buildPipeline.yml

# This is a basic workflow to help you get started with Actions

name: Build and test

# Controls when the workflow will run
on:
  # Triggers the workflow on pull request events but only for the "master" branch
  pull_request:
    branches: [ "master" ]
    
permissions:
  id-token: write
  contents: read

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:

  # This job tests running on hardware with a custom path to libdcap_quoteprov.so
  ACCTest:          
    strategy:
      # Launch a VM and build once per each combination of linux image, VM size and buildType
      max-parallel: 1
      matrix:
        sizeName: [IceLake, CoffeeLake]
        imageName: ["Ubuntu20_04"]
        buildType: [RelWithDebInfo, Debug]
        include:
          - imageUrn: "Canonical:0001-com-ubuntu-server-focal:20_04-lts-gen2:latest"
            imageName: Ubuntu20_04
          - sizeName: CoffeeLake
            size: Standard_DC4s_v2
            location: uksouth
          - sizeName: IceLake
            size: Standard_DC4s_v3
            location: westus
          
    # OS of the Github VM calling Azure CLI
    runs-on: ubuntu-latest
    
    # Job environment variables
    env:
      os: linux
      vmName: dcapACCTestBuildVM${{ github.run_number }}${{ matrix.sizeName }}${{ matrix.imageName }}${{ matrix.buildType }}
      rgName: dcap-github-actions-agents-rg
      location: ${{ matrix.location }}
      branchName: ${{ github.head_ref }}
      
    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v4
          
      - uses: azure/login@v2
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
      
      - name: Create VM
        uses: azure/CLI@v1
        with:
          inlineScript: |
            az vm create \
              --resource-group $rgName \
              --name $vmName \
              --image ${{ matrix.imageUrn }} \
              --size ${{ matrix.size }} \
              --location ${{ matrix.location }} \
              --admin-username ${{ secrets.BUILD_VM_USERNAME }} \
              --admin-password ${{ secrets.BUILD_VM_PASSWORD }} \
              --nic-delete-option delete \
              --os-disk-delete-option delete \
              --public-ip-sku Standard
      
      - name: Sleep to let the VM start
        run: sleep 60
      
      - name: Install software properties common
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installSoftwarePropertiesCommon"
            script: "sudo apt-get install software-properties-common -y"
              
      - name: Add ppa repository
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "addPpaRepository"
            script: "sudo add-apt-repository ppa:team-xbmc/ppa -y"
              
      - name: Update apt-get
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "updateAptGet"
            script: "sudo apt-get update -y"
              
      - name: Install libSSL
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installLibSSL"
            script: "sudo apt-get install libssl-dev -y"
              
      - name: Install openSSL
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installOpenSSL"
            script: "sudo apt-get install libcurl4-openssl-dev -y"
              
      - name: Install PkgConfig
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installPkgConfig"
            script: "sudo apt-get install pkg-config -y"
              
      - name: Install buildEssential
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installBuildEssential"
            script: "sudo apt-get install build-essential -y"
              
      - name: Install nlohmann json
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installNlohmannJson"
            script: "sudo apt-get install nlohmann-json3-dev -y"
              
      - name: Install sqlite3
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installSqlite3"
            script: "sudo apt-get install sqlite3 -y"
              
      - name: Install sqlite3 dev
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installSqlite3Dev"
            script: "sudo apt-get install libsqlite3-dev -y"
              
      - name: Install CMake
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installCMake"
            script: "sudo apt-get install cmake -y"
              
      - name: Clone Azure DCAP 
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "cloneAzureDcap"
            script: "sudo git clone -b $branchName https://github.com/microsoft/Azure-DCAP-Client.git /AzureDCAP"
              
      - name: Update DCAP submodule
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "updateSubmodule"
            script: "cd /AzureDCAP && sudo git submodule update --init --recursive"
              
      - name: Configure Azure DCAP
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "configureAzureDcap"
            script: "cd /AzureDCAP/src/Linux && sudo ./configure"
              
