Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 6495bb0

Browse files
mtojekmtojek
committed
Merge branch 'main' into 9470-fallback-is-healthy
2 parents fa7224f + e0afee1 commit 6495bb0

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

77 files changed

+1899
-692
lines changed

‎.github/actions/setup-go/action.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: |
44
inputs:
55
version:
66
description: "The Go version to use."
7-
default: "1.20.10"
7+
default: "1.20.11"
88
runs:
99
using: "composite"
1010
steps:

‎.github/actions/setup-tf/action.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ runs:
55
using: "composite"
66
steps:
77
- name: Install Terraform
8-
uses: hashicorp/setup-terraform@v2
8+
uses: hashicorp/setup-terraform@v3
99
with:
10-
terraform_version: 1.5.5
10+
terraform_version: 1.5.7
1111
terraform_wrapper: false

‎.github/workflows/ci.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -136,7 +136,7 @@ jobs:
136136
137137
# Check for any typos
138138
- name: Check for typos
139-
uses: crate-ci/[email protected].22
139+
uses: crate-ci/[email protected].23
140140
with:
141141
config: .github/workflows/typos.toml
142142

@@ -220,7 +220,7 @@ jobs:
220220
with:
221221
# This doesn't need caching. It's super fast anyways!
222222
cache: false
223-
go-version: 1.20.10
223+
go-version: 1.20.11
224224

225225
- name: Install shfmt
226226
run: go install mvdan.cc/sh/v3/cmd/[email protected]

‎.github/workflows/dogfood.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
echo "tag=${tag}" >> $GITHUB_OUTPUT
3939
4040
- name: Install Nix
41-
uses: DeterminateSystems/nix-installer-action@v6
41+
uses: DeterminateSystems/nix-installer-action@v7
4242

4343
- name: Run the Magic Nix Cache
4444
uses: DeterminateSystems/magic-nix-cache-action@v2

‎.github/workflows/security.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -122,7 +122,7 @@ jobs:
122122
image_name: ${{ steps.build.outputs.image }}
123123

124124
- name: Run Trivy vulnerability scanner
125-
uses: aquasecurity/trivy-action@f78e9ecf42a1271402d4f484518b9313235990e1
125+
uses: aquasecurity/trivy-action@2b6a709cf9c4025c5438138008beaddbb02086f0
126126
with:
127127
image-ref: ${{ steps.build.outputs.image }}
128128
format: sarif

‎.github/workflows/stale.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
# Start with the oldest issues, always.
3232
ascending: true
3333
- name: "Close old issues labeled likely-no"
34-
uses: actions/github-script@v5
34+
uses: actions/github-script@v6
3535
with:
3636
github-token: ${{ secrets.GITHUB_TOKEN }}
3737
script: |

‎agent/agentssh/forward.go

Lines changed: 17 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,7 @@ type forwardedUnixHandler struct {
3737
}
3838

3939
func (h *forwardedUnixHandler) HandleSSHRequest(ctx ssh.Context, _ *ssh.Server, req *gossh.Request) (bool, []byte) {
40+
h.log.Debug(ctx, "handling SSH unix forward")
4041
h.Lock()
4142
if h.forwards == nil {
4243
h.forwards = make(map[string]net.Listener)
@@ -47,22 +48,25 @@ func (h *forwardedUnixHandler) HandleSSHRequest(ctx ssh.Context, _ *ssh.Server,
4748
h.log.Warn(ctx, "SSH unix forward request from client with no gossh connection")
4849
return false, nil
4950
}
51+
log := h.log.With(slog.F("remote_addr", conn.RemoteAddr()))
5052

5153
switch req.Type {
5254
case "[email protected]":
5355
var reqPayload streamLocalForwardPayload
5456
err := gossh.Unmarshal(req.Payload, &reqPayload)
5557
if err != nil {
56-
h.log.Warn(ctx, "parse [email protected] request payload from client", slog.Error(err))
58+
h.log.Warn(ctx, "parse [email protected] request (SSH unix forward) payload from client", slog.Error(err))
5759
return false, nil
5860
}
5961

6062
addr := reqPayload.SocketPath
63+
log = log.With(slog.F("socket_path", addr))
64+
log.Debug(ctx, "request begin SSH unix forward")
6165
h.Lock()
6266
_, ok := h.forwards[addr]
6367
h.Unlock()
6468
if ok {
65-
h.log.Warn(ctx, "SSH unix forward request for socket path that is already being forwarded (maybe to another client?)",
69+
log.Warn(ctx, "SSH unix forward request for socket path that is already being forwarded (maybe to another client?)",
6670
slog.F("socket_path", addr),
6771
)
6872
return false, nil
@@ -72,22 +76,22 @@ func (h *forwardedUnixHandler) HandleSSHRequest(ctx ssh.Context, _ *ssh.Server,
7276
parentDir := filepath.Dir(addr)
7377
err = os.MkdirAll(parentDir, 0o700)
7478
if err != nil {
75-
h.log.Warn(ctx, "create parent dir for SSH unix forward request",
79+
log.Warn(ctx, "create parent dir for SSH unix forward request",
7680
slog.F("parent_dir", parentDir),
77-
slog.F("socket_path", addr),
7881
slog.Error(err),
7982
)
8083
return false, nil
8184
}
8285

