unkin-agent
42998a80f4
In-house npm packages have nowhere to publish: npm locals only accept raw file uploads, which `npm publish` and `npm install` cannot use. - accept `npm publish` (`PUT /api/v1/local/<repo>/<pkg>`, scoped included) on local npm repos, capping the body at 256MiB and verifying the tarball against dist integrity - write tarball, then manifest, then dist-tags; publishing an existing version returns 409 and leaves tags alone, while a matching leftover tarball from a failed publish is reused so retries complete - serve packuments with tarball URLs pointing back at the local repo, dropping dist-tags that name unpublished versions - document the `.npmrc` registry + `_authToken` setup in the UI and `docs/npm/local.md` - add a stock `node:22` publish/install e2e-docker case Reviewed-on: #139 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>
54 lines
2.8 KiB
Markdown
54 lines
2.8 KiB
Markdown
# Dockerised end-to-end suite
|
|
|
|
Black-box tests that run against a fully **containerised** artifactapi stack
|
|
(built image + Postgres + Redis + MinIO) plus a static mock upstream. Unlike the
|
|
in-process `e2e/` suite (testcontainers, server run in-process), these only speak
|
|
HTTP to the running product, so they exercise the shipped container image.
|
|
|
|
## Run
|
|
|
|
```bash
|
|
make docker-e2e # build image, compose up, run suite, compose down
|
|
```
|
|
|
|
`scripts/docker-e2e.sh` builds and starts `docker-compose.yml` +
|
|
`docker-compose.e2e.yml`, waits for `/health`, then runs
|
|
`go test -tags=dockere2e ./e2e-docker/...` and tears everything down.
|
|
|
|
The stack publishes artifactapi on host port **8001** (to avoid colliding with a
|
|
local instance on 8000). Override with `ARTIFACTAPI_URL` to point the tests at an
|
|
already-running stack.
|
|
|
|
## Coverage
|
|
|
|
- **Repository lifecycle** — add / change / delete for remote, local and virtual repos.
|
|
- **Caching** — one immutable artifact per remote package type (one
|
|
`caching_<type>_test.go` case each) proxied through the mock upstream: first fetch `X-Artifact-Source: remote`, second `cache`, bytes
|
|
verified against the origin fixture.
|
|
- **Local uploads** — puppet (Forge v3 API via real `r10k` and `puppet module install`),
|
|
generic (upload/download), pypi (wheel + generated `simple/`
|
|
index), rpm (real package + **automatic repodata** generation), npm (stock
|
|
`node:22` client: `npm publish` unscoped + scoped, `npm install` + `require()`,
|
|
second version, republish rejected).
|
|
- **Virtual repositories** — pypi simple-index merge and helm `index.yaml` merge
|
|
across two members.
|
|
- **Mirrorlist** — an rpm remote with a `mirrorlist` of extra upstream mirrors
|
|
(pool = `base_url` + `mirrorlist`): round-robin distribution across both mirrors
|
|
(constant-body `mockupstreama` / `mockupstreamb`), failover past a dead primary,
|
|
no-mirrorlist regression, and a real `dnf` (stock `rockylinux:9` container)
|
|
`makecache` + `install` through a two-mirror rpm remote whose `base_url` is dead
|
|
— a dead mirror must not break the client.
|
|
- **Mirror strategy (`least_conn`)** — a `mirror_strategy: least_conn` rpm remote
|
|
over the two constant-body mirrors exercises the least-connections selection
|
|
path end-to-end (both mirrors serve, all requests succeed), plus a real `dnf`
|
|
install through a `least_conn` remote with a dead primary (failover unchanged).
|
|
The precise least-loaded pick is asserted deterministically in the proxy unit
|
|
test, since an in-flight-skew assertion over HTTP is timing-sensitive.
|
|
|
|
## Fixtures
|
|
|
|
`fixtures/` is served by the mock upstream at its web root. Paths mirror each
|
|
provider's upstream URL layout (e.g. `v2/...` for docker, `v1/providers/...` for
|
|
terraform). The RPM under `fixtures/rpmrepo/Packages/` is a real package so the
|
|
rpm provider can parse its metadata for repodata generation.
|