      - name: Make Azure DCAP
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "makeAzureDcap"
            script: "cd /AzureDCAP/src/Linux && sudo make"
                            
      - name: Clone openenclave 
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "cloneOpenEnclave"
            script: "sudo git clone --recursive https://github.com/openenclave/openenclave.git /openenclave"
                            
      - name: Update openenclave submodule
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "updateOpenEnclaveSubmodule"
            script: "mkdir /openenclave/build && cd /openenclave/build && sudo git submodule update --recursive --init"
                            
      - name: Install Ansible
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installAnsible"
            script: "cd /openenclave && sudo scripts/ansible/install-ansible.sh"
                            
      - name: Setup ACC 
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "setupACC"
            script: "cd /openenclave && sudo ansible-playbook scripts/ansible/oe-contributors-acc-setup.yml"
                            
      - name: CMake openenclave with ninja
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "cmakeOpenEnclave"
            script: "cd /openenclave/build && sudo cmake /openenclave -G Ninja -DCMAKE_BUILD_TYPE=${{ matrix.buildType }}"
                            
      - name: Make openenclave with ninja
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "makeOpenEnclave"
            script: "cd /openenclave/build && sudo ninja -v"
                            
      - name: Run openenclave tests excluding samples test
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "testOpenEnclave"
            script: "export AZDCAP_REGION_URL=\"thimt2-dev-cbn01p\" && export AZDCAP_BASE_CERT_URL_TDX=\".thim.azure-test.net/sgx/certification\" && cd /openenclave/build && LD_LIBRARY_PATH=/AzureDCAP/src/Linux ctest --output-on-failure -E samples"
                            
      - name: Run openenclave samples test
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "testOpenEnclaveSamples"
            script: "cd /openenclave/build && sudo LD_LIBRARY_PATH=/AzureDCAP/src/Linux ctest --output-on-failure -R samples"

      - name: If the build fails, keep the VM alive for 4 hours for debugging purposes
        if: failure()
        run: sleep 4h

      - name: Cleanup
        if: always()
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az vm delete \
              -g $rgName \
              -n $vmName \
              --yes
            az resource delete \
              -g $rgName \
              -n ${{ env.vmName }}NSG \
              --resource-type "Microsoft.Network/networkSecurityGroups"
            az resource delete \
              -g $rgName \
              -n ${{ env.vmName }}PublicIP \
              --resource-type "Microsoft.Network/publicIPAddresses"
              
              

  # Test DCAP build process in Windows
  DCAPWindowsBuildTest:          
    strategy:
      # Launch a VM and build once per each buildType
      # Since we only have one persistent VM to perform the windows jobs, max-parallel should always be one. 
      max-parallel: 1
      matrix:
        buildType: [Release, Debug]
            
    # OS of the Github VM calling Azure CLI
    runs-on: ubuntu-latest
    
    # Job environment variables
    env:
      os: windows
      #Windows VM name must be within 15 characters
      vmName: winBuildPers
      rgName: dcap-github-actions-agents-rg
      location: northeurope
      branchName: ${{ github.head_ref }}

      
    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v4
      
      - uses: azure/login@v2
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
            
      - name: Start VM
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az vm start \
              --resource-group $rgName \
              --name $vmName 
              
      - name: Sleep to let the VM start
        run: sleep 60
      
      - name: Clone the DCAP repo after cleaning up the previous execution
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az vm run-command create \
              --resource-group $rgName \
              --vm-name $vmName \
              --location $location \
              --name "cloneDcap" \
              --script "C:/dcapBuild/DCAPCloneMain.ps1 -repo https://github.com/microsoft/Azure-DCAP-Client.git -branch $branchName"
              
      - name: Get the result of cloning the repository
        shell: bash
        run: |
            result=$(az vm run-command show --resource-group $rgName --vm-name $vmName --name "cloneDcap" --instance-view)
            echo -e "$result"
            if [[ "$result" == *"DCAP_Build_Step_Successfully_Completed"* ]]; then echo "Step successfully executed"; else exit 1; fi
             
