mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-08-02 21:32:10 +03:00
bb5cb51f3e
* fix(docker): honor OMNIROUTE_BASE_PATH behind reverse-proxy subpaths Next.js basePath is compile-time state; Docker now records the baked value, forwards the env var as a build-arg, patches root-path images at container start when needed, and probes health under the active subpath. Hard Rule #13: scripts/docker/patch-basepath.sh and the entrypoint invoke Node with a fixed argv; OMNIROUTE_BASE_PATH is read from process.env only — never interpolated into sed/awk. Closes #8600 * fix(docs): unblock CI for Docker basePath guide Describe the build-time basePath marker as a sentinel file instead of a fabricated env var, and replace the unsupported ```env fence with bash so fumadocs/Shiki can compile DOCKER_GUIDE.md during DAST smoke. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(docker): add changelog fragment for #8615 basePath bundle patch Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> --------- Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>
57 lines
2.1 KiB
TypeScript
57 lines
2.1 KiB
TypeScript
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
import fs from "node:fs";
|
|
import path from "node:path";
|
|
|
|
const REPO_ROOT = path.resolve(import.meta.dirname, "../..");
|
|
|
|
test("Dockerfile exposes OMNIROUTE_BASE_PATH as a builder-stage build arg", () => {
|
|
const dockerfile = fs.readFileSync(path.join(REPO_ROOT, "Dockerfile"), "utf8");
|
|
assert.match(dockerfile, /ARG OMNIROUTE_BASE_PATH/);
|
|
assert.match(dockerfile, /ENV OMNIROUTE_BASE_PATH=\$OMNIROUTE_BASE_PATH/);
|
|
});
|
|
|
|
test("docker-compose forwards OMNIROUTE_BASE_PATH into image builds", () => {
|
|
const compose = fs.readFileSync(path.join(REPO_ROOT, "docker-compose.yml"), "utf8");
|
|
assert.match(compose, /OMNIROUTE_BASE_PATH: \$\{OMNIROUTE_BASE_PATH:-\}/);
|
|
assert.match(compose, /- OMNIROUTE_BASE_PATH=\$\{OMNIROUTE_BASE_PATH:-\}/);
|
|
});
|
|
|
|
test("entrypoint runs the docker basePath guard before the server starts", () => {
|
|
const entrypoint = fs.readFileSync(path.join(REPO_ROOT, "scripts/check-permissions.sh"), "utf8");
|
|
assert.match(entrypoint, /docker\/ensure-docker-base-path\.mjs/);
|
|
});
|
|
|
|
test("Hard Rule #13: shell basePath helpers never interpolate into sed/awk", () => {
|
|
const shellFiles = [
|
|
"scripts/check-permissions.sh",
|
|
"scripts/docker/patch-basepath.sh",
|
|
];
|
|
for (const rel of shellFiles) {
|
|
const source = fs.readFileSync(path.join(REPO_ROOT, rel), "utf8");
|
|
assert.doesNotMatch(
|
|
source,
|
|
/\b(?:sed|awk)\b.*\$\{?OMNIROUTE_BASE_PATH/,
|
|
`${rel} must not expand OMNIROUTE_BASE_PATH into sed/awk`
|
|
);
|
|
assert.doesNotMatch(
|
|
source,
|
|
/(?:sed|awk).*OMNIROUTE_BASE_PATH/,
|
|
`${rel} must not pass OMNIROUTE_BASE_PATH on a sed/awk command line`
|
|
);
|
|
}
|
|
|
|
const patcher = fs.readFileSync(
|
|
path.join(REPO_ROOT, "scripts/docker/patch-basepath.sh"),
|
|
"utf8"
|
|
);
|
|
assert.match(patcher, /exec node .*ensure-docker-base-path\.mjs/);
|
|
assert.match(patcher, /Hard Rule #13/);
|
|
|
|
const ensure = fs.readFileSync(
|
|
path.join(REPO_ROOT, "scripts/docker/ensure-docker-base-path.mjs"),
|
|
"utf8"
|
|
);
|
|
assert.match(ensure, /process\.env\.OMNIROUTE_BASE_PATH/);
|
|
});
|