Stanislas and GitHub
9e1bb4b175
feat: enable proper systemd support in Docker tests ( #1373 )
...
- Replace the `sed` hack that disabled `systemctl` commands with proper
systemd support in Docker containers
- This allows testing the actual `systemctl` commands used by the
install script
- No more manual workarounds for starting OpenVPN/Unbound services
2025-12-13 01:14:54 +01:00
bbf93a19d5
Add openSUSE Tumbleweed/Leap support ( #1166 )
...
<!---
❗ ️ Please read ❗ ️
➡️ Please make sure you've followed the guidelines:
https://github.com/angristan/openvpn-install#contributing
✅ Please make sure your changes are tested and working
🗣️ Please avoid large PRs, and discuss changes in a GitHub issue first
✋ If the changes are too big and not in line with the project, they will
probably be rejected. Remember that this script is meant to be simple
and easy to use.
--->
---------
Co-authored-by: Stanislas Lange <git@slange.me >
2025-12-11 21:22:12 +01:00
Stanislas and GitHub
4b00f44e8e
feat: add version 10 support for RHEL-based distributions ( #1346 )
...
## Summary
- Add version 10 support for CentOS Stream, Rocky Linux, AlmaLinux, and
Oracle Linux
- Consolidate version check logic into a single check for all RHEL-based
distributions
- Fix Rocky Linux Docker image names to `rockylinux/rockylinux:tag`
- Increase Easy-RSA download curl retry from 3 to 5
- Fail early if EPEL/Copr repository setup fails
- Fix Oracle Linux EPEL package name (`oracle-epel-release-el*` instead
of `epel-release`)
## Changes
### `openvpn-install.sh`
- Combine version checks for CentOS/Rocky/AlmaLinux and Oracle Linux
into one
- Update error message to list supported distributions
- Change Easy-RSA download `--retry 3` to `--retry 5`
- Add `|| log_fatal` to EPEL and Copr setup commands to fail early on
errors
- Use `oracle-epel-release-el{8,9,10}` for Oracle Linux instead of
`epel-release`
### `.github/workflows/docker-test.yml`
- Add CentOS Stream 10 (`quay.io/centos/centos:stream10`)
- Add Rocky Linux 10 (`rockylinux/rockylinux:10`)
- Add AlmaLinux 10 (`almalinux:10`)
- Add Oracle Linux 10 (`oraclelinux:10`)
- Fix Rocky Linux image names from `rockylinux:X` to
`rockylinux/rockylinux:X`
## Test plan
- [ ] CI passes for existing distributions
- [ ] CI passes for new version 10 distributions (where images are
available)
2025-12-11 20:22:00 +01:00
Stanislas and GitHub
0d4d2229f4
test: add e2e tests for certificate revocation ( #1345 )
...
## Summary
- Add end-to-end tests for certificate revocation functionality
- Test that a revoked client certificate cannot connect to the VPN
- Test that a new certificate can be created with the same name as a
revoked one (validating the fix from #1185 )
- Test that the new certificate can successfully connect
## Test Flow
1. **Initial connectivity tests** - existing tests pass
2. **Certificate revocation test**:
- Create a new client `revoketest`
- Connect with the certificate (verifies it works)
- Disconnect the client
- Revoke the certificate via the install script
- Try to reconnect with revoked cert (verifies connection is rejected)
3. **Reuse revoked name test**:
- Create a new certificate with the same name `revoketest`
- Verify both revoked and valid entries exist in `index.txt`
- Connect with the new certificate (verifies it works)
## Changes
| File | Changes |
|------|---------|
| `test/server-entrypoint.sh` | Start OpenVPN in background, add
revocation test orchestration |
| `test/client-entrypoint.sh` | Add revocation test phases with signal
file coordination |
| `docker-compose.yml` | Remove read-only restriction on shared volume
for client |
| `Makefile` | Increase timeout from 60 to 180 iterations |
| `.github/workflows/docker-test.yml` | Increase timeouts, fix shared
volume |
2025-12-11 18:22:16 +01:00
Stanislas Lange and Stanislas
690414a56e
ci: update Fedora versions to 42 and 43
2025-12-11 17:21:48 +01:00
Stanislas Lange and Stanislas
d9e11822db
fix: use pgrep -f to detect OpenVPN server, not transient processes
...
The previous check using `pgrep -x openvpn` was matching transient
openvpn processes like `openvpn --genkey` that run during installation,
causing false positives. This led to race conditions where the CI
thought the server was running when it was actually still installing.
Use `pgrep -f "openvpn.*server.conf"` to specifically match the actual
OpenVPN server process running with the server configuration.
