Skip to content

feat: add containerized test runner for macOS development #55

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
shaneutt merged 3 commits into from
Apr 20, 2026
Merged

feat: add containerized test runner for macOS development #55

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
552f4df
feat: add containerized test runner for macOS development
usize Apr 20, 2026
57120ab
fix: drop sha256sum status flag for portability
usize Apr 20, 2026
d5cc743
fix: rename test container targets to match convention
usize Apr 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
53 changes: 53 additions & 0 deletions Containerfile.test
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
# syntax=docker/dockerfile:1

# -------------------------------------------------------------------
# Test Container
# -------------------------------------------------------------------
#
# Build environment for running the test suite in a container. The
# project directory is bind-mounted at runtime so tests always run
# against the current working tree. A named volume at /cache persists
# compiled dependencies and downloaded tools between runs.
#
# Build: make test-container
# Run: make test-container-run

FROM rust:1.94-alpine

ENV OPENSSL_STATIC=1

# The full project directory is bind-mounted at /src. This includes
# the host's target/ directory, but CARGO_TARGET_DIR redirects all
# compilation to /cache/target (a named volume), so cargo never
# reads or writes the host's target/. BINUTILS_DIR is similarly
# redirected to /cache/praxis-binutils so `make tools` downloads
# Linux binaries there instead of into the host's target/.
ENV CARGO_TARGET_DIR=/cache/target
ENV BINUTILS_DIR=/cache/praxis-binutils

# -------------------------------------------------------------------
# Tool Layer
# -------------------------------------------------------------------

RUN apk add --no-cache \
musl-dev \
openssl-dev \
openssl-libs-static \
pkgconf \
cmake \
make \
g++ \
curl

# -------------------------------------------------------------------
# Non-root user
# -------------------------------------------------------------------

# Praxis refuses to run as UID 0.
RUN addgroup -S tester && adduser -S -G tester -h /home/tester tester \
&& mkdir -p /cache && chown tester:tester /cache

USER tester
WORKDIR /src

CMD ["sh", "-c", "make tools && make test"]
2 changes: 2 additions & 0 deletions Containerfile.test.dockerignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
# No COPY instructions — ignore everything to minimize build context.
*
36 changes: 28 additions & 8 deletions Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,7 @@ endif
lint fmt audit coverage coverage-check \
fuzz fuzz-build \
container container-run \
test-container test-container-run \
run-echo run-debug \
tools clean-tools \
help
Expand Down Expand Up @@ -57,6 +58,21 @@ container-run:
podman run --rm --network=host $(IMAGE):$(VERSION) 2>&1 || \
docker run --rm --network=host $(IMAGE):$(VERSION) 2>&1

# -------------------------------------------------------------------
# Test Container
# -------------------------------------------------------------------

test-container:
podman build --ignorefile Containerfile.test.dockerignore \
-t $(IMAGE)-test:$(VERSION) -f Containerfile.test . || \
docker build -t $(IMAGE)-test:$(VERSION) -f Containerfile.test .

test-container-run: test-container
podman run --rm -v $(CURDIR):/src -v praxis-test-cache:/cache \
$(IMAGE)-test:$(VERSION) 2>&1 || \
docker run --rm -v $(CURDIR):/src -v praxis-test-cache:/cache \
$(IMAGE)-test:$(VERSION) 2>&1

# -------------------------------------------------------------------
# Test
# -------------------------------------------------------------------
Expand Down Expand Up @@ -157,8 +173,8 @@ run-debug:
# Binutils
# -------------------------------------------------------------------

BINUTILS_DIR := target/praxis-binutils
BINUTILS_PATH := $(CURDIR)/$(BINUTILS_DIR)
BINUTILS_DIR ?= target/praxis-binutils
BINUTILS_PATH := $(abspath $(BINUTILS_DIR))

H2SPEC_VERSION := 2.6.0
VEGETA_VERSION := 12.13.0
Expand Down Expand Up @@ -186,8 +202,8 @@ $(BINUTILS_DIR):
H2SPEC_SHA256_linux_amd64 := 157ee0de702e01ad40e752dbf074b366027e550c8e7504f9450da2809e279318
H2SPEC_SHA256_darwin_amd64 := 981cb9f90a6f5e36300063022bd4eb7438d3dcf66d63a146a8541359697d1601

