mirror of
https://github.com/coollabsio/coolify.git
synced 2026-10-07 22:45:27 -04:00
Andras Bacsai
554b79e8dd
- Proxy: list and delete Traefik ACME certificates from the server proxy page via new TraefikAcmeService and Get/DeleteTraefikCertificate actions - DNS: track ownership and cross-resource references for managed DNS records so records are only deleted when no longer referenced; release records asynchronously on resource deletion via ReleaseManagedDnsRecordsJob and ManagedDnsRecordCleanup; harden Cloudflare provider deletion results - Databases: fail closed on start when prerequisites or the CA certificate are missing (DatabaseStartException, Server::ensureCaCertificate) and clean up stale start activities via ResourceStartActivity - Webhooks: throttle repeated manual webhook signature failures for GitHub, GitLab, Gitea and Bitbucket - Deployments: improve compose build-context handling and compose file load error reporting - Install scripts: rework terminal UI output in install.sh (stable and nightly) - Misc: settings sidebar accordion fixes, log drain toggle rollback, add Serverside to README sponsors - Add migrations and tests covering the above
76 lines
3.2 KiB
PHP
76 lines
3.2 KiB
PHP
<?php
|
|
|
|
use App\Models\Application;
|
|
use App\Models\InstanceSettings;
|
|
use App\Models\Server;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Symfony\Component\Process\Process;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
beforeEach(function () {
|
|
InstanceSettings::forceCreate(['id' => 0]);
|
|
$this->root = sys_get_temp_dir().'/coolify-compose-load-'.bin2hex(random_bytes(4));
|
|
mkdir($this->root.'/src/apps/web', 0755, true);
|
|
mkdir($this->root.'/bin');
|
|
file_put_contents($this->root.'/bin/sudo', "#!/bin/sh\nexec \"\$@\"\n");
|
|
chmod($this->root.'/bin/sudo', 0755);
|
|
|
|
$this->compose = "services:\n api:\n build:\n context: ../..\n";
|
|
file_put_contents($this->root.'/src/apps/web/docker-compose.yml', $this->compose);
|
|
file_put_contents($this->root.'/src/README.md', 'monorepo');
|
|
foreach ([
|
|
['git', 'init', '-q', '-b', 'main'],
|
|
['git', 'add', '-A'],
|
|
['git', '-c', 'user.email=test@example.com', '-c', 'user.name=Test', 'commit', '-qm', 'monorepo'],
|
|
['git', 'clone', '-q', '--bare', '.', $this->root.'/repo.git'],
|
|
] as $command) {
|
|
(new Process($command, $this->root.'/src'))->mustRun();
|
|
}
|
|
$this->commit = trim((new Process(['git', 'rev-parse', 'HEAD'], $this->root.'/src'))->mustRun()->getOutput());
|
|
});
|
|
|
|
afterEach(function () {
|
|
(new Process(['rm', '-rf', $this->root]))->run();
|
|
Mockery::close();
|
|
});
|
|
|
|
test('the Compose file loads through the server commands for root and non-root users', function (string $user, bool $pinCommit) {
|
|
$application = Application::factory()->create([
|
|
'build_pack' => 'dockercompose',
|
|
'git_repository' => $this->root.'/repo.git',
|
|
'git_branch' => 'main',
|
|
'git_commit_sha' => $pinCommit ? $this->commit : 'HEAD',
|
|
'base_directory' => '/apps/web',
|
|
'docker_compose_location' => '/docker-compose.yml',
|
|
]);
|
|
$application->settings->update(['is_git_submodules_enabled' => true]);
|
|
$uuid = 'compose-load-'.bin2hex(random_bytes(4));
|
|
$gitVersion = (string) str((new Process(['git', '--version']))->mustRun()->getOutput())->trim()->explode(' ')->last();
|
|
|
|
$commands = (new ReflectionMethod(Application::class, 'composeFileReadCommands'))->invoke($application->fresh(), $uuid, $gitVersion);
|
|
if ($user !== 'root') {
|
|
$server = Mockery::mock(Server::class)->makePartial();
|
|
$server->shouldReceive('getAttribute')->with('user')->andReturn($user);
|
|
$server->shouldReceive('setAttribute')->andReturnSelf();
|
|
$commands = collect(parseCommandsByLineForSudo($commands, $server));
|
|
}
|
|
|
|
// Servers read the command list from stdin with `bash -se`, like instant_remote_process() over SSH.
|
|
$process = new Process(['bash', '-se'], env: ['PATH' => $this->root.'/bin:'.getenv('PATH')]);
|
|
$process->setInput($commands->implode("\n")."\n");
|
|
$process->run();
|
|
(new Process(['rm', '-rf', "/tmp/{$uuid}"]))->run();
|
|
|
|
expect($commands->implode("\n"))->not->toContain("cd '/artifacts/")
|
|
->and($process->getErrorOutput())->not->toContain('syntax error')
|
|
->and($process->getExitCode())->toBe(0)
|
|
->and($process->getOutput())->toBe($this->compose);
|
|
})->with([
|
|
'root' => ['root'],
|
|
'non-root' => ['ubuntu'],
|
|
])->with([
|
|
'branch head' => [false],
|
|
'pinned commit' => [true],
|
|
]);
|