2025-12-11 17:21:48 +01:00
Stanislas Lange and Stanislas
6cca56f5b5
ci: add install script log output in docker-test workflow
...
Add step to display the install script log file (openvpn-install.log)
which includes timestamps and all installation activity.
This makes debugging CI failures easier by providing detailed logs
directly in the workflow output.
2025-12-11 17:21:48 +01:00
Stanislas Lange
599d122113
fix: use pgrep -x to accurately check for OpenVPN process in docker-test workflow
2025-12-11 16:26:45 +01:00
1aae852c60
chore(deps): update super-linter/super-linter action to v8 ( #1339 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[super-linter/super-linter](https://redirect.github.com/super-linter/super-linter )
| action | major | `v7` -> `v8` |
---
### Release Notes
<details>
<summary>super-linter/super-linter (super-linter/super-linter)</summary>
###
[`v8`](https://redirect.github.com/super-linter/super-linter/blob/HEAD/CHANGELOG.md#680-2024-07-31 )
[Compare
Source](https://redirect.github.com/super-linter/super-linter/compare/v7...v8 )
##### 🚀 Features
- allow using both prettier and standardjs
([#​5679](https://redirect.github.com/super-linter/super-linter/issues/5679 ))
([2daf461](https://redirect.github.com/super-linter/super-linter/commit/2daf461143778318ccc60ba59f175d385f222e4d ))
- customize phpstan config file name
([#​5940](https://redirect.github.com/super-linter/super-linter/issues/5940 ))
([20c4df5](https://redirect.github.com/super-linter/super-linter/commit/20c4df58c060cf122dce53b14ec578d48d921fb0 ))
- enable dotenv-linter for slim images
([#​5868](https://redirect.github.com/super-linter/super-linter/issues/5868 ))
([c770a8d](https://redirect.github.com/super-linter/super-linter/commit/c770a8d253f8b8852fd3404b63b807d93cc3691a ))
- remove no-eslintrc and simplify eslint conf
([#​5809](https://redirect.github.com/super-linter/super-linter/issues/5809 ))
([5be4926](https://redirect.github.com/super-linter/super-linter/commit/5be49266330f237f4a8ab2acccffe93b69cf4b04 )),
closes
[#​5688](https://redirect.github.com/super-linter/super-linter/issues/5688 )
- write github actions step summary
([#​5867](https://redirect.github.com/super-linter/super-linter/issues/5867 ))
([57c8658](https://redirect.github.com/super-linter/super-linter/commit/57c86588c388a515ae31f498b4cc4a6337169c11 )),
closes
[#​5650](https://redirect.github.com/super-linter/super-linter/issues/5650 )
##### 🐛 Bugfixes
- avoid duplicated content in summary
([#​5939](https://redirect.github.com/super-linter/super-linter/issues/5939 ))
([ef57e13](https://redirect.github.com/super-linter/super-linter/commit/ef57e132e136ab9991a0cc1517236e827d27baf9 ))
- store outputs in the main output directory
([#​5899](https://redirect.github.com/super-linter/super-linter/issues/5899 ))
([78ed3ef](https://redirect.github.com/super-linter/super-linter/commit/78ed3ef5fc8fe45290b530f94077281d2ac8e634 ))
- update pylint to ignore import-errors
([#​5927](https://redirect.github.com/super-linter/super-linter/issues/5927 ))
([eec862d](https://redirect.github.com/super-linter/super-linter/commit/eec862d0ea33fe6a836dfd545eef1125e530c794 ))
- update the list of linters to remove
([#​5870](https://redirect.github.com/super-linter/super-linter/issues/5870 ))
([6bd7659](https://redirect.github.com/super-linter/super-linter/commit/6bd76596f3f7df70a323eabb797f028293873424 ))
##### ⬆️ Dependency updates
- **bundler:** bump rubocop-minitest in /dependencies
([#​5875](https://redirect.github.com/super-linter/super-linter/issues/5875 ))
([9751e62](https://redirect.github.com/super-linter/super-linter/commit/9751e62beed14780ff12fc073c7aa9eafbd449f7 ))
- **bundler:** bump rubocop-performance in /dependencies
([#​5777](https://redirect.github.com/super-linter/super-linter/issues/5777 ))
([763dcc4](https://redirect.github.com/super-linter/super-linter/commit/763dcc4d456ae0c347801d30b5ec00dbfaa60ef2 ))
- **bundler:** bump rubocop-rspec from 2.30.0 to 3.0.3 in /dependencies
