Cloudron community app transparency reports

13WORKDIR /build
14 
15RUN apt-get update && apt-get install -y --no-install-recommends \
16    gcc \
17    libpq-dev \

35WORKDIR /app
36 
37RUN apt-get update && apt-get install -y --no-install-recommends \
38    ca-certificates \
39    curl \

75wait_for_app() {
76  for _ in $(seq 1 60); do
77    curl -fsS "${BASE}/api/ready" >/dev/null 2>&1 && return 0
78    [ "$(docker inspect -f '{{.State.Running}}' "$APP" 2>/dev/null || true)" = true ] \
79      || fail "normal image exited under Cloudron constraints"

101 
102login() {
103  curl -fsS -X POST "${BASE}/api/auth/login" \
104    -H 'Content-Type: application/json' \
105    -d "{\"email\":\"${ADMIN_EMAIL}\",\"password\":\"${ADMIN_PASSWORD}\"}" \

110docker network create "$NET" >/dev/null
111docker run -d --name "$PG" --network "$NET" \
112  -v "${PGVOL}:/var/lib/postgresql/data" \
113  -e "POSTGRES_USER=${DB_USER}" \
114  -e "POSTGRES_PASSWORD=${DB_PASSWORD}" \

122 
123log "Checking first-run setup and runtime peer link"
124[ "$(curl -fsS "${BASE}/api/setup/status" | json_field setup_required)" = True ] \
125  || fail "fresh Cloudron instance did not require setup"
126curl -fsS "${BASE}/runtime-config.js" | grep -F "$PEER_URL" >/dev/null \

124[ "$(curl -fsS "${BASE}/api/setup/status" | json_field setup_required)" = True ] \
125  || fail "fresh Cloudron instance did not require setup"
126curl -fsS "${BASE}/runtime-config.js" | grep -F "$PEER_URL" >/dev/null \
127  || fail "runtime-config.js did not contain ${PEER_ENV}"
128 

127  || fail "runtime-config.js did not contain ${PEER_ENV}"
128 
129curl -fsS -X POST "${BASE}/api/setup" \
130  -H 'Content-Type: application/json' \
131  -d "{\"email\":\"${ADMIN_EMAIL}\",\"password\":\"${ADMIN_PASSWORD}\",\"full_name\":\"Cloudron Owner\"}" \

142start_app
143wait_for_app
144[ "$(curl -fsS "${BASE}/api/setup/status" | json_field setup_required)" = False ] \
145  || fail "setup reopened after container recreation"
146[ -n "$(login)" ] || fail "administrator login did not survive recreation"

41DB_PASSWORD="e2e-strong-db-password-not-a-default"
42DB_NAME="e2e_bloom"
43DATABASE_URL="postgresql+asyncpg://${DB_USER}:${DB_PASSWORD}@${PG}:5432/${DB_NAME}"
44 
45ADMIN_EMAIL="e2e-admin@e2e.example.com"

90 
91login() {
92  curl -fsS -X POST "${BASE}/api/auth/login" \
93    -H 'Content-Type: application/json' \
94    -d "{\"email\":\"${ADMIN_EMAIL}\",\"password\":\"${ADMIN_PASSWORD}\"}" | json_field access_token

98  local what="$1"
99  for _ in $(seq 1 60); do
100    if curl -fsS "${BASE}/api/ready" >/dev/null 2>&1; then return 0; fi
101    sleep 2
102  done

107  # Reuses the named PGVOL so data survives a container recreate.
108  docker run -d --name "$PG" --network "$NET" \
109    -v "${PGVOL}:/var/lib/postgresql/data" \
110    -e "POSTGRES_USER=${DB_USER}" \
111    -e "POSTGRES_PASSWORD=${DB_PASSWORD}" \

132 
133import_reqif() {
134  curl -fsS -X POST "${BASE}/api/projects/${project_id}/import/reqif" \
135    -H "Authorization: Bearer ${1}" \
136    -F "file=@${PADDED};type=application/xml;filename=e2e.reqif"

161 
162log "/api/health must be liveness-only (never claim database \"connected\")"
163health="$(curl -fsS "${BASE}/api/health")"
164echo "    health = ${health}"
165printf '%s' "$health" | grep -q '"connected"' \

169 
170log "/api/ready must confirm the database"
171ready="$(curl -fsS "${BASE}/api/ready")"
172echo "    ready = ${ready}"
173printf '%s' "$ready" | grep -q '"database":"connected"' \

179 
180log "/api/version must report the released version (${expected_version})"
181version="$(curl -fsS "${BASE}/api/version" | json_field version)"
182echo "    /api/version = ${version}"
183[ "$version" = "$expected_version" ] \

189 
190log "Creating a project (database write)"
191project_id="$(curl -fsS -X POST "${BASE}/api/projects" \
192  -H "Authorization: Bearer ${token}" \
193  -H 'Content-Type: application/json' \

227token="$(login)"
228[ -n "$token" ] || fail "admin login failed after recreation (database did not persist)"
229project_json="$(curl -fsS "${BASE}/api/projects/${project_id}" -H "Authorization: Bearer ${token}")"
230echo "    project = ${project_json}"
231req_count="$(printf '%s' "$project_json" | json_field requirement_count)"

36  set +a
37 
38  DATABASE_URL="$(printf '%s' "$CLOUDRON_POSTGRESQL_URL" | sed 's#^postgres://#postgresql://#')"
39  export DATABASE_URL
40  export BLOOM_DOTENV_DISABLED=1

93chown "$APP_UID:$APP_GID" "$RUN_DIR/runtime-config.js"
94 
95exec /usr/local/bin/supervisord -c /etc/supervisord.conf
96