@foss.global/forgefixtures 0.2.0

package/dist_ts/classes.gitlabfixture.js

@@ -0,0 +1,237 @@
+import { gitlabFixtureImage } from './constants.js';
+import { ForgeFixtureContainerLifecycle } from './classes.containerlifecycle.js';
+const httpPort = 80;
+const adminUsername = 'root';
+const usernamePattern = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,254}$/;
+const tokenNamePattern = /^[A-Za-z0-9 _.-]{1,64}$/;
+const scopePattern = /^[a-z_]{1,64}$/;
+const tokenMarker = 'FORGEFIXTURES_TOKEN=';
+const tokenPattern = /^[A-Za-z0-9_.-]{20,256}$/;
+const railsRunnerTimeoutMs = 10 * 60 * 1000;
+/**
+ * Written by the image's post-reconfigure hook (`GITLAB_POST_RECONFIGURE_SCRIPT`,
+ * evaluated by `/assets/init-container` once `gitlab-ctl reconfigure` returned).
+ * Before that, services are still being configured and restarted.
+ */
+const reconfiguredMarker = '/run/forgefixtures-reconfigured';
+const sleep = (msArg) => new Promise((resolveArg) => setTimeout(resolveArg, msArg));
+/** Default rootless Docker socket of the current user. */
+export const defaultRootlessDockerSocket = () => {
+    const runtimeDirectory = process.env.XDG_RUNTIME_DIR ?? `/run/user/${process.getuid?.() ?? 0}`;
+    return `unix://${runtimeDirectory}/docker.sock`;
+};
+/**
+ * Memory-constrained omnibus configuration from GitLab's documentation for
+ * small instances, behind this package's TLS-terminating proxy.
+ */
+const omnibusConfiguration = (baseUrlArg) => [
+    `external_url '${baseUrlArg}'`,
+    `nginx['listen_port'] = ${httpPort}`,
+    `nginx['listen_https'] = false`,
+    `letsencrypt['enable'] = false`,
+    `puma['worker_processes'] = 0`,
+    `sidekiq['concurrency'] = 10`,
+    `prometheus_monitoring['enable'] = false`,
+    `gitlab_kas['enable'] = false`,
+    `gitlab_rails['usage_ping_enabled'] = false`,
+    `gitlab_rails['env'] = { 'MALLOC_CONF' => 'dirty_decay_ms:1000,muzzy_decay_ms:1000' }`,
+    `gitaly['env'] = { 'MALLOC_CONF' => 'dirty_decay_ms:1000,muzzy_decay_ms:1000', 'GITALY_COMMAND_SPAWN_MAX_PARALLEL' => '2' }`,
+].join('\n');
+/**
+ * A disposable self-managed GitLab CE from the pinned omnibus image, served over
+ * verified loopback TLS. The omnibus image must run as root, which this package
+ * permits only on a verified rootless Docker daemon.
+ */
+export class GitlabFixture {
+    #options;
+    #lifecycle;
+    #runtime;
+    #starting;
+    constructor(optionsArg = {}) {
+        this.#options = { ...optionsArg };
+        this.#lifecycle = new ForgeFixtureContainerLifecycle('gitlab', {
+            ...optionsArg,
+            dockerSocketPath: optionsArg.dockerSocketPath ?? defaultRootlessDockerSocket(),
+        }, 12 * 60 * 1000);
+    }
+    get runtime() {
+        if (!this.#runtime)
+            throw new Error('The GitLab fixture is not running.');
+        return this.#runtime;
+    }
+    /** HTTPS client scoped to this fixture's origin and CA. */
+    get http() {
+        return this.#lifecycle.http;
+    }
+    /** Report of the stale-fixture reaper run that preceded this start. */
+    get reapReport() {
+        return this.#lifecycle.lastReapReport;
+    }
+    /**
+     * Starts the fixture and returns once the container is healthy, an
+     * administrator token exists and GitLab reports the pinned version.
+     * A fixture starts at most once.
