LLDP: enable configuration on the fly

.github/workflows/src/amwa-test.yml

@@ -1,11 +1,11 @@
 - name: install wsl
   if: runner.os == 'Windows'
   run: |
-    & curl -L https://aka.ms/wslubuntu2004 -o ubuntu204.appx
-    Rename-Item .\ubuntu204.appx .\ubuntu204.zip
-    Expand-Archive .\ubuntu204.zip .\ubuntu204
-    cd ubuntu204
-    .\ubuntu2004.exe install --root
+    & curl -L https://aka.ms/wsl-ubuntu-1804 -o ubuntu-1804.appx
+    Rename-Item .\ubuntu-1804.appx .\ubuntu-1804.zip
+    Expand-Archive .\ubuntu-1804.zip .\ubuntu-1804
+    cd ubuntu-1804
+    .\ubuntu1804.exe install --root
 
 - name: AMWA test suite
   shell: bash
@@ -19,12 +19,27 @@
     git clone https://github.com/AMWA-TV/nmos-testing.git
     cd nmos-testing
 
-    # Configure the Testing Tool so all APIs are tested with TLS
-    printf "from . import Config as CONFIG\nCONFIG.ENABLE_HTTPS = True\n" > nmostesting/UserConfig.py
+    # Configure the Testing Tool so all APIs are tested with TLS and authorization
+    printf "from . import Config as CONFIG\nCONFIG.ENABLE_HTTPS = True\nCONFIG.MOCK_SERVICES_WARM_UP_DELAY = 30\nCONFIG.HTTP_TIMEOUT = 2\n" > nmostesting/UserConfig.py
+    # Set the DNS-SD mode
+    printf 'CONFIG.DNS_SD_MODE = "'${{ matrix.dns_sd_mode }}'"\n' >> nmostesting/UserConfig.py
+    # Set the client JWKS_URI for mock Authorization Server to obtain the client JSON Web Key Set (public keys) to verify the client_assertion, when the client is requesting the access token
+    if [[ "${{ matrix.dns_sd_mode }}" == "multicast" ]]; then
+      hostname=nmos-api.local
+    else
+      hostname=api.testsuite.nmos.tv
+    fi
+    printf 'CONFIG.JWKS_URI = "https://'${hostname}':1080/x-authorization/jwks"\n' >> nmostesting/UserConfig.py
 
+    if [[ "${{matrix.enable_authorization}}" == "true" ]]; then
+      printf 'CONFIG.ENABLE_AUTH = True\n' >> nmostesting/UserConfig.py
+    else
+      printf 'CONFIG.ENABLE_AUTH = False\n' >> nmostesting/UserConfig.py
+    fi
+
     # Download testssl
     cd testssl
-    curl -L https://github.com/drwetter/testssl.sh/archive/3.0.2.tar.gz | tar -xvzf - --strip-components=1
+    curl -L https://github.com/drwetter/testssl.sh/archive/v3.0.7.tar.gz -s | tar -xvzf - --strip-components=1 > /dev/null
     cd ..
 
