Stanislas
ba1d0419a8
fix: use PAT to trigger CI after hash update ( #1337 )
...
- Commits made with `GITHUB_TOKEN` don't trigger workflows
- Using a PAT allows the hash update commit to trigger CI checks
- Fixes the issue where PR #1335 didn't have CI triggered after the hash
update
2025-12-10 18:23:58 +01:00
Stanislas Lange
a6154c2653
Disable renovate check for disabled workflow
2025-12-10 18:14:57 +01:00
Stanislas
a4c51f9bf9
ci: add Renovate for Easy-RSA version updates ( #1333 )
...
## Summary
- Add Renovate configuration to automatically track Easy-RSA releases
- Add GitHub Action to auto-update SHA256 hash on Renovate PRs
## How it works
1. **Renovate** detects a new Easy-RSA release → creates PR updating
`EASYRSA_VERSION`
2. **GitHub Action** triggers on the PR → downloads tarball → computes
SHA256 → commits fix
3. PR is ready to merge with both version and hash updated
---
I intentionally updated to the second-to-last version in
bda450948a
to test if this works.
2025-12-10 18:08:54 +01:00
Stanislas
b9a1650027
feat: drop Amazon Linux 2 support ( #1332 )
...
## Summary
- Remove Amazon Linux 2 support from the installer
- Amazon Linux 2023 remains fully supported
## Motivation
Amazon Linux 2 is reaching EOL.
Additionally, Amazon Linux 2 ships with **OpenSSL 1.0.2k** (from 2017)
which is incompatible with Easy-RSA 3.2.x. The newer Easy-RSA versions
use `openssl x509 -ext` which doesn't exist in OpenSSL 1.0.x, causing
certificate generation to fail.
This blocks our ability to upgrade Easy-RSA:
bda450948a
## Changes
- Updated OS detection to reject Amazon Linux 2 with a clear message
- Removed Amazon Linux 2 specific code paths (EPEL installation, yum
commands)
- Removed from CI test matrix
- Updated README supported distributions table
- Updated Makefile test targets
- Also, add Amazon Linux 2023 Unbound handling
2025-12-10 17:54:00 +01:00
Stanislas
66890fb5d3
ci: prevent duplicate workflow runs ( #1324 )
...
## Summary
- Restrict `push` trigger to `master` branch only (feature branch pushes
won't trigger CI)
- Add concurrency groups to cancel redundant runs when new commits are
pushed
- Works correctly with fork PRs using standard `pull_request` event
2025-12-09 19:47:02 +01:00
Stanislas Lange
8a133b7bed
ci: run Docker e2e tests on pull requests
2025-12-09 18:06:53 +01:00
Stanislas
a3389c126c
Add Docker-based E2E testing ( #1320 )
...
### Summary
- Add automated end-to-end testing using Docker to verify the installation script works across 18 Linux distributions
- Add Oracle Linux 9 support to the installation script
- Drop support for EOL distributions (Debian 8/9/10, CentOS 7, Ubuntu 16.04)
- Disable Digital Ocean droplets based end-to-end tests, let's use docker from now on
### Changes
**New test infrastructure:**
- `test/Dockerfile.server` - Multi-OS server image with `BASE_IMAGE` build arg
- `test/Dockerfile.client` - Ubuntu 24.04 client for connectivity testing
- `test/server-entrypoint.sh` - Runs install script, verifies files exist, asserts iptables NAT rules, starts OpenVPN
- `test/client-entrypoint.sh` - Connects to VPN, verifies tun0 interface, pings gateway
- `docker-compose.yml` - Orchestrates server + client with shared volume
- `.github/workflows/docker-test.yml` - CI matrix testing 18 OS variants
- `.github/workflows/test.yml` - Removed push/PR triggers, now manual only for DO tests
- `Makefile` - Local testing commands (`make test`, `make test-ubuntu-24.04`, etc.)
**Distributions tested (18 total):**
| Family | Versions |
|--------|----------|
| Ubuntu | 18.04, 20.04, 22.04, 24.04 |
| Debian | 11, 12 |
| Fedora | 40, 41 |
| Rocky Linux | 8, 9 |
| AlmaLinux | 8, 9 |
| Oracle Linux | 8, 9 |
| Amazon Linux | 2, 2023 |
| CentOS Stream | 9 |
| Arch Linux | latest |
2025-12-07 12:27:41 +01:00
Stanislas Lange
94c1af2b5d
Remove Fedora 43 OS image from CI workflow
2025-12-04 23:18:15 +01:00
Stanislas Lange
f92582fb2f
Update Fedora OS images in CI workflow to include 42 and 43
2025-12-04 23:15:24 +01:00
Stanislas Lange
469bc2f883
Update OS images in CI workflow to include Debian 13 and remove 11
2025-12-04 23:12:57 +01:00
Stanislas Lange
6b92f8a61f
Quote shell variables in test.yml to fix shellcheck warnings
2025-12-04 23:04:11 +01:00
Stanislas Lange
62c336022f
Add permissions to test.yml for security best practices
2025-12-04 23:04:11 +01:00
Stanislas Lange
cad43ad99e
Add permissions to lint.yml for security best practices
2025-12-04 23:04:11 +01:00
Stanislas Lange
77f28d1595
ci: add fetch-depth: 0 for super-linter v7 compatibility
...