      - name: Build Azure DCAP
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az vm run-command create \
              --resource-group $rgName \
              --vm-name $vmName \
              --location $location \
              --name "buildDcap" \
              --script "C:/dcapBuild/DCAPBuildMain.ps1 -BuildType ${{ matrix.buildType }}"
              
      - name: Get the result of building dcap
        shell: bash
        run: |
            result=$(az vm run-command show --resource-group $rgName --vm-name $vmName --name "buildDcap" --instance-view)
            echo -e "$result"
            if [[ "$result" == *"DCAP_Build_Step_Successfully_Completed"* ]]; then echo "Step successfully executed"; else exit 1; fi
      
      - name: Run Azure DCAP unit tests
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az vm run-command create \
              --resource-group $rgName \
              --vm-name $vmName \
              --location $location \
              --name "unitTestDcap" \
              --script "C:/dcapBuild/DCAPUnitTestsMain.ps1 -BuildType ${{ matrix.buildType }}"
              
      - name: Get the result of the unit tests
        shell: bash
        run: |
            result=$(az vm run-command show --resource-group $rgName --vm-name $vmName --name "unitTestDcap" --instance-view)
            echo -e "$result"
            if [[ "$result" == *"DCAP_Build_Step_Successfully_Completed"* ]]; then echo "Step successfully executed"; else exit 1; fi

      - name: Stop VM
        if: always()
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az vm deallocate \
              --resource-group $rgName \
              --name $vmName


  # This job runs DCAP end to end tests 
  DCAPE2ETest:
    strategy:
      # Launch a VM and build once per each combination of linux image, VM size and buildType
      max-parallel: 1
      matrix:
        sizeName: [CoffeeLake]
        imageName: ["Ubuntu20_04"]
        include:
          - imageUrn: "Canonical:0001-com-ubuntu-server-focal:20_04-lts-gen2:latest"
            imageName: Ubuntu20_04
          - sizeName: CoffeeLake
            size: Standard_DC4s_v2
            location: westus
            
    # OS of the Github VM calling Azure CLI
    runs-on: ubuntu-latest
    
    # Job environment variables
    env:
      os: linux
      vmName: dcapE2ETestBuildVM${{ github.run_number }}${{ matrix.sizeName }}${{ matrix.imageName }}
      rgName: dcap-github-actions-agents-rg
      branchName: ${{ github.head_ref }}

      
    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v4
          
      - uses: azure/login@v2
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
            
      - name: Create VM
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az vm create \
              --resource-group $rgName \
              --name $vmName \
              --image ${{ matrix.imageUrn }} \
              --size ${{ matrix.size }} \
              --location ${{ matrix.location }} \
              --admin-username ${{ secrets.BUILD_VM_USERNAME }} \
              --admin-password ${{ secrets.BUILD_VM_PASSWORD }} \
              --nic-delete-option delete \
              --os-disk-delete-option delete \
              --public-ip-sku Standard
              
      - name: Sleep to let the VM start
        run: sleep 60
              
      - name: Update apt-get
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "updateAptGet"
            script: "sudo apt-get update -y"
              
      - name: Install libSSL
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installLibSSL"
            script: "sudo apt-get install libssl-dev -y"
              
      - name: Install openSSL
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installOpenSSL"
            script: "sudo apt install libcurl4-openssl-dev -y"
              
      - name: Install PkgConfig
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installPkgConfig"
            script: "sudo apt-get install pkg-config -y"
              
      - name: Install buildEssential
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installBuildEssential"
            script: "sudo apt install build-essential -y"
              
      - name: Install nlohmann json
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installNlohmannJson"
            script: "sudo apt-get install nlohmann-json3-dev -y"
              
      - name: Install sqlite3
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installSqlite3"
            script: "sudo apt-get install sqlite3 -y"
              
      - name: Install sqlite3 dev
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installSqlite3Dev"
            script: "sudo apt-get install libsqlite3-dev -y"
              
      - name: Install libgtest
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installLibgtest"
            script: "sudo apt-get install libgtest-dev -y"
              