([#​5878](https://redirect.github.com/super-linter/super-linter/issues/5878 ))
([592d903](https://redirect.github.com/super-linter/super-linter/commit/592d903c509a4c70c89cc009e74b63c3273c5e7b ))
- **dev-docker:** bump node in /dev-dependencies
([#​5872](https://redirect.github.com/super-linter/super-linter/issues/5872 ))
([587fe0a](https://redirect.github.com/super-linter/super-linter/commit/587fe0a8b9318324fbfd86b9cd87b0ac6b24ba42 ))
- **dev-npm:** bump release-please in /dev-dependencies
([#​5754](https://redirect.github.com/super-linter/super-linter/issues/5754 ))
([6bb3f78](https://redirect.github.com/super-linter/super-linter/commit/6bb3f789bb5cacff35492a1245befb2fd13b97f5 ))
- **docker:** bump alpine/helm from 3.14.4 to 3.15.3
([#​5882](https://redirect.github.com/super-linter/super-linter/issues/5882 ))
([b5bf9f2](https://redirect.github.com/super-linter/super-linter/commit/b5bf9f297d13e9563bd708ae98e2e05b9b44698c ))
- **docker:** bump alpine/terragrunt from 1.9.0 to 1.9.2
([#​5883](https://redirect.github.com/super-linter/super-linter/issues/5883 ))
([95feeac](https://redirect.github.com/super-linter/super-linter/commit/95feeacb0ab075e7e183c5f8ea1c515992f66bbf ))
- **docker:** bump dart from 3.4.2-sdk to 3.4.4-sdk
([#​5764](https://redirect.github.com/super-linter/super-linter/issues/5764 ))
([b75f1cf](https://redirect.github.com/super-linter/super-linter/commit/b75f1cfcefc1b62a81b916bd00d0b8dfa7ad69aa ))
- **docker:** bump dotnet/sdk
([#​5873](https://redirect.github.com/super-linter/super-linter/issues/5873 ))
([f068663](https://redirect.github.com/super-linter/super-linter/commit/f06866359b4158e04825a03d5852823d47d78b05 ))
- **docker:** bump golangci/golangci-lint from v1.59.0 to v1.59.1
([#​5748](https://redirect.github.com/super-linter/super-linter/issues/5748 ))
([81ab76d](https://redirect.github.com/super-linter/super-linter/commit/81ab76d00179b8d66e7f909c546cb7bfbde8ae9f ))
- **docker:** bump goreleaser/goreleaser from v1.26.2 to v2.1.0
([#​5881](https://redirect.github.com/super-linter/super-linter/issues/5881 ))
([d84d439](https://redirect.github.com/super-linter/super-linter/commit/d84d4393933047f08abf0871aacefa04c63b5f32 ))
- **docker:** bump hashicorp/terraform from 1.8.4 to 1.9.2
([#​5885](https://redirect.github.com/super-linter/super-linter/issues/5885 ))
([d384e67](https://redirect.github.com/super-linter/super-linter/commit/d384e674c729dfd236ce888d04e4bdd24a85b630 ))
- **docker:** bump mstruebing/editorconfig-checker from v3.0.1 to v3.0.3
([#​5856](https://redirect.github.com/super-linter/super-linter/issues/5856 ))
([81196f4](https://redirect.github.com/super-linter/super-linter/commit/81196f4267199e63ec82dd0aaff9d1f400b38cac ))
- **docker:** bump python from 3.12.3-alpine3.20 to 3.12.4-alpine3.20
([#​5884](https://redirect.github.com/super-linter/super-linter/issues/5884 ))
([8a044b5](https://redirect.github.com/super-linter/super-linter/commit/8a044b58dee1dd7a03fcaf2d7d6b58754f156be2 ))
- **docker:** bump scalameta/scalafmt from v3.8.1 to v3.8.2
([#​5765](https://redirect.github.com/super-linter/super-linter/issues/5765 ))
([4931da5](https://redirect.github.com/super-linter/super-linter/commit/4931da55da35a8b438354adc03d220f693458f75 ))
- **docker:** bump terraform-linters/tflint from v0.51.2 to v0.52.0
([#​5858](https://redirect.github.com/super-linter/super-linter/issues/5858 ))
([ae1dba5](https://redirect.github.com/super-linter/super-linter/commit/ae1dba53fdc862da0064f56382dd86cd273862f6 ))
- **docker:** bump yoheimuta/protolint from 0.50.2 to 0.50.3
([#​5857](https://redirect.github.com/super-linter/super-linter/issues/5857 ))
([913bd0d](https://redirect.github.com/super-linter/super-linter/commit/913bd0dd47d3a42d6f2d3acad8fb59c2f185337b ))
- **docker:** bump zricethezav/gitleaks from v8.18.3 to v8.18.4
([#​5768](https://redirect.github.com/super-linter/super-linter/issues/5768 ))
([33bb4b4](https://redirect.github.com/super-linter/super-linter/commit/33bb4b46d473c80a82364c50746ed20d19231f90 ))