Super-linter v7 requires full git history to find the default branch
for comparison. Without fetch-depth: 0, it fails with 'master branch
doesn't exist' error.
2025-12-04 23:04:11 +01:00
Stanislas Lange
7c2c491fab
ci: update appleboy/ssh-action from v0.1.6 to v1.2.0
...
Updates to a more recent stable version with bug fixes and
improvements.
2025-12-04 23:04:11 +01:00
Stanislas Lange
00f3cd1605
ci: update Super Linter from v4.1.0 to v7
...
The super-linter project has been moved to the super-linter org
and significantly updated. v7 includes many improvements and
bug fixes.
2025-12-04 23:04:11 +01:00
Stanislas Lange
d61b16f3b8
ci: replace deprecated set-output with GITHUB_OUTPUT
...
The set-output workflow command was deprecated in favor of
environment files. See:
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
2025-12-04 23:04:11 +01:00
Stanislas Lange
19e4b7961f
CI: add Fedora 41 and remove 39 for e2e workflow
2025-03-10 10:27:19 +01:00
Stanislas Lange
dc114f3243
Update distribution matrix for end-to-end tests
2024-11-07 20:49:42 +01:00
Stanislas Lange
0d58ddcb8c
Update distribution matrix for end-to-end tests
2024-11-07 20:46:51 +01:00
Stanislas Lange
2ce1ee765e
Remove centos-stream-8-x64 from test workflow
...
Not available on DO anymore
2024-07-12 18:22:34 +02:00
Stanislas Lange
67701fac77
CI: wait for dpkg lock in debian/ubuntu setup step
2024-05-16 20:37:23 +02:00
Stanislas Lange
0cc002e17d
CI: wait for dpkg lock in debian/ubuntu setup step
2024-05-16 20:33:32 +02:00
Stanislas Lange
a2725d61a3
CI: update actions/checkout to v4
2024-05-16 20:13:47 +02:00
Stanislas Lange
305e9868cf
CI: update linux distributions used in end-to-end tests
2024-05-16 20:08:12 +02:00
Stanislas Lange
6a127fa2b6
Enable manual trigger of actions
2024-05-16 20:02:01 +02:00
Stanislas
1a249c621d
ci: test workflow server images update ( #1183 )
...
* test ci
* remove ubuntu 18.04
* remove fedora 35 and add 37 38
* disable centos stream 9, add debian 12
2023-11-20 21:14:04 +01:00
Stanislas Lange
d2556ff235
Add support for CentOS 9 + update supported distributions
2023-01-22 00:57:40 +01:00
Stanislas Lange
2f76bb5e40
Update easy-rsa to 3.1.2 and fix compatibility with Ubuntu 22.04
...
Based on this patch by @zerodivisi0n: https://github.com/angristan/openvpn-install/issues/1000#issuecomment-1283484772
2023-01-22 00:10:46 +01:00
Stanislas Lange
ca8d58d5f0
Fix checkout in test workflow
2023-01-22 00:10:46 +01:00
dependabot[bot]
638b51168a
build(deps): bump appleboy/ssh-action from 0.1.5 to 0.1.6 ( #1074 )
...
Bumps [appleboy/ssh-action](https://github.com/appleboy/ssh-action ) from 0.1.5 to 0.1.6.
- [Release notes](https://github.com/appleboy/ssh-action/releases )
- [Commits](https://github.com/appleboy/ssh-action/compare/v0.1.5...v0.1.6 )
---
updated-dependencies:
- dependency-name: appleboy/ssh-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-03 14:05:27 +01:00
dependabot[bot]
d629791a95
build(deps): bump actions/checkout from 3.1.0 to 3.2.0 ( #1075 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...v3.2.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-03 14:05:14 +01:00
Stanislas
d3751457ab
Remove Debian 9 in e2e tests as it has been removed by DO
2022-11-21 19:15:22 +01:00
dependabot[bot]
83111c58e7
build(deps): bump actions/checkout from 3.0.2 to 3.1.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.0.2 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.0.2...v3.1.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-11-21 19:07:13 +01:00
dependabot[bot]
a7e54a47ce
build(deps): bump appleboy/ssh-action from 0.1.4 to 0.1.5
...
Bumps [appleboy/ssh-action](https://github.com/appleboy/ssh-action ) from 0.1.4 to 0.1.5.
