beads/.github/workflows/proxied-local-smoke.yml at 18c24a3ac3e737c34cb478d58ecf3a805a99e996 · jla415/beads · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
# Managed-local proxied lifecycle lane.
#
# The proxied shards in main.yml exercise command behavior against an
# EXTERNALLY managed Dolt testcontainer. This lane covers the production
# local-first path those shards cannot: bd launches its own loopback proxy,
# the proxy launches a locally installed `dolt sql-server`, and the whole
# lifecycle (create/read, loopback-only listeners, idle shutdown,
# transparent restart with persistence), identity failures, orphan recovery,
# and start/stop convergence run INSIDE a network namespace with only
# loopback up — proving no outbound network is needed once the binaries are
# installed. Linux first; the test lane defines Windows/macOS parity but does
# not implement those OS-specific observation helpers yet.

name: Proxied Local Lifecycle

on:
  workflow_dispatch:
  merge_group:
  push:
    branches: [main]
    paths:
      - 'cmd/bd/proxied_local_*'
      - 'cmd/bd/proxied_server*.go'
      - 'cmd/bd/*_proxied_server.go'
      - 'cmd/bd/db_proxy_child.go'
      - 'cmd/bd/init*.go'
      - 'cmd/bd/proxied_integration_helpers_test.go'
      - 'cmd/bd/store_factory*.go'
      - 'cmd/bd/test_dolt_server_cgo_test.go'
      - 'cmd/bd/uow_factory.go'
      - 'internal/configfile/**'
      - 'internal/doltserver/**'
      - 'internal/storage/dbproxy/**'
      - 'internal/storage/uow/**'
      - 'go.mod'
      - 'go.sum'
      - '.github/workflows/proxied-local-smoke.yml'
  pull_request:
    paths:
      - 'cmd/bd/proxied_local_*'
      - 'cmd/bd/proxied_server*.go'
      - 'cmd/bd/*_proxied_server.go'
      - 'cmd/bd/db_proxy_child.go'
      - 'cmd/bd/init*.go'
      - 'cmd/bd/proxied_integration_helpers_test.go'
      - 'cmd/bd/store_factory*.go'
      - 'cmd/bd/test_dolt_server_cgo_test.go'
      - 'cmd/bd/uow_factory.go'
      - 'internal/configfile/**'
      - 'internal/doltserver/**'
      - 'internal/storage/dbproxy/**'
      - 'internal/storage/uow/**'
      - 'go.mod'
      - 'go.sum'
      - '.github/workflows/proxied-local-smoke.yml'

permissions:
  contents: read

jobs:
  managed-local-smoke:
    name: Managed-local proxied lifecycle (Linux, offline)
    runs-on: ubuntu-latest
    timeout-minutes: 25
    env:
      CGO_ENABLED: "1"
      # Pinned so the lane tests a known dolt CLI, not whatever the installer
      # resolves on a given day. Bump deliberately.
      DOLT_VERSION: 2.2.2
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6

      - name: Set up Go
        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
        with:
          go-version-file: 'go.mod'

      - name: Install pinned Dolt CLI
        run: |
          curl -fsSL "https://github.com/dolthub/dolt/releases/download/v${DOLT_VERSION}/dolt-linux-amd64.tar.gz" -o /tmp/dolt.tar.gz
          tar -xzf /tmp/dolt.tar.gz -C /tmp
          sudo install /tmp/dolt-linux-amd64/bin/dolt /usr/local/bin/dolt
          dolt version

      - name: Build bd and compile the test binary (online)
        run: |
          go build -tags gms_pure_go -o /tmp/bd-under-test ./cmd/bd
          go test -tags gms_pure_go -c -o /tmp/proxied-local-smoke.test ./cmd/bd

      - name: Assert the managed-local lifecycle tests are compiled in
        run: |
          listed="$(
            BEADS_TEST_PROXIED_LOCAL=1 \
            BEADS_TEST_SKIP=dolt \
            /tmp/proxied-local-smoke.test \
              -test.list '^TestManagedLocalProxied'
          )"
          for test_name in \
            TestManagedLocalProxiedLifecycleSmoke \
            TestManagedLocalProxiedForeignListenerNotAdopted \
            TestManagedLocalProxiedReusedPidNeverKilled \
            TestManagedLocalProxiedLegacyRecordFailClosed \
            TestManagedLocalProxiedOrphanBackendReaped \
            TestManagedLocalProxiedNProcessColdStartConvergence \
            TestManagedLocalProxiedStopStartInterleave
          do
            if ! grep -qx "$test_name" <<<"$listed"; then
              echo "managed-local lifecycle test $test_name is missing; got: '$listed'" >&2
              exit 1
            fi
          done

      - name: Run managed-local lifecycle lane offline (loopback-only netns)
        run: |
          sudo env \
            "PATH=$PATH" \
            BEADS_TEST_PROXIED_LOCAL=1 \
            BEADS_TEST_SKIP=dolt \
            BEADS_TEST_BD_BINARY=/tmp/bd-under-test \
            unshare --net -- bash -euxc '
              ip link set lo up
              # Prove the namespace really has no outbound network before
              # trusting anything the test reports.
              if timeout 3 bash -c "exec 3<>/dev/tcp/1.1.1.1/443" 2>/dev/null; then
                echo "outbound network unexpectedly available inside the netns" >&2
                exit 1
              fi
              cd cmd/bd
              /tmp/proxied-local-smoke.test \
                -test.run "^TestManagedLocalProxied" \
                -test.v -test.timeout 15m
            '