- **github-actions:** bump actions/download-artifact from 4.1.7 to 4.1.8
([#​5861](https://redirect.github.com/super-linter/super-linter/issues/5861 ))
([ed72e66](https://redirect.github.com/super-linter/super-linter/commit/ed72e66416df8df15b492f7df00b8621b556893f ))
- **github-actions:** bump actions/upload-artifact from 4.3.3 to 4.3.4
([#​5860](https://redirect.github.com/super-linter/super-linter/issues/5860 ))
([dd4313c](https://redirect.github.com/super-linter/super-linter/commit/dd4313c9b3bee70bfd968923e77430f3f19785aa ))
- **github-actions:** bump docker/build-push-action from 5 to 6
([#​5770](https://redirect.github.com/super-linter/super-linter/issues/5770 ))
([27170b8](https://redirect.github.com/super-linter/super-linter/commit/27170b8e9243df7e18e59e7c43163b142568ee22 ))
- **java:** bump com.pinterest.ktlint:ktlint-cli in /dependencies/ktlint
([#​5849](https://redirect.github.com/super-linter/super-linter/issues/5849 ))
([19c5fce](https://redirect.github.com/super-linter/super-linter/commit/19c5fcea2ea6a72741e59a30cb815c5faac524be ))
- **npm:** bump
[@​babel/eslint-parser](https://redirect.github.com/babel/eslint-parser )
in /dependencies
([#​5886](https://redirect.github.com/super-linter/super-linter/issues/5886 ))
([387a2b5](https://redirect.github.com/super-linter/super-linter/commit/387a2b56261451b12b00fc37d2fb79766564044d ))
- **npm:** bump
[@​babel/preset-react](https://redirect.github.com/babel/preset-react )
in /dependencies
([#​5740](https://redirect.github.com/super-linter/super-linter/issues/5740 ))
([4eeb628](https://redirect.github.com/super-linter/super-linter/commit/4eeb62862e823fd431fefb0078e5605484934254 ))
- **npm:** bump
[@​babel/preset-typescript](https://redirect.github.com/babel/preset-typescript )
in /dependencies
([#​5734](https://redirect.github.com/super-linter/super-linter/issues/5734 ))
([de4b193](https://redirect.github.com/super-linter/super-linter/commit/de4b1930064cb6b5f65625101be33892c50d400f ))
- **npm:** bump
[@​react-native/eslint-config](https://redirect.github.com/react-native/eslint-config )
in /dependencies
([#​5835](https://redirect.github.com/super-linter/super-linter/issues/5835 ))
([28c228d](https://redirect.github.com/super-linter/super-linter/commit/28c228dfc0b8279e28ca5bb72a34e9390eca81b9 ))
- **npm:** bump
[@​typescript-eslint/eslint-plugin](https://redirect.github.com/typescript-eslint/eslint-plugin )
in /dependencies
([#​5895](https://redirect.github.com/super-linter/super-linter/issues/5895 ))
([7f5b018](https://redirect.github.com/super-linter/super-linter/commit/7f5b018fb7237ef0d6d1cb1578729065bacb4310 ))
- **npm:** bump eslint-plugin-jest in /dependencies
([#​5738](https://redirect.github.com/super-linter/super-linter/issues/5738 ))
([1312398](https://redirect.github.com/super-linter/super-linter/commit/1312398b9c72138ce76f443dd933a8ff82f75fae ))
- **npm:** bump eslint-plugin-jsx-a11y in /dependencies
([#​5797](https://redirect.github.com/super-linter/super-linter/issues/5797 ))
([8972772](https://redirect.github.com/super-linter/super-linter/commit/89727727323246be93c3ed88c0b0fe1f07e25468 ))
- **npm:** bump eslint-plugin-react in /dependencies
([#​5890](https://redirect.github.com/super-linter/super-linter/issues/5890 ))
([fe3e1f8](https://redirect.github.com/super-linter/super-linter/commit/fe3e1f83b7c7645640af9202bb7f4d8993f088fc ))
- **npm:** bump eslint-plugin-vue from 9.26.0 to 9.27.0 in /dependencies
([#​5851](https://redirect.github.com/super-linter/super-linter/issues/5851 ))
([c2e85a9](https://redirect.github.com/super-linter/super-linter/commit/c2e85a9f03ceccfe41107ea1e627c8c222b2154a ))
- **npm:** bump jscpd from 4.0.4 to 4.0.5 in /dependencies
([#​5852](https://redirect.github.com/super-linter/super-linter/issues/5852 ))
([042c6b1](https://redirect.github.com/super-linter/super-linter/commit/042c6b191708878b5db2b5096eadb1b4a6f4f27d ))
- **npm:** bump next from 14.2.3 to 14.2.5 in /dependencies
([#​5887](https://redirect.github.com/super-linter/super-linter/issues/5887 ))
