socat-proxy

8 Commits

Author	SHA1	Message	Date
Djeex	03ee3ee5d5	Fix flaky unit test on merge-triggered CI runs CI / build-and-scan (pull_request) Successful in 1m41s Details - entrypoint.sh: bound the target connectivity check with -w 2 (nc -z had no timeout at all, the only unbounded step in the startup path) - tests/entrypoint.bats: widen wait_for_log's budget from 5s to 10s Merge-triggered runs land on a colder runner (Docker cache evicted by other repos' scheduled jobs since the PR was last tested) than PR-check runs, and the first backgrounded entrypoint.sh in the suite was occasionally landing just past the old 5s window — always passed on rerun once warm.	2026-08-26 15:55:39 +02:00
Djeex	c94da17686	Link each commit in the release changelog to its own commit page CI / build-and-scan (pull_request) Successful in 2m11s Details COMMIT_LIST only rendered the bare subject line per commit, with no way to jump to that specific commit — only the triggering commit (Source:) had a link. Each line now reads "- [<short-sha>](<repo>/commit/<sha>) <subject>", matching the same link style already used for Source.	2026-08-23 23:22:44 +02:00
Djeex	4903484aa4	Release notes: list commits instead of changed files	2026-08-23 23:22:44 +02:00
Djeex	fff6e49350	Run as non-root by default via PUID/PGID CI / build-and-scan (pull_request) Successful in 1m7s Details	2026-08-23 15:10:17 +02:00
DjeexandClaude Sonnet 5	373dbfce2e	Add Renovate config CI / build-and-scan (pull_request) Failing after 40s Details Same policy as adguard-cidre: patch-level Dockerfile bumps automerge, minor/major get a labeled PR, vulnerability alerts labeled bug. No pip_requirements rule — this repo has no Python dependencies to manage. Still needed on the Gitea/Renovate side (manual, not done here): uncomment socat-proxy in the shared ~/renovate/config.js repositories array on stockeex, and create the bot/major/minor/bug labels in this repo's Issues → Labels (Renovate silently drops labels that don't already exist). Co-Authored-By: Claude Sonnet 5 <[email protected]>	2026-08-23 00:02:11 +02:00
DjeexandClaude Sonnet 5	d75172dd62	Add Gitea Actions CI workflow CI / build-and-scan (pull_request) Failing after 1m19s Details Adapted from adguard-cidre's pipeline: build, syntax smoke-test, bats unit tests, shellcheck lint, Trivy critical/high scans, then on push to main a versioned publish (VERSION auto-bump, :latest/:X.Y/:X.Y.Z tags retagged from the already-scanned image, and a categorized Gitea Release). Requires the REGISTRY_TOKEN and CI_PUSH_TOKEN repo secrets and branch protection on main (not yet configured on the Gitea side). Co-Authored-By: Claude Sonnet 5 <[email protected]>	2026-08-22 23:50:47 +02:00
DjeexandClaude Sonnet 5	b825dec8be	Multi-stage Dockerfile: pin base image, add test/lint stages Pin alpine:latest to the full patch-level tag alpine:3.22.1 so Renovate can classify patch/minor/major bumps on it. Add a `test` stage (bats) and a `lint` stage (shellcheck, severity=error) that build from `base` before ENTRYPOINT is set, so CI can run them without an --entrypoint override. A trailing `FROM base` keeps the lean prod image as the default `docker build .` target despite the extra stages. Co-Authored-By: Claude Sonnet 5 <[email protected]>	2026-08-22 23:50:40 +02:00
DjeexandClaude Sonnet 5	f6b27fe51c	Add bats test suite for entrypoint.sh Covers env-var validation, socket path preparation, target connectivity messaging, DEBUG_LEVEL to socat-flag mapping, and graceful shutdown vs. crash detection — run against the real socat/nc binaries rather than mocks, since UNIX-LISTEN binds without needing the TCP target reachable. Co-Authored-By: Claude Sonnet 5 <[email protected]>	2026-08-22 23:50:32 +02:00