207 lines
7.3 KiB
Bash
Executable File
207 lines
7.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
IMAGE="${1:-toolctrl-web:smoke}"
|
|
PORT="${DOCKER_WEB_SMOKE_PORT:-}"
|
|
CONTAINER_NAME="${DOCKER_WEB_SMOKE_CONTAINER:-toolctrl-web-runtime-smoke-$$}"
|
|
DB_CONTAINER_NAME="${DOCKER_WEB_SMOKE_DB_CONTAINER:-toolctrl-web-runtime-smoke-db-$$}"
|
|
NETWORK_NAME="${DOCKER_WEB_SMOKE_NETWORK:-toolctrl-web-runtime-smoke-$$}"
|
|
TRANSPORT="${DOCKER_WEB_SMOKE_TRANSPORT:-host}"
|
|
SMOKE_REVISION="${DOCKER_WEB_SMOKE_REVISION:-}"
|
|
HEALTH_ATTEMPTS="${DOCKER_WEB_SMOKE_HEALTH_ATTEMPTS:-300}"
|
|
DB_PASSWORD="toolctrl"
|
|
DB_NAME="toolctrl"
|
|
DB_USER="toolctrl"
|
|
|
|
cleanup() {
|
|
docker rm -f "$CONTAINER_NAME" >/dev/null 2>&1 || true
|
|
docker rm -f "$DB_CONTAINER_NAME" >/dev/null 2>&1 || true
|
|
docker network rm "$NETWORK_NAME" >/dev/null 2>&1 || true
|
|
}
|
|
|
|
resolve_smoke_revision() {
|
|
if [[ -n "$SMOKE_REVISION" ]]; then
|
|
printf "%s" "$SMOKE_REVISION"
|
|
return
|
|
fi
|
|
|
|
docker image inspect -f '{{ index .Config.Labels "org.opencontainers.image.revision" }}' "$IMAGE"
|
|
}
|
|
|
|
http_status() {
|
|
local host="$1"
|
|
local path="$2"
|
|
local code
|
|
|
|
if [[ "$TRANSPORT" == "exec" ]]; then
|
|
code="$(docker exec "$CONTAINER_NAME" node -e 'const http = require("node:http"); const [host, path] = process.argv.slice(1); const request = http.request({ hostname: "127.0.0.1", port: 8080, path, headers: { Host: host } }, (response) => { process.stdout.write(String(response.statusCode ?? "000")); response.resume(); }); request.on("error", () => process.stdout.write("000")); request.end();' "$host" "$path" || true)"
|
|
else
|
|
code="$(curl -s -o /dev/null -w "%{http_code}" -H "Host: ${host}" "http://127.0.0.1:${PORT}${path}" || true)"
|
|
fi
|
|
|
|
if [[ -z "$code" ]]; then
|
|
printf "000"
|
|
return
|
|
fi
|
|
|
|
printf "%s" "$code"
|
|
}
|
|
|
|
http_body() {
|
|
local host="$1"
|
|
local path="$2"
|
|
|
|
if [[ "$TRANSPORT" == "exec" ]]; then
|
|
docker exec "$CONTAINER_NAME" node -e 'const http = require("node:http"); const [host, path] = process.argv.slice(1); const request = http.request({ hostname: "127.0.0.1", port: 8080, path, headers: { Host: host } }, (response) => { let body = ""; response.setEncoding("utf8"); response.on("data", (chunk) => { body += chunk; }); response.on("end", () => process.stdout.write(body)); }); request.on("error", () => process.exit(1)); request.end();' "$host" "$path"
|
|
else
|
|
curl --fail --silent --show-error -H "Host: ${host}" "http://127.0.0.1:${PORT}${path}"
|
|
fi
|
|
}
|
|
|
|
expect_status() {
|
|
local host="$1"
|
|
local path="$2"
|
|
local expected="$3"
|
|
local actual
|
|
|
|