([22b7ba9](https://redirect.github.com/super-linter/super-linter/commit/22b7ba91d0d273fdc5369d1ead66ae2cee451df0 ))
- **npm:** bump prettier from 3.3.2 to 3.3.3 in /dependencies
([#​5891](https://redirect.github.com/super-linter/super-linter/issues/5891 ))
([b601212](https://redirect.github.com/super-linter/super-linter/commit/b6012126df99c9a8cdc5878bb9417ca7afee6809 ))
- **npm:** bump react-router-dom from 6.23.1 to 6.25.0 in /dependencies
([#​5897](https://redirect.github.com/super-linter/super-linter/issues/5897 ))
([ef71e94](https://redirect.github.com/super-linter/super-linter/commit/ef71e944ab41a8f04ba143f44d4b8443d2d982b5 ))
- **npm:** bump renovate from 37.421.5 to 37.432.0 in /dependencies
([#​5896](https://redirect.github.com/super-linter/super-linter/issues/5896 ))
([09a01eb](https://redirect.github.com/super-linter/super-linter/commit/09a01ebbe6dbb5e502817bb927191b8986c7c912 ))
- **npm:** bump textlint-rule-terminology in /dependencies
([#​5853](https://redirect.github.com/super-linter/super-linter/issues/5853 ))
([55b065d](https://redirect.github.com/super-linter/super-linter/commit/55b065d3c2d512648c52d4d695761a7d274ae769 ))
- **npm:** bump typescript from 5.4.5 to 5.5.3 in /dependencies
([#​5832](https://redirect.github.com/super-linter/super-linter/issues/5832 ))
([8605c2b](https://redirect.github.com/super-linter/super-linter/commit/8605c2b584b36201ac8d1acf98254c2d70776c75 ))
- **python:** bump ansible-lint in /dependencies/python
([#​5877](https://redirect.github.com/super-linter/super-linter/issues/5877 ))
([e90ee32](https://redirect.github.com/super-linter/super-linter/commit/e90ee328a2f6eb42952eeda45929271fddaf0c77 ))
- **python:** bump cfn-lint from 1.4.2 to 1.6.1 in /dependencies/python
([#​5876](https://redirect.github.com/super-linter/super-linter/issues/5876 ))
([ebf8cc8](https://redirect.github.com/super-linter/super-linter/commit/ebf8cc807a6c756755e790419fefcf9e5353b911 ))
- **python:** bump checkov in /dependencies/python
([#​5879](https://redirect.github.com/super-linter/super-linter/issues/5879 ))
([47392ad](https://redirect.github.com/super-linter/super-linter/commit/47392ad6636919b4b21e6ef2c3e1418cb1e931f3 ))
- **python:** bump flake8 from 7.0.0 to 7.1.0 in /dependencies/python
([#​5780](https://redirect.github.com/super-linter/super-linter/issues/5780 ))
([f019ee3](https://redirect.github.com/super-linter/super-linter/commit/f019ee34d21aa778d4b04217e7f717779ddfa767 ))
- **python:** bump ruff from 0.5.0 to 0.5.2 in /dependencies/python
([#​5880](https://redirect.github.com/super-linter/super-linter/issues/5880 ))
([3fd69a1](https://redirect.github.com/super-linter/super-linter/commit/3fd69a107b05f04135f1c01544c50b940a3b1e99 ))
- **python:** bump snakemake in /dependencies/python
([#​5874](https://redirect.github.com/super-linter/super-linter/issues/5874 ))
([2b6aa12](https://redirect.github.com/super-linter/super-linter/commit/2b6aa1290608468ee3828efdeabbeb467be43b80 ))
- **python:** bump sqlfluff from 3.0.7 to 3.1.0 in /dependencies/python
([#​5847](https://redirect.github.com/super-linter/super-linter/issues/5847 ))
([31da61e](https://redirect.github.com/super-linter/super-linter/commit/31da61e1899ca3c9d26681c265b0928b559f1274 ))
##### 🧰 Maintenance
- add super-linter configuration in the bug template
([#​5910](https://redirect.github.com/super-linter/super-linter/issues/5910 ))
([26ddd8b](https://redirect.github.com/super-linter/super-linter/commit/26ddd8b084201554e0351abf421d184864076a56 ))
- authenticate tflint init
([#​5894](https://redirect.github.com/super-linter/super-linter/issues/5894 ))
([cc20e45](https://redirect.github.com/super-linter/super-linter/commit/cc20e4561e549c6f6609900ba68602930c01fb7d ))
- bump alpine image to 3.20 and php to 8.3.x
([#​5863](https://redirect.github.com/super-linter/super-linter/issues/5863 ))
([d9d1909](https://redirect.github.com/super-linter/super-linter/commit/d9d19095ecf48511e4c21a2e23f0def36187d141 ))
