mirror of
https://github.com/badlogic/pi-mono.git
synced 2026-11-05 23:37:25 +00:00
e6220e1316
Network tests failed with self-signed certificate errors behind proxies that inspect HTTPS (corporate proxies, sandboxes like Gondolin), because test.sh starts tests with an empty environment.
84 lines
2.5 KiB
Bash
Executable file
84 lines
2.5 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
# Isolate user resources, credentials, temporary files, and tool configuration.
|
|
temp_parent="${TMPDIR:-/tmp}"
|
|
temp_parent="${temp_parent%/}"
|
|
test_root="$(mktemp -d "$temp_parent/pi-test.XXXXXX")"
|
|
git_askpass="$(type -P false)"
|
|
readonly temp_parent test_root git_askpass
|
|
|
|
mkdir -p "$test_root/home/.config" "$test_root/tmp" "$test_root/cache/npm"
|
|
# Mark the generated root so cleanup can verify ownership before deleting it.
|
|
touch "$test_root/.pi-test-owned" "$test_root/npm-userconfig" "$test_root/npm-globalconfig"
|
|
|
|
# Only remove the marked directory created above, never an unverified path.
|
|
cleanup() {
|
|
local status=$?
|
|
trap - EXIT
|
|
|
|
case "$test_root" in
|
|
"$temp_parent"/pi-test.*)
|
|
if [[ -d "$test_root" && ! -L "$test_root" && -f "$test_root/.pi-test-owned" ]]; then
|
|
rm -rf -- "$test_root"
|
|
else
|
|
printf "Refusing to remove unverified test directory: %s\n" "$test_root" >&2
|
|
[[ $status -ne 0 ]] || status=1
|
|
fi
|
|
;;
|
|
*)
|
|
printf "Refusing to remove unexpected test directory: %s\n" "$test_root" >&2
|
|
[[ $status -ne 0 ]] || status=1
|
|
;;
|
|
esac
|
|
|
|
exit "$status"
|
|
}
|
|
trap cleanup EXIT
|
|
|
|
# Start from an empty environment and allow only required platform and test settings.
|
|
test_env=(
|
|
"PATH=$PATH"
|
|
"PWD=$PWD"
|
|
"HOME=$test_root/home"
|
|
"USERPROFILE=$test_root/home"
|
|
"TMPDIR=$test_root/tmp"
|
|
"TMP=$test_root/tmp"
|
|
"TEMP=$test_root/tmp"
|
|
"XDG_CONFIG_HOME=$test_root/home/.config"
|
|
"XDG_CACHE_HOME=$test_root/cache"
|
|
"LANG=C"
|
|
"LC_ALL=C"
|
|
"TZ=UTC"
|
|
"GIT_CONFIG_NOSYSTEM=1"
|
|
"GIT_CONFIG_GLOBAL=/dev/null"
|
|
"GIT_TERMINAL_PROMPT=0"
|
|
"GIT_ASKPASS=$git_askpass"
|
|
"GIT_EDITOR=true"
|
|
"GIT_SEQUENCE_EDITOR=true"
|
|
"NPM_CONFIG_USERCONFIG=$test_root/npm-userconfig"
|
|
"NPM_CONFIG_GLOBALCONFIG=$test_root/npm-globalconfig"
|
|
"NPM_CONFIG_CACHE=$test_root/cache/npm"
|
|
"PI_NO_LOCAL_LLM=1"
|
|
"AWS_EC2_METADATA_DISABLED=true"
|
|
)
|
|
|
|
# Native Windows needs these inherited values to launch child processes.
|
|
for name in SystemRoot SYSTEMROOT WINDIR COMSPEC PATHEXT; do
|
|
value="${!name-}"
|
|
[[ -z "$value" ]] || test_env+=("$name=$value")
|
|
done
|
|
|
|
# Trust extra certificates of proxies that inspect HTTPS (corporate proxies, sandboxes).
|
|
# Network tests fail with self-signed certificate errors without it.
|
|
value="${NODE_EXTRA_CA_CERTS-}"
|
|
[[ -z "$value" ]] || test_env+=("NODE_EXTRA_CA_CERTS=$value")
|
|
|
|
# Preserve CI detection only for runner behavior and test reporting.
|
|
for name in CI GITHUB_ACTIONS; do
|
|
value="${!name-}"
|
|
[[ -z "$value" ]] || test_env+=("$name=$value")
|
|
done
|
|
|
|
echo "Running tests without API keys in isolated home: $test_root/home"
|
|
env -i "${test_env[@]}" npm test
|