name: CI

on:

push:

branches:

- master

paths-ignore:

- '*.md'

- '.gitignore'

- 'roles/backup/**'

- 'roles/backup2/**'

- 'roles/restore/**'

- 'roles/settings/**'

- 'roles/nvidia/**'

- 'roles/plex_extra_tasks/**'

- 'roles/plex_auth_token/**'

- 'roles/plex_db/**'

- 'roles/arr_db/**'

- 'roles/diag/**'

pull_request:

paths-ignore:

- '*.md'

- '.gitignore'

- 'roles/backup/**'

- 'roles/backup2/**'

- 'roles/restore/**'

- 'roles/settings/**'

- 'roles/nvidia/**'

- 'roles/plex_extra_tasks/**'

- 'roles/plex_auth_token/**'

- 'roles/plex_db/**'

- 'roles/arr_db/**'

- 'roles/diag/**'

workflow_dispatch:

jobs:

python-environment:

name: 'Python environment-${{ matrix.os }}'

runs-on: ubuntu-${{ matrix.os }}

strategy:

fail-fast: false

matrix:

os: ['22.04', '24.04', '26.04']

steps:

- uses: actions/checkout@v7

- uses: ./.github/actions/setup-saltbox-uv

- name: Install source-build prerequisites

run: sudo apt-get update && sudo apt-get install -y build-essential libffi-dev

- name: Validate locked Python environment

run: .github/scripts/check-python-environment.sh

ansible-lint:

if: github.event_name == 'pull_request' || !(github.event_name == 'push' && github.actor == 'renovate[bot]')

runs-on: ubuntu-24.04

outputs:

matrix: ${{ steps.set-matrix.outputs.matrix }}

steps:

- uses: actions/checkout@v7

- uses: ./.github/actions/setup-saltbox-uv

- name: Install packages

run: |

uv python install --managed-python --no-bin "$(< .python-version)"

uv venv --python "$(< .python-version)" --managed-python --no-project .venv

uv pip sync --python .venv/bin/python --require-hashes requirements/requirements-saltbox.txt

venv_bin=$(readlink -f .venv/bin)

echo "$venv_bin" >> "$GITHUB_PATH"

- name: Run ansible linter

working-directory: ${{ github.workspace }}

run: ansible-lint

- id: set-matrix

run: |

matrix=$(.venv/bin/python .github/scripts/ci-role-matrix.py)

echo "matrix=$matrix" >> "$GITHUB_OUTPUT"

saltbox-lint:

if: github.event_name == 'pull_request' || !(github.event_name == 'push' && github.actor == 'renovate[bot]')

runs-on: ubuntu-24.04

steps:

- uses: actions/checkout@v7

- uses: actions/setup-python@v7

with:

python-version: '3.14'

- name: Test Saltbox facts persistence

run: python3 .github/scripts/test_saltbox_facts.py

- name: Run Saltbox Linter

run: python3 scripts/saltbox-linter.py .

install:

name: '${{ matrix.roles }}'

runs-on: ubuntu-24.04

needs: [ansible-lint, saltbox-lint, python-environment]

strategy:

matrix: ${{ fromJson(needs.ansible-lint.outputs.matrix) }}

fail-fast: false

steps:

- uses: actions/checkout@v7

- name: Tune GitHub-hosted runner network

run: sudo ethtool -K eth0 tx off rx off

- name: Print pip dependencies

run: cat ./requirements/requirements-saltbox.txt

- name: Install sb binary

uses: jaxxstorm/action-install-gh-release@v3.0.0

with:

repo: saltyorg/sb-go

tag: latest

extension-matching: disable

platform: linux

arch: amd64

rename-to: sb

chmod: "0755"

- name: Check sb version

run: |

sudo mv /opt/hostedtoolcache/saltyorg/sb-go/latest/linux-amd64/sb /usr/local/bin/sb

/usr/local/bin/sb version

- name: Create Directories

run: sudo mkdir -p /srv/git

- name: Chown /srv/git

run: sudo chown -R runner:runner /srv/git

- name: Symlink cloned repository to /srv/git/saltbox

run: ln -s $GITHUB_WORKSPACE /srv/git/saltbox

- name: Install Dependencies

run: /usr/local/bin/sb gha && /srv/ansible/venv/bin/ansible --version

- name: Print installed pip packages

run: /usr/local/bin/uv pip freeze --python /srv/ansible/venv/bin/python

- name: Edit accounts.yml

run: sed -i 's/seed/runner/g' accounts.yml

- name: Run Tree on Saltbox repository

run: tree -a

- name: Syntax Check

run: sudo /srv/ansible/venv/bin/ansible-playbook saltbox.yml --syntax-check

- name: Create basic vars file

run: |

echo "continuous_integration: true" > vars.yml

echo "server_appdata_path: /opt2" >> vars.yml

sudo mkdir -p /opt2

- name: Add Docker Hub info to vars file

if: github.repository == 'saltyorg/Saltbox' && github.event.repository.fork == false

run: |

echo "dockerhub:" >> vars.yml

echo " token: ${{ secrets.DOCKERHUB_TOKEN }}" >> vars.yml

echo " user: ${{ secrets.DOCKERHUB_USERNAME }}" >> vars.yml

- name: Install Saltbox Preinstall

run: sudo /srv/ansible/venv/bin/ansible-playbook saltbox.yml --tags "preinstall" --skip-tags "settings" --extra-vars "@vars.yml"

- name: Install Saltbox Core

run: sudo /srv/ansible/venv/bin/ansible-playbook saltbox.yml --tags "core" --skip-tags "settings" --extra-vars "@vars.yml"

if: ${{ !(contains(matrix.roles, 'saltbox') || contains(matrix.roles, 'feederbox') || contains(matrix.roles, 'mediabox') || contains(matrix.roles, 'core')) }}

- name: Install ${{ matrix.roles }}

run: sudo /srv/ansible/venv/bin/ansible-playbook saltbox.yml --tags "${{ matrix.roles }}" --skip-tags "settings" --extra-vars "@vars.yml"

- name: Run Tree on app data folder

run: sudo tree -aug /opt2

- name: Inspect all Docker containers

run: |

echo "=== Inspecting all Docker containers ==="

# Get list of all containers (running and stopped)

ALL_CONTAINERS=$(docker ps -a -q)

if [ -z "$ALL_CONTAINERS" ]; then

echo "No containers found on this system"

exit 0

fi

echo "Found containers: $ALL_CONTAINERS"

echo ""

# Loop through each container and inspect it

for container_id in $ALL_CONTAINERS; do

echo "========================================="

echo "Inspecting container: $container_id"

echo "========================================="

# Get container name and status for better readability

CONTAINER_NAME=$(docker inspect --format='{{.Name}}' $container_id | sed 's/^\///')

CONTAINER_STATUS=$(docker inspect --format='{{.State.Status}}' $container_id)

echo "Container Name: $CONTAINER_NAME"

echo "Container Status: $CONTAINER_STATUS"

echo ""

echo "Full inspection details:"

echo "----------------------------------------"

# Print full inspection details

docker inspect $container_id

echo ""

echo "========================================="

echo ""

done

echo "=== Container inspection completed ==="