- enable dev-dependencies docker build checks
([#​5871](https://redirect.github.com/super-linter/super-linter/issues/5871 ))
([12da497](https://redirect.github.com/super-linter/super-linter/commit/12da4973c69e6987217089a418199a8227f658d7 ))
- fix docker build warnings
([#​5862](https://redirect.github.com/super-linter/super-linter/issues/5862 ))
([fc094cc](https://redirect.github.com/super-linter/super-linter/commit/fc094cc1a4be6a290c49c633fb857c454a98da47 ))
- print info about the environment, image size
([#​5869](https://redirect.github.com/super-linter/super-linter/issues/5869 ))
([bcf8ca8](https://redirect.github.com/super-linter/super-linter/commit/bcf8ca82ad571bb0a04f028193b3f56486cfbeb4 ))
- remove duplicated configuration files
([#​5928](https://redirect.github.com/super-linter/super-linter/issues/5928 ))
([70e0239](https://redirect.github.com/super-linter/super-linter/commit/70e02391170f6aaff4f0b4e80bf9bc8300940171 ))
- run docker build checks
([#​5864](https://redirect.github.com/super-linter/super-linter/issues/5864 ))
([ce59f5c](https://redirect.github.com/super-linter/super-linter/commit/ce59f5c323a8e5038753582dc265ab172b654834 ))
- split validation logic in smaller functions
([#​5892](https://redirect.github.com/super-linter/super-linter/issues/5892 ))
([d2d7334](https://redirect.github.com/super-linter/super-linter/commit/d2d73347d3e49fb28061a41df471afdcf0a579ba ))
- update dependabot config for ci/dev updates
([#​5898](https://redirect.github.com/super-linter/super-linter/issues/5898 ))
([e374e48](https://redirect.github.com/super-linter/super-linter/commit/e374e489339410662293e39f4147dc69d098077f ))
- update release-please to the new workspace
([#​5901](https://redirect.github.com/super-linter/super-linter/issues/5901 ))
([2ecf945](https://redirect.github.com/super-linter/super-linter/commit/2ecf94533920fb6a90ba5f029230cd4cdc69f855 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/angristan/openvpn-install ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi40Mi4yIiwidXBkYXRlZEluVmVyIjoiNDIuNDIuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Stanislas Lange <git@slange.me >
2025-12-11 11:12:00 +01:00
9162924468
chore(deps): update actions/checkout action to v6 ( #1338 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout ) |
action | major | `v4` -> `v6` |
---
### Release Notes
<details>
<summary>actions/checkout (actions/checkout)</summary>
### [`v6`](https://redirect.github.com/actions/checkout/compare/v5...v6 )
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v5...v6 )
### [`v5`](https://redirect.github.com/actions/checkout/compare/v4...v5 )
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4...v5 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/angristan/openvpn-install ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi40Mi4yIiwidXBkYXRlZEluVmVyIjoiNDIuNDIuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-11 10:29:01 +01:00
Stanislas and GitHub
ba1d0419a8
fix: use PAT to trigger CI after hash update ( #1337 )
...
- Commits made with `GITHUB_TOKEN` don't trigger workflows
- Using a PAT allows the hash update commit to trigger CI checks
- Fixes the issue where PR #1335 didn't have CI triggered after the hash
update
2025-12-10 18:23:58 +01:00
Stanislas Lange
a6154c2653
Disable renovate check for disabled workflow
2025-12-10 18:14:57 +01:00
Stanislas and GitHub
a4c51f9bf9
ci: add Renovate for Easy-RSA version updates ( #1333 )
...
## Summary
- Add Renovate configuration to automatically track Easy-RSA releases
- Add GitHub Action to auto-update SHA256 hash on Renovate PRs
## How it works
1. **Renovate** detects a new Easy-RSA release → creates PR updating
`EASYRSA_VERSION`
2. **GitHub Action** triggers on the PR → downloads tarball → computes
SHA256 → commits fix
3. PR is ready to merge with both version and hash updated
---
I intentionally updated to the second-to-last version in
https://github.com/angristan/openvpn-install/commit/bda450948a933224f4f779a24a44c6279e1574a1
to test if this works.
