134 lines
7.4 KiB
TypeScript
134 lines
7.4 KiB
TypeScript
import fs from 'fs'
|
||
import path from 'path'
|
||
|
||
describe('deploy-registry.ps1', () => {
|
||
const script = fs.readFileSync(
|
||
path.join(process.cwd(), 'deploy-registry.ps1'),
|
||
'utf8'
|
||
)
|
||
|
||
it('远程部署默认包含升级前数据库、对象存储和 .env 备份', () => {
|
||
expect(script).toContain('[switch]$NoRemoteDbBackup')
|
||
expect(script).toContain('[switch]$NoRemoteObjectStorageBackup')
|
||
expect(script).toContain('[switch]$ExternalDataBackupConfirmed')
|
||
expect(script).toContain('[string]$RemoteBackupHelperImage = "busybox:1.36"')
|
||
expect(script).toContain('env_backup="$backup_dir/.env.before-upgrade"')
|
||
expect(script).toContain('enter_maintenance_for_backup')
|
||
expect(script).toContain('APP_STOPPED_FOR_BACKUP.txt')
|
||
expect(script).toContain("docker compose -f \"$compose_file\" exec -T postgres sh -c 'pg_dump")
|
||
expect(script).toContain('test -s "$db_backup"')
|
||
expect(script).toContain('backup_minio_volume()')
|
||
expect(script).toContain('docker volume inspect "$minio_volume_name"')
|
||
expect(script).toContain('tar -czf /backup/minio-data.tar.gz')
|
||
expect(script).toContain('rm -rf /target/* /target/.[!.]* /target/..?*')
|
||
expect(script).toContain('OBJECT_STORAGE_EXTERNAL.txt')
|
||
expect(script).toContain('backup_minio_volume')
|
||
expect(script).toContain('is_external_database()')
|
||
expect(script).toContain('is_external_object_storage()')
|
||
expect(script).toContain('EXTERNAL_DATABASE_BACKUP_REQUIRED.txt')
|
||
expect(script).toContain('EXTERNAL_OBJECT_STORAGE_BACKUP_REQUIRED.txt')
|
||
expect(script).toContain('external_data_backup_confirmed=$externalDataBackupConfirmed')
|
||
expect(script).toContain('外部数据库备份未确认，已中止升级')
|
||
expect(script).toContain('外部对象存储备份未确认，已中止升级')
|
||
})
|
||
|
||
it('远程部署失败时默认会恢复旧 APP_IMAGE 或旧容器镜像', () => {
|
||
expect(script).toContain('[switch]$NoRollback')
|
||
expect(script).toContain('rollback()')
|
||
expect(script).toContain('trap rollback ERR')
|
||
expect(script.indexOf('trap rollback ERR')).toBeLessThan(script.indexOf('upsert_env APP_IMAGE'))
|
||
expect(script).toContain('write_deploy_context')
|
||
expect(script).toContain('LAST_DEPLOY_CONTEXT.env')
|
||
expect(script).toContain('rollback_image="$old_container_image"')
|
||
expect(script).toContain('docker compose -f "$compose_file" up -d --no-deps --pull never --force-recreate "$compose_service" || true')
|
||
expect(script).toContain('自动回滚只恢复应用镜像和 .env，不自动恢复数据库')
|
||
})
|
||
|
||
it('本地最终健康检查失败时会触发远程回滚', () => {
|
||
expect(script).toContain('function New-RemoteRollbackScript')
|
||
expect(script).toContain('应用健康检查失败，尝试远程回滚')
|
||
expect(script).toContain('New-RemoteRollbackScript -Reason $healthError')
|
||
expect(script).toContain('Invoke-RemoteCommand -Command $rollbackScript -NoRegistryPasswordInput')
|
||
expect(script).toContain('本地最终健康检查失败，准备远程回滚')
|
||
expect(script).toContain('cp "$env_backup" .env')
|
||
expect(script).toContain('docker compose -f "`${compose_file:-docker-compose.prod.yml}" up -d --no-deps --pull never --force-recreate "`${compose_service:-app}"')
|
||
})
|
||
|
||
it('部署后校验运行镜像、版本文件和数据库迁移状态', () => {
|
||
expect(script).toContain('verify_running_image')
|
||
expect(script).toContain('actual_image="$(docker inspect "$container_id" --format')
|
||
expect(script).toContain('运行镜像不匹配')
|
||
expect(script).toContain('运行版本不匹配')
|
||
expect(script).toContain('npx prisma migrate status --schema=prisma/schema.prisma')
|
||
})
|
||
|
||
it('远程健康检查使用可配置超时和最终访问入口', () => {
