ci: clean up workflow

.github/workflows/full_ci.yml

@@ -5,50 +5,99 @@ on:
   pull_request:
     types: [opened, synchronize, reopened]
 
+env:
+  LIBC_CI: 1
+
 jobs:
-  docker_linux_tier1:
-    permissions:
-      contents: read # to fetch code (actions/checkout)
+  style_check:
+    name: Style check
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Rust toolchain
+        run: sh ./ci/install-rust.sh
+      - name: Check style
+        run: sh ci/style.sh
 
-    name: Docker Linux Tier1
+  build_channels_linux:
+    name: Build Channels Linux
     runs-on: ubuntu-22.04
+    env:
+      OS: linux
     strategy:
       fail-fast: true
+      max-parallel: 5
       matrix:
-        target: [
-          i686-unknown-linux-gnu,
-          x86_64-unknown-linux-gnu,
-        ]
+        toolchain:
+          - stable
+          - beta
+          - nightly
+          - 1.63.0
     steps:
       - uses: actions/checkout@v4
       - name: Setup Rust toolchain
-        run: TARGET=${{ matrix.target }} sh ./ci/install-rust.sh
-      - name: Execute run-docker.sh
-        run: LIBC_CI=1 sh ./ci/run-docker.sh ${{ matrix.target }}
+        run: TOOLCHAIN=${{ matrix.toolchain }} sh ./ci/install-rust.sh
+      - name: Execute build.sh
+        run: TOOLCHAIN=${{ matrix.toolchain }} sh ./ci/build.sh
 
-  macos:
-    permissions:
-      contents: read # to fetch code (actions/checkout)
+  build_channels_macos:
+    name: Build Channels macOS
+    needs: macos
+    env:
+      OS: macos
+    strategy:
+      fail-fast: true
+      max-parallel: 4
+      matrix:
+        target:
+          - { toolchain: stable, os: macos-14 }
+          - { toolchain: beta, os: macos-14 }
+          - { toolchain: nightly, os: macos-14 }
+          - { toolchain: 1.63.0, os: macos-14 }
+    runs-on: ${{ matrix.target.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Rust toolchain
+        run: TOOLCHAIN=${{ matrix.target.toolchain }} sh ./ci/install-rust.sh
+      - name: Execute build.sh
+        run: TOOLCHAIN=${{ matrix.target.toolchain }} sh ./ci/build.sh
 
+  build_channels_windows:
+    name: Build Channels Windows
+    runs-on: windows-2022
+    env:
+      OS: windows
+    strategy:
+      fail-fast: true
+      matrix:
+        toolchain:
+          - 1.63.0
+          - stable
+    steps:
+      - uses: actions/checkout@v4
+      - name: Self-update rustup
+        run: rustup self update
+        shell: bash
+      - name: Execute build.sh
+        run: TOOLCHAIN=${{ matrix.toolchain }} sh ./ci/build.sh
+        shell: bash
+
+  macos:
     name: macOS
     runs-on: macos-14
     strategy:
       fail-fast: true
       matrix:
-        target: [
-          aarch64-apple-darwin,
-        ]
+        target:
+          - aarch64-apple-darwin
     steps:
       - uses: actions/checkout@v4
       - name: Setup Rust toolchain
         run: TARGET=${{ matrix.target }} sh ./ci/install-rust.sh
       - name: Execute run.sh
-        run: LIBC_CI=1 sh ./ci/run.sh ${{ matrix.target }}
+        run: sh ./ci/run.sh ${{ matrix.target }}
 
   windows:
-    permissions:
-      contents: read # to fetch code (actions/checkout)
-
     name: Windows
     runs-on: windows-2022
     env:
@@ -77,169 +126,90 @@ jobs:
         run: TARGET=${{ matrix.target }} sh ./ci/install-rust.sh
         shell: bash
       - name: Execute run.sh
-        run: LIBC_CI=1 sh ./ci/run.sh ${{ matrix.target }}
+        run: sh ./ci/run.sh ${{ matrix.target }}
         shell: bash
 
-  style_check:
-    permissions:
-      contents: read # to fetch code (actions/checkout)
-
-    name: Style check
+
+  docker_linux_tier1:
+    name: Docker Linux Tier1
     runs-on: ubuntu-22.04
+    strategy:
+      fail-fast: true
+      matrix:
+        target:
+          - i686-unknown-linux-gnu
+          - x86_64-unknown-linux-gnu
     steps:
       - uses: actions/checkout@v4
       - name: Setup Rust toolchain
-        run: sh ./ci/install-rust.sh
-      - name: Check style
-        run: sh ci/style.sh
+        run: TARGET=${{ matrix.target }} sh ./ci/install-rust.sh
+      - name: Execute run-docker.sh
+        run: sh ./ci/run-docker.sh ${{ matrix.target }}
 
