Perform integration tests in CI (!374) · Merge requests · The Tor Project / Core / onionmasq

Merged Clara Engler requested to merge cve/onionmasq:dev/cve/ci into main 1 month ago

Jan 22, 2025
- tests: Do not run in namespaces in CI · d634277a
  Clara Engler authored 1 month ago
  
  Unverified
  
  d634277a
- tests: Switch to a more random IPv4 · 0f43776f
  Clara Engler authored 1 month ago
  
  This commit changes the IPv4 address from `192.168.0.1` to `172.23.39.177`, in order to be less likely to collide with a real IP in the case, someone wants to circumvent the isolation.
  Unverified
  
  0f43776f
Jan 21, 2025

ci: Run integration tests · 58827169
Clara Engler authored 1 month ago

Unverified

58827169

onionmasq: Add `--disable-fs-permission-checks` · 5f82a500

Clara Engler authored 1 month ago

This commit ports the `--disable-fs-permission-checks` flag from arti
into onionmasq, enabling the checking of file system permissions for the
files we use, including custom arti configuration files.

This feature is especially critical for integration tests in CI
containers, as they tend to have very liberal permissions. In these
scenarios, it is okay to allow insecure permissions, as no one cares
about the internal security of CI containers.

Unverified

5f82a500

Perform integration tests in CI

Merge request reports

Activity