acme.sh/.github/workflows/OpenEuler.yml

name: OpenEuler
on:
  push:
    branches:
      - '*'
    paths:
      - '*.sh'
      - '.github/workflows/OpenEuler.yml'

  pull_request:
    branches:
      - dev
    paths:
      - '*.sh'
      - '.github/workflows/OpenEuler.yml'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true



jobs:
  OpenEuler:
    strategy:
      matrix:
        include:
         - TEST_ACME_Server: "LetsEncrypt.org_test"
           CA_ECDSA: ""
           CA: ""
           CA_EMAIL: ""
           TEST_PREFERRED_CHAIN: (STAGING)
    runs-on: ubuntu-latest
    env:
      TEST_LOCAL: 1
      TEST_ACME_Server: ${{ matrix.TEST_ACME_Server }}
      CA_ECDSA: ${{ matrix.CA_ECDSA }}
      CA: ${{ matrix.CA }}
      CA_EMAIL: ${{ matrix.CA_EMAIL }}
      TEST_PREFERRED_CHAIN: ${{ matrix.TEST_PREFERRED_CHAIN }}
    steps:
    - uses: actions/checkout@v7
    - uses: anyvm-org/cf-tunnel@v0
      id: tunnel
      with:
        protocol: http
        port: 8080
    - name: Set envs
      run: echo "TestingDomain=${{steps.tunnel.outputs.server}}" >> $GITHUB_ENV
    - name: Clone acmetest
      run: cd .. && git clone --depth=1 https://github.com/acmesh-official/acmetest.git  && cp -r acme.sh acmetest/
    - uses: vmactions/openeuler-vm@v1
      with:
        debug-on-error: ${{ vars.DEBUG_ON_ERROR }}
        cache-after-prepare: true
        envs: 'TEST_LOCAL TestingDomain TEST_ACME_Server CA_ECDSA CA CA_EMAIL TEST_PREFERRED_CHAIN'
        nat: |
          "8080": "80"
        prepare: |
          # openEuler ships every repo with both a baseurl and a metalink.
          # The metalink mirror pool is split-brain (dl-cdn.openeuler.openatom.cn
          # froze at the 2026-08-20 snapshot while repo.openeuler.org moved on),
          # so dnf takes repomd.xml from the stale mirror and then 404s fetching
          # the checksummed metadata it names from the fresh ones. Keep only the
          # vendor baseurl, which is self-consistent.
          sed -i '/^metalink=/d' /etc/yum.repos.d/*.repo
          dnf install -y curl socat cronie tar gzip
        usesh: true
        sync: rsync
        copyback: false
        run: |
          cd ../acmetest \
          && ./letest.sh
    - name: DebugOnError
      if: ${{ failure() }}
      run: |
        echo "See how to debug in VM:"
        echo "https://github.com/acmesh-official/acme.sh/wiki/debug-in-VM"