@celilo/e2e 0.9.0 → 0.9.1

package/bin/e2e-bake-management

@@ -253,7 +253,7 @@ async function bakeViaPublished(): Promise<void> {
     process.stdout.write('  bun add -g (real npm) .. ');
     const t2 = Date.now();
     const add = await dexec(
-      'bun add -g @celilo/cli@alpha @celilo/event-bus@alpha @celilo/e2e@alpha 2>&1',
+      'bun add -g @celilo/cli@latest @celilo/event-bus@latest @celilo/e2e@latest 2>&1',
     );
     if (add.exitCode !== 0) {
       console.log(`✗ exit ${add.exitCode}`);
@@ -275,7 +275,14 @@ async function bakeViaPublished(): Promise<void> {
 
     process.stdout.write('  docker commit .......... ');
     const t3 = Date.now();
-    run(`docker commit ${name} celilo-e2e/management:latest`);
+    // The vanilla container was started with `sleep infinity`; docker commit
+    // persists the running Cmd, so override it back to the management image's
+    // real entrypoint (Dockerfile.management: CMD ["/startup.sh"], no
+    // ENTRYPOINT). Without this the baked image never runs /startup.sh ->
+    // ssh-keys volume stays empty -> fw-main crashloops (ce-um6).
+    run(
+      `docker commit --change 'CMD ["/startup.sh"]' ${name} celilo-e2e/management:latest`,
+    );
     console.log(`✔ ${Math.round((Date.now() - t3) / 1000)}s`);
   } finally {
     process.stdout.write('  removing container ..... ');

package/config/dns/example.net.zone

@@ -0,0 +1,16 @@
+$ORIGIN example.net.
+$TTL 300
+
+@ IN SOA ns1.example.net. admin.example.net. (
+    2024020108 300 60 604800 300
+)
+
+; Public DNS — RFC 1918 addresses NEVER appear here. The whole point of
+; the e2e simulation is to model real internet connectivity, where
+; private IPs are unreachable from outside. All public-facing names
+; resolve to the firewall's external IP (100.100.0.100), which DNATs
+; inbound to the right internal host.
+@       IN NS   ns1.example.net.
+ns1     IN A    100.64.0.55
+@       IN A    100.100.0.100
+www     IN A    100.100.0.100

package/config/dns/iamtheinternet.org.zone

@@ -0,0 +1,16 @@
+$ORIGIN iamtheinternet.org.
+$TTL 300
+
+@ IN SOA ns1.iamtheinternet.org. admin.iamtheinternet.org. (
+    2024020247 300 60 604800 300
+)
+
+; Public DNS — RFC 1918 addresses NEVER appear here. The whole point of
+; the e2e simulation is to model real internet connectivity, where
+; private IPs are unreachable from outside. All public-facing names
+; resolve to the firewall's external IP (100.100.0.100), which DNATs
+; inbound to the right internal host.
+@       IN NS   ns1.iamtheinternet.org.
+ns1     IN A    100.64.0.55
+@       IN A    0.0.0.0
+www     IN A    100.100.0.100

package/docker/Dockerfile.management

@@ -19,6 +19,12 @@ COPY config/apt/99retries.conf /etc/apt/apt.conf.d/99retries.conf
 
 RUN apt-get update && apt-get install -y \
     openssh-client \
+    # openssh-server: the celilo-bootstrap deb Depends on it (remote-API server).
+    # Pre-caching it here keeps the bootstrap-apt foreground `apt install` fast
+    # (no download over the bumped Squid path) and mirrors reality — a real
+    # management box already runs sshd. The deb still owns the celilo-api account
+    # + forced-command authorized_keys; this only pre-stages the package.
+    openssh-server \
     ansible \
     iproute2 \
     iputils-ping \

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celilo/e2e",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "E2E test infrastructure for Celilo-deployed applications. Provides a simulated internet with DNS hierarchy, ACME server, firewalls, and target machines in Docker.",
   "type": "module",
   "main": "./src/index.ts",
@@ -37,8 +37,8 @@
     "README.md"
   ],
   "dependencies": {
-    "@celilo/cli-display": "^0.1.9",
-    "@celilo/event-bus": "^0.1.8",
+    "@celilo/cli-display": "workspace:^",
+    "@celilo/event-bus": "workspace:^",
     "yaml": "^2.8.0",
     "zod": "^3.24.1"
   },

package/scripts/pack-celilo-packages.ts

@@ -32,6 +32,7 @@
 import { execSync } from 'node:child_process';
 import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
+import { ensureRegistryServerBundle } from '../src/registry-bundle';
 
 const REPO_ROOT = join(import.meta.dir, '..', '..', '..');
 
@@ -187,6 +188,15 @@ function main(): void {
   rmSync(destination, { recursive: true, force: true });
   mkdirSync(destination, { recursive: true });
 
+  // @celilo/e2e's `files[]` ships `registry-server/`, but that directory is a
+  // .gitignored build artifact — absent in a fresh checkout, so `bun pm pack`
+  // would silently pack an e2e tarball WITHOUT it. A monorepo-free consumer's
+  // `cele2e build-infra` then dies in buildDockerImages (ensureRegistryServerBundle:
+  // "published without its registry-server bundle"). Regenerate it from the
+  // sibling packages/registry-server before packing, exactly as buildDockerImages
+  // does in-monorepo. (This is why npm-consumer-smoke was red — ce-3rs.)
+  ensureRegistryServerBundle(join(REPO_ROOT, 'packages', 'e2e'));
+
   console.log(`Packing @celilo/* packages → ${destination}`);
   console.log('');