wehub-resource-sync
b4fbd6fe9f
Deploy Site / deploy-vercel (push) Has been skipped
Deploy Site / deploy-docs (push) Has been skipped
Build Skills Index / build-index (push) Has been skipped
CI / Deny unrelated histories (push) Has been skipped
CI / Detect affected areas (push) Successful in 27m35s
CI / OSV scan (push) Failing after 4s
CI / Build&Test Docker image (push) Successful in 9s
CI / Supply-chain scan (push) Has been skipped
CI / Lint Docker scripts (push) Failing after 5m13s
CI / Check contributors (push) Failing after 12m8s
CI / Docs Site (push) Failing after 12m8s
CI / TypeScript (push) Failing after 12m8s
CI / Python lints (push) Failing after 12m9s
CI / Python tests (push) Failing after 12m9s
CI / Check uv.lock (push) Failing after 23m22s
CI / CI timing report (push) Has been cancelled
Build Skills Index / trigger-deploy (push) Has been cancelled
CI / All required checks pass (push) Has been cancelled
54 lines
2.0 KiB
Python
54 lines
2.0 KiB
Python
"""Runtime smoke test for the Docker tini compatibility shim (#34192).
|
|
|
|
Build the real image and verify:
|
|
|
|
1. /usr/bin/tini exists and is a symlink to /init (the compat shim
|
|
for orchestration templates that still reference /usr/bin/tini)
|
|
2. The actual ENTRYPOINT is /init (s6-overlay), not /usr/bin/tini
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import subprocess
|
|
|
|
|
|
def test_tini_compat_symlink_exists(built_image: str) -> None:
|
|
"""/usr/bin/tini must exist as a symlink to /init.
|
|
|
|
Regression for #34192: orchestration templates (e.g. Hostinger's
|
|
'Hermes WebUI' catalog) still pin /usr/bin/tini as the entrypoint.
|
|
The shim symlinks it to /init so legacy wrappers exec the right
|
|
PID-1 reaper without behavior change.
|
|
"""
|
|
r = subprocess.run(
|
|
["docker", "run", "--rm", "--entrypoint", "sh",
|
|
built_image, "-c",
|
|
'test -L /usr/bin/tini && '
|
|
'test "$(readlink -f /usr/bin/tini)" = "/init"'],
|
|
capture_output=True, text=True, timeout=60,
|
|
)
|
|
assert r.returncode == 0, (
|
|
f"/usr/bin/tini is not a symlink to /init: {r.stderr[-500:]}"
|
|
)
|
|
|
|
|
|
def test_entrypoint_is_init_not_tini(built_image: str) -> None:
|
|
"""The image's actual ENTRYPOINT must be /init (s6-overlay).
|
|
|
|
The tini shim is only for legacy external wrappers; the image's own
|
|
runtime must continue to use the canonical /init.
|
|
"""
|
|
r = subprocess.run(
|
|
["docker", "inspect", built_image,
|
|
"--format", "{{json .Config.Entrypoint}}"],
|
|
capture_output=True, text=True, timeout=30,
|
|
)
|
|
assert r.returncode == 0, f"docker inspect failed: {r.stderr}"
|
|
entrypoint = r.stdout.strip()
|
|
assert "/init" in entrypoint, (
|
|
f"ENTRYPOINT is not /init: {entrypoint!r}"
|
|
)
|
|
# The entrypoint array should be ["/init", "/opt/hermes/docker/main-wrapper.sh"]
|
|
# /usr/bin/tini should NOT be in the entrypoint.
|
|
assert "tini" not in entrypoint.lower(), (
|
|
f"ENTRYPOINT references tini instead of /init: {entrypoint!r}"
|
|
) |