|
||
expect(script).toContain('[int]$RemoteHealthTimeoutSec = 120')
|
||
expect(script).toContain('$baseUrl = if (-not [string]::IsNullOrWhiteSpace($AppPublicUrl))')
|
||
expect(script).toContain('$deadline = (Get-Date).AddSeconds($RemoteHealthTimeoutSec)')
|
||
expect(script).toContain('健康检查没有在 $RemoteHealthTimeoutSec 秒内通过')
|
||
expect(script).not.toContain('健康检查没有在 60 秒内通过')
|
||
})
|
||
|
||
it('运行时镜像同步包含对象存储备份 helper', () => {
|
||
expect(script).toContain('Source = "busybox:1.36"')
|
||
expect(script).toContain('Repository = "runtime/busybox"')
|
||
expect(script).toContain('Tag = "1.36"')
|
||
})
|
||
|
||
it('支持发布付费模块镜像并输出验证服务器 digest 配置', () => {
|
||
expect(script).toContain('"PublishPremiumModule"')
|
||
expect(script).toContain('[string]$PremiumModuleId = "intranet-penetration-core"')
|
||
expect(script).toContain('[string]$PremiumModuleRepositoryPrefix = "premium"')
|
||
expect(script).toContain('[switch]$AllowMissingPremiumModuleDigest')
|
||
expect(script).toContain('function Invoke-PublishPremiumModule')
|
||
expect(script).toContain('$moduleRepository = "$($PremiumModuleRepositoryPrefix.Trim(\'/\'))/$moduleId"')
|
||
expect(script).toContain('if (-not $SkipPush)')
|
||
expect(script).toContain('未能自动读取付费模块镜像 digest')
|
||
expect(script).toContain('Get-PushedImageDigest -Image $registryImage')
|
||
expect(script).toContain('PREMIUM_MODULE_${envKey}_DIGEST=$digest')
|
||
})
|
||
|
||
it('基础镜像构建上下文必须排除付费模块源码', () => {
|
||
const dockerignore = fs.readFileSync(path.join(process.cwd(), '.dockerignore'), 'utf8')
|
||
|
||
expect(dockerignore).toContain('premium-modules')
|
||
expect(dockerignore).toContain('deploy/registry-proxy')
|
||
})
|
||
|
||
it('试跑和只构建付费模块时不应强制连接 Registry', () => {
|
||
expect(script).toContain('if ($DryRun) {\n return\n }')
|
||
expect(script).toContain('已跳过推送付费模块镜像；未推送时无法作为客户拉取源使用')
|
||
expect(script).toContain('$digest = if ($SkipPush) { "" } else { Get-PushedImageDigest -Image $registryImage }')
|
||
})
|
||
|
||
it('远端 shell 变量应以单引号字符串保留，避免被 PowerShell 提前展开', () => {
|
||
expect(script).toContain('$lines.Add(\'docker compose -f "$compose_file" up -d --pull never\')')
|
||
expect(script).toContain('$lines.Add(\'docker compose -f "$compose_file" ps\')')
|
||
expect(script).not.toContain('$lines.Add("docker compose -f `"$compose_file`"')
|
||
})
|
||
|
||
it('支持飞牛/NAS 普通管理员通过 sudo 执行远程 Docker 升级', () => {
|
||
expect(script).toContain('[switch]$RemoteSudo')
|
||
expect(script).toContain('[SecureString]$RemoteSudoPassword = $null')
|
||
expect(script).toContain('function Ensure-RemoteSudoPasswordIfNeeded')
|
||
expect(script).toContain('$script:RemoteSudoPassword = $Password')
|
||
expect(script).toContain('remote_sudo_enabled=$remoteSudoEnabled')
|
||
expect(script).toContain('IFS= read -r SUDO_PASSWORD')
|
||
expect(script).toContain('sudo -n docker "$@"')
|
||
expect(script).toContain('sudo -n docker "`$@"')
|
||
expect(script).toContain('Invoke-RemoteCommand -Command $rollbackScript -NoRegistryPasswordInput')
|
||
})
|
||
|
||
it('发送到 Linux 的远程脚本会统一去除 Windows 回车符', () => {
|
||
expect(script).toContain('function Normalize-RemoteShellScript')
|
||
expect(script).toContain('($Script -replace "`r`n", "`n") -replace "`r", ""')
|
||
expect(script).toContain('$normalizedCommand = Normalize-RemoteShellScript -Script $Command')
|
||
expect(script).toContain('ConvertTo-ShellSingleQuoted -Value $normalizedCommand')
|
||
})
|
||
|
||
it('读取远端 .env 时会去除 Windows 行尾回车', () => {
|
||
expect(script).toContain('gsub(/\\r$/, "", value)')
|
||
})
|
||
})
|