Merge dev to main: Security improvements and comprehensive test infrastructure #39
@@ -49,6 +49,7 @@ jobs:
|
||||
if: env.ROLLBACK_ONLY == '0'
|
||||
run: |
|
||||
set -euo pipefail
|
||||
export DOCKER_API_VERSION=1.43
|
||||
# Check if base image exists, build if missing
|
||||
if ! docker image inspect claude-dev-base:latest >/dev/null 2>&1; then
|
||||
echo "Base image not found, building claude-dev-base:latest..."
|
||||
@@ -71,18 +72,21 @@ jobs:
|
||||
if: env.ROLLBACK_ONLY == '0'
|
||||
run: |
|
||||
set -euo pipefail
|
||||
export DOCKER_API_VERSION=1.43
|
||||
docker run --rm "$CLAUDE_DEV_IMAGE" bash /opt/claude-dev/scripts/smoke-tools.sh
|
||||
|
||||
- name: Smoke test network assumptions
|
||||
if: env.ROLLBACK_ONLY == '0'
|
||||
run: |
|
||||
set -euo pipefail
|
||||
export DOCKER_API_VERSION=1.43
|
||||
docker run --rm --network host "$CLAUDE_DEV_IMAGE" bash /opt/claude-dev/scripts/smoke-network.sh
|
||||
|
||||
- name: Smoke test auth and mount expectations
|
||||
if: env.ROLLBACK_ONLY == '0'
|
||||
run: |
|
||||
set -euo pipefail
|
||||
export DOCKER_API_VERSION=1.43
|
||||
docker run --rm --network host \
|
||||
-e REQUIRE_MOUNTS=1 \
|
||||
-v /volume1/docker/claude-dev/claude-config:/root/.claude \
|
||||
@@ -94,6 +98,7 @@ jobs:
|
||||
- name: Record previous image
|
||||
run: |
|
||||
set -euo pipefail
|
||||
export DOCKER_API_VERSION=1.43
|
||||
mkdir -p /volume1/docker/claude-dev
|
||||
previous_image="$(docker inspect -f '{{.Config.Image}}' claude-dev 2>/dev/null || true)"
|
||||
if [ -n "$previous_image" ]; then
|
||||
@@ -106,20 +111,25 @@ jobs:
|
||||
- name: Sync compose and target tag
|
||||
run: |
|
||||
set -euo pipefail
|
||||
export DOCKER_API_VERSION=1.43
|
||||
cp claude-dev/docker-compose.yml /volume1/docker/claude-dev/docker-compose.yml
|
||||
printf '%s\n' "$CLAUDE_DEV_IMAGE_TAG" > /volume1/docker/claude-dev/target-tag.txt
|
||||
|
||||
- name: Remove stale claude-dev container
|
||||
run: docker rm -f claude-dev || true
|
||||
run: |
|
||||
export DOCKER_API_VERSION=1.43
|
||||
docker rm -f claude-dev || true
|
||||
|
||||
- name: Deploy claude-dev
|
||||
run: |
|
||||
set -euo pipefail
|
||||
export DOCKER_API_VERSION=1.43
|
||||
CLAUDE_DEV_IMAGE_TAG="$CLAUDE_DEV_IMAGE_TAG" docker compose -f /volume1/docker/claude-dev/docker-compose.yml up -d --pull never
|
||||
|
||||
- name: Post-deploy runtime checks
|
||||
run: |
|
||||
set -euo pipefail
|
||||
export DOCKER_API_VERSION=1.43
|
||||
docker exec claude-dev bash -lc 'claude --version'
|
||||
docker exec claude-dev bash -lc 'gh --version'
|
||||
docker exec claude-dev bash -lc 'gh auth status || true'
|
||||
|
||||
Reference in New Issue
Block a user