Skip to content

Validate repaired t-encrypt wheel in workflows #305

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
PropzSaladaz merged 4 commits into from
Jul 17, 2026
Merged

Validate repaired t-encrypt wheel in workflows #305

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
c57b463
Validate repaired t-encrypt wheel in CI
oleksandrSydorenkoJ Jul 16, 2026
ebe489b
Merge branch 'develop' into 302-openssl-3-for-python-builds
oleksandrSydorenkoJ Jul 16, 2026
c7e5484
fix warnings
oleksandrSydorenkoJ Jul 16, 2026
a8f1ee7
Merge branch '302-openssl-3-for-python-builds' of github.com:skalenet…
oleksandrSydorenkoJ Jul 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 10 additions & 7 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ jobs:
run: |
sudo apt-get update
sudo apt-get install -y gawk sed shtool \
libffi-dev yasm texinfo libgnutls28-dev gcc-multilib jq
libffi-dev yasm texinfo libgnutls28-dev gcc-multilib jq patchelf
- name: Build dependencies
run: |
export CC=gcc-11
Expand Down Expand Up @@ -159,24 +159,27 @@ jobs:
CURRENT_VERSION="$(python setup_t_encrypt.py --version)"
sed -i "s/${CURRENT_VERSION}/${PACKAGE_VERSION}/g" setup_t_encrypt.py
python setup_t_encrypt.py sdist bdist_wheel
wheel="$(ls -t dist/*.whl | head -n1)"
[[ "${wheel}" != *-py3-none-any.whl ]] || \
{ echo "Wheel bundling libencrypt.so must be platform-tagged: ${wheel}" >&2; exit 1; }
auditwheel show "${wheel}"
raw_wheel="$(ls -t dist/*.whl | head -n1)"
[[ "${raw_wheel}" != *-py3-none-any.whl ]] || \
{ echo "Wheel bundling libencrypt.so must be platform-tagged: ${raw_wheel}" >&2; exit 1; }
auditwheel show "${raw_wheel}"
auditwheel repair "${raw_wheel}" -w wheelhouse
wheel="$(ls -t wheelhouse/*.whl | head -n1)"
[[ "${wheel}" == *manylinux*.whl ]] || { echo "Repaired wheel must be manylinux-tagged: ${wheel}" >&2; exit 1; }
python -m zipfile -e "${wheel}" wheel-check
shared_library="wheel-check/t_encrypt/libencrypt.so"
[[ -f "${shared_library}" ]] || { echo "libencrypt.so was not found in ${wheel}" >&2; exit 1; }
! readelf -d "${shared_library}" | grep -Eq 'lib(ssl|crypto)\.so\.1\.1' || \
{ echo "${shared_library} depends on OpenSSL 1.1" >&2; exit 1; }
python -m twine check dist/*
python -m twine check dist/*.tar.gz wheelhouse/*.whl

- name: Publish t-encrypt to PyPI
working-directory: python
env:
TWINE_USERNAME: ${{ secrets.PIP_USERNAME }}
TWINE_PASSWORD: ${{ secrets.PIP_PASSWORD }}
run: |
python -m twine upload dist/*
python -m twine upload dist/*.tar.gz wheelhouse/*.whl

- name: Publish on npm
if: github.ref != 'refs/heads/stable'
Expand Down
16 changes: 10 additions & 6 deletions .github/workflows/test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -214,8 +214,8 @@ jobs:
run: |
sudo apt-get update
sudo apt-get install -y gcc-11 g++-11 cmake gawk sed shtool \
libffi-dev yasm texinfo libgnutls28-dev gcc-multilib git
python -m pip install --upgrade pip setuptools wheel auditwheel
libffi-dev yasm texinfo libgnutls28-dev gcc-multilib git patchelf
python -m pip install --upgrade pip setuptools wheel auditwheel twine
cd deps
./build.sh
cd ..
Expand All @@ -226,18 +226,22 @@ jobs:
cd ../python
export T_ENCRYPT_LIB_PATH="${GITHUB_WORKSPACE}/build/threshold_encryption/libt_encrypt_python.so"
python setup_t_encrypt.py bdist_wheel
wheel="$(ls -t dist/*.whl | head -n1)"
[[ "${wheel}" != *-py3-none-any.whl ]] || { echo "Wheel must be platform-tagged: ${wheel}" >&2; exit 1; }
auditwheel show "${wheel}"
raw_wheel="$(ls -t dist/*.whl | head -n1)"
[[ "${raw_wheel}" != *-py3-none-any.whl ]] || { echo "Wheel must be platform-tagged: ${raw_wheel}" >&2; exit 1; }
auditwheel show "${raw_wheel}"
auditwheel repair "${raw_wheel}" -w wheelhouse
wheel="$(ls -t wheelhouse/*.whl | head -n1)"
[[ "${wheel}" == *manylinux*.whl ]] || { echo "Repaired wheel must be manylinux-tagged: ${wheel}" >&2; exit 1; }
python -m zipfile -e "${wheel}" wheel-check
shared_library="wheel-check/t_encrypt/libencrypt.so"
[[ -f "${shared_library}" ]]
! readelf -d "${shared_library}" | grep -Eq 'lib(ssl|crypto)\.so\.1\.1'
python -m twine check "${wheel}"
- name: Upload t-encrypt wheel
uses: actions/upload-artifact@v4
with:
name: t-encrypt-wheel
path: python/dist/*.whl
path: python/wheelhouse/*.whl
validate_t_encrypt_wheel:
needs: build_t_encrypt_wheel
runs-on: ${{ matrix.os }}
Expand Down
Loading