2025-12-10 18:08:54 +01:00
Stanislas and GitHub
b9a1650027
feat: drop Amazon Linux 2 support ( #1332 )
...
## Summary
- Remove Amazon Linux 2 support from the installer
- Amazon Linux 2023 remains fully supported
## Motivation
Amazon Linux 2 is reaching EOL.
Additionally, Amazon Linux 2 ships with **OpenSSL 1.0.2k** (from 2017)
which is incompatible with Easy-RSA 3.2.x. The newer Easy-RSA versions
use `openssl x509 -ext` which doesn't exist in OpenSSL 1.0.x, causing
certificate generation to fail.
This blocks our ability to upgrade Easy-RSA:
https://github.com/angristan/openvpn-install/commit/bda450948a933224f4f779a24a44c6279e1574a1
## Changes
- Updated OS detection to reject Amazon Linux 2 with a clear message
- Removed Amazon Linux 2 specific code paths (EPEL installation, yum
commands)
- Removed from CI test matrix
- Updated README supported distributions table
- Updated Makefile test targets
- Also, add Amazon Linux 2023 Unbound handling
2025-12-10 17:54:00 +01:00
Stanislas and GitHub
66890fb5d3
ci: prevent duplicate workflow runs ( #1324 )
...
## Summary
- Restrict `push` trigger to `master` branch only (feature branch pushes
won't trigger CI)
- Add concurrency groups to cancel redundant runs when new commits are
pushed
- Works correctly with fork PRs using standard `pull_request` event
2025-12-09 19:47:02 +01:00
Stanislas Lange
8a133b7bed
ci: run Docker e2e tests on pull requests
2025-12-09 18:06:53 +01:00
Stanislas and GitHub
a3389c126c
Add Docker-based E2E testing ( #1320 )
...
### Summary
- Add automated end-to-end testing using Docker to verify the installation script works across 18 Linux distributions
- Add Oracle Linux 9 support to the installation script
- Drop support for EOL distributions (Debian 8/9/10, CentOS 7, Ubuntu 16.04)
- Disable Digital Ocean droplets based end-to-end tests, let's use docker from now on
### Changes
**New test infrastructure:**
- `test/Dockerfile.server` - Multi-OS server image with `BASE_IMAGE` build arg
- `test/Dockerfile.client` - Ubuntu 24.04 client for connectivity testing
- `test/server-entrypoint.sh` - Runs install script, verifies files exist, asserts iptables NAT rules, starts OpenVPN
- `test/client-entrypoint.sh` - Connects to VPN, verifies tun0 interface, pings gateway
- `docker-compose.yml` - Orchestrates server + client with shared volume
- `.github/workflows/docker-test.yml` - CI matrix testing 18 OS variants
- `.github/workflows/test.yml` - Removed push/PR triggers, now manual only for DO tests
- `Makefile` - Local testing commands (`make test`, `make test-ubuntu-24.04`, etc.)
**Distributions tested (18 total):**
| Family | Versions |
|--------|----------|
| Ubuntu | 18.04, 20.04, 22.04, 24.04 |
| Debian | 11, 12 |
| Fedora | 40, 41 |
| Rocky Linux | 8, 9 |
| AlmaLinux | 8, 9 |
| Oracle Linux | 8, 9 |
| Amazon Linux | 2, 2023 |
| CentOS Stream | 9 |
| Arch Linux | latest |
2025-12-07 12:27:41 +01:00
Stanislas Lange
94c1af2b5d
Remove Fedora 43 OS image from CI workflow
2025-12-04 23:18:15 +01:00
Stanislas Lange
f92582fb2f
Update Fedora OS images in CI workflow to include 42 and 43
2025-12-04 23:15:24 +01:00
Stanislas Lange
469bc2f883
Update OS images in CI workflow to include Debian 13 and remove 11
2025-12-04 23:12:57 +01:00
Stanislas Lange and Stanislas
6b92f8a61f
Quote shell variables in test.yml to fix shellcheck warnings
2025-12-04 23:04:11 +01:00
Stanislas Lange and Stanislas
62c336022f
Add permissions to test.yml for security best practices
2025-12-04 23:04:11 +01:00
Stanislas Lange and Stanislas
cad43ad99e
Add permissions to lint.yml for security best practices
2025-12-04 23:04:11 +01:00
Stanislas Lange and Stanislas
77f28d1595
ci: add fetch-depth: 0 for super-linter v7 compatibility
...
Super-linter v7 requires full git history to find the default branch
for comparison. Without fetch-depth: 0, it fails with 'master branch
doesn't exist' error.
