dongarandClaude Opus 5.5
0660fa3c51
- Dockerfile: built with uv into /opt/nisse (installed, not editable), run on python:3.12-slim with openssh-client as user nisse; stateless, with state in a /var/lib/nisse-dev volume, config mounted at /etc/nisse-dev/nisse-dev.yaml, secrets as environment variables, keys mounted read-only. 202 MB. Its `test` stage adds the tests and their tools over the installed package (UV_NO_SYNC, so `uv run` never swaps in the source tree); the default target is the agent. - scripts/e2e.sh --image REF runs the suite inside an image's test stage, on its own sshd. - CI builds both images on every PR (nothing pushed); release.yml pushes gitea.dongar.net/dongar/nisse-dev:<tag> and :latest on a v* tag, with the REGISTRY_TOKEN secret. - scripts/bringup.sh builds the code under test into an image and runs it in the systemd unit (root, $E2E mounted at its own path); `plan` prints what it would run; the build-VM set-aside reads the projects: config. Checked: the image refuses to start without a config, runs as uid 10001; one e2e test passed from the test stage (2m45s, $0). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPQ14L3LikyefCMFBqEbKE
63 lines
2.6 KiB
Bash
Executable File
63 lines
2.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# The end-to-end test (Development Plan M1.6): the whole agent against real
|
|
# services, driven by a scripted operator. CI runs it on every PR (with
|
|
# --local); locally, run only the tests you're writing (-k) or diagnosing
|
|
# (--lf).
|
|
#
|
|
# scripts/e2e.sh on the bring-up build VM (configured below)
|
|
# scripts/e2e.sh --local on a throwaway local sshd instead
|
|
# scripts/e2e.sh --image REF inside an image's `test` stage (Dockerfile),
|
|
# on its own sshd: checks a release as built
|
|
#
|
|
# Uses tests/integration/nisse-test.yaml and its secrets (.env at the repo
|
|
# root), like the integration tests. Every role runs on a local model
|
|
# (tests/integration/e2e_support.py; NISSE_E2E_MODEL overrides it), so tell
|
|
# the operator before a full run: it keeps the RTX 4090 busy for a while.
|
|
set -euo pipefail
|
|
cd "$(dirname "$0")/.."
|
|
|
|
if [ "${1:-}" = "--image" ]; then
|
|
image=${2:?--image needs an image reference}
|
|
shift 2
|
|
runs=${NISSE_E2E_RUNS:-/root/nisse-e2e/test-runs}
|
|
mkdir -p "$runs"
|
|
secrets=()
|
|
[ -f .env ] && secrets=(--env-file .env)
|
|
# Host networking: the suite reaches Matrix, Gitea and LiteLLM as here.
|
|
exec docker run --rm --network host "${secrets[@]}" \
|
|
-e NISSE_E2E_RUNS=/runs -v "$runs:/runs" \
|
|
"$image" scripts/e2e.sh --local "$@"
|
|
fi
|
|
if [ "${1:-}" = "--local" ]; then
|
|
shift
|
|
else
|
|
export NISSE_E2E_BUILD_HOST=${NISSE_E2E_BUILD_HOST:-nisse-dev.garrett-hall.com}
|
|
export NISSE_E2E_BUILD_KEY=${NISSE_E2E_BUILD_KEY:-/root/nisse-e2e/ssh/id_ed25519}
|
|
fi
|
|
# Each run's state store is kept here, for nisse_dev.dump after a failure.
|
|
export NISSE_E2E_RUNS=${NISSE_E2E_RUNS:-/root/nisse-e2e/test-runs}
|
|
|
|
# What the run spent on the test key, read from LiteLLM (spend only). The
|
|
# end-to-end tests run on a local model, so anything above $0 means a call
|
|
# went to a paid one: an override, or a proxy fallback.
|
|
spend() {
|
|
(set -a; [ -f .env ] && . ./.env; set +a
|
|
uv run python -c '
|
|
import os, httpx
|
|
r = httpx.get("https://litellm.dongar.net/key/info", timeout=30,
|
|
headers={"Authorization": "Bearer " + os.environ["NISSE_LLM_TOKEN"]})
|
|
i = r.json()["info"]
|
|
print(i["spend"], i.get("max_budget"))' 2>/dev/null) || echo "? ?"
|
|
}
|
|
read -r before budget < <(spend)
|
|
status=0
|
|
uv run pytest -m e2e -rs tests/integration/test_end_to_end.py tests/integration/test_end_to_end_loop.py "$@" || status=$?
|
|
read -r after _ < <(spend)
|
|
python3 -c "
|
|
b, a, cap = '$before', '$after', '$budget'
|
|
try:
|
|
print(f'e2e spend: \${float(a) - float(b):.4f} this run; \${float(a):.2f} of \${float(cap):.2f} today')
|
|
except ValueError:
|
|
print('e2e spend: unknown (could not read the key)')"
|
|
exit "$status"
|