mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-10-29 16:17:25 +09:00
Juan DenisandClaude Opus 4.8
e3bb163221
- Vagrantfile: don't `dnf install rsync/curl` on RHEL boxes — it upgrades openssl-libs and breaks the box's sshd (same ABI issue as install.sh). rsync/curl ship preinstalled on generic/rocky9; fail loudly if a future box lacks them rather than silently corrupting the run. - full-stack-test.ps1: drop fedora from the default distro set (Vagrant Cloud's generic/fedora is EOL at f39; opt in via -Only fedora). - vm-install.sh (new): run install.sh from uploaded local source, overlay the working tree, rebuild, and probe health — so the harness tests the exact local code (incl. uncommitted) with sshd/firewall snapshots on every exit path for post-mortems. Recovered from a local stash. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
135 lines
4.8 KiB
Bash
135 lines
4.8 KiB
Bash
#!/bin/bash
|
|
# Runs inside the test VM.
|
|
# Strategy:
|
|
# 1. Run install.sh from the uploaded local source (so it bootstraps deps).
|
|
# 2. After install, replace /opt/serverkit with the uploaded local working
|
|
# tree (overlay), rebuild frontend, reinstall Python deps, restart.
|
|
# 3. Probe health endpoint and exit non-zero if anything failed.
|
|
#
|
|
# This way we test the EXACT local code, including uncommitted changes,
|
|
# instead of whatever is on origin/main.
|
|
set -u # NB: not -e — we want to capture failures and still emit a report
|
|
|
|
SRC=/opt/serverkit-src
|
|
INSTALL_DIR=/opt/serverkit
|
|
LOG=/var/log/serverkit-test-install.log
|
|
|
|
log() { echo "[vm-install] $*" | tee -a "$LOG"; }
|
|
fail() { echo "[vm-install] FAIL: $*" | tee -a "$LOG"; exit 1; }
|
|
|
|
mkdir -p "$(dirname "$LOG")"
|
|
: > "$LOG"
|
|
|
|
# Capture sshd/firewall/network state at named checkpoints so post-mortems
|
|
# work even when install.sh leaves SSH unreachable (Rocky 9 has done this).
|
|
# Output goes to $LOG which is later copied back to the host by the harness.
|
|
snapshot() {
|
|
local label="$1"
|
|
{
|
|
echo
|
|
echo "===== SNAPSHOT: $label ($(date -Iseconds)) ====="
|
|
echo "--- systemctl status sshd ---"
|
|
systemctl status sshd --no-pager 2>&1 | head -30
|
|
echo "--- ss -tlnp (listeners) ---"
|
|
ss -tlnp 2>&1 | head -30
|
|
echo "--- firewall-cmd state ---"
|
|
if command -v firewall-cmd >/dev/null 2>&1; then
|
|
systemctl is-active firewalld 2>&1
|
|
firewall-cmd --state 2>&1
|
|
firewall-cmd --get-default-zone 2>&1
|
|
firewall-cmd --list-all 2>&1
|
|
else
|
|
echo "firewall-cmd not present"
|
|
fi
|
|
echo "--- iptables -L INPUT ---"
|
|
iptables -L INPUT -n 2>&1 | head -40 || true
|
|
echo "--- ip addr ---"
|
|
ip -4 addr 2>&1
|
|
echo "===== END SNAPSHOT: $label ====="
|
|
echo
|
|
} >> "$LOG" 2>&1
|
|
}
|
|
|
|
# Snapshot system state on every exit path. Snapshot only — we deliberately
|
|
# do NOT `systemctl restart sshd` here. On Rocky 9 the running sshd is
|
|
# linked against an older libssl than what `dnf` ends up with on disk, so
|
|
# a restart spawns a fresh sshd that segfaults on OpenSSL version mismatch
|
|
# and the host can't reconnect for the pytest phase. The running sshd
|
|
# parent keeps working with its mapped-in libssl, so leaving it alone is
|
|
# the right move.
|
|
cleanup() {
|
|
local rc=$?