# h2spec has no arm64 builds; fall back to amd64 (runs under Rosetta on macOS).
ifeq ($(UNAME_S)_$(ARCH_GO),darwin_arm64)
# h2spec has no arm64 builds; fall back to amd64.
ifeq ($(ARCH_GO),arm64)
H2SPEC_ARCH := amd64
else
H2SPEC_ARCH := $(ARCH_GO)
Expand All @@ -198,28 +214,30 @@ H2SPEC_SHA256 := $(H2SPEC_SHA256_$(UNAME_S)_$(H2SPEC_ARCH))
$(H2SPEC): | $(BINUTILS_DIR)
curl -sSfL -o $(BINUTILS_DIR)/h2spec.tar.gz \
https://github.com/summerwind/h2spec/releases/download/v$(H2SPEC_VERSION)/h2spec_$(UNAME_S)_$(H2SPEC_ARCH).tar.gz
$(if $(H2SPEC_SHA256),echo "$(H2SPEC_SHA256) $(BINUTILS_DIR)/h2spec.tar.gz" | sha256sum --check --status,)
$(if $(H2SPEC_SHA256),echo "$(H2SPEC_SHA256) $(BINUTILS_DIR)/h2spec.tar.gz" | sha256sum -c,)
tar xz -C $(BINUTILS_DIR) -f $(BINUTILS_DIR)/h2spec.tar.gz h2spec
rm -f $(BINUTILS_DIR)/h2spec.tar.gz

VEGETA_SHA256_linux_amd64 := e8759ce45c14e18374bdccd3ba6068197bc3a9f9b7e484db3837f701b9d12e61
VEGETA_SHA256_linux_arm64 := 950381173a5575e25e8e086f36fc03bf65d61a2433329b48e41e1cb5e4133bba
VEGETA_SHA256_darwin_amd64 := 4e912c83ce07db4e1e394e1cbb657f2396dff2f7ed90f03869a184cc17d0f994
VEGETA_SHA256 := $(VEGETA_SHA256_$(UNAME_S)_$(ARCH_GO))

$(VEGETA): | $(BINUTILS_DIR)
curl -sSfL -o $(BINUTILS_DIR)/vegeta.tar.gz \
https://github.com/tsenart/vegeta/releases/download/v$(VEGETA_VERSION)/vegeta_$(VEGETA_VERSION)_$(UNAME_S)_$(ARCH_GO).tar.gz
echo "$(VEGETA_SHA256) $(BINUTILS_DIR)/vegeta.tar.gz" | sha256sum --check --status
$(if $(VEGETA_SHA256),echo "$(VEGETA_SHA256) $(BINUTILS_DIR)/vegeta.tar.gz" | sha256sum -c,)
tar xz -C $(BINUTILS_DIR) -f $(BINUTILS_DIR)/vegeta.tar.gz vegeta
rm -f $(BINUTILS_DIR)/vegeta.tar.gz

FORTIO_SHA256_linux_amd64 := 92da34238dee258191a9dc6691c8bc75305b308951e934e2c3b4e658db0d77d1
FORTIO_SHA256_linux_amd64 := 92da34238dee258191a9dc6691c8bc75305b308951e934e2c3b4e658db0d77d1
FORTIO_SHA256_linux_arm64 := f66275a56ef41e9a5afb2ea8181eb53ca36b34c6d19a201b58aec17dbe95a853
FORTIO_SHA256 := $(FORTIO_SHA256_$(UNAME_S)_$(ARCH_GO))

$(FORTIO): | $(BINUTILS_DIR)
curl -sSfL -o $(BINUTILS_DIR)/fortio.tgz \
https://github.com/fortio/fortio/releases/download/v$(FORTIO_VERSION)/fortio-$(UNAME_S)_$(ARCH_GO)-$(FORTIO_VERSION).tgz
$(if $(FORTIO_SHA256),echo "$(FORTIO_SHA256) $(BINUTILS_DIR)/fortio.tgz" | sha256sum --check --status,)
$(if $(FORTIO_SHA256),echo "$(FORTIO_SHA256) $(BINUTILS_DIR)/fortio.tgz" | sha256sum -c,)
tar xz -C $(BINUTILS_DIR) -f $(BINUTILS_DIR)/fortio.tgz usr/bin/fortio --strip-components=2
rm -f $(BINUTILS_DIR)/fortio.tgz

Expand Down Expand Up @@ -275,6 +293,8 @@ help:
@echo "Container:"
@echo " container build container image"
@echo " container-run run container in foreground (host network)"
@echo " test-container build test container image"
@echo " test-container-run build and run test suite in container"
@echo ""
@echo "Binutils (target/praxis-binutils/):"
@echo " tools download all external CLI tools"
Expand Down
Loading