feat: add isolated static website setup with FIPS and Tor publishing

core/publishing-tests/Cargo.toml

@@ -0,0 +1,18 @@
+[package]
+name = "archipelago-publishing-tests"
+version = "0.1.0"
+edition = "2021"
+publish = false
+license.workspace = true
+
+[dependencies]
+anyhow = "1.0"
+chrono = "0.4"
+hyper = { version = "0.14", features = ["full", "http1"] }
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+tokio = { version = "1", features = ["full"] }
+uuid = { version = "1.0", features = ["v4"] }
+
+[dev-dependencies]
+tempfile = "3.10"

core/publishing-tests/src/lib.rs

@@ -0,0 +1,10 @@
+//! Focused harness compiling the production publishing and interface sources.
+//! Run only with ARCHY_TEST_PACKAGE=archipelago-publishing-tests through the
+//! isolated backend runner. This crate is never included in shipped artifacts.
+#[path = "../../archipelago/src/fips/iface.rs"]
+pub mod fips_iface;
+pub mod fips {
+    pub use crate::fips_iface as iface;
+}
+#[path = "../../archipelago/src/publishing/mod.rs"]
+pub mod publishing;

core/publishing-tests/src/main.rs

@@ -0,0 +1,91 @@
+//! Explicit live smoke-test driver for the production publisher. Never starts
+//! the backend, container reconciler or wallet services. Not a release artifact.
+use anyhow::{bail, Context, Result};
+use archipelago_publishing_tests::publishing::{self, Change, Route, Update};
+use std::path::PathBuf;
+
+#[tokio::main]
+async fn main() -> Result<()> {
+    let mut args = std::env::args().skip(1);
+    let root = PathBuf::from(
+        args.next()
+            .context("Usage: driver ROOT seed|run|unpublish ID")?,
+    );
+    let action = args.next().context("Missing action")?;
+    // Deliberately cannot target installed application data.
+    if !root.is_absolute() || root.file_name().and_then(|s| s.to_str()) != Some("publishing-smoke")
+    {
+        bail!("Use an absolute, dedicated publishing-smoke directory");
+    }
+    match action.as_str() {
+        "seed" => {
+            let mut state = publishing::load(&root).await?;
+            if !state.projects.is_empty() {
+                bail!("Smoke directory already contains projects");
+            }
+            for name in ["first", "second"] {
+                let (s, id) = publishing::update(
+                    &root,
+                    Update {
+                        version: state.version,
+                        change: Change::Create { name: name.into() },
+                    },
+                )
+                .await?;
+                let id = id.unwrap();
+                let (s, _) = publishing::update(&root, Update {
+                    version: s.version, change: Change::Save {
+                        id: id.clone(), name: name.into(), routes: [Route::Fips, Route::Tor].into_iter().collect(), domain: None,
+                        html: format!("<!doctype html><title>Archipelago publishing check</title><h1>{name} website</h1>"),
+                    },
+                }).await?;
+                let (s, _) = publishing::update(
+                    &root,
+                    Update {
+                        version: s.version,
+                        change: Change::PublishFips {
+                            id: id.clone(),
+                            acknowledge_public: true,
+                        },
+                    },
+                )
+                .await?;
+                println!(
+                    "{name} {id} {}",
+                    s.projects[&id].fips_publication.as_ref().unwrap().port
+                );
+                state = s;
+            }
+        }
+        "publish-tor" | "unpublish-tor" | "unpublish" => {
+            let id = args.next().context("Missing project ID")?;
+            let state = publishing::load(&root).await?;
+            publishing::update(
+                &root,
+                Update {
+                    version: state.version,
+                    change: match action.as_str() {
+                        "publish-tor" => Change::PublishTor {
+                            id,
+                            acknowledge_public: true,
+                        },
+                        "unpublish-tor" => Change::UnpublishTor { id },
+                        _ => Change::UnpublishFips { id },
+                    },
+                },
+            )
+            .await?;
+        }
+        "run" => {
+            let (stop, receive) = tokio::sync::watch::channel(false);
+            let tor = tokio::spawn(publishing::tor::run(root.clone(), receive.clone()));
+            let runner = tokio::spawn(publishing::serving::run(root, receive));
+            tokio::signal::ctrl_c().await?;
+            stop.send(true)?;
+            runner.await?;
+            tor.await?;
+        }
+        _ => bail!("Unknown action"),
+    }
+    Ok(())
+}