+     */
+    start() {
+        if (this.#starting)
+            return Promise.reject(new Error('The GitLab fixture was already started.'));
+        this.#starting = this.#start();
+        return this.#starting;
+    }
+    async #start() {
+        const endpoint = await this.#lifecycle.prepare();
+        try {
+            await this.#lifecycle.startContainer({
+                image: gitlabFixtureImage,
+                user: 'root',
+                allowRootOnRootless: true,
+                command: ['/assets/init-container'],
+                env: {
+                    GITLAB_OMNIBUS_CONFIG: omnibusConfiguration(endpoint.baseUrl),
+                    GITLAB_POST_RECONFIGURE_SCRIPT: `touch ${reconfiguredMarker}`,
+                },
+                httpPort,
+                volumes: [
+                    { purpose: 'config', target: '/etc/gitlab' },
+                    { purpose: 'data', target: '/var/opt/gitlab' },
+                    { purpose: 'logs', target: '/var/log/gitlab' },
+                ],
+                memoryBytes: this.#options.memoryBytes ?? 5 * 1024 * 1024 * 1024,
+                nanoCpus: this.#options.nanoCpus ?? 4_000_000_000,
+                pidsLimit: 4096,
+                shmSizeBytes: 256 * 1024 * 1024,
+                stopTimeoutSeconds: 30,
+                // The image's own HTTP check, gated on the finished reconfigure: before reconfigure
+                // renders its target, `gitlab-healthcheck` succeeds without checking anything.
+                healthcheck: {
+                    test: ['CMD-SHELL', `test -e ${reconfiguredMarker} && exec /opt/gitlab/bin/gitlab-healthcheck --fail --max-time 10`],
+                    intervalMs: 10_000,
+                    timeoutMs: 30_000,
+                    startPeriodMs: this.#lifecycle.startupTimeoutMs,
+                    startIntervalMs: 5_000,
+                    retries: 5,
+                },
+            });
+            await this.#waitForReady(Date.now() + this.#lifecycle.startupTimeoutMs);
+            const token = await this.createAccessToken({
+                username: adminUsername, tokenName: 'forgefixtures-admin', scopes: ['api', 'sudo'],
+            });
+            this.#lifecycle.assertNotStopping();
+            const version = await this.#readVersion(token);
+            if (version !== gitlabFixtureImage.version) {
+                throw new Error(`GitLab reports version ${version}; the pinned image is ${gitlabFixtureImage.version}.`);
+            }
+            this.#lifecycle.assertNotStopping();
+            this.#runtime = {
+                kind: 'gitlab',
+                lifecycleId: this.#lifecycle.lifecycleId,
+                baseUrl: endpoint.baseUrl,
+                caCertificatePem: endpoint.caCertificatePem,
+                version,
+                image: gitlabFixtureImage,
+                admin: { username: adminUsername, token },
+            };
+            return this.#runtime;
+        }
+        catch (error) {
+            const reported = this.#lifecycle.stopAwareError(error);
+            try {
+                await this.#lifecycle.stop();
+            }
+            catch (cleanupError) {
+                throw new AggregateError([reported, cleanupError], 'The GitLab fixture failed to start and to clean up.');
+            }
+            throw reported;
+        }
+    }
+    /**
+     * Creates a personal access token with GitLab's documented programmatic
+     * method (`gitlab-rails runner`). The script travels on stdin, so neither it
+     * nor the token appears in process arguments; the token is returned, never logged.
+     */
+    async createAccessToken(requestArg) {
+        if (!usernamePattern.test(requestArg.username) || !tokenNamePattern.test(requestArg.tokenName)
+            || requestArg.scopes.length === 0 || !requestArg.scopes.every((scopeArg) => scopePattern.test(scopeArg))) {
+            throw new TypeError('The access token request is malformed.');
+        }
+        const script = [
+            `user = User.find_by_username!(${JSON.stringify(requestArg.username)})`,
+            `token = user.personal_access_tokens.create!(name: ${JSON.stringify(requestArg.tokenName)}, `
+                + `scopes: ${JSON.stringify(requestArg.scopes)}, expires_at: 2.days.from_now)`,
+            `puts "${tokenMarker}#{token.token}"`,
+        ].join('\n');
+        const result = await this.#lifecycle.exec(['/opt/gitlab/bin/gitlab-rails', 'runner', '-'], {
+            stdin: script, timeoutMs: railsRunnerTimeoutMs,
+        });
+        if (result.exitCode !== 0) {
+            // A failed run printed no token; its output carries Rails' error report.
