ci.yml

name: ci

on:
  push:
  pull_request:
  workflow_dispatch:

jobs:
  checks:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: "3.12"
      - name: Install shellcheck
        run: |
          sudo apt-get update
          sudo apt-get install -y shellcheck
      - uses: pre-commit/action@v3.0.1
        env:
          # Gitleaks runs before publication through the local Git hooks.
          SKIP: gitleaks
      - name: Test downloads with offline fixtures
        run: python3 .github/scripts/check-fetch.py

  smoke:
    runs-on: ubuntu-latest
    container: ubuntu:24.04
    steps:
      - name: Install prerequisites
        run: |
          apt-get update
          apt-get install -y curl git ca-certificates python3 zsh shellcheck
      - uses: actions/checkout@v4
      - name: Install chezmoi
        run: sh -c "$(curl -fsLS get.chezmoi.io)" -- -b /usr/local/bin
      - name: Render each machine and check shell syntax
        run: python3 .github/scripts/check-render.py
      - name: Test Pi settings and package repair offline
        run: python3 .github/scripts/check-pi.py
      - name: Apply in a clean home without a key or software bundles
        run: |
          set -eu
          mkdir -p "$HOME/.local/share"
          cp -a "$PWD" "$HOME/.local/share/chezmoi"
          # Theme downloads are not part of the installation smoke test.
          chezmoi init --apply --no-tty --exclude externals \
            --promptString machine=container \
            --promptString theme=rose-pine
          # Always-run scripts remain pending after apply. Verify files only.
          chezmoi verify --exclude externals,scripts
          bash -n "$HOME/.bashrc"
          zsh -n "$HOME/.zshrc"