     # Create output directories
@@ -36,71 +51,154 @@
       docker pull amwa/nmos-testing
       docker run -d --name "nmos_testing" --entrypoint="/usr/bin/tail" -v `pwd`/results:/home/nmos-testing/results amwa/nmos-testing -f /dev/null
       run_python="docker exec -i nmos_testing python3"
-    elif  [[ "${{ env.VAGRANT_TEST_SUITE }}" == "true" ]]; then
+    elif [[ "${{ env.VAGRANT_TEST_SUITE }}" == "true" ]]; then
       # run test suite in vagrant VM
       cp ${{ env.GITHUB_WORKSPACE_BASH }}/.github/workflows/mac_Vagrantfile ./Vagrantfile
       vagrant plugin install vagrant-scp
       vagrant up
       vagrant ssh -- mkdir results
       run_python="vagrant ssh -- python3"
+    elif [[ "${{ runner.os }}" == "Linux" && "${{ matrix.dns_sd_mode }}" == "unicast" ]]; then
+      # run test suite directly
+      sudo pip install --upgrade -r requirements.txt
+      # install SDPoker
+      npm install -g git+https://git@github.com/AMWA-TV/sdpoker.git
+      run_python="sudo python"
     else
       # run test suite directly
       pip install -r requirements.txt
-
-      # Install SDPoker
-      if [[ "${{ matrix.os }}" == "windows-latest" || "$EUID" == "0" ]]; then
-        npm install -g AMWA-TV/sdpoker
-      else
-        sudo npm install -g AMWA-TV/sdpoker
-      fi
+      # install SDPoker
+      npm install -g git+https://git@github.com/AMWA-TV/sdpoker.git
       run_python="python"
     fi
     pip install -r utilities/run-test-suites/gsheetsImport/requirements.txt
-
-    if [[ "${{ matrix.os }}" == "windows-latest" ]]; then
-        certutil -enterprise -addstore -user root test_data\\BCP00301\\ca\\certs\\ca.cert.pem
-        certutil -enterprise -addstore -user ca test_data\\BCP00301\\ca\\intermediate\\certs\\intermediate.cert.pem
-        certutil -importpfx -enterprise test_data\\BCP00301\\ca\\intermediate\\certs\\ecdsa.api.testsuite.nmos.tv.cert.chain.pfx
-        certutil -importpfx -enterprise test_data\\BCP00301\\ca\\intermediate\\certs\\rsa.api.testsuite.nmos.tv.cert.chain.pfx
-
-        # RSA
-        netsh http add sslcert ipport=0.0.0.0:1080 certhash=021d50df2177c07095485184206ee2297e50b65c appid="{00000000-0000-0000-0000-000000000000}"
-        # ECDSA
-        #netsh http add sslcert ipport=0.0.0.0:1080 certhash=875eca592c49120254b32bb8bed90ac3679015a5 appid="{00000000-0000-0000-0000-000000000000}"
-
-        # RSA
-        netsh http add sslcert ipport=0.0.0.0:8088 certhash=021d50df2177c07095485184206ee2297e50b65c appid="{00000000-0000-0000-0000-000000000000}"
-        # ECDSA
-        #netsh http add sslcert ipport=0.0.0.0:8088 certhash=875eca592c49120254b32bb8bed90ac3679015a5 appid="{00000000-0000-0000-0000-000000000000}"
+
+    if [[ "${{ runner.os }}" == "Windows" ]]; then
+      # install certificates
+      certutil -enterprise -addstore -user root test_data\\BCP00301\\ca\\certs\\ca.cert.pem
+      certutil -enterprise -addstore -user ca test_data\\BCP00301\\ca\\intermediate\\certs\\intermediate.cert.pem
+      certutil -importpfx -enterprise test_data\\BCP00301\\ca\\intermediate\\certs\\ecdsa.api.testsuite.nmos.tv.cert.chain.pfx
+      certutil -importpfx -enterprise test_data\\BCP00301\\ca\\intermediate\\certs\\rsa.api.testsuite.nmos.tv.cert.chain.pfx
+
+      # RSA
+      netsh http add sslcert ipport=0.0.0.0:1080 certhash=021d50df2177c07095485184206ee2297e50b65c appid="{00000000-0000-0000-0000-000000000000}"
+      # ECDSA
+      #netsh http add sslcert ipport=0.0.0.0:1080 certhash=875eca592c49120254b32bb8bed90ac3679015a5 appid="{00000000-0000-0000-0000-000000000000}"
+
+      # RSA
+      netsh http add sslcert ipport=0.0.0.0:8088 certhash=021d50df2177c07095485184206ee2297e50b65c appid="{00000000-0000-0000-0000-000000000000}"
+      # ECDSA
+      #netsh http add sslcert ipport=0.0.0.0:8088 certhash=875eca592c49120254b32bb8bed90ac3679015a5 appid="{00000000-0000-0000-0000-000000000000}"
     fi
 
-    if [[ "${{ matrix.os }}" == "macos-latest" ]]; then
+    if [[ "${{ runner.os }}" == "macOS" ]]; then
       # force DNS lookups to IPv4 as mDNS lookups on macos seem to wait for the IPv6 lookup to timeout before returning the IPv4 result
       mv nmostesting/GenericTest.py nmostesting/GenericTest.py.old
       printf 'import socket\nold_getaddrinfo = socket.getaddrinfo\ndef new_getaddrinfo(host, port, family=0, type=0, proto=0, flags=0):\n    return old_getaddrinfo(host, port, socket.AF_INET, type, proto, flags)\nsocket.getaddrinfo = new_getaddrinfo\n' > nmostesting/GenericTest.py
       cat nmostesting/GenericTest.py.old >> nmostesting/GenericTest.py
     fi
 