8386
ln, err := net.Listen("unix", addr)
8487
if err != nil {
85-
h.log.Warn(ctx, "listen on Unix socket for SSH unix forward request",
88+
log.Warn(ctx, "listen on Unix socket for SSH unix forward request",
8689
slog.F("socket_path", addr),
8790
slog.Error(err),
8891
)
8992
return false, nil
9093
}
94+
log.Debug(ctx, "SSH unix forward listening on socket")
9195

9296
// The listener needs to successfully start before it can be added to
9397
// the map, so we don't have to worry about checking for an existing
@@ -97,6 +101,7 @@ func (h *forwardedUnixHandler) HandleSSHRequest(ctx ssh.Context, _ *ssh.Server,
97101
h.Lock()
98102
h.forwards[addr] = ln
99103
h.Unlock()
104+
log.Debug(ctx, "SSH unix forward added to cache")
100105

101106
ctx, cancel := context.WithCancel(ctx)
102107
go func() {
@@ -110,22 +115,23 @@ func (h *forwardedUnixHandler) HandleSSHRequest(ctx ssh.Context, _ *ssh.Server,
110115
c, err := ln.Accept()
111116
if err != nil {
112117
if !xerrors.Is(err, net.ErrClosed) {
113-
h.log.Warn(ctx, "accept on local Unix socket for SSH unix forward request",
114-
slog.F("socket_path", addr),
118+
log.Warn(ctx, "accept on local Unix socket for SSH unix forward request",
115119
slog.Error(err),
116120
)
117121
}
118122
// closed below
123+
log.Debug(ctx, "SSH unix forward listener closed")
119124
break
120125
}
126+
log.Debug(ctx, "accepted SSH unix forward connection")
121127
payload := gossh.Marshal(&forwardedStreamLocalPayload{
122128
SocketPath: addr,
123129
})
124130

125131
go func() {
126132
ch, reqs, err := conn.OpenChannel("[email protected]", payload)
127133
if err != nil {
128-
h.log.Warn(ctx, "open SSH channel to forward Unix connection to client",
134+
h.log.Warn(ctx, "open SSH unix forward channel to client",
129135
slog.F("socket_path", addr),
130136
slog.Error(err),
131137
)
@@ -143,6 +149,7 @@ func (h *forwardedUnixHandler) HandleSSHRequest(ctx ssh.Context, _ *ssh.Server,
143149
delete(h.forwards, addr)
144150
}
145151
h.Unlock()
152+
log.Debug(ctx, "SSH unix forward listener removed from cache", slog.F("path", addr))
146153
_ = ln.Close()
147154
}()
148155

@@ -152,9 +159,10 @@ func (h *forwardedUnixHandler) HandleSSHRequest(ctx ssh.Context, _ *ssh.Server,
152159
var reqPayload streamLocalForwardPayload
153160
err := gossh.Unmarshal(req.Payload, &reqPayload)
154161
if err != nil {
155-
h.log.Warn(ctx, "parse [email protected] request payload from client", slog.Error(err))
162+
h.log.Warn(ctx, "parse [email protected] (SSH unix forward) request payload from client", slog.Error(err))
156163
return false, nil
157164
}
165+
log.Debug(ctx, "request to cancel SSH unix forward", slog.F("path", reqPayload.SocketPath))
158166
h.Lock()
159167
ln, ok := h.forwards[reqPayload.SocketPath]
160168
h.Unlock()

‎cli/agent.go

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,6 @@ import (
88
"net/http/pprof"
99
"net/url"
1010
"os"
11-
"os/signal"
1211
"path/filepath"
1312
"runtime"
1413
"strconv"
@@ -144,7 +143,7 @@ func (r *RootCmd) workspaceAgent() *clibase.Cmd {
144143
// Note that we don't want to handle these signals in the
145144
// process that runs as PID 1, that's why we do this after
146145
// the reaper forked.
147-
ctx, stopNotify := signal.NotifyContext(ctx, InterruptSignals...)
146+
ctx, stopNotify := inv.SignalNotifyContext(ctx, InterruptSignals...)
148147
defer stopNotify()
149148

150149
// DumpHandler does signal handling, so we call it after the

‎cli/clibase/cmd.go

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,9 @@ import (
77
"fmt"
88
"io"
99
"os"
10+
"os/signal"
1011
"strings"
12+
"testing"
1113
"unicode"
1214

1315
"github.com/spf13/pflag"
@@ -183,6 +185,9 @@ type Invocation struct {
183185
Stdout io.Writer
184186
Stderr io.Writer
185187
Stdin io.Reader
188+
189+
// testing
190+
signalNotifyContext func(parent context.Context, signals ...os.Signal) (ctx context.Context, stop context.CancelFunc)
186191
}
187192

188193
// WithOS returns the invocation as a main package, filling in the invocation's unset
@@ -197,6 +202,26 @@ func (inv *Invocation) WithOS() *Invocation {
197202
})
198203
}
199204