      - name: Install CMake
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installCMake"
            script: "sudo apt-get install cmake -y"
              
      - name: Install Google test
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installGoogleTest"
            script: "cd /usr/src/gtest && sudo cmake CMakeLists.txt && sudo make && cd lib && sudo cp *.a /usr/lib"
              
      - name: Clone Azure DCAP 
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "cloneAzureDcap"
            script: "git clone -b $branchName https://github.com/microsoft/Azure-DCAP-Client.git /AzureDCAP"
              
      - name: Update submodule
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "updateSubmodule"
            script: "cd /AzureDCAP && git submodule update --init --recursive"
              
      - name: Configure Azure DCAP
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "configureAzureDcap"
            script: "cd /AzureDCAP/src/Linux && ./configure"
              
      - name: Make Azure DCAP
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "makeAzureDcap"
            script: "cd /AzureDCAP/src/Linux && make"
              
      - name: Make Install Azure DCAP
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "makeInstallAzureDcap"
            script: "cd /AzureDCAP/src/Linux && sudo make install"
              
      - name: CMake DCAP tests
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "cmakeDcapTests"
            script: "cd /AzureDCAP/src/Linux && cmake CMakeLists.txt"
              
      - name: Make DCAP tests
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "makeDcapTests"
            script: "cd /AzureDCAP/src/ && sudo cp sgx_ql_lib_common.h /usr/include/ && cd /AzureDCAP/src/Linux/ext/intel/ && sudo cp * /usr/include/ && cd ../.. && make"
              
      - name: Run DCAP tests
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "runDcapTests"
            script: "cd /AzureDCAP/src/Linux && sudo /sbin/ldconfig -v && ./dcap_provider_utests"

      - name: If the build fails, keep the VM alive for 4 hours for debugging purposes
        if: failure()
        run: sleep 4h

      - name: Cleanup
        if: always()
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az vm delete \
              -g $rgName \
              -n $vmName \
              --yes
            az resource delete \
              -g $rgName \
              -n ${{ env.vmName }}NSG \
              --resource-type "Microsoft.Network/networkSecurityGroups"
            az resource delete \
              -g $rgName \
              -n ${{ env.vmName }}PublicIP \
              --resource-type "Microsoft.Network/publicIPAddresses"
              

  # This job runs DCAP end to end tests 
  # Mariner is based on Fedora and requires different commands from Ubuntu 
  MarinerBuild:    
    strategy:
      # Launch a VM and build once per each combination of linux image, VM size and buildType
      max-parallel: 1
      matrix:
        sizeName: [CoffeeLake]
        imageName: ["Mariner"]
        buildType: [RelWithDebInfo, Debug]
        include:
          - imageUrn: "MicrosoftCBLMariner:cbl-mariner:cbl-mariner-2-gen2:latest"
            imageName: Mariner
          - sizeName: CoffeeLake
            size: Standard_DC4s_v2
            location: uksouth
          
    # OS of the Github VM calling Azure CLI
    runs-on: ubuntu-latest
    
    # Job environment variables
    env:
      os: linux
      vmName: dcapACCTestBuildVM${{ github.run_number }}${{ matrix.imageName }}${{ matrix.buildType }}
      rgName: dcap-github-actions-agents-rg
      branchName: ${{ github.head_ref }}

      
    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v4
          
      - uses: azure/login@v2
        with:
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
      
      - name: Create VM
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az vm create \
              --resource-group $rgName \
              --name $vmName \
              --image ${{ matrix.imageUrn }} \
              --size ${{ matrix.size }} \
              --location ${{ matrix.location }} \
              --admin-username ${{ secrets.BUILD_VM_USERNAME }} \
              --admin-password ${{ secrets.BUILD_VM_PASSWORD }} \
              --nic-delete-option delete \
              --os-disk-delete-option delete \
              --public-ip-sku Standard \
              --os-disk-size-gb 10
      
      - name: Sleep to let the VM start
        run: sleep 60
            
      - name: Update packages through dnf
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "dnfUpgrade"
            script: "sudo dnf upgrade -y"
            
