pygrindvakt 0.1.0__tar.gz

pygrindvakt-0.1.0/.github/scripts/setup-manylinux-build-env.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+set -euo pipefail
+
+: "${UV_VERSION:=0.11.23}"
+: "${RUSTUP_HOME:=/opt/rustup}"
+: "${CARGO_HOME:=/opt/cargo}"
+
+export RUSTUP_HOME
+export CARGO_HOME
+export PATH="${CARGO_HOME}/bin:/opt/python/cp314-cp314/bin:${PATH}"
+
+curl --proto '=https' --tlsv1.2 -sSf \
+    -o /tmp/rustup-init \
+    https://static.rust-lang.org/rustup/dist/x86_64-unknown-linux-gnu/rustup-init
+chmod +x /tmp/rustup-init
+/tmp/rustup-init -y --profile minimal --default-toolchain stable
+rustup update stable
+rustup default stable
+rustc --version
+cargo --version
+
+/opt/python/cp314-cp314/bin/python3.14 -m pip install --upgrade "uv==${UV_VERSION}"
+uv --version
+
+/io/build-wheels.sh

pygrindvakt-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,281 @@
+name: ci
+on:
+  pull_request:
+    paths:
+      - 'src/**'
+      - 'python/**'
+      - 'tests/**'
+      - 'Cargo.lock'
+      - 'Cargo.toml'
+      - 'pyproject.toml'
+      - 'build-wheels.sh'
+      - '.github/workflows/**'
+      - '.github/scripts/**'
+  workflow_dispatch:
+env:
+  FORCE_COLOR: "1"
+  UV_LINK_MODE: "copy"
+  UV_VERSION: "0.11.23"
+jobs:
+
+  manylinux_x86_64:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+    - uses: actions/checkout@v7
+
+    - name: Pull the manylinux image
+      run: docker pull quay.io/pypa/manylinux_2_28_x86_64
+
+    - name: Build the wheel inside manylinux container
+      run: |
+        docker run --rm \
+          -e UV_VERSION=${{ env.UV_VERSION }} \
+          -e RUSTUP_HOME=/opt/rustup \
+          -e CARGO_HOME=/opt/cargo \
+          -v ${{ github.workspace }}:/io \
+          quay.io/pypa/manylinux_2_28_x86_64 \
+          /bin/bash /io/.github/scripts/setup-manylinux-build-env.sh
+
+    - name: Install UV and test wheel
+      run: |
+        python3 -m pip install --user "uv==${UV_VERSION}"
+        ~/.local/bin/uv venv
+        ~/.local/bin/uv pip install pytest cryptography flask django fastapi httpx
+        ~/.local/bin/uv pip install ./dist/pygrindvakt-*.whl
+        .venv/bin/python -m pytest tests/ -vvv
+
+    - name: Store wheels
+      uses: actions/upload-artifact@v4
+      with:
+        name: pygrindvakt_manylinux_x86_64
+        path: dist/
+        overwrite: true
+        retention-days: 1
+        if-no-files-found: "error"
+        compression-level: 0
+
+  # PKCS#11 / HSM integration tests, driven by SoftHSM2.
+  # Unlike pybergshamra (which provisions a token via hsm-test/setup.sh),
+  # pygrindvakt's `softhsm` pytest fixture provisions a throwaway token itself
+  # and auto-skips when the tooling is absent, so this job only needs to install
+  # softhsm2 + opensc and run the suite; the pkcs11-marked tests then execute.
