87 lines
5.7 KiB
JavaScript
87 lines
5.7 KiB
JavaScript
import { execFileSync } from 'node:child_process';
|
|
import { randomBytes, randomInt, randomUUID } from 'node:crypto';
|
|
import assert from 'node:assert/strict';
|
|
const suffix = randomUUID().slice(0, 8),
|
|
name = `hop-check-${suffix}`,
|
|
volume = `hop-check-db-${suffix}`,
|
|
uploads = `hop-check-files-${suffix}`;
|
|
const port = String(randomInt(20000, 60000)); // Isolated container only; no host port is published.
|
|
const docker = (...args) =>
|
|
execFileSync('docker', args, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] }).trim();
|
|
const node = (code) => docker('exec', name, 'node', '--input-type=module', '-e', code);
|
|
try {
|
|
docker('volume', 'create', volume);
|
|
docker('volume', 'create', uploads);
|
|
docker(
|
|
'run',
|
|
'-d',
|
|
'--name',
|
|
name,
|
|
'--network',
|
|
'none',
|
|
'-e',
|
|
'NODE_ENV=production',
|
|
'-e',
|
|
`PORT=${port}`,
|
|
'-e',
|
|
'APP_URL=https://hop.test',
|
|
'-e',
|
|
`SESSION_SECRET=${randomBytes(32).toString('hex')}`,
|
|
'-e',
|
|
`DISCOVERY_SECRET=${randomBytes(32).toString('hex')}`,
|
|
'-v',
|
|
`${volume}:/data/database`,
|
|
'-v',
|
|
`${uploads}:/data/uploads`,
|
|
process.env.HOP_CHECK_IMAGE ?? 'hop-phase1-check:local',
|
|
);
|
|
const wait = () =>
|
|
node(
|
|
`for(let i=0;i<60;i++){try{const r=await fetch('http://127.0.0.1:${port}/api/health');if(r.ok){console.log('ready');break}}catch{}if(i===59)throw Error('not ready');await new Promise(r=>setTimeout(r,250))}`,
|
|
);
|
|
wait();
|
|
const state = JSON.parse(
|
|
node(
|
|
`const base='http://127.0.0.1:${port}';const r=await fetch(base+'/api/guest/session',{method:'POST',headers:{Origin:'https://hop.test','Content-Type':'application/json'},body:'{}'});if(!r.ok)throw Error('session failed');const session=await r.json(),cookie=r.headers.get('set-cookie').split(';')[0];if(!r.headers.get('set-cookie').includes('Secure'))throw Error('insecure cookie');const renamed=await fetch(base+'/api/device/me',{method:'PATCH',headers:{Origin:'https://hop.test',Cookie:cookie,'X-CSRF-Token':session.csrfToken,'Content-Type':'application/json'},body:JSON.stringify({name:'Docker 저장 검증'})});if(!renamed.ok)throw Error('rename failed');console.log(JSON.stringify({cookie,id:session.device.id}));`,
|
|
),
|
|
);
|
|
const fileState = JSON.parse(
|
|
node(
|
|
`import {io} from 'socket.io-client';import {randomUUID} from 'node:crypto';const base='http://127.0.0.1:${port}';const headers={Origin:'https://hop.test','Content-Type':'application/json'};async function guest(){const r=await fetch(base+'/api/guest/session',{method:'POST',headers,body:'{}'});return {cookie:r.headers.get('set-cookie').split(';')[0],...await r.json()};}const a=await guest(),b=await guest();async function call(g,path,body,key){const r=await fetch(base+path,{method:'POST',headers:{...headers,Cookie:g.cookie,'X-CSRF-Token':g.csrfToken,...(key?{'Idempotency-Key':key}:{})},body:JSON.stringify(body)});if(!r.ok)throw Error(await r.text());return r.json();}const sockets=[];for(const g of [a,b]){const socket=io(base,{transports:['websocket'],auth:{csrfToken:g.csrfToken},extraHeaders:{Origin:'https://hop.test',Cookie:g.cookie},reconnection:false});sockets.push(socket);await new Promise((resolve,reject)=>{socket.once('connect',resolve);socket.once('connect_error',reject);});}const invite=await call(a,'/api/spaces',{});await call(b,'/api/spaces/join',{code:invite.code});const bytes=Buffer.from('Docker file persistence');const transfer=await call(a,'/api/transfer-requests',{targetDeviceId:b.device.id,kind:'file',byteSize:bytes.length,count:1,files:[{name:'docker.txt',size:bytes.length,type:'text/plain'}]},randomUUID());await call(b,'/api/transfer-requests/'+transfer.requestId+'/accept',{},randomUUID());const form=new FormData();form.append('file',new Blob([bytes]),'docker.txt');const uploaded=await fetch(base+'/api/uploads?requestId='+transfer.requestId+'&fileIndex=0',{method:'POST',headers:{Origin:'https://hop.test',Cookie:a.cookie,'X-CSRF-Token':a.csrfToken,'Idempotency-Key':randomUUID()},body:form});if(!uploaded.ok)throw Error(await uploaded.text());const list=await fetch(base+'/api/device/items',{headers:{Cookie:b.cookie}});const item=(await list.json()).items[0];for(const socket of sockets)socket.disconnect();console.log(JSON.stringify({cookie:b.cookie,accessId:item.accessId}));`,
|
|
),
|
|
);
|
|
docker('restart', name);
|
|
wait();
|
|
const result = JSON.parse(
|
|
node(
|
|
`const r=await fetch('http://127.0.0.1:${port}/api/device/me',{headers:{Cookie:${JSON.stringify(state.cookie)}}});console.log(JSON.stringify(await r.json()));`,
|
|
),
|
|
);
|
|
assert.equal(result.device.name, 'Docker 저장 검증');
|
|
assert.equal(result.device.id, state.id);
|
|
const restored = node(
|
|
`const r=await fetch('http://127.0.0.1:${port}/api/access/${fileState.accessId}/download',{headers:{Cookie:${JSON.stringify(fileState.cookie)}}});if(!r.ok)throw Error('download failed');console.log(await r.text());`,
|
|
);
|
|
assert.equal(restored, 'Docker file persistence');
|
|
const integrity = node(
|
|
`import Database from 'better-sqlite3';const db=new Database('/data/database/hop.sqlite');console.log(db.pragma('integrity_check',{simple:true}));db.close();`,
|
|
);
|
|
assert.equal(integrity, 'ok');
|
|
assert.equal(docker('inspect', '--format', '{{json .NetworkSettings.Ports}}', name), '{}');
|
|
console.log(
|
|
'PASS: production Docker startup, HTTPS Secure session cookie, migration, anonymous session/name/file persistence after restart, SQLite integrity, no host ports published.',
|
|
);
|
|
} catch (error) {
|
|
console.error(execFileSync('docker', ['logs', name], { encoding: 'utf8', stdio: 'inherit' }));
|
|
console.error(docker('inspect', '--format', '{{json .State}}', name));
|
|
throw error;
|
|
} finally {
|
|
try {
|
|
docker('rm', '-f', name);
|
|
} catch {}
|
|
for (const v of [volume, uploads])
|
|
try {
|
|
docker('volume', 'rm', v);
|
|
} catch {}
|
|
}
|