actual="$(http_status "$host" "$path")"
|
|
if [[ "$actual" != "$expected" ]]; then
|
|
echo "Expected ${host}${path} to return ${expected}, got ${actual}" >&2
|
|
docker logs "$CONTAINER_NAME" >&2 || true
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
expect_health_revision() {
|
|
local host="$1"
|
|
local path="$2"
|
|
local body
|
|
local actual
|
|
|
|
body="$(http_body "$host" "$path")"
|
|
actual="$(printf "%s" "$body" | node -e 'const fs = require("node:fs"); try { const payload = JSON.parse(fs.readFileSync(0, "utf8")); process.stdout.write(payload.revision || ""); } catch { process.exit(1); }')"
|
|
if [[ "$actual" != "$SMOKE_REVISION" ]]; then
|
|
echo "Expected ${host}${path} revision ${SMOKE_REVISION}, got ${actual:-<empty>}" >&2
|
|
docker logs "$CONTAINER_NAME" >&2 || true
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
expect_openapi_json() {
|
|
local host="$1"
|
|
local path="$2"
|
|
local body
|
|
|
|
body="$(http_body "$host" "$path")"
|
|
printf "%s" "$body" | node -e '
|
|
const fs = require("node:fs");
|
|
const payload = JSON.parse(fs.readFileSync(0, "utf8"));
|
|
if (typeof payload.openapi !== "string") throw new Error("missing openapi version");
|
|
if (!payload.paths || !payload.paths["/v1/health"] || !payload.paths["/v1/entities/{entity}/rows"]) {
|
|
throw new Error("missing expected OpenAPI paths");
|
|
}
|
|
'
|
|
}
|
|
|
|
trap cleanup EXIT
|
|
cleanup
|
|
SMOKE_REVISION="$(resolve_smoke_revision)"
|
|
if [[ -z "$SMOKE_REVISION" || "$SMOKE_REVISION" == "<no value>" || "$SMOKE_REVISION" == "unknown" ]]; then
|
|
echo "Image ${IMAGE} does not expose a concrete org.opencontainers.image.revision; build with --build-arg APP_REVISION or set DOCKER_WEB_SMOKE_REVISION explicitly" >&2
|
|
exit 1
|
|
fi
|
|
docker network create "$NETWORK_NAME" >/dev/null
|
|
|
|
docker run -d --name "$DB_CONTAINER_NAME" --network "$NETWORK_NAME" --network-alias db -p 127.0.0.1::5432 \
|
|
-e POSTGRES_USER="$DB_USER" \
|
|
-e POSTGRES_PASSWORD="$DB_PASSWORD" \
|
|
-e POSTGRES_DB="$DB_NAME" \
|
|
postgres:16-alpine >/dev/null
|
|
|
|
DB_PORT="$(docker port "$DB_CONTAINER_NAME" 5432/tcp | awk -F: 'NR == 1 { print $NF }')"
|
|
CONTAINER_DATABASE_URL="postgresql://${DB_USER}:${DB_PASSWORD}@db:5432/${DB_NAME}?schema=public"
|
|
|
|
for attempt in $(seq 1 30); do
|
|
if docker exec "$DB_CONTAINER_NAME" pg_isready -U "$DB_USER" -d "$DB_NAME" >/dev/null 2>&1; then
|
|
break
|
|
fi
|
|
|
|
if [[ "$attempt" == "30" ]]; then
|
|
echo "Postgres smoke database did not become ready" >&2
|
|
docker logs "$DB_CONTAINER_NAME" >&2 || true
|
|
exit 1
|
|
fi
|
|
|
|
sleep 1
|
|
done
|
|
|
|
docker run --rm --network "$NETWORK_NAME" \
|
|
-e NODE_ENV=production \