-    if [[ "${{ runner.os }}" == "Linux" && "${{ matrix.install_mdns }}" == "false" ]]; then
-      # nmos-cpp-node doesn't currently support advertising hostnames to Avahi
-      avahi-publish -a -R nmos-api.local ${{ env.HOST_IP_ADDRESS }} &
-    fi
-
     if [[ "${{ runner.os }}" == "Linux" && "${{ matrix.use_conan }}" == "false" ]]; then
       # ubuntu 14 non-conan build uses boost 1.54.0 which doesn't support disabling TLS 1.1
       mkdir -p ${{ env.GITHUB_WORKSPACE_BASH }}/Sandbox/nmos-testing-options/
       echo "--ignore test_01" > ${{ env.GITHUB_WORKSPACE_BASH }}/Sandbox/nmos-testing-options/BCP-003-01.txt
       echo "1" > ${{ env.GITHUB_WORKSPACE_BASH }}/Sandbox/nmos-testing-options/BCP-003-01_max_disabled.txt
     fi
 
-    ${{ env.GITHUB_WORKSPACE_BASH }}/Sandbox/run_nmos_testing.sh "$run_python" ${root_dir}/build/nmos-cpp-node ${root_dir}/build/nmos-cpp-registry results badges ${{ env.HOST_IP_ADDRESS }} "${{ env.GITHUB_COMMIT }}-${{ env.BUILD_NAME }}-"
+    if [[ "${{ runner.os }}" == "Linux" ]]; then
+      if [[ "${{ matrix.install_mdns }}" == "true" ]]; then
+        echo "Stopping mdnsd"
+        sudo /etc/init.d/mdns stop
+      else
+        echo "Stopping avahi-daemon"
+        sudo systemctl stop avahi-daemon
+      fi
+    fi
+
+    if [[ "${{ matrix.dns_sd_mode }}" == "multicast" ]]; then
+      domain=local
+    else
+      domain=testsuite.nmos.tv
+      if [[ "${{ runner.os }}" == "Linux" ]]; then
+        # add host names
+        echo -e "${{ env.HOST_IP_ADDRESS }} api.$domain\n${{ env.HOST_IP_ADDRESS }} mocks.$domain" | sudo tee -a /etc/hosts > /dev/null
+        # force testing tool to cache specification repos before changing the resolver configuration
+        $run_python nmos-test.py suite IS-04-01 --selection auto --host ${{ env.HOST_IP_ADDRESS }} --port 444 --version v1.3 || true
+        # change the resolver configuration to use only the testing tool's mock DNS server
+        # and instead configure the mock DNS server to use an upstream DNS server
+        # as unicast DNS-SD test results are inconsistent if other servers are also configured
+        dns_upstream_ip=$(cat /etc/resolv.conf | grep ^nameserver | tr -s [:space:] ' ' | cut -f2 -d ' ' -s)
+        if [[ ! -z "$dns_upstream_ip" ]]; then
+          printf 'CONFIG.DNS_UPSTREAM_IP = "'${dns_upstream_ip}'"\n' >> nmostesting/UserConfig.py
+        fi
+        sudo cp /etc/resolv.conf /etc/resolv.conf.bak
+        echo -e "nameserver ${{ env.HOST_IP_ADDRESS }}" | sudo tee /etc/resolv.conf > /dev/null
+      else
+        echo "Unicast DNS-SD testing not yet supported on ${{ runner.os }}" && false
+      fi
+    fi
+
+    if [[ "${{ runner.os }}" == "Linux" ]]; then
+      if [[ "${{ matrix.install_mdns }}" == "true" ]]; then
+        echo "Restarting mdnsd"
+        sudo /etc/init.d/mdns start
+        #sudo /usr/sbin/mdnsd -debug &
+        sleep 2
+
+        dns-sd -V
+      else
+        echo "Restarting avahi-daemon"
+        sudo systemctl start avahi-daemon
+        sleep 2
+
+        ps -e | grep avahi-daemon
+        avahi-daemon -V
+      fi
+    fi
+
+    if [[ "${{ runner.os }}" == "Linux" && "${{ matrix.install_mdns }}" == "false" ]]; then
+      # nmos-cpp-node doesn't currently support advertising hostnames to Avahi
+      avahi-publish -a -R nmos-api.local ${{ env.HOST_IP_ADDRESS }} &
+    fi
+
+    ${{ env.GITHUB_WORKSPACE_BASH }}/Sandbox/run_nmos_testing.sh "$run_python" ${domain} ${root_dir}/build/nmos-cpp-node ${root_dir}/build/nmos-cpp-registry results badges $GITHUB_STEP_SUMMARY ${{ env.HOST_IP_ADDRESS }} "${{ env.GITHUB_COMMIT }}-${{ env.BUILD_NAME }}-"
+
+    if [[ "${{ runner.os }}" == "Linux" ]]; then
+      if [[ "${{ matrix.install_mdns }}" == "true" ]]; then
+        ps -e | grep mdnsd || true
+      else
+        ps -e | grep avahi-daemon || true
+      fi
+    fi
+
+    if [[ "${{ matrix.dns_sd_mode }}" == "unicast" ]]; then
+      if [[ "${{ runner.os }}" == "Linux" ]]; then
+        # restore DNS Server
+        if [[ "${{ matrix.install_mdns }}" == "true" ]]; then
+          echo "Stopping mdnsd"
+          sudo /etc/init.d/mdns stop
+        else
+          echo "Stopping avahi-daemon"
+          sudo systemctl stop avahi-daemon
+        fi
+        cat /etc/resolv.conf.bak | sudo tee /etc/resolv.conf > /dev/null
+        if [[ "${{ matrix.install_mdns }}" == "true" ]]; then
+          echo "Restarting mdnsd"
+          sudo /etc/init.d/mdns start
+        else
+          echo "Restarting avahi-daemon"
+          sudo systemctl start avahi-daemon
+        fi
+      fi
+    fi
 
