Improve GitHub workflow to include tests
This commit is contained in:
Jordan Potter
parent
b505973565
commit
9477a7048a
2 changed files with 111 additions and 42 deletions
111
.github/workflows/ci.yml
vendored
Normal file
111
.github/workflows/ci.yml
vendored
Normal file
|
|
@ -0,0 +1,111 @@
|
|||
name: Continuous Integration
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
schedule:
|
||||
- cron: "0 0 * * TUE"
|
||||
|
||||
concurrency: ${{ github.workflow }}
|
||||
|
||||
jobs:
|
||||
build:
|
||||
name: Publish
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: read
|
||||
packages: write
|
||||
timeout-minutes: 10
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Get date
|
||||
id: date
|
||||
uses: josStorer/get-current-time@v2
|
||||
with:
|
||||
format: YYYY-MM-DD
|
||||
|
||||
- name: Install wireguard
|
||||
run: sudo apt-get install wireguard
|
||||
|
||||
- name: Download WireGuard config
|
||||
run: echo "${{ secrets.WIREGUARD_CONF }}" > wireguard.conf
|
||||
|
||||
- name: Set up QEMU
|
||||
uses: docker/setup-qemu-action@v3
|
||||
|
||||
- name: Set up Buildx
|
||||
uses: docker/setup-buildx-action@v3
|
||||
|
||||
- name: Build local image for testing
|
||||
uses: docker/build-push-action@v5
|
||||
with:
|
||||
pull: true
|
||||
load: true
|
||||
tags: wireguard
|
||||
|
||||
- name: Test curl
|
||||
run: |
|
||||
docker run --rm -d --name wireguard --cap-add NET_ADMIN --cap-add SYS_MODULE --sysctl net.ipv4.conf.all.src_valid_mark=1 -v ${{ github.workspace }}/wireguard.conf:/etc/wireguard/wg0.conf wireguard
|
||||
docker run --rm --net=container:wireguard curlimages/curl --retry 3 --retry-delay 5 ifconfig.io
|
||||
docker stop wireguard
|
||||
|
||||
- name: Test kill switch
|
||||
run: |
|
||||
docker run --rm -d --name wireguard --cap-add NET_ADMIN --cap-add SYS_MODULE --sysctl net.ipv4.conf.all.src_valid_mark=1 -v ${{ github.workspace }}/wireguard.conf:/etc/wireguard/wg0.conf wireguard
|
||||
docker run --rm --net=container:wireguard curlimages/curl --retry 3 --retry-delay 5 ifconfig.io
|
||||
docker exec wireguard wg-quick down wg0
|
||||
! docker run --rm --net=container:wireguard curlimages/curl --retry 3 --retry-delay 5 ifconfig.io
|
||||
docker stop wireguard
|
||||
|
||||
- name: Test local subnets
|
||||
run: |
|
||||
ip_address=$(ip route get 1.2.3.4 | awk '{print $7}')
|
||||
docker run --rm -d --name nginx -p 8080:80 nginx
|
||||
docker run --rm -d --name wireguard --cap-add NET_ADMIN --cap-add SYS_MODULE --sysctl net.ipv4.conf.all.src_valid_mark=1 -v ${{ github.workspace }}/wireguard.conf:/etc/wireguard/wg0.conf -e LOCAL_SUBNETS=$ip_address/32 wireguard
|
||||
sleep 3
|
||||
docker run --rm --net=container:wireguard curlimages/curl --retry 3 --retry-delay 5 $ip_address:8080
|
||||
docker stop wireguard nginx
|
||||
|
||||
- name: Test exposed ports
|
||||
run: |
|
||||
docker run --rm -d --name wireguard --cap-add NET_ADMIN --cap-add SYS_MODULE --sysctl net.ipv4.conf.all.src_valid_mark=1 -v ${{ github.workspace }}/wireguard.conf:/etc/wireguard/wg0.conf -p 8080:80 wireguard
|
||||
docker run --rm -d --name nginx --net=container:wireguard nginx
|
||||
sleep 3
|
||||
curl --retry 3 --retry-delay 5 localhost:8080
|
||||
docker stop wireguard nginx
|
||||
|
||||
- name: Log into Docker Hub
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
username: jordanpotter
|
||||
password: ${{ secrets.DOCKERHUB_ACCESS_TOKEN }}
|
||||
|
||||
- name: Log into GitHub Container Registry
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
registry: ghcr.io
|
||||
username: ${{ github.actor }}
|
||||
password: ${{ secrets.GITHUB_TOKEN }}
|
||||
|
||||
- name: Get metadata for image
|
||||
id: metadata
|
||||
uses: docker/metadata-action@v5
|
||||
with:
|
||||
images: |
|
||||
jordanpotter/wireguard
|
||||
ghcr.io/${{ github.repository }}
|
||||
tags: |
|
||||
type=raw,value=${{ steps.date.outputs.formattedTime }}
|
||||
type=raw,value=latest,enable={{ is_default_branch }}
|
||||
|
||||
- name: Build and push images
|
||||
uses: docker/build-push-action@v5
|
||||
with:
|
||||
pull: true
|
||||
push: true
|
||||
tags: ${{ steps.metadata.outputs.tags }}
|
||||
labels: ${{ steps.metadata.outputs.labels }}
|
||||
platforms: linux/amd64,linux/arm64,linux/arm/v6,linux/arm/v7
|
||||
42
.github/workflows/publish.yml
vendored
42
.github/workflows/publish.yml
vendored
|
|
@ -1,42 +0,0 @@
|
|||
name: Publish
|
||||
|
||||
on:
|
||||
push:
|
||||
tags:
|
||||
- "[0-9]+.[0-9]+.[0-9]+"
|
||||
|
||||
jobs:
|
||||
publish:
|
||||
name: Publish
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v2
|
||||
|
||||
- name: Set up QEMU
|
||||
uses: docker/setup-qemu-action@v1
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v1
|
||||
|
||||
- name: Get metadata for Docker image
|
||||
id: docker-metadata
|
||||
uses: docker/metadata-action@v3
|
||||
with:
|
||||
images: jordanpotter/wireguard
|
||||
tags: |
|
||||
type=semver,pattern={{version}}
|
||||
|
||||
- name: Log into Docker Hub
|
||||
uses: docker/login-action@v1
|
||||
with:
|
||||
username: jordanpotter
|
||||
password: ${{ secrets.DOCKERHUB_ACCESS_TOKEN }}
|
||||
|
||||
- name: Build and push Docker image
|
||||
uses: docker/build-push-action@v2
|
||||
with:
|
||||
tags: ${{ steps.docker-metadata.outputs.tags }}
|
||||
labels: ${{ steps.docker-metadata.outputs.labels }}
|
||||
platforms: linux/amd64,linux/arm64,linux/arm/v6,linux/arm/v7
|
||||
push: true
|
||||
Loading…
Reference in a new issue