bingshuo/guanghu-ice-heart
Watch
1
0
Fork
You've already forked guanghu-ice-heart
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix(deploy): source immutable packages from current code channel

Browse source
This commit is contained in:
冰朔 2026-07-27 15:46:55 +08:00
commit 0bf220c917
9 changed files with 41 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

8
server-tools/lake-lamp-authz/architecture-provision-broker.test.js
View file

@ -27,6 +27,14 @@ test("resource and manifest are immutable and path constrained", () => {
assert.equal(validateManifest(manifest(), { requestId, commit }).unit, "example.service");
});
test("architecture deployment defaults to the current Fifth Domain code channel", () => {
const source = fs.readFileSync(path.join(__dirname, "architecture-provision-broker.js"), "utf8");
const environment = fs.readFileSync(path.join(__dirname, "authorization.env.example"), "utf8");
assert.match(source, /https:\/\/guanghulab\.com\/code\/bingshuo\/guanghu-ice-heart\.git/);
assert.match(environment, /^ARCHITECTURE_PROVISION_REPO_URL=https:\/\/guanghulab\.com\/code\/bingshuo\/guanghu-ice-heart\.git$/m);
assert.doesNotMatch(source, /ARCHITECTURE_PROVISION_REPO_URL \|\| "https:\/\/guanghulab\.com\/fifth-domain\//);
});
test("unit requires non-root systemd hardening and release placeholder", () => {
const unit = "[Service]\nUser=guanghu\nGroup=guanghu\nNoNewPrivileges=true\nPrivateTmp=true\nProtectSystem=strict\nProtectHome=true\nExecStart=/usr/bin/node __RELEASE_ROOT__/server.js\n";
assert.equal(validateUnit(unit), unit);