KyuubiYoru
91 lines
3.3 KiB
YAML
91 lines
3.3 KiB
YAML
name: quality-gate
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
- codex/**
|
|
pull_request:
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
quality:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 15
|
|
steps:
|
|
- name: Check out repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install .NET SDK
|
|
uses: actions/setup-dotnet@v4
|
|
with:
|
|
dotnet-version: 10.0.301
|
|
|
|
- name: Restore locked dependencies
|
|
run: dotnet restore Rendezvous.slnx --locked-mode
|
|
|
|
- name: Verify formatting and analyzers
|
|
run: dotnet format Rendezvous.slnx --verify-no-changes --no-restore
|
|
|
|
- name: Build
|
|
run: dotnet build Rendezvous.slnx --configuration Release --no-restore
|
|
|
|
- name: Verify generated API contract
|
|
run: git diff --exit-code -- docs/api
|
|
|
|
- name: Test
|
|
run: dotnet test Rendezvous.slnx --configuration Release --no-build
|
|
|
|
- name: Test privileged Linux namespace topology when available
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
probe="rendezvous-probe-$$"
|
|
suffix="$(( $$ % 100000 ))"
|
|
bridge="rvb${suffix}"
|
|
veth_root="rvr${suffix}"
|
|
veth_peer="rvp${suffix}"
|
|
cleanup_probe() {
|
|
if [[ -n "$veth_root" ]]; then
|
|
ip link delete "$veth_root" >/dev/null 2>&1 || true
|
|
fi
|
|
if [[ -n "$bridge" ]]; then
|
|
ip link delete "$bridge" >/dev/null 2>&1 || true
|
|
fi
|
|
if [[ -n "$probe" ]]; then
|
|
ip netns delete "$probe" >/dev/null 2>&1 || true
|
|
fi
|
|
}
|
|
trap cleanup_probe EXIT
|
|
if command -v ip >/dev/null 2>&1 \
|
|
&& command -v iptables >/dev/null 2>&1 \
|
|
&& command -v sysctl >/dev/null 2>&1 \
|
|
&& ip netns add "$probe" 2>/dev/null \
|
|
&& ip link add "$bridge" type bridge \
|
|
&& ip link add "$veth_root" type veth peer name "$veth_peer" \
|
|
&& ip link set "$veth_root" master "$bridge" \
|
|
&& ip link set "$veth_peer" netns "$probe" \
|
|
&& ip netns exec "$probe" sysctl -q -w net.ipv4.ip_forward=1 \
|
|
&& ip netns exec "$probe" iptables -t nat -A POSTROUTING -o "$veth_peer" -j MASQUERADE \
|
|
&& ip netns exec "$probe" iptables -A FORWARD -i "$veth_peer" -o lo \
|
|
-m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT; then
|
|
ip link delete "$veth_root"
|
|
veth_root=""
|
|
ip link delete "$bridge"
|
|
bridge=""
|
|
ip netns delete "$probe"
|
|
probe=""
|
|
results="${RUNNER_TEMP:-/tmp}/rendezvous-netns-results"
|
|
mkdir -p "$results"
|
|
RENDEZVOUS_RUN_NETNS_TESTS=1 dotnet test Rendezvous.slnx \
|
|
--configuration Release \
|
|
--no-build \
|
|
--filter FullyQualifiedName~PrivilegedLinuxNatNamespacesCompleteDirectTrafficAcrossSeparateObservedEndpoints \
|
|
--logger "trx;LogFileName=netns.trx" \
|
|
--results-directory "$results"
|
|
grep -q 'testName="[^"]*\.PrivilegedLinuxNatNamespacesCompleteDirectTrafficAcrossSeparateObservedEndpoints"' \
|
|
"$results/netns.trx"
|
|
else
|
|
echo "Network namespaces/NAT tooling unavailable; deterministic loopback topology remains the required gate."
|
|
fi
|