+  hsm:
+    name: HSM (SoftHSM2 / PKCS#11) + Redis
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    services:
+      redis:
+        image: redis:7-alpine
+        ports:
+          - 6379:6379
+        options: >-
+          --health-cmd "redis-cli ping"
+          --health-interval 5s
+          --health-timeout 3s
+          --health-retries 10
+    env:
+      REDIS_URL: redis://127.0.0.1:6379/
+    steps:
+    - uses: actions/checkout@v7
+
+    - name: Install SoftHSM2 + OpenSC
+      run: sudo apt-get update && sudo apt-get install -y softhsm2 opensc
+
+    - uses: dtolnay/rust-toolchain@stable
+
+    - name: Install UV
+      run: |
+        python3 -m pip install --user "uv==${UV_VERSION}"
+        echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+
+    - name: Build and install the extension
+      run: |
+        uv venv
+        uv pip install "maturin==1.14.1" pytest cryptography flask django fastapi httpx
+        .venv/bin/maturin develop
+
+    - name: Run the test suite (incl. PKCS#11 and Redis)
+      run: |
+        .venv/bin/python -m pytest tests/ -vvv
+
+  #manylinux_aarch64:
+    #runs-on: ubuntu-24-arm
+    #timeout-minutes: 10
+    #steps:
+    #- uses: actions/checkout@v7
+
+    #- name: Pull the manylinux image
+      #run: docker pull quay.io/pypa/manylinux_2_28_aarch64
+
+    #- name: Build the wheel inside manylinux container
+      #run: |
+        #docker run --rm \
+          #-e UV_VERSION=${{ env.UV_VERSION }} \
+          #-e RUSTUP_HOME=/opt/rustup \
+          #-e CARGO_HOME=/opt/cargo \
+          #-v ${{ github.workspace }}:/io \
+          #quay.io/pypa/manylinux_2_28_aarch64 \
+          #/bin/bash /io/.github/scripts/setup-manylinux-build-env.sh
+
+    #- name: Install UV
+      #run: |
+        #python3 -m pip install --user "uv==${UV_VERSION}"
+        #uv venv
+        #source .venv/bin/activate
+        #uv pip install pytest
+        #uv pip install ./dist/pygrindvakt-*.whl
+
+    #- name: Run tests
+      #run: |
+        #source .venv/bin/activate
+        #pytest tests/ -vvv
+
+    #- name: Store wheels
+      #uses: actions/upload-artifact@v4
+      #with:
+        #name: pygrindvakt_manylinux_aarch64
+        #path: dist/
+        #overwrite: true
+        #retention-days: 1
+        #if-no-files-found: "error"
+        #compression-level: 0
+
+  #macos_aarch64:
+    #runs-on: macos-15
+    #timeout-minutes: 10
+    #steps:
+    #- uses: actions/checkout@v7
+
+    #- uses: actions/setup-python@v6
+      #with:
+        #allow-prereleases: true
+        #python-version: "3.14"
+
+    #- uses: dtolnay/rust-toolchain@stable
+      #with:
+        #targets: "aarch64-apple-darwin"
+
+    #- name: Build environment
+      #run: |
+        #python3 -m pip install --user "uv==${UV_VERSION}"
+        #uv venv --python python3.14
+        #source .venv/bin/activate
+        #uv pip install --upgrade "maturin==1.14.1" pytest
+
+    #- name: Build wheel
+      #run: |
+        #source .venv/bin/activate
+        #MACOSX_DEPLOYMENT_TARGET="11.0" \
+        #maturin build \
+          #--release \
+          #--strip \
+          #--interpreter python3.14 \
+          #--target=aarch64-apple-darwin
+
+    #- name: Run tests
+      #run: |
+        #source .venv/bin/activate
+        #uv pip install target/wheels/pygrindvakt-*.whl
+        #pytest tests/ -vvv
+
+    #- name: Store wheels
+      #uses: actions/upload-artifact@v4
+      #with:
+        #name: pygrindvakt_macos_aarch64
+        #path: target/wheels
+        #overwrite: true
+        #retention-days: 1
+        #if-no-files-found: "error"
+        #compression-level: 0
+
+  #windows_amd64:
+    #runs-on: windows-2025
+    #timeout-minutes: 10
+    #steps:
+    #- uses: actions/checkout@v7
+
+    #- uses: actions/setup-python@v6
+      #with:
+        #allow-prereleases: true
+        #python-version: "3.14"
+        #architecture: "x64"
+
+    #- uses: dtolnay/rust-toolchain@stable
+      #with:
+        #targets: "x86_64-pc-windows-msvc"
+
+    #- name: Build environment
+      #run: |
+        #python.exe -m pip install --upgrade pip "maturin==1.14.1" pytest
+
+    #- name: Build wheel
+      #run: |
+        #maturin.exe build --release --strip --target=x86_64-pc-windows-msvc
+
+    #- name: Run tests
+      #shell: pwsh
+      #run: |
+        #python -m venv venv
+        #.\venv\Scripts\Activate.ps1
+        #pip install pytest
