This commit is contained in:
Sandro committed
1 parent
bc1b0ad910
commit
d7c22a6ef0
1 file changed
+201
@@ -0,0 +1,201 @@
|
|||||||
|
name: Docker Image Test
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
paths:
|
||||||
|
- 'dockerfile/**'
|
||||||
|
- 'docker-compose.example.yaml'
|
||||||
|
- '.example.env'
|
||||||
|
- '.gitea/workflows/**'
|
||||||
|
pull_request:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
workflow_dispatch:
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
build-and-test:
|
||||||
|
name: Build & Test PHP 8.5 Apache Image
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
|
steps:
|
||||||
|
- name: Checkout Repository
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
|
- name: Build Docker Image
|
||||||
|
run: |
|
||||||
|
docker build -t webhost-test:ci ./dockerfile
|
||||||
|
|
||||||
|
- name: Start Container with Test ENV
|
||||||
|
run: |
|
||||||
|
docker rm -f webhost-test 2>/dev/null || true
|
||||||
|
docker run -d \
|
||||||
|
--name webhost-test \
|
||||||
|
-e SMTP_HOST=127.0.0.1 \
|
||||||
|
-e SMTP_PORT=2525 \
|
||||||
|
-e SMTP_USER=testuser@example.com \
|
||||||
|
-e SMTP_PASS=supersecret \
|
||||||
|
-e SMTP_FROM=noreply@example.com \
|
||||||
|
-e SMTP_TLS=off \
|
||||||
|
-e SMTP_STARTTLS=off \
|
||||||
|
webhost-test:ci
|
||||||
|
|
||||||
|
echo "Waiting for Apache to start..."
|
||||||
|
for i in $(seq 1 15); do
|
||||||
|
if [ "$(docker inspect -f '{{.State.Running}}' webhost-test 2>/dev/null)" = "true" ]; then
|
||||||
|
if docker exec webhost-test apache2ctl -t >/dev/null 2>&1; then
|
||||||
|
echo "Container is running and Apache config is valid."
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
if [ "$i" -eq 15 ]; then
|
||||||
|
echo "Container failed to start in time!"
|
||||||
|
docker logs webhost-test
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
sleep 1
|
||||||
|
done
|
||||||
|
|
||||||
|
- name: Verify PHP Version & Extensions
|
||||||
|
run: |
|
||||||
|
echo "--- Checking PHP Version (8.5.x) ---"
|
||||||
|
docker exec webhost-test php -v
|
||||||
|
docker exec webhost-test php -r '
|
||||||
|
if (version_compare(PHP_VERSION, "8.5.0-dev", "<")) {
|
||||||
|
fwrite(STDERR, "Expected PHP 8.5+, got " . PHP_VERSION . PHP_EOL);
|
||||||
|
exit(1);
|
||||||
|
}
|
||||||
|
'
|
||||||
|
|
||||||
|
echo "--- Checking Required PHP Extensions ---"
|
||||||
|
docker exec webhost-test php -r '
|
||||||
|
$required = ["mysqli", "gd", "imagick", "intl", "zip", "exif", "Zend OPcache"];
|
||||||
|
$missing = [];
|
||||||
|
foreach ($required as $ext) {
|
||||||
|
if (!extension_loaded($ext)) {
|
||||||
|
$missing[] = $ext;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if (!empty($missing)) {
|
||||||
|
fwrite(STDERR, "Missing PHP extensions: " . implode(", ", $missing) . PHP_EOL);
|
||||||
|
exit(1);
|
||||||
|
}
|
||||||
|
echo "All required extensions are loaded: " . implode(", ", $required) . PHP_EOL;
|
||||||
|
'
|
||||||
|
|
||||||
|
echo "--- Checking GD WebP & PNG Support ---"
|
||||||
|
docker exec webhost-test php -r '
|
||||||
|
$gd = gd_info();
|
||||||
|
if (empty($gd["WebP Support"]) || empty($gd["PNG Support"])) {
|
||||||
|
fwrite(STDERR, "GD is missing WebP or PNG support!" . PHP_EOL);
|
||||||
|
print_r($gd);
|
||||||
|
exit(1);
|
||||||
|
}
|
||||||
|
echo "GD WebP & PNG support verified." . PHP_EOL;
|
||||||
|
'
|
||||||
|
|
||||||
|
echo "--- Checking OPcache Configuration ---"
|
||||||
|
docker exec webhost-test php -r '
|
||||||
|
$checks = [
|
||||||
|
"opcache.enable" => "1",
|
||||||
|
"opcache.validate_timestamps" => "0",
|
||||||
|
"opcache.max_accelerated_files" => "10000",
|
||||||
|
"opcache.memory_consumption" => "192",
|
||||||
|
"opcache.max_wasted_percentage" => "10",
|
||||||
|
"opcache.interned_strings_buffer" => "16",
|
||||||
|
];
|
||||||
|
foreach ($checks as $key => $expected) {
|
||||||
|
$actual = (string) ini_get($key);
|
||||||
|
if ($actual !== $expected) {
|
||||||
|
fwrite(STDERR, "Config mismatch for $key: expected $expected, got $actual" . PHP_EOL);
|
||||||
|
exit(1);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
echo "OPcache settings verified." . PHP_EOL;
|
||||||
|
'
|
||||||
|
|
||||||
|
- name: Verify Apache Modules & SSL Certificate
|
||||||
|
run: |
|
||||||
|
echo "--- Checking Apache Modules (ssl, rewrite) ---"
|
||||||
|
MODULES=$(docker exec webhost-test apache2ctl -M)
|
||||||
|
echo "$MODULES" | grep -q "ssl_module" || { echo "ssl_module not enabled"; exit 1; }
|
||||||
|
echo "$MODULES" | grep -q "rewrite_module" || { echo "rewrite_module not enabled"; exit 1; }
|
||||||
|
echo "Apache modules ssl and rewrite are enabled."
