From 12e81abef3aa4c05bc2f21ea1be49644cb7d478a Mon Sep 17 00:00:00 2001
From: Ayaz Salikhov <mathbunnyru@users.noreply.github.com>
Date: Thu, 4 Jun 2026 15:52:42 +0100
Subject: [PATCH] ci: Improve sanitizer-libs, add doxygen, dpkg, rpm in nix
 (#7403)

---
 docker/check-tools.sh            |   3 +
 docker/install-sanitizer-libs.sh | 124 ++++++++++++++++++-------------
 nix/packages.nix                 |   3 +
 3 files changed, 80 insertions(+), 50 deletions(-)

diff --git a/docker/check-tools.sh b/docker/check-tools.sh
index eb72e8f357..c446dc1b4a 100755
--- a/docker/check-tools.sh
+++ b/docker/check-tools.sh
@@ -9,6 +9,8 @@ clang-format --version
 cmake --version
 conan --version
 curl --version
+doxygen --version
+dpkg-buildpackage --version
 g++ --version
 gcc --version
 gcov --version
@@ -24,6 +26,7 @@ perl --version
 pkg-config --version
 pre-commit --version
 python3 --version
+rpmbuild --version
 run-clang-tidy --help
 vim --version
 
diff --git a/docker/install-sanitizer-libs.sh b/docker/install-sanitizer-libs.sh
index a28efeab3f..dc1ba1b350 100755
--- a/docker/install-sanitizer-libs.sh
+++ b/docker/install-sanitizer-libs.sh
@@ -27,63 +27,87 @@ fi
 echo "Detected OS: ${ID} ${VERSION_ID:-}"
 
 case "${ID}" in
-    debian)
-        apt-get update -y
-        apt-get install -y --no-install-recommends \
-            libasan8 \
-            libtsan2 \
-            libubsan1
-
-        apt-get clean
-        rm -rf /var/lib/apt/lists/*
+    ubuntu | debian | rhel | centos | rocky | almalinux)
+        echo "Supported OS detected: ${ID}"
         ;;
-
-    ubuntu)
-        apt-get update -y
-        apt-get install -y --no-install-recommends \
-            gnupg \
-            software-properties-common
-        add-apt-repository -y ppa:ubuntu-toolchain-r/test
-        apt-get update -y
-        apt-get install -y --no-install-recommends \
-            libasan8 \
-            libtsan2 \
-            libubsan1
-
-        apt-get clean
-        rm -rf /var/lib/apt/lists/*
-        ;;
-
-    rhel | centos | rocky | almalinux)
-        dnf install -y \
-            libasan8 \
-            libtsan2 \
-            libubsan
-
-        dnf clean -y all
-        rm -rf /var/cache/dnf/*
-        ;;
-
     *)
         echo "ERROR: unsupported OS '${ID}'. Supported: debian, ubuntu, rhel-family" >&2
         exit 1
         ;;
 esac
 
-# Verify that every expected library is now resolvable by the dynamic linker.
-missing=0
-for lib in libasan.so.8 libtsan.so.2 libubsan.so.1; do
-    if ldconfig -p | grep -q "${lib}"; then
-        echo "OK: ${lib} found"
-    else
-        echo "ERROR: ${lib} not found after installation" >&2
-        missing=$((missing + 1))
-    fi
-done
+function preinstall() {
+    case "${ID}" in
+        ubuntu)
+            apt-get update -y
+            apt-get install -y --no-install-recommends \
+                gnupg \
+                software-properties-common
+            add-apt-repository -y ppa:ubuntu-toolchain-r/test
+            ;;
+    esac
+}
 
-if [ "${missing}" -ne 0 ]; then
-    echo "ERROR: ${missing} library/libraries missing" >&2
-    exit 1
-fi
+function install() {
+    case "${ID}" in
+        debian | ubuntu)
+            apt-get update -y
+            apt-get install -y --no-install-recommends \
+                libasan8 \
+                libtsan2 \
+                libubsan1
+            ;;
+
+        rhel | centos | rocky | almalinux)
+            dnf install -y \
+                libasan8 \
+                libtsan2 \
+                libubsan
+            ;;
+    esac
+}
+
+function postinstall() {
+    # Don't clear cache in non-CI environments
+    if [ -z "${CI:-}" ]; then
+        echo "Not running in CI environment; skipping cache cleanup"
+        return
+    fi
+
+    case "${ID}" in
+        debian | ubuntu)
+            apt-get clean
+            rm -rf /var/lib/apt/lists/*
+            ;;
+
+        rhel | centos | rocky | almalinux)
+            dnf clean -y all
+            rm -rf /var/cache/dnf/*
+            ;;
+    esac
+}
+
+function verify() {
+    # Verify that every expected library is now resolvable by the dynamic linker.
+    missing=0
+    for lib in libasan.so.8 libtsan.so.2 libubsan.so.1; do
+        if ldconfig -p | grep -q "${lib}"; then
+            echo "OK: ${lib} found"
+        else
+            echo "ERROR: ${lib} not found after installation" >&2
+            missing=$((missing + 1))
+        fi
+    done
+
+    if [ "${missing}" -ne 0 ]; then
+        echo "ERROR: ${missing} library/libraries missing" >&2
+        exit 1
+    fi
+}
+
+preinstall
+install
+postinstall
+verify
 
 echo "All sanitizer runtime libraries installed successfully."
diff --git a/nix/packages.nix b/nix/packages.nix
index f282c15df9..c51077367e 100644
--- a/nix/packages.nix
+++ b/nix/packages.nix
@@ -12,6 +12,8 @@ in
     cmake
     conan
     curlMinimal # needed for codecov/codecov-action
+    doxygen
+    dpkg # needed for dpkg-buildpackage
     gcovr
     git
     gnumake
@@ -26,6 +28,7 @@ in
     pkg-config
     pre-commit
     python3
+    rpm # needed for rpmbuild
     runClangTidy
     vim
   ];