wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 4 Packages Projects Releases Wiki Activity

fix(cd): keep post-start recovery verifiers on controlled profile
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 16s
Details
CD Pipeline / build-and-deploy (push) Successful in 3m34s
Details
CD Pipeline / post-deploy-checks (push) Successful in 57s
Details

Browse Source
This commit is contained in:
Your Name
2026-06-29 15:11:18 +08:00
parent 5e843e81c1
commit 16dbf7ca34
2 changed files with 32 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
.gitea/workflows/cd.yaml
View File

@@ -328,6 +328,10 @@ jobs:
;;
scripts/reboot-recovery/post-reboot-owner-response-preflight.py)
;;
scripts/reboot-recovery/post-start-quick-check.sh)
;;
scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh)
;;
scripts/reboot-recovery/tests/test_dr_escrow_evidence_checklist.py)
;;
scripts/reboot-recovery/awoooi-reboot-auto-recovery-slo.service)
@@ -346,6 +350,10 @@ jobs:
;;
scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_scorecard.py)
;;
scripts/reboot-recovery/tests/test_188_host_hygiene_checklist.py)
;;
scripts/reboot-recovery/tests/test_post_start_quick_check_contract.py)
;;
scripts/security/gitea-private-inventory-p0-scorecard.py)
;;
scripts/security/tests/test_gitea_private_inventory_p0_scorecard.py)
@@ -463,6 +471,12 @@ jobs:
../../scripts/reboot-recovery/post-reboot-owner-response-preflight.py \
../../scripts/reboot-recovery/reboot-auto-recovery-slo-scorecard.py \
../../scripts/security/gitea-private-inventory-p0-scorecard.py
bash -n \
../../scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh \
../../scripts/reboot-recovery/reboot-auto-recovery-host-probe.sh \
../../scripts/reboot-recovery/reboot-auto-recovery-slo-exporter.sh \
../../scripts/reboot-recovery/post-start-quick-check.sh \
../../scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh
DATABASE_URL="${DATABASE_URL:-postgresql+asyncpg://ci:ci@localhost/ci}" \
PYTHONFAULTHANDLER=1 python3.11 -m pytest \
tests/test_agent_replay_normalizer.py \
@@ -484,6 +498,8 @@ jobs:
../../scripts/reboot-recovery/tests/test_dr_escrow_evidence_checklist.py \
../../scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_installer.py \
../../scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_scorecard.py \
../../scripts/reboot-recovery/tests/test_188_host_hygiene_checklist.py \
../../scripts/reboot-recovery/tests/test_post_start_quick_check_contract.py \
../../scripts/security/tests/test_gitea_private_inventory_p0_scorecard.py \
-v --tb=short -x -p no:cacheprovider \
2>&1 | tee /tmp/pytest-output.txt; PYTEST_EXIT=${PIPESTATUS[0]}

16
ops/runner/test_cd_controlled_runtime_profile.py
View File

@@ -125,6 +125,22 @@ def test_reboot_auto_recovery_slo_sources_stay_on_controlled_runtime_profile() -
assert source in text
def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> None:
text = _workflow_text()
expected_sources = [
"scripts/reboot-recovery/post-start-quick-check.sh)",
"scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh)",
"scripts/reboot-recovery/tests/test_188_host_hygiene_checklist.py)",
"scripts/reboot-recovery/tests/test_post_start_quick_check_contract.py)",
"../../scripts/reboot-recovery/post-start-quick-check.sh",
"../../scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh",
"../../scripts/reboot-recovery/tests/test_188_host_hygiene_checklist.py",
"../../scripts/reboot-recovery/tests/test_post_start_quick_check_contract.py",
]
for source in expected_sources:
assert source in text
def test_controlled_runtime_skips_b5_before_docker_socket_use() -> None:
text = _workflow_text()
b5_start = text.index("- name: Integration Tests (B5")