rogee/gochat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

HH-503: harden production Docker mock assertions (#112)

Browse Source 
Co-authored-by: Rogee <rogee@ipao.vip>
This commit is contained in:
Rogee
2026-08-23 07:40:23 +08:00
committed by GitHub
co-authored by rogee
parent a5d244d293
commit eaf6edef66
1 changed files with 39 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/build-production.test.sh
+39 -8
View File
@@ -7,6 +7,8 @@ dirty_file=
trap 'rm -rf "$test_tmp"; [[ -z $dirty_file ]] || rm -f "$dirty_file"' EXIT HUP INT TERM
real_docker=$(command -v docker)
output="$test_tmp/dist"
load_state="$test_tmp/docker.load"
: > "$load_state"
mkdir -p "$test_tmp/bin"
cat > "$test_tmp/bin/docker" <<'EOF'
@@ -16,18 +18,33 @@ printf '%s\n' "$*" >> "$DOCKER_LOG"
[[ $1 == buildx && $2 == create ]] && exit 0
[[ $1 == buildx && $2 == rm ]] && exit 0
if [[ $1 == buildx && $2 == build ]]; then
image=
previous=
for arg in "$@"; do
[[ $arg == type=docker,*dest=* ]] && output=${arg##*dest=}
[[ $previous == --tag ]] && image=$arg
previous=$arg
done
fake_archive=$(mktemp -d)
printf '[]\n' > "$fake_archive/manifest.json"
tar -cf "$output" -C "$fake_archive" manifest.json
printf '%s\n' "$image" > "$fake_archive/image-ref"
tar -cf "$output" -C "$fake_archive" manifest.json image-ref
rm -rf "$fake_archive"
exit 0
fi
[[ $1 == load && $2 == --input && -s $3 ]] && exit 0
[[ $1 == image && $2 == inspect ]] && exit 0
if [[ $# == 3 && $1 == load && $2 == --input && -s $3 ]]; then
image=$(tar -xOf "$3" image-ref)
grep -Fxq "$image" "$DOCKER_LOAD_STATE" || printf '%s\n' "$image" >> "$DOCKER_LOAD_STATE"
exit 0
fi
if [[ $1 == image && $2 == inspect ]]; then
inspected_images=("${@:3}")
cmp -s <(printf '%s\n' "${inspected_images[@]}") "$DOCKER_LOAD_STATE"
exit 0
fi
if [[ $1 == save && $2 == --output ]]; then
saved_images=("${@:4}")
cmp -s <(printf '%s\n' "${saved_images[@]}") "$DOCKER_LOAD_STATE"
fake_archive=$(mktemp -d)
printf '[]\n' > "$fake_archive/manifest.json"
tar -cf "$3" -C "$fake_archive" manifest.json
@@ -50,10 +67,11 @@ rm "$dirty_file"
dirty_file=
: > "$test_tmp/docker.log"
PATH="$test_tmp/bin:$PATH" DOCKER_LOG="$test_tmp/docker.log" GOCHAT_DIST_DIR="$output" \
PATH="$test_tmp/bin:$PATH" DOCKER_LOG="$test_tmp/docker.log" DOCKER_LOAD_STATE="$load_state" GOCHAT_DIST_DIR="$output" \
GOCHAT_VERSION=1.2.3 bash scripts/build-production.sh
tag=1.2.3-$(git rev-parse --short=12 HEAD)
expected_images=("gochat/gochat:$tag" "gochat/shangwutong:$tag")
archive="$output/images/gochat-$tag-images.tgz"
test -s "$archive"
gzip -t "$archive"
@@ -66,17 +84,30 @@ test -f "$output/backend/configs/prometheus_alerts.yml"
test "$(grep -c '^buildx build ' "$test_tmp/docker.log")" -eq 2
test "$(grep -c '^load --input ' "$test_tmp/docker.log")" -eq 2
test "$(grep -Fc -- "--build-arg VERSION=1.2.3 --build-arg COMMIT_SHA=$(git rev-parse --short=12 HEAD) --build-arg BUILD_DATE=$(git show -s --format=%cI HEAD) --build-arg SOURCE_DATE_EPOCH=$(git show -s --format=%ct HEAD)" "$test_tmp/docker.log")" -eq 2
grep -Fq "image inspect gochat/gochat:$tag gochat/shangwutong:$tag" "$test_tmp/docker.log"
cmp -s <(printf '%s\n' "${expected_images[@]}") "$load_state"
test "$(grep '^image inspect ' "$test_tmp/docker.log")" = "image inspect ${expected_images[*]}"
test "$(grep -c '^save --output ' "$test_tmp/docker.log")" -eq 1
grep '^save --output ' "$test_tmp/docker.log" | \
grep -Fq " gochat/gochat:$tag gochat/shangwutong:$tag"
read -r -a save_args <<< "$(grep '^save --output ' "$test_tmp/docker.log")"
test "${#save_args[@]}" -eq 5
cmp -s <(printf '%s\n' "${save_args[@]:3}") "$load_state"
cp "$output/.env.example" "$output/.env"
(cd "$output" && "$real_docker" compose --env-file .env -f deploy/docker/docker-compose.prod.yml config --quiet)
rm "$output/.env"
first_sum=$(sha256sum "$archive")
PATH="$test_tmp/bin:$PATH" DOCKER_LOG="$test_tmp/docker.log" GOCHAT_DIST_DIR="$output" \
PATH="$test_tmp/bin:$PATH" DOCKER_LOG="$test_tmp/docker.log" DOCKER_LOAD_STATE="$load_state" GOCHAT_DIST_DIR="$output" \
GOCHAT_VERSION=1.2.3 bash scripts/build-production.sh
test "$first_sum" = "$(sha256sum "$archive")"
if PATH="$test_tmp/bin:$PATH" DOCKER_LOG="$test_tmp/docker.log" DOCKER_LOAD_STATE="$load_state" \
docker image inspect "${expected_images[0]}" gochat/not-loaded:latest >/dev/null 2>&1; then
echo 'docker inspect mock accepted an image that was not loaded' >&2
exit 1
fi
if PATH="$test_tmp/bin:$PATH" DOCKER_LOG="$test_tmp/docker.log" DOCKER_LOAD_STATE="$load_state" \
docker save --output "$test_tmp/extra.tar" "${expected_images[@]}" gochat/extra:latest >/dev/null 2>&1; then
echo 'docker save mock accepted an extra image' >&2
exit 1
fi
echo 'production build script test passed'