1 files changed, 47 insertions, 0 deletions
diff --git a/share/spack/gitlab/cloud_pipelines/configs/ci.yaml b/share/spack/gitlab/cloud_pipelines/configs/ci.yaml
new file mode 100644
index 0000000000..61de203360
--- /dev/null
+++ b/share/spack/gitlab/cloud_pipelines/configs/ci.yaml
@@ -0,0 +1,47 @@
+ci:
+  target: gitlab
+
+  broken-tests-packages:
+    - gptune
+
+  broken-specs-url: "https://dummy.io" # s3://spack-binaries/broken-specs"
+
+  pipeline-gen:
+  - build-job:
+      script::
+      - - spack compiler find
+        - cd ${SPACK_CONCRETE_ENV_DIR}
+        - spack env activate --without-view .
+        - spack config add "config:install_tree:projections:${SPACK_JOB_SPEC_PKG_NAME}:'morepadding/{architecture}/{compiler.name}-{compiler.version}/{name}-{version}-{hash}'"
+        - mkdir -p ${SPACK_ARTIFACTS_ROOT}/user_data
+        # AWS runners mount E4S public key (verification), UO runners mount public/private (signing/verification)
+        - if [[ -r /mnt/key/e4s.gpg ]]; then spack gpg trust /mnt/key/e4s.gpg; fi
+        # UO runners mount intermediate ci public key (verification), AWS runners mount public/private (signing/verification)
+        - if [[ -r /mnt/key/intermediate_ci_signing_key.gpg ]]; then spack gpg trust /mnt/key/intermediate_ci_signing_key.gpg; fi
+        - if [[ -r /mnt/key/spack_public_key.gpg ]]; then spack gpg trust /mnt/key/spack_public_key.gpg; fi
+        - spack --color=always --backtrace ci rebuild --tests > >(tee ${SPACK_ARTIFACTS_ROOT}/user_data/pipeline_out.txt) 2> >(tee ${SPACK_ARTIFACTS_ROOT}/user_data/pipeline_err.txt >&2)
+      after_script:
+      - - cat /proc/loadavg || true
+      variables:
+        CI_JOB_SIZE: "default"
+        SPACK_VERBOSE_SCRIPT: "1"
+
+  - signing-job:
+      image: { "name": "ghcr.io/spack/notary:latest", "entrypoint": [""] }
+      tags: ["aws"]
+      script:
+      - - aws s3 sync --exclude "*" --include "*spec.json*" ${SPACK_REMOTE_MIRROR_OVERRIDE}/build_cache /tmp
+        - /sign.sh
+        - aws s3 sync --exclude "*" --include "*spec.json.sig*" /tmp ${SPACK_REMOTE_MIRROR_OVERRIDE}/build_cache
+        - aws s3 cp /tmp/public_keys ${SPACK_REMOTE_MIRROR_OVERRIDE}/build_cache/_pgp --recursive --exclude "*"" --include "*.pub"
+
+  - any-job:
+      image: "ghcr.io/spack/e4s-ubuntu-18.04:v2021-10-18"
+      tags: ["spack"]
+      before_script:
+      - - uname -a || true
+        - grep -E "vendor|model name" /proc/cpuinfo 2>/dev/null | sort -u || head -n10 /proc/cpuinfo 2>/dev/null || true
+        - nproc
+      - - . "./share/spack/setup-env.sh"
+        - spack --version
+        - spack arch