+        #pip install pygrindvakt --no-index --find-links target\wheels
+        #pytest tests/ -vvv
+
+    #- name: Store wheels
+      #uses: actions/upload-artifact@v4
+      #with:
+        #name: pygrindvakt_windows_amd64
+        #path: target\wheels
+        #overwrite: true
+        #retention-days: 1
+        #if-no-files-found: "error"
+        #compression-level: 0
+
+  #windows_aarch64:
+    #runs-on: windows-11-arm
+    #timeout-minutes: 10
+    #env:
+      #TARGET: "aarch64-pc-windows-msvc"
+    #steps:
+    #- uses: actions/checkout@v7
+
+    #- uses: actions/setup-python@v6
+      #with:
+        #allow-prereleases: true
+        #python-version: "3.14"
+        #architecture: "arm64"
+
+    #- shell: pwsh
+      #run: |
+        #Invoke-WebRequest -Uri "https://static.rust-lang.org/rustup/dist/$env:TARGET/rustup-init.exe" -OutFile rustup-init.exe
+        #.\rustup-init.exe --default-toolchain "stable-$env:TARGET" --profile minimal --component rust-src -y
+        #"$env:USERPROFILE\.cargo\bin" | Out-File -Append -Encoding ascii $env:GITHUB_PATH
+        #"CARGO_HOME=$env:USERPROFILE\.cargo" | Out-File -Append -Encoding ascii $env:GITHUB_ENV
+
+    #- name: Build environment
+      #run: |
+        #python.exe -m pip install --upgrade pip "maturin==1.14.1" pytest
+
+    #- name: Build wheel
+      #run: |
+        #maturin.exe build --release --strip --target="$env:TARGET"
+
+    #- name: Run tests
+      #shell: pwsh
+      #run: |
+        #python -m venv venv
+        #.\venv\Scripts\Activate.ps1
+        #pip install pytest
+        #pip install pygrindvakt --no-index --find-links target\wheels
+        #pytest tests/ -vvv
+
+    #- name: Store wheels
+      #uses: actions/upload-artifact@v4
+      #with:
+        #name: pygrindvakt_windows_aarch64
+        #path: target\wheels
+        #overwrite: true
+        #retention-days: 1
+        #if-no-files-found: "error"
+        #compression-level: 0

pygrindvakt-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,241 @@
+name: release
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+env:
+  FORCE_COLOR: "1"
+  UV_LINK_MODE: "copy"
+  UV_VERSION: "0.11.23"
+jobs:
+
+  manylinux_x86_64:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+    - uses: actions/checkout@v7
+
+    - name: Pull the manylinux image
+      run: docker pull quay.io/pypa/manylinux_2_28_x86_64
+
+    - name: Build the wheel inside manylinux container
+      run: |
+        docker run --rm \
+          -e UV_VERSION=${{ env.UV_VERSION }} \
+          -e RUSTUP_HOME=/opt/rustup \
+          -e CARGO_HOME=/opt/cargo \
+          -v ${{ github.workspace }}:/io \
+          quay.io/pypa/manylinux_2_28_x86_64 \
+          /bin/bash /io/.github/scripts/setup-manylinux-build-env.sh
+
+    - name: Install UV and test
+      run: |
+        python3 -m pip install --user "uv==${UV_VERSION}"
+        ~/.local/bin/uv venv
+        ~/.local/bin/uv pip install pytest cryptography flask django fastapi httpx
+        ~/.local/bin/uv pip install ./dist/pygrindvakt-*.whl
+        .venv/bin/python -m pytest tests/ -vvv
+
+    - name: Store wheels
+      uses: actions/upload-artifact@v4
+      with:
+        name: pygrindvakt_manylinux_x86_64
+        path: dist/
+        overwrite: true
+        retention-days: 3
+        if-no-files-found: "error"
+        compression-level: 0
+
+  #manylinux_aarch64:
+    #runs-on: ubuntu-24-arm
+    #timeout-minutes: 10
+    #steps:
+    #- uses: actions/checkout@v5
+
+    #- name: Pull the manylinux image
+      #run: docker pull quay.io/pypa/manylinux_2_28_aarch64
+
+    #- name: Build the wheel inside manylinux container
+      #run: |
+        #docker run --rm \
+          #-e UV_VERSION=${{ env.UV_VERSION }} \
+          #-e RUSTUP_HOME=/opt/rustup \
+          #-e CARGO_HOME=/opt/cargo \
+          #-v ${{ github.workspace }}:/io \
+          #quay.io/pypa/manylinux_2_28_aarch64 \
+          #/bin/bash /io/.github/scripts/setup-manylinux-build-env.sh
+
+    #- name: Install UV and test
+      #run: |
+        #python3 -m pip install --user "uv==${UV_VERSION}"
+        #uv venv
+        #source .venv/bin/activate
+        #uv pip install pytest
+        #uv pip install ./dist/pygrindvakt-*.whl
+        #pytest tests/ -vvv
+
+    #- name: Store wheels
+      #uses: actions/upload-artifact@v4
+      #with:
+        #name: pygrindvakt_manylinux_aarch64
+        #path: dist/
+        #overwrite: true
+        #retention-days: 3