      - name: Install kernel devel, automake, glibc,  glibc-devel and libSSL
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installPrerequisites1"
            script: "sudo dnf install kernel-devel -y && sudo dnf install automake -y && sudo dnf install glibc -y && sudo dnf install glibc-devel -y && sudo dnf install openssl-devel -y"
              
      - name: Install openSSL
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installOpenSSL"
            script: "sudo dnf install libcurl-devel -y"
              
      - name: Install PkgConfig
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installPkgConfig"
            script: "sudo dnf install pkg-config -y"
              
      - name: Install nlohmann json
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installNlohmannJson"
            script: "sudo dnf install nlohmann-json-devel -y"
              
      - name: Install sqlite3
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installSqlite3"
            script: "sudo dnf install sqlite -y"
              
      - name: Install sqlite3 dev
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installSqlite3Dev"
            script: "sudo dnf install sqlite-devel -y"
              
      - name: Install git
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installGit"
            script: "sudo dnf install git -y"

      - name: Install CMake
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installCMake"
            script: "sudo dnf install cmake -y"
            
      - name: Install kernel-headers
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installKernelHeaders"
            script: 'sudo dnf install kernel-headers -y'
            
      - name: Install binutils 
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "installBinutils"
            script: 'sudo dnf install binutils -y'
            
      - name: Clone GoogleTest 
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "cloneGoogleTest"
            script: 'sudo git clone https://github.com/google/googletest.git /GoogleTest'
              
      - name: CMake GoogleTest
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "cmakeGoogleTest"
            script: "cd /GoogleTest && sudo mkdir build && cd build && sudo cmake .."
            
      - name: Make GoogleTest
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "makeGoogleTest"
            script: "cd /GoogleTest/build && sudo make"
            
      - name: Make Install GoogleTest
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "makeInstallGoogleTest"
            script: "cd /GoogleTest/build && sudo make install"
              
      - name: Clone Azure DCAP 
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "cloneAzureDcap"
            script: "sudo git clone -b $branchName https://github.com/microsoft/Azure-DCAP-Client.git /AzureDCAP"
              
      - name: Update DCAP submodule
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "updateSubmodule"
            script: "cd /AzureDCAP && sudo git submodule update --init --recursive"
              
      - name: Configure Azure DCAP
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "configureAzureDcap"
            script: "cd /AzureDCAP/src/Linux && sudo ./configure"
              
      - name: Make Azure DCAP
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "makeAzureDcap"
            script: "cd /AzureDCAP/src/Linux && sudo make"
              
      - name: Make Install Azure DCAP
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "makeInstallAzureDcap"
            script: "cd /AzureDCAP/src/Linux && sudo make install"
              
      - name: CMake DCAP tests
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "cmakeDcapTests"
            script: "cd /AzureDCAP/src/Linux && cmake CMakeLists.txt"
              
      - name: Make DCAP tests
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "makeDcapTests"
            script: "cd /AzureDCAP/src/ && sudo cp sgx_ql_lib_common.h /usr/include/ && cd /AzureDCAP/src/Linux/ext/intel/ && sudo cp * /usr/include/ && cd ../.. && make"
              
      - name: Run DCAP tests
        uses: ./.github/actions/actionAzVmRunCommand
        with:
            commandName: "runDcapTests"
            script: "cd /AzureDCAP/src/Linux && sudo /sbin/ldconfig -v && ./dcap_provider_utests"

      - name: If the build fails, keep the VM alive for 4 hours for debugging purposes
        if: failure()
        run: sleep 4h

      - name: Cleanup
        if: always()
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az vm delete \
              -g $rgName \
              -n $vmName \
              --yes
            az resource delete \
              -g $rgName \
              -n ${{ env.vmName }}NSG \
              --resource-type "Microsoft.Network/networkSecurityGroups"
            az resource delete \
              -g $rgName \
              -n ${{ env.vmName }}PublicIP \
              --resource-type "Microsoft.Network/publicIPAddresses"