|
|
-e APP_NAME=ToolCTRL \
|
|
-e APP_BASE_DOMAIN=localhost \
|
|
-e WEB_APP_HOST=app.localhost \
|
|
-e ADMIN_APP_HOST=admin.localhost \
|
|
-e API_HOST=api.localhost \
|
|
-e APP_PROTOCOL=http \
|
|
-e DATABASE_URL="$CONTAINER_DATABASE_URL" \
|
|
-e SESSION_SECRET='deploy-smoke-session-secret-minimum-32' \
|
|
-e CRYPTO_SECRET='deploy-smoke-crypto-secret-minimum-32' \
|
|
-e JWT_SECRET='deploy-smoke-jwt-secret-minimum-32' \
|
|
-e API_ACCESS_TOKEN='deploy-smoke-api-access-token-minimum-32' \
|
|
-e ANALYTICS_TOKEN='deploy-smoke-analytics-token-minimum-32' \
|
|
-e SEED_ADMIN_EMAIL='deploy-smoke-admin@example.test' \
|
|
-e SEED_ADMIN_PASSWORD='deploy-smoke-password-minimum-32' \
|
|
--entrypoint /bin/sh \
|
|
"$IMAGE" -lc 'cd /myapp && pnpm exec prisma migrate deploy --config prisma.config.ts && NODE_ENV=production node packages/db/dist/production-seed.server.js' >/dev/null
|
|
|
|
publish_args=(-p 127.0.0.1::8080)
|
|
if [[ -n "$PORT" ]]; then
|
|
publish_args=(-p "${PORT}:8080")
|
|
fi
|
|
|
|
docker run -d --name "$CONTAINER_NAME" --network "$NETWORK_NAME" "${publish_args[@]}" \
|
|
-e NODE_ENV=production \
|
|
-e PORT=8080 \
|
|
-e APP_NAME=ToolCTRL \
|
|
-e APP_BASE_DOMAIN=localhost \
|
|
-e WEB_APP_HOST=app.localhost \
|
|
-e ADMIN_APP_HOST=admin.localhost \
|
|
-e API_HOST=api.localhost \
|
|
-e APP_PROTOCOL=http \
|
|
-e DATABASE_URL="$CONTAINER_DATABASE_URL" \
|
|
-e SESSION_SECRET='deploy-smoke-session-secret-minimum-32' \
|
|
-e CRYPTO_SECRET='deploy-smoke-crypto-secret-minimum-32' \
|
|
-e JWT_SECRET='deploy-smoke-jwt-secret-minimum-32' \
|
|
-e API_ACCESS_TOKEN='deploy-smoke-api-access-token-minimum-32' \
|
|
-e ANALYTICS_TOKEN='deploy-smoke-analytics-token-minimum-32' \
|
|
"$IMAGE" >/dev/null
|
|
|
|
if [[ -z "$PORT" ]]; then
|
|
PORT="$(docker port "$CONTAINER_NAME" 8080/tcp | awk -F: 'NR == 1 { print $NF }')"
|
|
fi
|
|
|
|
for attempt in $(seq 1 "$HEALTH_ATTEMPTS"); do
|
|
if [[ "$(http_status app.localhost /healthz)" == "200" ]]; then
|
|
break
|
|
fi
|
|
|
|
if [[ "$attempt" == "$HEALTH_ATTEMPTS" ]]; then
|
|
echo "Web container did not become healthy on port ${PORT} after ${HEALTH_ATTEMPTS}s" >&2
|
|
docker logs "$CONTAINER_NAME" >&2 || true
|
|
exit 1
|
|
fi
|
|
|
|
sleep 1
|
|
done
|
|
|
|
expect_status app.localhost /healthz 200
|
|
expect_health_revision app.localhost /healthz
|
|
expect_status app.localhost /readyz 200
|
|
expect_status api.localhost /v1/docs 200
|
|
expect_status api.localhost /v1/openapi.json 200
|
|
expect_openapi_json api.localhost /v1/openapi.json
|
|
expect_status app.localhost /app/acme/settings 404
|
|
expect_status admin.localhost /settings 302
|
|
|
|
echo "Docker web runtime smoke passed for ${IMAGE}"
|