@erclx/canon 5.75.0 → 5.77.0

package/tooling/web/configs/scripts/install-playwright-deps.sh

@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+# Installs the Playwright system packages for the named browsers, killing an
+# attempt that outlives its bound and retrying it. A degraded apt mirror hangs
+# one connection rather than failing it, so a step timeout alone turns the
+# hang into a red check and never recovers it, while a fresh attempt usually
+# lands on a healthy backend.
+#
+# Usage: install-playwright-deps.sh [--package <spec>] <browser>...
+# Exits 0 on the first success, 2 when no browser is named, and the last
+# attempt's code when every attempt fails.
+set -e
+
+package=playwright
+if [ "$1" = "--package" ]; then
+  package=$2
+  shift 2
+fi
+
+if [ $# -eq 0 ]; then
+  echo "Usage: install-playwright-deps.sh [--package <spec>] <browser>..." >&2
+  exit 2
+fi
+
+attempts=3
+bound=${INSTALL_ATTEMPT_SECONDS:-150}
+
+# The runner image sets these, yet a stalled log shows gaps of minutes, so
+# print what apt actually reads to settle whether they took effect
+apt-config dump | grep -E '^Acquire::(Retries|http::Timeout) ' || true
+
+status=0
+for attempt in $(seq 1 "$attempts"); do
+  if [ "$attempt" -gt 1 ]; then
+    # timeout runs as the runner user, and Linux drops its signal to the root
+    # apt-get playwright spawns through sudo. sudo relays it only to its own
+    # child shell, so a root apt-get or dpkg can outlive the kill and hold the
+    # lock the next attempt needs.
+    sudo pkill -KILL -x 'apt-get|dpkg' || true
+    # A kill during unpack leaves dpkg interrupted, which refuses the next
+    # install. Its own failure must not end the loop.
+    sudo dpkg --configure -a || echo "dpkg --configure -a failed before attempt ${attempt}" >&2
+  fi
+
+  status=0
+  timeout --kill-after=10 "$bound" bunx "$package" install-deps "$@" || status=$?
+  if [ "$status" -eq 0 ]; then
+    exit 0
+  fi
+  echo "attempt ${attempt}/${attempts} failed with exit ${status}" >&2
+done
+
+exit "$status"

package/tooling/web/reference.md

@@ -88,6 +88,11 @@ The starter `e2e/home.spec.ts` is seeded once. Sync copies it into a project tha
 - `.github/workflows/verify.yml` runs `static-checks`, `unit-tests`, `build-verify`, and `e2e-tests`. `unit-tests` installs Chromium and runs `test:browser` only when the project defines that script.
 - Read `governance/rules/tooling/ci-workflow.md` for when a workflow's commit-back is right and when a report is
 
+## Playwright installs in CI
+
+- Both workflows install Playwright's system packages through `scripts/install-playwright-deps.sh`, which sits beside `worktree-port.sh` and retries an attempt a stalled apt mirror hangs
+- Expect each system install bounded at 10 minutes and each browser download at 5, while the jobs carry no bound, since test and build time differs per project
+
 ## Design references
 
 - Expect a seeded `canon/design/index.md` stub carrying `auto: false`, copied only when missing, so a project's own index is never replaced