|
|
echo "[vm-install] cleanup: exit rc=$rc" >> "$LOG" 2>&1
|
|
snapshot "cleanup (rc=$rc)"
|
|
return $rc
|
|
}
|
|
trap cleanup EXIT
|
|
|
|
[ -d "$SRC" ] || fail "source dir $SRC missing — multipass transfer broken"
|
|
[ -f "$SRC/install.sh" ] || fail "install.sh not found in source"
|
|
|
|
snapshot "pre-install"
|
|
|
|
log "Step 1/4: running install.sh (this clones origin/main, installs deps)"
|
|
# install.sh clones from GitHub — we let it, then overlay our local code.
|
|
bash "$SRC/install.sh" >> "$LOG" 2>&1
|
|
INSTALL_RC=$?
|
|
log "install.sh exit=$INSTALL_RC"
|
|
snapshot "post-install.sh"
|
|
|
|
if [ ! -d "$INSTALL_DIR" ]; then
|
|
fail "install.sh did not create $INSTALL_DIR (rc=$INSTALL_RC)"
|
|
fi
|
|
|
|
log "Step 2/4: overlaying local working tree onto $INSTALL_DIR"
|
|
# Preserve .env / instance / nginx ssl from the install
|
|
rsync -a \
|
|
--exclude='.env' \
|
|
--exclude='backend/instance/' \
|
|
--exclude='nginx/ssl/' \
|
|
--exclude='backend/venv/' \
|
|
--exclude='backend/.venv/' \
|
|
--exclude='backend/.venv-wsl/' \
|
|
--exclude='frontend/node_modules/' \
|
|
--exclude='frontend/dist/' \
|
|
--exclude='.git/' \
|
|
"$SRC/" "$INSTALL_DIR/" >> "$LOG" 2>&1 || fail "rsync overlay failed"
|
|
|
|
log "Step 3/4: rebuild + restart with local code"
|
|
cd "$INSTALL_DIR" || fail "cd $INSTALL_DIR"
|
|
|
|
# Reinstall Python deps in case requirements.txt changed
|
|
if [ -d "$INSTALL_DIR/venv" ]; then
|
|
"$INSTALL_DIR/venv/bin/pip" install -r "$INSTALL_DIR/backend/requirements.txt" >> "$LOG" 2>&1 \
|
|
|| log "WARN: pip install had non-zero exit"
|
|
fi
|
|
|
|
# Reinstall + rebuild frontend (package.json may have changed in the overlay)
|
|
cd "$INSTALL_DIR/frontend" || fail "cd frontend"
|
|
npm ci --prefer-offline >> "$LOG" 2>&1 || fail "npm ci failed"
|
|
NODE_OPTIONS="--max-old-space-size=1024" npm run build >> "$LOG" 2>&1 \
|
|
|| fail "frontend build failed"
|
|
|
|
cd "$INSTALL_DIR" || true
|
|
docker compose build >> "$LOG" 2>&1 || log "WARN: docker compose build had non-zero exit"
|
|
docker compose up -d >> "$LOG" 2>&1 || log "WARN: docker compose up had non-zero exit"
|
|
|
|
systemctl restart serverkit >> "$LOG" 2>&1 || fail "systemctl restart serverkit failed"
|
|
systemctl restart nginx >> "$LOG" 2>&1 || log "WARN: nginx restart had non-zero exit"
|
|
|
|
log "Step 4/4: waiting for health endpoint"
|
|
for i in $(seq 1 30); do
|
|
if curl -fsS http://127.0.0.1:5000/api/v1/system/health > /dev/null 2>&1; then
|
|
log "Backend healthy after ${i}s"
|
|
echo "OK" > /tmp/serverkit-install-status
|
|
exit 0
|
|
fi
|
|
sleep 1
|
|
done
|
|
|
|
log "Backend never became healthy"
|
|
systemctl status serverkit --no-pager >> "$LOG" 2>&1 || true
|
|
journalctl -u serverkit --no-pager -n 100 >> "$LOG" 2>&1 || true
|
|
echo "FAIL" > /tmp/serverkit-install-status
|
|
exit 1
|