     if [[ "${{ env.DOCKER_TEST_SUITE }}" == "true" ]]; then
       docker stop nmos_testing
       docker rm nmos_testing
     fi
-    if  [[ "${{ env.VAGRANT_TEST_SUITE }}" == "true" ]]; then
+    if [[ "${{ env.VAGRANT_TEST_SUITE }}" == "true" ]]; then
       vagrant scp :results/* results/
       vagrant destroy -f
     fi
+
     exit 0

.github/workflows/src/build-and-test.yml

@@ -6,6 +6,10 @@
 
 @import unit-test
 
+@import install
+
+@import install-test
+
 @import amwa-test
 
 @import save-results

.github/workflows/src/build-setup.yml

@@ -1,11 +1,15 @@
 - name: install conan
   if: matrix.use_conan == true
   run: |
-    pip install conan
-    conan config set general.revisions_enabled=1
+    pip install conan~=2.4.1
+
+- name: 'ubuntu-14.04: install cmake'
+  if: matrix.os == 'ubuntu-14.04'
+  uses: lukka/get-cmake@v3.24.2
 
 - name: install cmake
-  uses: lukka/get-cmake@v3.18.3
+  if: matrix.os != 'ubuntu-14.04'
+  uses: lukka/get-cmake@v3.28.3
 