+            const diagnostics = `${result.stderr}\n${result.stdout}`.split('\n')
+                .filter((lineArg) => !lineArg.startsWith(tokenMarker)).join('\n').trim().slice(-2048);
+            throw new Error(`gitlab-rails runner failed to create a token for ${requestArg.username} (exit ${result.exitCode}): ${diagnostics}`);
+        }
+        const line = result.stdout.split('\n').find((lineArg) => lineArg.startsWith(tokenMarker));
+        const token = line?.slice(tokenMarker.length).trim();
+        if (!token || !tokenPattern.test(token))
+            throw new Error('gitlab-rails runner returned no access token in the expected format.');
+        return token;
+    }
+    /**
+     * Removes every resource of this fixture. A start in progress is cancelled at
+     * its next checkpoint and awaited first, so nothing it created survives.
+     * Idempotent; retries incomplete cleanup.
+     */
+    async stop() {
+        this.#runtime = undefined;
+        this.#lifecycle.requestStop();
+        const starting = this.#starting;
+        if (starting)
+            await starting.catch(() => undefined);
+        await this.#lifecycle.stop();
+    }
+    /**
+     * Waits until Docker reports the container healthy, which requires the
+     * finished reconfigure and a passing image HTTP check, and until the Rails
+     * API answers behind the proxy: an unauthenticated `/api/v4/version`
+     * answering 401 proves that nginx, Workhorse and Puma serve the API. Docker
+     * counts failed checks only after the first success, so `unhealthy` means
+     * GitLab broke after it was up.
+     */
+    async #waitForReady(deadlineArg) {
+        let health = 'none';
+        let api = 'not probed';
+        while (Date.now() < deadlineArg) {
+            this.#lifecycle.assertNotStopping();
+            await this.#lifecycle.assertContainerRunning();
+            health = await this.#lifecycle.containerHealth();
+            if (health === 'unhealthy')
+                break;
+            if (health === 'healthy') {
+                try {
+                    const response = await this.#lifecycle.http.request({
+                        method: 'GET', url: '/api/v4/version', expectedStatus: [401, 502, 503], timeoutMs: 10_000,
+                    });
+                    if (response.status === 401)
+                        return;
+                    api = `status ${response.status}`;
+                }
+                catch (error) {
+                    api = error instanceof Error ? error.message : String(error);
+                }
+            }
+            await sleep(5_000);
+        }
+        this.#lifecycle.assertNotStopping();
+        const reason = health === 'unhealthy' ? 'became unhealthy' : `did not become ready within ${this.#lifecycle.startupTimeoutMs} ms`;
+        throw new Error(`GitLab ${reason} (health ${health}, API ${api}). Last logs:\n${await this.#lifecycle.logsTail(60)}`);
+    }
+    async #readVersion(tokenArg) {
+        const body = await this.#lifecycle.http.requestJson({
+            method: 'GET', url: '/api/v4/version', headers: { 'private-token': tokenArg }, expectedStatus: [200],
+        });
+        const version = typeof body === 'object' && body !== null ? Reflect.get(body, 'version') : undefined;
+        if (typeof version !== 'string')
+            throw new Error('GitLab answered /api/v4/version without a version.');
+        return version;
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/classes.gitlabseed.d.ts

@@ -0,0 +1,13 @@
+import type { GitlabFixture } from './classes.gitlabfixture.js';
+import type { IGitlabSeedManifest, IGitlabSeedSpec } from './interfaces.gitlabseed.js';
+/** Rejects inconsistent specs before the first mutation. */
+export declare const validateGitlabSeedSpec: (specArg: IGitlabSeedSpec) => void;
+/**
+ * Seeds a running {@link GitlabFixture} through GitLab's documented REST API,
+ * then reads everything back into a ground-truth manifest.
+ */
+export declare class GitlabSeedBuilder {
+    #private;
+    constructor(fixtureArg: GitlabFixture);
+    apply(specArg: IGitlabSeedSpec): Promise<IGitlabSeedManifest>;
+}