msquic/.azure/OneBranch.Official.yml

#################################################################################
#                         OneBranch Pipelines - Official                        #
# This pipeline was created by EasyStart from a sample located at:              #
#   https://aka.ms/obpipelines/easystart/samples                                #
# Documentation:  https://aka.ms/obpipelines                                    #
# Yaml Schema:    https://aka.ms/obpipelines/yaml/schema                        #
# Retail Tasks:   https://aka.ms/obpipelines/tasks                              #
# Support:        https://aka.ms/onebranchsup                                   #
#################################################################################

trigger:
  batch: true
  branches:
    include:
    - main
    - release/*
    - msrc/*
  tags:
    include:
    - v*

parameters: # parameters are shown up in ADO UI in a build queue time
- name: 'debug'
  displayName: 'Enable debug output'
  type: boolean
  default: false

variables:
  CDP_DEFINITION_BUILD_COUNT: $[counter('', 0)] # needed for onebranch.pipeline.version task https://aka.ms/obpipelines/versioning
  system.debug: ${{ parameters.debug }}
  ENABLE_PRS_DELAYSIGN: 1
  DisableDockerDetector: true
  ROOT: $(Build.SourcesDirectory)
  REPOROOT: $(Build.SourcesDirectory)
  OUTPUTROOT: $(REPOROOT)\out
  NUGET_XMLDOC_MODE: none

  WindowsContainerImage: 'cdpxwin1809.azurecr.io/global/vse2019:latest'
  WindowsContainerImage2: 'cdpxwin1809.azurecr.io/user/corenet/msquic:latest' # Docker image which is used to build the project https://aka.ms/obpipelines/containers
  LinuxContainerImage: 'cdpxlinux.azurecr.io/user/corenet/msquic:latest'
  LinuxContainerImage2: 'cdpxlinux.azurecr.io/global/ubuntu-1804:latest'

resources:
  repositories:
    - repository: templates
      type: git
      name: OneBranch.Pipelines/GovernedTemplates
      ref: refs/heads/main

extends:
  template: v2/OneBranch.Official.CrossPlat.yml@templates # https://aka.ms/obpipelines/templates
  parameters:
    cloudvault: # https://aka.ms/obpipelines/cloudvault
      enabled: false
    globalSdl: # https://aka.ms/obpipelines/sdl
      tsa:
        enabled: false # onebranch publish all sdl results to TSA. If TSA is disabled all SDL tools will forced into 'break' build mode.
      # credscan:
      #   suppressionsFile: $(Build.SourcesDirectory)\.config\CredScanSuppressions.json
      binskim:
        break: true # always break the build on binskim issues in addition to TSA upload
      policheck:
        break: true # always break the build on policheck issues. You can disable it by setting to 'false'
      suppression:
        suppressionFile: $(Build.SourcesDirectory)\.azure\openssl.gdnsuppress
    featureFlags:
      linuxEsrpSigningPreview: true

    stages:
    - stage: build_winkernel
      displayName: Build Windows Kernel
      dependsOn: []
      jobs:
      - template: .azure/obtemplates/build-winkernel.yml@self
        parameters:
          config: Release
      - template: .azure/obtemplates/build-winkernel.yml@self
        parameters:
          config: Debug

    - stage: build_windows_xdp
      displayName: Build Windows XDP
      dependsOn: []
      jobs:
      - template: .azure/obtemplates/build-winuser-xdp.yml@self
        parameters:
          config: Release
      - template: .azure/obtemplates/build-winuser-xdp.yml@self
        parameters:
          config: Debug

    - stage: build_windows
      displayName: Build Windows
      dependsOn: []
      jobs:
      - template: .azure/obtemplates/build-winuser.yml@self
        parameters:
          config: Release
          tls: schannel
      - template: .azure/obtemplates/build-winuser.yml@self
        parameters:
          config: Debug
          tls: schannel

      - template: .azure/obtemplates/build-winuser.yml@self
        parameters:
          config: Release
          tls: openssl
      - template: .azure/obtemplates/build-winuser.yml@self
        parameters:
          config: Debug
          tls: openssl

    - stage: build_gamecore_console
      displayName: Build Gamecore
      dependsOn: []
      jobs:
      - template: .azure/obtemplates/build-winuser.yml@self
        parameters:
          config: Release
          tls: schannel
          platform: gamecore_console
      - template: .azure/obtemplates/build-winuser.yml@self
        parameters:
          config: Debug
          tls: schannel
          platform: gamecore_console

    - stage: build_uwp
      displayName: Build Windows UWP
      dependsOn: []
      jobs:
      - template: .azure/obtemplates/build-winuser.yml@self
        parameters:
          config: Release
          tls: schannel
          platform: uwp
      - template: .azure/obtemplates/build-winuser.yml@self
        parameters:
          config: Debug
          tls: schannel
          platform: uwp

      - template: .azure/obtemplates/build-winuser.yml@self
        parameters:
          config: Release
          tls: openssl
          platform: uwp
      - template: .azure/obtemplates/build-winuser.yml@self
        parameters:
          config: Debug
          tls: openssl
          platform: uwp

    - stage: build_linux
      displayName: Build Linux
      dependsOn: []
      jobs:
      - template: .azure/obtemplates/build-linux.yml@self
        parameters:
          config: Release
      - template: .azure/obtemplates/build-linux.yml@self
        parameters:
          config: Debug

    - stage: package_linux
      displayName: Package Linux
      dependsOn:
      - build_linux
      jobs:
      - template: .azure/obtemplates/build-linux-packages.yml@self
        parameters:
          sign: true

    - stage: package_windows
      displayName: Package Windows
      dependsOn:
      - build_windows
      - build_uwp
      - build_windows_xdp
      jobs:
      - template: .azure/obtemplates/build-nuget.yml@self
        ${{ if startsWith(variables['Build.SourceBranch'], 'refs/tags/') }}:
          parameters:
            release: true