: x86_64-msvc-cargo
 476             env:
 477               SCRIPT: python x.py --stage 2 test src/tools/cargotest src/tools/cargo
 478               RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-msvc --enable-lld
 479               VCVARS_BAT: vcvars64.bat
 480               # FIXME(#59637)
 481               NO_DEBUG_ASSERTIONS: 1
 482               NO_LLVM_ASSERTIONS: 1
 483             <<: *job-windows-xl
 484
 485           - name: x86_64-msvc-tools
 486             env:
 487               SCRIPT: src/ci/docker/host-x86_64/x86_64-gnu-tools/checktools.sh x.py /tmp/toolstate/toolstates.json windows
 488               RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-msvc --save-toolstates=/tmp/toolstate/toolstates.json
 489             <<: *job-windows-xl
 490
 491           # 32/64-bit MinGW builds.
 492           #
 493           # We are using MinGW with POSIX threads since LLVM requires
 494           # C++'s std::thread which is disabled in libstdc++ with win32 threads.
 495           # FIXME: Libc++ doesn't have this limitation so we can avoid
 496           # winpthreads if we switch to it.
 497           #
 498           # Instead of relying on the MinGW version installed on CI we download
 499           # and install one ourselves so we won't be surprised by changes to CI's
 500           # build image.
 501           #
 502           # Finally, note that the downloads below are all in the `rust-lang-ci` S3
 503           # bucket, but they clearly didn't originate there! The downloads originally
 504           # came from the mingw-w64 SourceForge download site. Unfortunately
 505           # SourceForge is notoriously flaky, so we mirror it on our own infrastructure.
 506
 507           - name: i686-mingw-1
 508             env:
 509               RUST_CONFIGURE_ARGS: --build=i686-pc-windows-gnu
 510               SCRIPT: make ci-mingw-subset-1
 511               CUSTOM_MINGW: 1
 512               # FIXME(#59637)
 513               NO_DEBUG_ASSERTIONS: 1
 514               NO_LLVM_ASSERTIONS: 1
 515             <<: *job-windows-xl
 516
 517           - name: i686-mingw-2
 518             env:
 519               RUST_CONFIGURE_ARGS: --build=i686-pc-windows-gnu
 520               SCRIPT: make ci-mingw-subset-2
 521               CUSTOM_MINGW: 1
 522             <<: *job-windows-xl
 523
 524           - name: x86_64-mingw-1
 525             env:
 526               SCRIPT: make ci-mingw-subset-1
 527               RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-gnu
 528               CUSTOM_MINGW: 1
 529               # FIXME(#59637)
 530               NO_DEBUG_ASSERTIONS: 1
 531               NO_LLVM_ASSERTIONS: 1
 532             <<: *job-windows-xl
 533
 534           - name: x86_64-mingw-2
 535             env:
 536               SCRIPT: make ci-mingw-subset-2
 537               RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-gnu
 538               CUSTOM_MINGW: 1
 539             <<: *job-windows-xl
 540
 541           - name: dist-x86_64-msvc
 542             env:
 543               RUST_CONFIGURE_ARGS: >-
 544                 --build=x86_64-pc-windows-msvc
 545                 --target=x86_64-pc-windows-msvc,aarch64-pc-windows-msvc
 546                 --enable-full-tools
 547                 --enable-profiler
 548               SCRIPT: python x.py dist
 549               DIST_REQUIRE_ALL_TOOLS: 1
 550             <<: *job-windows-xl
 551
 552           - name: dist-i686-msvc
 553             env:
 554               RUST_CONFIGURE_ARGS: >-
 555                 --build=i686-pc-windows-msvc
 556                 --target=i586-pc-windows-msvc
 557                 --enable-full-tools
 558                 --enable-profiler
 559               SCRIPT: python x.py dist
 560               DIST_REQUIRE_ALL_TOOLS: 1
 561             <<: *job-windows-xl
 562
 563           - name: dist-i686-mingw
 564             env:
 565               RUST_CONFIGURE_ARGS: --build=i686-pc-windows-gnu --enable-full-tools --enable-profiler
 566               SCRIPT: python x.py dist
 567               CUSTOM_MINGW: 1
 568               DIST_REQUIRE_ALL_TOOLS: 1
 569             <<: *job-windows-xl
 570
 571           - name: dist-x86_64-mingw
 572             env:
 573               SCRIPT: python x.py dist