+        #if-no-files-found: "error"
+        #compression-level: 0
+
+  #macos_aarch64:
+    #runs-on: macos-15
+    #timeout-minutes: 10
+    #steps:
+    #- uses: actions/checkout@v5
+
+    #- uses: actions/setup-python@v6
+      #with:
+        #allow-prereleases: true
+        #python-version: "3.14"
+
+    #- uses: dtolnay/rust-toolchain@stable
+      #with:
+        #targets: "aarch64-apple-darwin"
+
+    #- name: Build environment
+      #run: |
+        #python3 -m pip install --user "uv==${UV_VERSION}"
+        #uv venv --python python3.14
+        #source .venv/bin/activate
+        #uv pip install --upgrade "maturin==1.14.1" pytest
+
+    #- name: Build wheel
+      #run: |
+        #source .venv/bin/activate
+        #MACOSX_DEPLOYMENT_TARGET="11.0" \
+        #maturin build \
+          #--release \
+          #--strip \
+          #--interpreter python3.14 \
+          #--target=aarch64-apple-darwin
+
+    #- name: Run tests
+      #run: |
+        #source .venv/bin/activate
+        #uv pip install target/wheels/pygrindvakt-*.whl
+        #pytest tests/ -vvv
+
+    #- name: Store wheels
+      #uses: actions/upload-artifact@v4
+      #with:
+        #name: pygrindvakt_macos_aarch64
+        #path: target/wheels
+        #overwrite: true
+        #retention-days: 3
+        #if-no-files-found: "error"
+        #compression-level: 0
+
+  #windows_amd64:
+    #runs-on: windows-2025
+    #timeout-minutes: 10
+    #steps:
+    #- uses: actions/checkout@v5
+
+    #- uses: actions/setup-python@v6
+      #with:
+        #allow-prereleases: true
+        #python-version: "3.14"
+        #architecture: "x64"
+
+    #- uses: dtolnay/rust-toolchain@stable
+      #with:
+        #targets: "x86_64-pc-windows-msvc"
+
+    #- name: Build wheel
+      #run: |
+        #python.exe -m pip install --upgrade pip "maturin==1.14.1"
+        #maturin.exe build --release --strip --target=x86_64-pc-windows-msvc
+
+    #- name: Run tests
+      #shell: pwsh
+      #run: |
+        #python -m venv venv
+        #.\venv\Scripts\Activate.ps1
+        #pip install pytest
+        #pip install pygrindvakt --no-index --find-links target\wheels
+        #pytest tests/ -vvv
+
+    #- name: Store wheels
+      #uses: actions/upload-artifact@v4
+      #with:
+        #name: pygrindvakt_windows_amd64
+        #path: target\wheels
+        #overwrite: true
+        #retention-days: 3
+        #if-no-files-found: "error"
+        #compression-level: 0
+
+  #windows_aarch64:
+    #runs-on: windows-11-arm
+    #timeout-minutes: 10
+    #env:
+      #TARGET: "aarch64-pc-windows-msvc"
+    #steps:
+    #- uses: actions/checkout@v5
+
+    #- uses: actions/setup-python@v6
+      #with:
+        #allow-prereleases: true
+        #python-version: "3.14"
+        #architecture: "arm64"
+
+    #- shell: pwsh
+      #run: |
+        #Invoke-WebRequest -Uri "https://static.rust-lang.org/rustup/dist/$env:TARGET/rustup-init.exe" -OutFile rustup-init.exe
+        #.\rustup-init.exe --default-toolchain "stable-$env:TARGET" --profile minimal --component rust-src -y
+        #"$env:USERPROFILE\.cargo\bin" | Out-File -Append -Encoding ascii $env:GITHUB_PATH
+        #"CARGO_HOME=$env:USERPROFILE\.cargo" | Out-File -Append -Encoding ascii $env:GITHUB_ENV
+
+    #- name: Build wheel
+      #run: |
+        #python.exe -m pip install --upgrade pip "maturin==1.14.1"
+        #maturin.exe build --release --strip --target="$env:TARGET"
+
+    #- name: Run tests
+      #shell: pwsh
+      #run: |
+        #python -m venv venv
+        #.\venv\Scripts\Activate.ps1
+        #pip install pytest
+        #pip install pygrindvakt --no-index --find-links target\wheels
+        #pytest tests/ -vvv
+
+    #- name: Store wheels
+      #uses: actions/upload-artifact@v4
+      #with:
+        #name: pygrindvakt_windows_aarch64
+        #path: target\wheels
+        #overwrite: true
+        #retention-days: 3
+        #if-no-files-found: "error"
+        #compression-level: 0
+
+  publish:
+    runs-on: ubuntu-latest
+    needs: [manylinux_x86_64]
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+    - name: Download all artifacts
+      uses: actions/download-artifact@v4
+      with:
+        path: dist
+        pattern: pygrindvakt_*
+        merge-multiple: true
+
+    - name: List artifacts
+      run: ls -lR dist/
+
+    - name: Publish to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1
+      with:
+        packages-dir: dist/