- [Release notes](https://github.com/appleboy/ssh-action/releases )
- [Commits](https://github.com/appleboy/ssh-action/compare/v0.1.4...v0.1.5 )
---
updated-dependencies:
- dependency-name: appleboy/ssh-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-11-21 19:07:04 +01:00
Stanislas
4553dd9c21
ci: remove ubuntu 21.10 as it is not supported by DO
2022-08-17 16:08:12 +02:00
dependabot[bot]
b3b7593b2d
build(deps): bump actions/checkout from 2.4.0 to 3.0.2 ( #996 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2.4.0 to 3.0.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2.4.0...v3.0.2 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-12 11:51:39 +02:00
Stanislas
5fcce43d8d
Update CI images
2022-01-24 21:02:46 +01:00
Stanislas Lange
8c6266053b
ci: update test images
2022-01-07 16:03:31 +01:00
dependabot[bot]
6c4d91e5e8
build(deps): bump actions/checkout from 2.3.5 to 2.4.0 ( #948 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2.3.5 to 2.4.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2.3.5...v2.4.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-13 22:46:07 +01:00
dependabot[bot]
dd9d0aa281
build(deps): bump actions/checkout from 2.3.4 to 2.3.5 ( #939 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2.3.4 to 2.3.5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2.3.4...v2.3.5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-11-16 14:28:18 +01:00
Stanislas
d03d8d4580
ci: update OS images
2021-07-06 10:58:42 +02:00
dependabot[bot]
2ab48f2265
build(deps): bump github/super-linter from 4.0.2 to 4.1.0 ( #852 )
...
Bumps [github/super-linter](https://github.com/github/super-linter ) from 4.0.2 to 4.1.0.
- [Release notes](https://github.com/github/super-linter/releases )
- [Commits](https://github.com/github/super-linter/compare/v4.0.2...v4.1.0 )
---
updated-dependencies:
- dependency-name: github/super-linter
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-06-05 00:57:18 +02:00
dependabot[bot]
995d244587
build(deps): bump github/super-linter from 3.17.1 to 4.0.2 ( #848 )
...
Bumps [github/super-linter](https://github.com/github/super-linter ) from 3.17.1 to 4.0.2.
- [Release notes](https://github.com/github/super-linter/releases )
- [Commits](https://github.com/github/super-linter/compare/v3.17.1...v4.0.2 )
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-06-05 00:07:02 +02:00
dependabot[bot]
c379bf3b67
build(deps): bump github/super-linter from 3.17.0 to 3.17.1 ( #841 )
...
Bumps [github/super-linter](https://github.com/github/super-linter ) from 3.17.0 to 3.17.1.
- [Release notes](https://github.com/github/super-linter/releases )
- [Commits](https://github.com/github/super-linter/compare/v3.17.0...v3.17.1 )
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-18 16:16:17 +02:00
dependabot[bot]
31551a7176
build(deps): bump actions/checkout from 2 to 2.3.4 ( #838 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 2.3.4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v2.3.4 )
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-12 08:53:03 +02:00
dependabot[bot]
248a85f5da
build(deps): bump github/super-linter from v3.16.3 to v3.17.0 ( #825 )
...
Bumps [github/super-linter](https://github.com/github/super-linter ) from v3.16.3 to v3.17.0.
- [Release notes](https://github.com/github/super-linter/releases )
- [Commits](https://github.com/github/super-linter/compare/v3.16.3...28cfebb84fd6dd9e8773b5efe5ac0f8f3714f228 )
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-07 22:12:56 +02:00
dependabot[bot]
b840f56f3e
build(deps): bump github/super-linter from v3.15.3 to v3.16.3 ( #823 )
...
Bumps [github/super-linter](https://github.com/github/super-linter ) from v3.15.3 to v3.16.3.
- [Release notes](https://github.com/github/super-linter/releases )
- [Commits](https://github.com/github/super-linter/compare/v3.15.3...6abf4dbec9acf8a5b5f4e80497dfb5cc6ae6ea5e )
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-04 18:04:58 +02:00
dependabot[bot]
f642f4c6da
build(deps): bump github/super-linter from v3.15.2 to v3.15.3 ( #807 )
...
Bumps [github/super-linter](https://github.com/github/super-linter ) from v3.15.2 to v3.15.3.
- [Release notes](https://github.com/github/super-linter/releases )
- [Commits](https://github.com/github/super-linter/compare/v3.15.2...9de5db92288c66235faef7716d6893949ce43769 )
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-13 13:06:59 +01:00
dependabot[bot]
1abb6a6948
build(deps): bump github/super-linter from v3 to v3.15.2 ( #799 )
...
Bumps [github/super-linter](https://github.com/github/super-linter ) from v3 to v3.15.2.
- [Release notes](https://github.com/github/super-linter/releases )
- [Commits](https://github.com/github/super-linter/compare/v3...16f5c4067d70b7e90445a32524a96d02f973ca4b )
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-10 21:38:49 +01:00