84 lines
2.7 KiB
YAML
84 lines
2.7 KiB
YAML
name: Post-Install Tests
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
target:
|
|
description: 'Target node IP or hostname'
|
|
required: true
|
|
password:
|
|
description: 'Node UI password (leave blank to use the NODE_UI_PASSWORD secret)'
|
|
required: false
|
|
|
|
jobs:
|
|
post-install-tests:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 15
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 1
|
|
|
|
- name: Install SSH key
|
|
env:
|
|
SSH_KEY: ${{ secrets.NODE_SSH_KEY }}
|
|
run: |
|
|
if [ -z "$SSH_KEY" ]; then
|
|
echo "ERROR: repository secret NODE_SSH_KEY is not configured."
|
|
echo "Post-install tests authenticate by key; password auth is not supported."
|
|
exit 1
|
|
fi
|
|
mkdir -p ~/.ssh && chmod 700 ~/.ssh
|
|
printf '%s\n' "$SSH_KEY" > ~/.ssh/id_ed25519
|
|
chmod 600 ~/.ssh/id_ed25519
|
|
|
|
- name: Run post-install tests on target
|
|
env:
|
|
TARGET: ${{ github.event.inputs.target }}
|
|
NODE_PASSWORD: ${{ github.event.inputs.password }}
|
|
NODE_UI_PASSWORD: ${{ secrets.NODE_UI_PASSWORD }}
|
|
SSH_USER: ${{ vars.NODE_SSH_USER }}
|
|
run: |
|
|
PASSWORD="${NODE_PASSWORD:-$NODE_UI_PASSWORD}"
|
|
if [ -z "$PASSWORD" ]; then
|
|
echo "ERROR: no node password supplied (input or NODE_UI_PASSWORD secret)."
|
|
exit 1
|
|
fi
|
|
USER_NAME="${SSH_USER:-archipelago}"
|
|
|
|
echo "══════════════════════════════════════════"
|
|
echo "Running post-install tests on $TARGET"
|
|
echo "══════════════════════════════════════════"
|
|
|
|
scp -o StrictHostKeyChecking=accept-new \
|
|
scripts/run-post-install-tests.sh \
|
|
"${USER_NAME}@${TARGET}:/tmp/run-post-install-tests.sh"
|
|
|
|
# Password is passed over stdin, never as an argv the node's process
|
|
# list (or this job's log) would expose.
|
|
printf '%s' "$PASSWORD" | ssh -o StrictHostKeyChecking=accept-new \
|
|
"${USER_NAME}@${TARGET}" \
|
|
"sudo bash /tmp/run-post-install-tests.sh --password-stdin"
|
|
|
|
frontend-tests:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 10
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 1
|
|
|
|
- name: Install dependencies
|
|
run: cd neode-ui && npm ci
|
|
|
|
- name: Type check
|
|
run: cd neode-ui && npx vue-tsc -b --noEmit
|
|
|
|
- name: Run tests
|
|
run: cd neode-ui && npx vitest run
|
|
|
|
- name: Audit dependencies
|
|
run: cd neode-ui && npm audit --omit=dev
|