debian/salsa-ci.yml: enable salsa-ci

according to the manual at
https://salsa.debian.org/salsa-ci-team/pipeline/-/blob/master/README.md

If the pipeline is not yet enabled and configured in the gitlab web
interface by default, this needs to be done manually as written in the
manual.

As of now the salsa-ci only supports gbp, so convert the debrebase
repository to a gbp one.
Also work around a problem with gbp export-orig replacing variables in
.gitarchive-info which then causes problems as the repository and the
generated .tar.gz don't match.

Allow reprotest to fail for now as the build is currently not
reproducible.

Disable blhc as xen currently does not enable hardening when building
the hypervisor so blhc outputs many errors.

Signed-off-by: Maximilian Engelhardt <maxi@daemonizer.de>
Acked-by: Hans van Kranenburg <hans@knorrie.org>

diff --git a/debian/salsa-ci.yml b/debian/salsa-ci.yml
new file mode 100644 (file)
index 0000000..a11d7eb
--- /dev/null
+++ b/debian/salsa-ci.yml
@@ -0,0 +1,28 @@
+---
+include:
+  - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/recipes/debian.yml
+
+extract-source:
+  before_script:
+    # convert into a gbp patches-unapplied branch using git-debrebase
+    - apt-get update
+    - apt-get --yes install git-debrebase
+    # git-debrebase needs git user setup
+    - git config user.email "salsa-ci@invalid.invalid"
+    - git config user.name "salsa-ci"
+    - git debrebase --force
+    - git debrebase convert-to-gbp
+    # work around gbp export-orig replacing variables in .gitarchive-info
+    - test -d .git/info || mkdir .git/info
+    - echo ".gitarchive-info -export-subst" >> .git/info/attributes
+
+reprotest:
+  allow_failure: true
+
+variables:
+  # disable shallow cloning of git repository. This is needed for git-debrebase
+  GIT_DEPTH: 0
+
+  # xen currently does not enable hardening when building the hypervisor so
+  # disable blhc.
+  SALSA_CI_DISABLE_BLHC: 1