 - name: setup bash path
   working-directory: ${{ env.GITHUB_WORKSPACE }}
@@ -19,7 +23,7 @@
   if: runner.os == 'Windows'
   run: |
     # set compiler to cl.exe to avoid building with gcc.
-    echo "CMAKE_EXTRA_ARGS=${{ env.CMAKE_EXTRA_ARGS }} -DCMAKE_C_COMPILER=cl.exe -DCMAKE_CXX_COMPILER=cl.exe" >> $env:GITHUB_ENV
+    echo "CMAKE_COMPILER_ARGS=-DCMAKE_C_COMPILER=cl.exe -DCMAKE_CXX_COMPILER=cl.exe" >> $env:GITHUB_ENV
     # disable unused network interface
     netsh interface set interface name="vEthernet (nat)" admin=DISABLED
     # get host IP address
@@ -32,9 +36,11 @@
     ).IPv4Address.IPAddress
     echo "HOST_IP_ADDRESS=$env:hostip" >> $env:GITHUB_ENV
     ipconfig
-    # add the CRL Distribution Point to hosts so that it's discoverable when runing the AMWA test suite in mDNS mode
+    # add the CRL Distribution Point to hosts so that it's discoverable when running the AMWA test suite in mDNS mode
     # and avoid SSL Error: WINHTTP_CALLBACK_STATUS_FLAG_CERT_REV_FAILED failed to check revocation status.
     Add-Content $env:WINDIR\System32\Drivers\Etc\Hosts "`n$env:hostip crl.testsuite.nmos.tv`n"
+    # add the OCSP server to hosts so that it's discoverable when running the AMWA test suite in mDNS mode
+    Add-Content $env:WINDIR\System32\Drivers\Etc\Hosts "`n$env:hostip ocsp.testsuite.nmos.tv`n"
     # add nmos-api.local to hosts to workaround mDNS lookups on windows being very slow and causing the AMWA test suite to take 2-3 hours to complete
     Add-Content $env:WINDIR\System32\Drivers\Etc\Hosts "`n$env:hostip nmos-api.local`n"
     # add nmos-mocks.local to hosts to workaround mDNS lookups on windows being very slow and causing the AMWA test suite IS-04-01 test_05 to fail due to latency messing up the apparent heart beat interval
@@ -60,8 +66,8 @@
     ifconfig
     echo "CTEST_EXTRA_ARGS=$CTEST_EXTRA_ARGS -E testMdnsResolveAPIs" >> $GITHUB_ENV
     echo "CTEST_EXPECTED_FAILURES=$CTEST_EXPECTED_FAILURES -R testMdnsResolveAPIs" >> $GITHUB_ENV
-    # add the CRL Distribution Point to hosts so that it's discoverable when runing the AMWA test suite in mDNS mode
-    echo "$hostip crl.testsuite.nmos.tv" | sudo tee -a /etc/hosts
+    # add the CRL Distribution Point and the OCSP server to hosts so that it's discoverable when running the AMWA test suite in mDNS mode
+    echo -e "$hostip crl.testsuite.nmos.tv\n$hostip ocsp.testsuite.nmos.tv" | sudo tee -a /etc/hosts > /dev/null
     # testssl.sh needs "timeout"
     brew install coreutils
 
@@ -98,21 +104,22 @@
     hostip=$(hostname -I | cut -f1 -d' ')
     echo "HOST_IP_ADDRESS=$hostip" >> $GITHUB_ENV
     ip address
-    # add the CRL Distribution Point to hosts so that it's discoverable when runing the AMWA test suite in mDNS mode
-    echo "$hostip crl.testsuite.nmos.tv" | sudo tee -a /etc/hosts
+    # add the CRL Distribution Point and the OCSP server to hosts so that it's discoverable when running the AMWA test suite in mDNS mode
+    echo -e "$hostip crl.testsuite.nmos.tv\n$hostip ocsp.testsuite.nmos.tv" | sudo tee -a /etc/hosts > /dev/null
     # re-synchronize the package index
     sudo apt-get update -q
 
 - name: ubuntu mdns install
   if: runner.os == 'Linux' && matrix.install_mdns == true
   run: |
     cd ${{ env.GITHUB_WORKSPACE }}
-    curl https://opensource.apple.com/tarballs/mDNSResponder/mDNSResponder-878.200.35.tar.gz -o mDNSResponder-878.200.35.tar.gz
-    tar -xzf mDNSResponder-878.200.35.tar.gz
-    patch -d mDNSResponder-878.200.35/ -p1 < ${{ env.GITHUB_WORKSPACE }}/Development/third_party/mDNSResponder/unicast.patch
-    patch -d mDNSResponder-878.200.35/ -p1 < ${{ env.GITHUB_WORKSPACE }}/Development/third_party/mDNSResponder/permit-over-long-service-types.patch
-    patch -d mDNSResponder-878.200.35/ -p1 < ${{ env.GITHUB_WORKSPACE }}/Development/third_party/mDNSResponder/poll-rather-than-select.patch
-    cd mDNSResponder-878.200.35/mDNSPosix
+    mkdir mDNSResponder
+    cd mDNSResponder
+    curl -L https://github.com/apple-oss-distributions/mDNSResponder/archive/mDNSResponder-878.200.35.tar.gz -s | tar -xvzf - --strip-components=1 > /dev/null
+    patch -p1 < ${{ env.GITHUB_WORKSPACE }}/Development/third_party/mDNSResponder/unicast.patch
+    patch -p1 < ${{ env.GITHUB_WORKSPACE }}/Development/third_party/mDNSResponder/permit-over-long-service-types.patch
+    patch -p1 < ${{ env.GITHUB_WORKSPACE }}/Development/third_party/mDNSResponder/poll-rather-than-select.patch
+    cd mDNSPosix
     make os=linux && sudo make os=linux install
     # install Name Service Cache Daemon to speed up repeated mDNS name discovery
     sudo apt-get install -f nscd
@@ -121,6 +128,8 @@
       mkdir -p /var/run/nscd
       nscd
     fi
+    # force dependency on mDNSResponder
+    echo "CMAKE_EXTRA_ARGS=${{ env.CMAKE_EXTRA_ARGS }} -DNMOS_CPP_USE_AVAHI:BOOL=\"0\"" >> $GITHUB_ENV
 