205+
// WithTestSignalNotifyContext allows overriding the default implementation of SignalNotifyContext.
206+
// This should only be used in testing.
207+
func (inv *Invocation) WithTestSignalNotifyContext(
208+
_ testing.TB, // ensure we only call this from tests
209+
f func(parent context.Context, signals ...os.Signal) (ctx context.Context, stop context.CancelFunc),
210+
) *Invocation {
211+
return inv.with(func(i *Invocation) {
212+
i.signalNotifyContext = f
213+
})
214+
}
215+
216+
// SignalNotifyContext is equivalent to signal.NotifyContext, but supports being overridden in
217+
// tests.
218+
func (inv *Invocation) SignalNotifyContext(parent context.Context, signals ...os.Signal) (ctx context.Context, stop context.CancelFunc) {
219+
if inv.signalNotifyContext == nil {
220+
return signal.NotifyContext(parent, signals...)
221+
}
222+
return inv.signalNotifyContext(parent, signals...)
223+
}
224+
200225
func (inv *Invocation) Context() context.Context {
201226
if inv.ctx == nil {
202227
return context.Background()

‎cli/clitest/signal.go

Lines changed: 59 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,59 @@
1+
package clitest
2+
3+
import (
4+
"context"
5+
"os"
6+
"sync"
7+
"testing"
8+
9+
"github.com/stretchr/testify/assert"
10+
)
11+
12+
type FakeSignalNotifier struct {
13+
sync.Mutex
14+
t *testing.T
15+
ctx context.Context
16+
cancel context.CancelFunc
17+
signals []os.Signal
18+
stopped bool
19+
}
20+
21+
func NewFakeSignalNotifier(t *testing.T) *FakeSignalNotifier {
22+
fsn := &FakeSignalNotifier{t: t}
23+
return fsn
24+
}
25+
26+
func (f *FakeSignalNotifier) Stop() {
27+
f.Lock()
28+
defer f.Unlock()
29+
f.stopped = true
30+
if f.cancel == nil {
31+
f.t.Error("stopped before started")
32+
return
33+
}
34+
f.cancel()
35+
}
36+
37+
func (f *FakeSignalNotifier) NotifyContext(parent context.Context, signals ...os.Signal) (ctx context.Context, stop context.CancelFunc) {
38+
f.Lock()
39+
defer f.Unlock()
40+
f.signals = signals
41+
f.ctx, f.cancel = context.WithCancel(parent)
42+
return f.ctx, f.Stop
43+
}
44+
45+
func (f *FakeSignalNotifier) Notify() {
46+
f.Lock()
47+
defer f.Unlock()
48+
if f.cancel == nil {
49+
f.t.Error("notified before started")
50+
return
51+
}
52+
f.cancel()
53+
}
54+
55+
func (f *FakeSignalNotifier) AssertStopped() {
56+
f.Lock()
57+
defer f.Unlock()
58+
assert.True(f.t, f.stopped)
59+
}

‎cli/constants.go

Lines changed: 0 additions & 6 deletions
This file was deleted.

‎cli/externalauth.go

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,6 @@ package cli
22

33
import (
44
"encoding/json"
5-
"os/signal"
65

76
"golang.org/x/xerrors"
87

@@ -63,7 +62,7 @@ fi
6362
Handler: func(inv *clibase.Invocation) error {
6463
ctx := inv.Context()
6564

66-
ctx, stop := signal.NotifyContext(ctx, InterruptSignals...)
65+
ctx, stop := inv.SignalNotifyContext(ctx, InterruptSignals...)
6766
defer stop()
6867

6968
client, err := r.createAgentClient()

‎cli/gitaskpass.go

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,6 @@ import (
44
"errors"
55
"fmt"
66
"net/http"
7-
"os/signal"
87
"time"
98

109
"golang.org/x/xerrors"
@@ -26,7 +25,7 @@ func (r *RootCmd) gitAskpass() *clibase.Cmd {
2625
Handler: func(inv *clibase.Invocation) error {
2726
ctx := inv.Context()
2827

29-
ctx, stop := signal.NotifyContext(ctx, InterruptSignals...)
28+
ctx, stop := inv.SignalNotifyContext(ctx, InterruptSignals...)
3029
defer stop()
3130

3231
user, host, err := gitauth.ParseAskpass(inv.Args[0])

‎cli/gitssh.go

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,6 @@ import (
88
"io"
99
"os"
1010
"os/exec"
11-
"os/signal"
1211
"path/filepath"
1312
"strings"
1413

@@ -30,7 +29,7 @@ func (r *RootCmd) gitssh() *clibase.Cmd {
3029

3130
// Catch interrupt signals to ensure the temporary private
3231
// key file is cleaned up on most cases.
33-
ctx, stop := signal.NotifyContext(ctx, InterruptSignals...)
32+
ctx, stop := inv.SignalNotifyContext(ctx, InterruptSignals...)
3433
defer stop()
3534

3635
// Early check so errors are reported immediately.

0 commit comments

Comments
 (0)