 574               RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-gnu --enable-full-tools --enable-profiler
 575               CUSTOM_MINGW: 1
 576               DIST_REQUIRE_ALL_TOOLS: 1
 577             <<: *job-windows-xl
 578
 579           - name: dist-x86_64-msvc-alt
 580             env:
 581               RUST_CONFIGURE_ARGS: --build=x86_64-pc-windows-msvc --enable-extended --enable-profiler
 582               SCRIPT: python x.py dist
 583             <<: *job-windows-xl
 584
 585   auto-fallible:
 586     <<: *base-ci-job
 587     name: auto-fallible
 588     env:
 589       <<: [*shared-ci-variables, *dummy-variables]
 590     if: github.event_name == 'push' && github.ref == 'refs/heads/auto' && github.repository == 'rust-lang-ci/rust'
 591     strategy:
 592       fail-fast: false
 593       matrix:
 594         include:
 595           #############################
 596           #   Linux/Docker builders   #
 597           #############################
 598
 599           - name: aarch64-gnu
 600             <<: *job-aarch64-linux
 601
 602           ####################
 603           #  macOS Builders  #
 604           ####################
 605
 606           - name: dist-x86_64-apple
 607             env:
 608               SCRIPT: ./x.py dist
 609               RUST_CONFIGURE_ARGS: --target=aarch64-apple-ios,x86_64-apple-ios --enable-full-tools --enable-sanitizers --enable-profiler --set rust.jemalloc
 610               RUSTC_RETRY_LINKER_ON_SEGFAULT: 1
 611               MACOSX_DEPLOYMENT_TARGET: 10.7
 612               NO_LLVM_ASSERTIONS: 1
 613               NO_DEBUG_ASSERTIONS: 1
 614               DIST_REQUIRE_ALL_TOOLS: 1
 615             <<: *job-macos-xl
 616
 617           - name: dist-x86_64-apple-alt
 618             env:
 619               SCRIPT: ./x.py dist
 620               RUST_CONFIGURE_ARGS: --enable-extended --enable-profiler --set rust.jemalloc
 621               RUSTC_RETRY_LINKER_ON_SEGFAULT: 1
 622               MACOSX_DEPLOYMENT_TARGET: 10.7
 623               NO_LLVM_ASSERTIONS: 1
 624               NO_DEBUG_ASSERTIONS: 1
 625             <<: *job-macos-xl
 626
 627           - name: x86_64-apple
 628             env:
 629               SCRIPT: ./x.py --stage 2 test
 630               RUST_CONFIGURE_ARGS: --build=x86_64-apple-darwin --enable-sanitizers --enable-profiler --set rust.jemalloc
 631               RUSTC_RETRY_LINKER_ON_SEGFAULT: 1
 632               MACOSX_DEPLOYMENT_TARGET: 10.8
 633               MACOSX_STD_DEPLOYMENT_TARGET: 10.7
 634               NO_LLVM_ASSERTIONS: 1
 635               NO_DEBUG_ASSERTIONS: 1
 636             <<: *job-macos-xl
 637
 638   master:
 639     name: master
 640     runs-on: ubuntu-latest
 641     env:
 642       <<: [*prod-variables]
 643     if: github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'rust-lang-ci/rust'
 644     steps:
 645       - name: checkout the source code
 646         uses: actions/checkout@v1
 647         with:
 648           fetch-depth: 2
 649
 650       - name: publish toolstate
 651         run: src/ci/publish_toolstate.sh
 652         shell: bash
 653         env:
 654           TOOLSTATE_REPO_ACCESS_TOKEN: ${{ secrets.TOOLSTATE_REPO_ACCESS_TOKEN }}
 655         <<: *step
 656
 657   # These jobs don't actually test anything, but they're used to tell bors the
 658   # build completed, as there is no practical way to detect when a workflow is
 659   # successful listening to webhooks only.
 660   try-success:
 661     needs: [try]
 662     if: "success() && github.event_name == 'push' && (github.ref == 'refs/heads/try' || github.ref == 'refs/heads/try-perf') && github.repository == 'rust-lang-ci/rust'"
 663     <<: *base-success-job
 664   try-failure:
 665     needs: [try]
 666     if: "!success() && github.event_name == 'push' && (github.ref == 'refs/heads/try' || github.ref == 'refs/heads/try-perf') && github.repository == 'rust-lang-ci/rust'"
 667     <<: *base-failure-job
 668   auto-success:
 669     needs: [auto]
 670     if: "success() && github.event_name == 'push' && github.ref == 'refs/heads/auto' && github.repository == 'rust-lang-ci/rust'"
 671     <<: *base-success-job
 672   auto-failure:
 673     needs: [auto]
 674     if: "!success() && github.event_name == 'push' && github.ref == 'refs/heads/auto' && github.repository == 'rust-lang-ci/rust'"
 675     <<: *base-failure-job