mirror of
https://github.com/fawney19/Aether.git
synced 2026-09-12 22:20:19 +08:00
98 lines
4.4 KiB
Python
98 lines
4.4 KiB
Python
import json
|
|
import os
|
|
from pathlib import Path
|
|
import shutil
|
|
import subprocess
|
|
import tempfile
|
|
|
|
repo_root = Path(__file__).resolve().parent.parent
|
|
environment = {key: os.environ[key] for key in ("HOME", "PATH") if key in os.environ}
|
|
|
|
with tempfile.TemporaryDirectory(prefix="aether-compose-databases-") as directory:
|
|
fixture = Path(directory)
|
|
for filename in (
|
|
"docker-compose.yml",
|
|
"docker-compose.local.yml",
|
|
"docker-compose.single-node.yml",
|
|
"docker-compose.release-local.yml",
|
|
):
|
|
shutil.copyfile(repo_root / filename, fixture / filename)
|
|
env_file = fixture / ".env"
|
|
|
|
def compose_config(files, *, overrides=None):
|
|
command = [
|
|
"docker", "compose", "--project-name", "aether-database-fixture",
|
|
"--project-directory", str(fixture), "--env-file", str(env_file),
|
|
"--profile", "*",
|
|
]
|
|
for filename in files:
|
|
command.extend(["-f", str(fixture / filename)])
|
|
return subprocess.run(
|
|
command + ["config", "--format", "json"],
|
|
env={**environment, **(overrides or {})},
|
|
capture_output=True, text=True, check=False,
|
|
)
|
|
|
|
database_environment = "DB_PASSWORD=fixture-postgres\nREDIS_PASSWORD=fixture-redis\n"
|
|
standard_compose_files = (
|
|
["docker-compose.yml"],
|
|
["docker-compose.yml", "docker-compose.local.yml"],
|
|
["docker-compose.single-node.yml"],
|
|
)
|
|
env_file.write_text(database_environment)
|
|
for files in standard_compose_files:
|
|
result = compose_config(files)
|
|
assert result.returncode == 0, result.stderr
|
|
config = json.loads(result.stdout)
|
|
assert set(config["services"]) == {"app", "postgres", "redis"}
|
|
assert set(config["volumes"]) == {"postgres_data"}
|
|
app = config["services"]["app"]
|
|
assert app["user"] == "0:0"
|
|
assert app["read_only"] is True
|
|
assert app["cap_drop"] == ["ALL"]
|
|
assert set(app["cap_add"]) == {"DAC_OVERRIDE", "FOWNER"}
|
|
assert app["security_opt"] == ["no-new-privileges:true"]
|
|
assert not app.get("privileged", False)
|
|
app_env = app["environment"]
|
|
assert app_env["AETHER_DATABASE_DRIVER"] == "postgres"
|
|
assert app_env["DATABASE_URL"] == "postgresql://postgres:fixture-postgres@postgres:5432/aether"
|
|
assert app_env["REDIS_URL"] == "redis://:fixture-redis@redis:6379/0"
|
|
assert app_env["AETHER_LOG_DESTINATION"] == "stdout"
|
|
for key in ("DB_PASSWORD", "REDIS_PASSWORD"):
|
|
result = compose_config(files, overrides={key: ""})
|
|
assert result.returncode != 0, f"empty {key} was accepted"
|
|
assert f"set {key} in .env" in result.stderr, result.stderr
|
|
|
|
result = compose_config(["docker-compose.release-local.yml"])
|
|
assert result.returncode == 0, result.stderr
|
|
config = json.loads(result.stdout)
|
|
assert set(config["services"]) == {"release-local-app", "postgres"}
|
|
assert set(config["volumes"]) == {"postgres_data", "aether_release_local_root"}
|
|
app_env = config["services"]["release-local-app"]["environment"]
|
|
assert app_env["AETHER_DATABASE_DRIVER"] == "postgres"
|
|
assert app_env["AETHER_DATABASE_URL"] == "postgresql://postgres:fixture-postgres@postgres:5432/aether"
|
|
result = compose_config(["docker-compose.release-local.yml"], overrides={"DB_PASSWORD": ""})
|
|
assert result.returncode != 0, "empty DB_PASSWORD was accepted"
|
|
assert "set DB_PASSWORD in .env" in result.stderr, result.stderr
|
|
|
|
for log_destination in ("file", "both"):
|
|
env_file.write_text(
|
|
database_environment
|
|
+ f"AETHER_LOG_DESTINATION={log_destination}\nAETHER_LOG_DIR=/app/logs\n"
|
|
+ "AETHER_CONTAINER_UID=65532\nAETHER_CONTAINER_GID=65532\n"
|
|
)
|
|
for files in standard_compose_files:
|
|
result = compose_config(files)
|
|
assert result.returncode == 0, result.stderr
|
|
app = json.loads(result.stdout)["services"]["app"]
|
|
assert app["user"] == "0:0", files
|
|
assert app["environment"]["AETHER_LOG_DESTINATION"] == "stdout", files
|
|
assert all(
|
|
volume["target"] not in ("/app/logs", "/opt/aether/logs")
|
|
for volume in app.get("volumes", [])
|
|
), files
|
|
assert app["logging"]["driver"] == "json-file"
|
|
assert app["logging"]["options"] == {"max-size": "100m", "max-file": "10"}
|
|
|
|
print("PASS: PostgreSQL/Redis Compose configurations and legacy file logging overrides")
|