carrtech/ct-ops

Fork 0

fix(release): use portable mktemp templates #79

Merged

simon merged 1 commit from fix/customer-bundle-portable-mktemp into main

2026-05-24 07:40:15 +00:00

simon commented

2026-05-24 07:37:45 +00:00

Owner

Summary

install customer-bundle validation tools with sudo when Forgejo's host executor runs unprivileged
replace customer-bundle-facing mktemp -t patterns with BusyBox-compatible templates
handle tokenless licence public-key fetches under bash strict mode
make start.sh tolerate CI images without ip or ifconfig
mock id -u in installer tests so root host-executor containers do not invalidate installer behavior tests

Validation

tokenless licence key fetch smoke test
bash deploy/scripts/test-install.sh
bash deploy/scripts/test-password-manager-startup.sh
bash deploy/scripts/test-upgrade.sh
bash deploy/scripts/test-support-data.sh
bash deploy/scripts/test-forgejo-web-release.sh
bash deploy/scripts/test-forgejo-bundle-release.sh
docker run ghcr.io/catthehacker/ubuntu:act-latest with fetch, installer, and startup tests
docker run alpine:3.22 with fetch, installer, startup, upgrade, support-data, and Forgejo release script tests

## Summary - install customer-bundle validation tools with sudo when Forgejo's host executor runs unprivileged - replace customer-bundle-facing mktemp -t patterns with BusyBox-compatible templates - handle tokenless licence public-key fetches under bash strict mode - make start.sh tolerate CI images without ip or ifconfig - mock id -u in installer tests so root host-executor containers do not invalidate installer behavior tests ## Validation - tokenless licence key fetch smoke test - bash deploy/scripts/test-install.sh - bash deploy/scripts/test-password-manager-startup.sh - bash deploy/scripts/test-upgrade.sh - bash deploy/scripts/test-support-data.sh - bash deploy/scripts/test-forgejo-web-release.sh - bash deploy/scripts/test-forgejo-bundle-release.sh - docker run ghcr.io/catthehacker/ubuntu:act-latest with fetch, installer, and startup tests - docker run alpine:3.22 with fetch, installer, startup, upgrade, support-data, and Forgejo release script tests

simon added 1 commit

2026-05-24 07:37:45 +00:00

fix(release): use portable mktemp templates

Conventional PR title / Conventional PR title (pull_request) Successful in 0s

Details

CI Policy / Workflow runner policy (pull_request) Successful in 6s

Details

Customer bundle check / validate (pull_request) Successful in 14s

Details

Secret Scan / gitleaks (pull_request) Successful in 15s

Details

SAST / crypto-lint (no weak hashes / ciphers) (pull_request) Successful in 1m7s

Details

SAST / semgrep (pull_request) Successful in 1m11s

Details

SAST / trivy (config / IaC) (pull_request) Failing after 1m25s

Details

SAST / trivy (filesystem) (pull_request) Failing after 1m26s

Details

SAST / gosec (ingest) (pull_request) Successful in 1m31s

Details

SAST / gosec (agent) (pull_request) Successful in 1m31s

Details

affad03e52

simon merged commit 653d293f9e into main

2026-05-24 07:40:15 +00:00

No reviewers

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

carrtech/ct-ops!79

No description provided.

Rows
Columns