 - name: ubuntu non-conan setup
   if: runner.os == 'Linux' && matrix.use_conan == false
@@ -137,20 +146,18 @@
       libssl-dev
 
     cd ${{ env.RUNNER_WORKSPACE }}
-    git clone --recurse-submodules --branch v2.10.16 https://github.com/Microsoft/cpprestsdk
+    git clone --recurse-submodules --branch v2.10.19 https://github.com/Microsoft/cpprestsdk
     cd cpprestsdk/Release
     mkdir build
     cd build
     cmake .. -DCMAKE_BUILD_TYPE:STRING="Release" -DWERROR:BOOL="0" -DBUILD_SAMPLES:BOOL="0" -DBUILD_TESTS:BOOL="0"
     make -j 2 && sudo make install
 
-    echo "CMAKE_EXTRA_ARGS=${{ env.CMAKE_EXTRA_ARGS }} -DWEBSOCKETPP_INCLUDE_DIR:PATH=\"${{ env.RUNNER_WORKSPACE }}/cpprestsdk/Release/libs/websocketpp\"" >> $GITHUB_ENV
-
-- name: disable conan
-  if: matrix.use_conan == false
-  shell: bash
-  run: |
-    echo "CMAKE_EXTRA_ARGS=${{ env.CMAKE_EXTRA_ARGS }} -DUSE_CONAN:BOOL=\"0\"" >> $GITHUB_ENV
+    echo "CMAKE_EXTRA_ARGS=${{ env.CMAKE_EXTRA_ARGS }}" \
+      "-DWEBSOCKETPP_INCLUDE_DIR:PATH=\"${{ env.RUNNER_WORKSPACE }}/cpprestsdk/Release/libs/websocketpp\"" \
+      "-DNMOS_CPP_USE_SUPPLIED_JSON_SCHEMA_VALIDATOR:BOOL=\"1\"" \
+      "-DNMOS_CPP_USE_SUPPLIED_JWT_CPP:BOOL=\"1\"" \
+      >> $GITHUB_ENV
 
 - name: ubuntu avahi setup
   if: runner.os == 'Linux' && matrix.install_mdns == false
@@ -163,9 +170,21 @@
     sudo systemctl restart avahi-daemon
     # install Name Service Cache Daemon to speed up repeated mDNS name discovery
     sudo apt-get install -f nscd
+    # force dependency on avahi
+    echo "CMAKE_EXTRA_ARGS=${{ env.CMAKE_EXTRA_ARGS }} -DNMOS_CPP_USE_AVAHI:BOOL=\"1\"" >> $GITHUB_ENV
 
 - name: force cpprest asio
-  if: matrix.force_cpprest_asio == true
+  if: matrix.force_cpprest_asio == true && matrix.use_conan == true
+  shell: bash
+  run: |
+    echo "CONAN_INSTALL_EXTRA_ARGS=--options\;cpprestsdk/*:http_client_impl=asio\;--options\;cpprestsdk/*:http_listener_impl=asio" >> $GITHUB_ENV
+
+- name: enable conan
+  if: matrix.use_conan == true
   shell: bash
   run: |
-    echo "CMAKE_EXTRA_ARGS=${{ env.CMAKE_EXTRA_ARGS }} -DNMOS_CPP_CONAN_OPTIONS:STRING=\"cpprestsdk:http_client_impl=asio;cpprestsdk:http_listener_impl=asio\"" >> $GITHUB_ENV
+    echo "CMAKE_EXTRA_ARGS=${{ env.CMAKE_EXTRA_ARGS }}" \
+      "-DCMAKE_PROJECT_TOP_LEVEL_INCLUDES:STRING=\"third_party/cmake/conan_provider.cmake\"" \
+      "-DCONAN_INSTALL_ARGS:STRING=\"--build=missing\;${{ env.CONAN_INSTALL_EXTRA_ARGS }}\;--lockfile-out=conan.lock\"" \
+      >> $GITHUB_ENV
+    cat $GITHUB_ENV