51 lines
1.5 KiB
Bash
Raw Normal View History

chore: baseline codex hardening before lifecycle refactor Snapshots the in-flight hardening work so subsequent reconcile/Quadlet phases land on a clean before/after diff. Changes: - core/container/src/podman_client.rs: image_uses_insecure_registry() whitelist for the OVH (146.59.87.168:3000) and legacy Hetzner (23.182.128.160:3000) HTTP mirrors; podman_network_settings() lifts custom networks into the Networks map so containers can join them. - core/archipelago/src/container/prod_orchestrator.rs: ensure_container_network() creates per-manifest networks on demand; apply_data_uid() now goes through host_sudo for mkdir -p + chown so bind-mount roots get created and chowned without password prompts. - core/archipelago/src/api/rpc/package/{install,update,stacks}.rs: podman pull adds --tls-verify=false only for whitelisted registries. - core/archipelago/src/bootstrap.rs: removes stale dev-mode systemd override on startup (live nodes carried it from old installers). - core/archipelago/src/config.rs: ignore ARCHIPELAGO_DEV_MODE in prod binaries — it had been silently rerouting volumes to /tmp. - apps/bitcoin-{core,knots}/manifest.yml: locate bitcoind at runtime so image-layout differences don't break entrypoint. - scripts/app-catalog-image-smoke-test.py: production catalog/image smoke test that probes a target node before users click Install. - .gitignore: cover .codex, .pnpm-store, __pycache__, *.bak. Removes filebrowser.rs.bak and two stale catalog.json.bak files (verified identical to live counterparts). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-01 08:52:29 -04:00
#!/usr/bin/env bash
# tests/lifecycle/run.sh — entrypoint for lifecycle tests.
#
# Must be run on an archy host. Requires bats + jq + curl.
#
# Env:
# ARCHY_PASSWORD (required unless ARCHY_ALLOW_NOAUTH=1)
# ARCHY_HOST (default: 127.0.0.1)
# ARCHY_SCHEME (default: https)
# ARCHY_ALLOW_DESTRUCTIVE=1 enable stop/start/restart tests
# ARCHY_ALLOW_CASCADE_DESTRUCTIVE=1 enable uninstall/reinstall tests (rarely used)
# ARCHY_ALLOW_NOAUTH=1 allow running read-only suites that don't use RPC auth
#
# Usage:
# tests/lifecycle/run.sh # all .bats files
# tests/lifecycle/run.sh bitcoin-knots # single file (no extension)
# tests/lifecycle/run.sh required-stack required-stack-destructive
# tests/lifecycle/run.sh package-update-smoke
set -euo pipefail
HERE="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
cd "$HERE"
if ! command -v bats >/dev/null 2>&1; then
echo "bats not installed. On Debian: sudo apt-get install -y bats" >&2
exit 2
fi
if [[ -z "${ARCHY_PASSWORD:-}" && "${ARCHY_ALLOW_NOAUTH:-0}" != "1" ]]; then
echo "ARCHY_PASSWORD env var must be set (or ARCHY_ALLOW_NOAUTH=1 for no-auth suites)." >&2
exit 2
fi
if (( $# == 0 )); then
exec bats bats/
fi
targets=()
for arg in "$@"; do
if [[ -f "bats/${arg}.bats" ]]; then
targets+=("bats/${arg}.bats")
elif [[ -f "$arg" ]]; then
targets+=("$arg")
else
echo "unknown test target: $arg" >&2
exit 2
fi
done
exec bats "${targets[@]}"