@@ -1,18 +1,66 @@
11import { spawnSync } from "node:child_process";
22import { readFileSync } from "node:fs";
3+import { runInNewContext } from "node:vm";
34import { describe, expect, it } from "vitest";
4556const SCRIPT_PATH = "scripts/test-install-sh-docker.sh";
67const DOCKER_SETUP_PATH = "scripts/docker/setup.sh";
78const PODMAN_SETUP_PATH = "scripts/podman/setup.sh";
89const PODMAN_RUN_PATH = "scripts/run-openclaw-podman.sh";
910const SMOKE_RUNNER_PATH = "scripts/docker/install-sh-smoke/run.sh";
11+const NONROOT_RUNNER_PATH = "scripts/docker/install-sh-nonroot/run.sh";
1012const BUN_GLOBAL_SMOKE_PATH = "scripts/e2e/bun-global-install-smoke.sh";
1113const BUN_GLOBAL_ASSERTIONS_PATH = "scripts/e2e/lib/bun-global-install/assertions.mjs";
1214const INSTALL_SMOKE_WORKFLOW_PATH = ".github/workflows/install-smoke.yml";
1315const RELEASE_CHECKS_WORKFLOW_PATH = ".github/workflows/openclaw-release-checks.yml";
1416const LIVE_E2E_WORKFLOW_PATH = ".github/workflows/openclaw-live-and-e2e-checks-reusable.yml";
151718+class ScriptExit extends Error {
19+constructor(readonly status: number) {
20+super(`script exited ${String(status)}`);
21+}
22+}
23+24+function extractNonrootNodePreflight(): string {
25+const script = readFileSync(NONROOT_RUNNER_PATH, "utf8");
26+const match = script.match(/node -e '\n([\s\S]*?)\n'\ncommand -v npm/u);
27+if (!match) {
28+throw new Error("non-root smoke Node preflight was not found");
29+}
30+return match[1];
31+}
32+33+function runNonrootNodePreflight(version: string, options: { sqlite?: boolean } = {}) {
34+const stderr: string[] = [];
35+try {
36+runInNewContext(extractNonrootNodePreflight(), {
37+process: {
38+versions: { node: version },
39+stderr: {
40+write(message: string) {
41+stderr.push(message);
42+},
43+},
44+exit(status: number) {
45+throw new ScriptExit(status);
46+},
47+},
48+require(specifier: string) {
49+if (specifier === "node:sqlite" && options.sqlite === false) {
50+throw new Error("missing node:sqlite");
51+}
52+return {};
53+},
54+});
55+return { status: 0, stderr: stderr.join("") };
56+} catch (error) {
57+if (error instanceof ScriptExit) {
58+return { status: error.status, stderr: stderr.join("") };
59+}
60+throw error;
61+}
62+}
63+1664describe("test-install-sh-docker", () => {
1765it("defaults local Apple Silicon smoke runs to native arm64 while keeping CI on amd64", () => {
1866const script = readFileSync(SCRIPT_PATH, "utf8");
@@ -96,6 +144,25 @@ describe("test-install-sh-docker", () => {
96144expect(script).not.toContain("docker run --rm -t \\");
97145});
98146147+it("rejects stale non-root smoke Node runtimes below the runtime floor", () => {
148+const result = runNonrootNodePreflight("22.18.0");
149+150+expect(result.status).toBe(1);
151+expect(result.stderr).toContain("unsupported node 22.18.0");
152+});
153+154+it("rejects non-root smoke Node runtimes without node:sqlite", () => {
155+const result = runNonrootNodePreflight("22.19.0", { sqlite: false });
156+157+expect(result.status).toBe(1);
158+expect(result.stderr).toContain("unsupported node 22.19.0: missing node:sqlite");
159+});
160+161+it("accepts non-root smoke Node runtimes that match the installer runtime floor", () => {
162+expect(runNonrootNodePreflight("22.19.0").status).toBe(0);
163+expect(runNonrootNodePreflight("24.16.0").status).toBe(0);
164+});