|
||||||
|
|
||||||
|
echo "--- Checking Self-Signed SSL Certificate ---"
|
||||||
|
docker exec webhost-test test -s /etc/apache2/certs/apache.crt
|
||||||
|
docker exec webhost-test test -s /etc/apache2/certs/apache.key
|
||||||
|
docker exec webhost-test openssl x509 -in /etc/apache2/certs/apache.crt -noout -subject -dates
|
||||||
|
|
||||||
|
- name: Verify msmtp Entrypoint & Configuration
|
||||||
|
run: |
|
||||||
|
echo "--- Checking /etc/msmtprc & /var/log/msmtp.log ---"
|
||||||
|
docker exec webhost-test sh -c '
|
||||||
|
test -f /etc/msmtprc
|
||||||
|
PERMS=$(stat -c "%a" /etc/msmtprc)
|
||||||
|
OWNER=$(stat -c "%U:%G" /etc/msmtprc)
|
||||||
|
if [ "$PERMS" != "600" ] || [ "$OWNER" != "www-data:www-data" ]; then
|
||||||
|
echo "Unexpected /etc/msmtprc permissions ($PERMS) or owner ($OWNER)"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
grep -q "^host 127.0.0.1$" /etc/msmtprc
|
||||||
|
grep -q "^port 2525$" /etc/msmtprc
|
||||||
|
grep -q "^from noreply@example.com$" /etc/msmtprc
|
||||||
|
grep -q "^user testuser@example.com$" /etc/msmtprc
|
||||||
|
grep -q "^password supersecret$" /etc/msmtprc
|
||||||
|
|
||||||
|
test -f /etc/aliases
|
||||||
|
grep -q "^default: noreply@example.com$" /etc/aliases
|
||||||
|
|
||||||
|
test -f /var/log/msmtp.log
|
||||||
|
LOG_OWNER=$(stat -c "%U:%G" /var/log/msmtp.log)
|
||||||
|
if [ "$LOG_OWNER" != "www-data:www-data" ]; then
|
||||||
|
echo "Unexpected /var/log/msmtp.log owner ($LOG_OWNER)"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
echo "msmtp configuration and permissions verified."
|
||||||
|
'
|
||||||
|
|
||||||
|
- name: Test HTTP, HTTPS & .htaccess Rewrite
|
||||||
|
run: |
|
||||||
|
docker exec webhost-test sh -c '
|
||||||
|
cat << "EOF" > /var/www/html/index.php
|
||||||
|
<?php
|
||||||
|
header("Content-Type: application/json");
|
||||||
|
echo json_encode([
|
||||||
|
"status" => "ok",
|
||||||
|
"php" => PHP_VERSION,
|
||||||
|
"https" => (!empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off"),
|
||||||
|
"rewritten" => ($_GET["rewritten"] ?? "0") === "1"
|
||||||
|
]);
|
||||||
|
EOF
|
||||||
|
|
||||||
|
cat << "EOF" > /var/www/html/.htaccess
|
||||||
|
RewriteEngine On
|
||||||
|
RewriteRule ^rewrite-test$ index.php?rewritten=1 [L,QSA]
|
||||||
|
EOF
|
||||||
|
'
|
||||||
|
|
||||||
|
echo "--- Testing HTTP (Port 80) ---"
|
||||||
|
HTTP_RESP=$(docker exec webhost-test curl -fsS http://127.0.0.1/index.php)
|
||||||
|
echo "HTTP Response: $HTTP_RESP"
|
||||||
|
echo "$HTTP_RESP" | grep -q '"status":"ok"'
|
||||||
|
|
||||||
|
echo "--- Testing HTTPS (Port 443) ---"
|
||||||
|
HTTPS_RESP=$(docker exec webhost-test curl -fsSk https://127.0.0.1/index.php)
|
||||||
|
echo "HTTPS Response: $HTTPS_RESP"
|
||||||
|
echo "$HTTPS_RESP" | grep -q '"status":"ok"'
|
||||||
|
echo "$HTTPS_RESP" | grep -q '"https":true'
|
||||||
|
|
||||||
|
echo "--- Testing .htaccess mod_rewrite ---"
|
||||||
|
REWRITE_RESP=$(docker exec webhost-test curl -fsS http://127.0.0.1/rewrite-test)
|
||||||
|
echo "Rewrite Response: $REWRITE_RESP"
|
||||||
|
echo "$REWRITE_RESP" | grep -q '"rewritten":true'
|
||||||
|
|
||||||
|
- name: Cleanup Container
|
||||||
|
if: always()
|
||||||
|
run: |
|
||||||
|
echo "--- Container Logs ---"
|
||||||
|
docker logs webhost-test || true
|
||||||
|
docker rm -f webhost-test || true
|
||||||
Reference in new issue
Block a user