02e4ef7544
Smoothes the rough edges that came up exercising a live deployment.
First-run bootstrap UI: /bootstrap renders a username + password form
that uses the in-memory token directly (operator no longer copies it
out of the log); /login redirects there while bootstrap is available.
Agent reliability: failJob synthetic envelopes so command.run early
returns no longer hang the server-side job; runtime probe of restic
restore --help drives --no-ownership instead of version sniffing
(0.18.x had it removed). Server unit re-shaped: ProtectSystem=full
plus ReadWritePaths=/etc/restic-manager, no ProtectHome — restore
can now write anywhere a user might want.
Restore wizard: default target is /root/rm-restore/<job-id>/ with
clearer help text. Re-init confirm input uses .field (was .input,
which doesn't exist — text was invisible).
NS-01 host delete: store DeleteHost, admin-band /hosts/{id}/delete
with hostname-confirm danger zone, audit, FK cascade, live WS close.
NS-02 enrollment-token recovery: outstanding-tokens panel on
/hosts/new, regenerate (preserves attachments) and revoke handlers
+ audit, store-level ListOutstandingEnrollmentTokens and
DeleteEnrollmentToken.
NS-03 repo init / probe surface: migration 0020 adds
hosts.repo_status + repo_status_error; WS handler projects every
init job's outcome onto the host row (idempotent already-initialised
collapses to ready); creds-save resets status and dispatches a fresh
probe; /hosts/{id}/repo/probe retry endpoint with banner.
NS-04 dashboard live + sort + filter: query-string filter
(q/status/repo_status/tag/sort/dir), 5s htmx live poll mirroring the
alerts pattern with a localStorage live toggle, sortable column
headers, filter row + clear.
Alerts page: ack'd-by line resolves user_id ULID to username.
Compose.yaml ignored — host-specific.
110 lines
3.4 KiB
Go
110 lines
3.4 KiB
Go
// ui_repo_probe_test.go — covers the NS-03 retry-probe handler: the
|
|
// 404 / offline-guarded path and the happy dispatch + audit + redirect.
|
|
package http
|
|
|
|
import (
|
|
"context"
|
|
stdhttp "net/http"
|
|
"net/url"
|
|
"strings"
|
|
"testing"
|
|
|
|
"gitea.dcglab.co.uk/steve/restic-manager/internal/api"
|
|
)
|
|
|
|
// TestRepoProbeOfflineRendersBanner: hitting probe for an offline
|
|
// host re-renders the repo page with a 422 banner; no init job lands.
|
|
func TestRepoProbeOfflineRendersBanner(t *testing.T) {
|
|
t.Parallel()
|
|
_, ts, st := rawTestServerWithUI(t)
|
|
hostID, _ := enrolHostForUI(t, nil, st, "probe-offline-host")
|
|
cookie := loginAsAdmin(t, st)
|
|
|
|
req, _ := stdhttp.NewRequest("POST", ts.URL+"/hosts/"+hostID+"/repo/probe",
|
|
strings.NewReader(""))
|
|
req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
|
|
req.AddCookie(cookie)
|
|
res, err := stdhttp.DefaultClient.Do(req)
|
|
if err != nil {
|
|
t.Fatalf("do: %v", err)
|
|
}
|
|
defer res.Body.Close()
|
|
if res.StatusCode != stdhttp.StatusUnprocessableEntity {
|
|
t.Fatalf("status: got %d, want 422", res.StatusCode)
|
|
}
|
|
var n int
|
|
if err := st.DB().QueryRow(
|
|
`SELECT COUNT(*) FROM jobs WHERE host_id = ? AND kind = ? AND actor_kind = 'user'`,
|
|
hostID, string(api.JobInit)).Scan(&n); err != nil {
|
|
t.Fatalf("count jobs: %v", err)
|
|
}
|
|
if n != 0 {
|
|
t.Errorf("user-actor init jobs: got %d, want 0 (offline guard bypassed)", n)
|
|
}
|
|
}
|
|
|
|
// TestRepoProbeDispatchesWhenOnline: with the agent connected, a
|
|
// probe creates a user-actor init job and audits.
|
|
func TestRepoProbeDispatchesWhenOnline(t *testing.T) {
|
|
t.Parallel()
|
|
srv, ts, st := rawTestServerWithUI(t)
|
|
hostID, token := enrolHostForUI(t, nil, st, "probe-ok-host")
|
|
|
|
c := agentDial(t, srv, ts, hostID, token)
|
|
sendHello(t, c, "probe-ok-host")
|
|
_ = drainUntil(t, c, api.MsgScheduleSet)
|
|
|
|
cookie := loginAsAdmin(t, st)
|
|
|
|
form := url.Values{}
|
|
req, _ := stdhttp.NewRequest("POST", ts.URL+"/hosts/"+hostID+"/repo/probe",
|
|
strings.NewReader(form.Encode()))
|
|
req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
|
|
req.AddCookie(cookie)
|
|
cli := &stdhttp.Client{
|
|
CheckRedirect: func(*stdhttp.Request, []*stdhttp.Request) error {
|
|
return stdhttp.ErrUseLastResponse
|
|
},
|
|
}
|
|
res, err := cli.Do(req)
|
|
if err != nil {
|
|
t.Fatalf("do: %v", err)
|
|
}
|
|
defer res.Body.Close()
|
|
if res.StatusCode != stdhttp.StatusSeeOther {
|
|
t.Fatalf("status: got %d, want 303", res.StatusCode)
|
|
}
|
|
if loc := res.Header.Get("Location"); !strings.Contains(loc, "saved=probe") {
|
|
t.Errorf("Location: got %q, want saved=probe", loc)
|
|
}
|
|
|
|
var n int
|
|
if err := st.DB().QueryRow(
|
|
`SELECT COUNT(*) FROM jobs WHERE host_id = ? AND kind = ? AND actor_kind = 'user'`,
|
|
hostID, string(api.JobInit)).Scan(&n); err != nil {
|
|
t.Fatalf("count jobs: %v", err)
|
|
}
|
|
if n != 1 {
|
|
t.Errorf("user-actor init jobs: got %d, want 1", n)
|
|
}
|
|
var auditN int
|
|
if err := st.DB().QueryRow(
|
|
`SELECT COUNT(*) FROM audit_log WHERE action = 'host.repo_init_dispatched' AND target_id = ?`,
|
|
hostID).Scan(&auditN); err != nil {
|
|
t.Fatalf("count audit: %v", err)
|
|
}
|
|
if auditN != 1 {
|
|
t.Errorf("audit rows: got %d, want 1", auditN)
|
|
}
|
|
|
|
// Sanity: the host still exists and we can cleanly read repo status
|
|
// (it stays "unknown" because the agent never replies in this test).
|
|
host, err := st.GetHost(context.Background(), hostID)
|
|
if err != nil {
|
|
t.Fatalf("get host: %v", err)
|
|
}
|
|
if host.RepoStatus != "unknown" {
|
|
t.Errorf("repo_status: got %q, want unknown (no probe reply yet)", host.RepoStatus)
|
|
}
|
|
}
|