165+99166it("runs the root Dockerfile build with the CI heap limit", () => {
100167const dockerfile = readFileSync("Dockerfile", "utf8");
101168@@ -128,7 +195,9 @@ describe("test-install-sh-docker", () => {
128195expect(script).toContain('DOCKER_PULL_TIMEOUT="${OPENCLAW_DOCKER_SETUP_PULL_TIMEOUT:-600s}"');
129196expect(script).toContain("run_docker_pull()");
130197expect(script).toContain("timeout --kill-after=1s 1s true");
131-expect(script).toContain('timeout --kill-after=30s "$DOCKER_PULL_TIMEOUT" docker pull "$image"');
198+expect(script).toContain(
199+'timeout --kill-after=30s "$DOCKER_PULL_TIMEOUT" docker pull "$image"',
200+);
132201expect(script).toContain('timeout "$DOCKER_PULL_TIMEOUT" docker pull "$image"');
133202expect(script).toContain('run_docker_pull "$IMAGE_NAME"');
134203expect(script).not.toContain('docker pull "$IMAGE_NAME"');
@@ -137,12 +206,12 @@ describe("test-install-sh-docker", () => {
137206it("bounds Podman setup image pulls", () => {
138207const script = readFileSync(PODMAN_SETUP_PATH, "utf8");
139208140-expect(script).toContain(
141-'PODMAN_PULL_TIMEOUT="${OPENCLAW_PODMAN_SETUP_PULL_TIMEOUT:-600s}"',
142-);
209+expect(script).toContain('PODMAN_PULL_TIMEOUT="${OPENCLAW_PODMAN_SETUP_PULL_TIMEOUT:-600s}"');
143210expect(script).toContain("run_podman_pull()");
144211expect(script).toContain("timeout --kill-after=1s 1s true");
145-expect(script).toContain('timeout --kill-after=30s "$PODMAN_PULL_TIMEOUT" podman pull "$image"');
212+expect(script).toContain(
213+'timeout --kill-after=30s "$PODMAN_PULL_TIMEOUT" podman pull "$image"',
214+);
146215expect(script).toContain('timeout "$PODMAN_PULL_TIMEOUT" podman pull "$image"');
147216expect(script).toContain('run_podman_pull "$OPENCLAW_IMAGE"');
148217expect(script).not.toContain('podman pull "$OPENCLAW_IMAGE"');
@@ -314,13 +383,9 @@ describe("install-sh smoke runner", () => {
314383]) {
315384expect(script).toContain(envName);
316385}
317-expect(script).toMatch(
318-/Run installer smoke test[\s\S]*"\$\{SMOKE_RUNNER_ENV_ARGS\[@\]\}"/u,
319-);
386+expect(script).toMatch(/Run installer smoke test[\s\S]*"\$\{SMOKE_RUNNER_ENV_ARGS\[@\]\}"/u);
320387expect(script).toMatch(/Run update smoke[\s\S]*"\$\{SMOKE_RUNNER_ENV_ARGS\[@\]\}"/u);
321-expect(script).toMatch(
322-/Run direct npm global smoke[\s\S]*"\$\{SMOKE_RUNNER_ENV_ARGS\[@\]\}"/u,
323-);
388+expect(script).toMatch(/Run direct npm global smoke[\s\S]*"\$\{SMOKE_RUNNER_ENV_ARGS\[@\]\}"/u);
324389expect(script).toMatch(
325390/Run installer npm freshness smoke[\s\S]*"\$\{SMOKE_RUNNER_ENV_ARGS\[@\]\}"/u,
326391);
@@ -396,9 +461,7 @@ describe("bun global install smoke", () => {
396461expect(workflow).toContain("timeout --kill-after=30s 45m docker buildx build");
397462expect(workflow).toContain('timeout --kill-after=30s 600s docker pull "$IMAGE_REF"');
398463expect(workflow).not.toContain('timeout 300s docker pull "$IMAGE_REF"');
399-expect(workflow.match(/timeout --kill-after=30s 20m docker run --rm/g)?.length).toBe(
400-6,
401-);
464+expect(workflow.match(/timeout --kill-after=30s 20m docker run --rm/g)?.length).toBe(6);
402465expect(workflow).not.toMatch(/(^|\n)\s+docker run --rm --entrypoint sh/u);
403466expect(workflow).toContain("--progress=plain");
404467expect(workflow).toContain("--load");
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。