   docker_linux_tier2:
-    permissions:
-      contents: read # to fetch code (actions/checkout)
-
     name: Docker Linux Tier2
     needs: [docker_linux_tier1, style_check]
     runs-on: ubuntu-22.04
     strategy:
       fail-fast: true
       max-parallel: 12
       matrix:
-        target: [
-          aarch64-linux-android,
-          aarch64-unknown-linux-gnu,
-          aarch64-unknown-linux-musl,
-          arm-linux-androideabi,
-          arm-unknown-linux-gnueabihf,
-          arm-unknown-linux-musleabihf,
-          i686-linux-android,
-          i686-unknown-linux-musl,
-          powerpc-unknown-linux-gnu,
-          powerpc64-unknown-linux-gnu,
-          powerpc64le-unknown-linux-gnu,
-          s390x-unknown-linux-gnu,
-          riscv64gc-unknown-linux-gnu,
-          wasm32-wasip1,
-          wasm32-wasip2,
-          sparc64-unknown-linux-gnu,
-          wasm32-unknown-emscripten,
-          x86_64-linux-android,
+        target:
+          - aarch64-linux-android
+          - aarch64-unknown-linux-gnu
+          - aarch64-unknown-linux-musl
+          - arm-linux-androideabi
+          - arm-unknown-linux-gnueabihf
+          - arm-unknown-linux-musleabihf
+          - i686-linux-android
+          - i686-unknown-linux-musl
+          - powerpc-unknown-linux-gnu
+          - powerpc64-unknown-linux-gnu
+          - powerpc64le-unknown-linux-gnu
+          - s390x-unknown-linux-gnu
+          - riscv64gc-unknown-linux-gnu
+          - wasm32-wasip1
+          - wasm32-wasip2
+          - sparc64-unknown-linux-gnu
+          - wasm32-unknown-emscripten
+          - x86_64-linux-android
           # FIXME: Exec format error (os error 8)
-          #x86_64-unknown-linux-gnux32,
-          x86_64-unknown-linux-musl,
+          # - x86_64-unknown-linux-gnux32
+          - x86_64-unknown-linux-musl
           # FIXME: It seems some items in `src/unix/mod.rs`
           # aren't defined on redox actually.
-          # x86_64-unknown-redox,
-        ]
+          # - x86_64-unknown-redox
     steps:
       - uses: actions/checkout@v4
       - name: Setup Rust toolchain
         run: TARGET=${{ matrix.target }} sh ./ci/install-rust.sh
       - name: Execute run-docker.sh
-        run: LIBC_CI=1 sh ./ci/run-docker.sh ${{ matrix.target }}
-
-  build_channels_linux:
-    permissions:
-      contents: read # to fetch code (actions/checkout)
-
-    name: Build Channels Linux
-    needs: docker_linux_tier2
-    runs-on: ubuntu-22.04
-    env:
-      OS: linux
-    strategy:
-      fail-fast: true
-      max-parallel: 5
-      matrix:
-        toolchain: [
-          stable,
-          beta,
-          nightly,
-          1.63.0,
-        ]
-    steps:
-      - uses: actions/checkout@v4
-      - name: Setup Rust toolchain
-        run: TOOLCHAIN=${{ matrix.toolchain }} sh ./ci/install-rust.sh
-      - name: Execute build.sh
-        run: LIBC_CI=1 TOOLCHAIN=${{ matrix.toolchain }} sh ./ci/build.sh
-
-  build_channels_macos:
-    permissions:
-      contents: read # to fetch code (actions/checkout)
-
-    name: Build Channels macOS
-    needs: macos
-    env:
-      OS: macos
-    strategy:
-      fail-fast: true
-      max-parallel: 4
-      matrix:
-        target:
-          - { toolchain: stable, os: macos-14 }
-          - { toolchain: beta, os: macos-14 }
-          - { toolchain: nightly, os: macos-14 }
-          - { toolchain: 1.63.0, os: macos-14 }
-    runs-on: ${{ matrix.target.os }}
-    steps:
-      - uses: actions/checkout@v4
-      - name: Setup Rust toolchain
-        run: TOOLCHAIN=${{ matrix.target.toolchain }} sh ./ci/install-rust.sh
-      - name: Execute build.sh
-        run: LIBC_CI=1 TOOLCHAIN=${{ matrix.target.toolchain }} sh ./ci/build.sh
-
-  build_channels_windows:
-    permissions:
-      contents: read # to fetch code (actions/checkout)
-
-    name: Build Channels Windows
-    runs-on: windows-2022
-    env:
-      OS: windows
-    strategy:
-      fail-fast: true
-      matrix:
-        toolchain: [
-          1.63.0,
-          stable,
-        ]
-    steps:
-      - uses: actions/checkout@v4
-      - name: Self-update rustup
-        run: rustup self update
-        shell: bash
-      - name: Execute build.sh
-        run: LIBC_CI=1 TOOLCHAIN=${{ matrix.toolchain }} sh ./ci/build.sh
-        shell: bash
+        run: sh ./ci/run-docker.sh ${{ matrix.target }}
 
   check_cfg:
-    permissions:
-      contents: read # to fetch code (actions/checkout)
-
     name: "Check #[cfg]s"
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
       - name: Setup Rust toolchain
         run: TOOLCHAIN=nightly sh ./ci/install-rust.sh
       - name: Build with check-cfg
-        run: LIBC_CI=1 LIBC_CHECK_CFG=1 cargo build -Z unstable-options -Z check-cfg
+        run: LIBC_CHECK_CFG=1 cargo build -Z unstable-options -Z check-cfg
 
   # One job that "summarizes" the success state of this pipeline. This can then be added to branch
   # protection, rather than having to add each job separately.
   success:
     name: success
     runs-on: ubuntu-22.04
-    needs: [
-      docker_linux_tier1,
-      docker_linux_tier2,
-      macos,
-      windows,
-      style_check,
-      build_channels_linux,
-      build_channels_macos,
-      build_channels_windows,
-    ]
+    needs:
+      - docker_linux_tier1
+      - docker_linux_tier2
+      - macos
+      - windows
+      - style_check
+      - build_channels_linux
+      - build_channels_macos
+      - build_channels_windows
     # Github branch protection is exceedingly silly and treats "jobs skipped because a dependency
     # failed" as success. So we have to do some contortions to ensure the job fails if any of its
     # dependencies fails.