2025-12-04 23:04:11 +01:00
Stanislas Lange and Stanislas
7c2c491fab
ci: update appleboy/ssh-action from v0.1.6 to v1.2.0
...
Updates to a more recent stable version with bug fixes and
improvements.
2025-12-04 23:04:11 +01:00
Stanislas Lange and Stanislas
00f3cd1605
ci: update Super Linter from v4.1.0 to v7
...
The super-linter project has been moved to the super-linter org
and significantly updated. v7 includes many improvements and
bug fixes.
2025-12-04 23:04:11 +01:00
Stanislas Lange and Stanislas
d61b16f3b8
ci: replace deprecated set-output with GITHUB_OUTPUT
...
The set-output workflow command was deprecated in favor of
environment files. See:
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
2025-12-04 23:04:11 +01:00
Stanislas Lange
19e4b7961f
CI: add Fedora 41 and remove 39 for e2e workflow
2025-03-10 10:27:19 +01:00
Stanislas Lange
dc114f3243
Update distribution matrix for end-to-end tests
2024-11-07 20:49:42 +01:00
Stanislas Lange
0d58ddcb8c
Update distribution matrix for end-to-end tests
2024-11-07 20:46:51 +01:00
Stanislas Lange
2ce1ee765e
Remove centos-stream-8-x64 from test workflow
...
Not available on DO anymore
2024-07-12 18:22:34 +02:00
Stanislas Lange
67701fac77
CI: wait for dpkg lock in debian/ubuntu setup step
2024-05-16 20:37:23 +02:00
Stanislas Lange
0cc002e17d
CI: wait for dpkg lock in debian/ubuntu setup step
2024-05-16 20:33:32 +02:00
Stanislas Lange
a2725d61a3
CI: update actions/checkout to v4
2024-05-16 20:13:47 +02:00
Stanislas Lange
305e9868cf
CI: update linux distributions used in end-to-end tests
2024-05-16 20:08:12 +02:00
Stanislas Lange
6a127fa2b6
Enable manual trigger of actions
2024-05-16 20:02:01 +02:00
Stanislas and GitHub
1a249c621d
ci: test workflow server images update ( #1183 )
...
* test ci
* remove ubuntu 18.04
* remove fedora 35 and add 37 38
* disable centos stream 9, add debian 12
2023-11-20 21:14:04 +01:00
Stanislas Lange
d2556ff235
Add support for CentOS 9 + update supported distributions
2023-01-22 00:57:40 +01:00
Stanislas Lange and Stanislas
2f76bb5e40
Update easy-rsa to 3.1.2 and fix compatibility with Ubuntu 22.04
...
Based on this patch by @zerodivisi0n: https://github.com/angristan/openvpn-install/issues/1000#issuecomment-1283484772
2023-01-22 00:10:46 +01:00
Stanislas Lange and Stanislas
ca8d58d5f0
Fix checkout in test workflow
2023-01-22 00:10:46 +01:00
638b51168a
build(deps): bump appleboy/ssh-action from 0.1.5 to 0.1.6 ( #1074 )
...
Bumps [appleboy/ssh-action](https://github.com/appleboy/ssh-action ) from 0.1.5 to 0.1.6.
- [Release notes](https://github.com/appleboy/ssh-action/releases )
- [Commits](https://github.com/appleboy/ssh-action/compare/v0.1.5...v0.1.6 )
---
updated-dependencies:
- dependency-name: appleboy/ssh-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-03 14:05:27 +01:00
d629791a95
build(deps): bump actions/checkout from 3.1.0 to 3.2.0 ( #1075 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...v3.2.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-03 14:05:14 +01:00
Stanislas and GitHub
d3751457ab
Remove Debian 9 in e2e tests as it has been removed by DO
2022-11-21 19:15:22 +01:00
dependabot[bot] and Stanislas
83111c58e7
build(deps): bump actions/checkout from 3.0.2 to 3.1.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.0.2 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.0.2...v3.1.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-11-21 19:07:13 +01:00
dependabot[bot] and Stanislas
a7e54a47ce
build(deps): bump appleboy/ssh-action from 0.1.4 to 0.1.5
...
Bumps [appleboy/ssh-action](https://github.com/appleboy/ssh-action ) from 0.1.4 to 0.1.5.
- [Release notes](https://github.com/appleboy/ssh-action/releases )
- [Commits](https://github.com/appleboy/ssh-action/compare/v0.1.4...v0.1.5 )
---
updated-dependencies:
- dependency-name: appleboy/ssh-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-11-21 19:07:04 +01:00
Stanislas and GitHub
4553dd9c21
ci: remove ubuntu 21.10 as it is not supported by DO
2022-08-17 16:08:12 +02:00
b3b7593b2d
build(deps): bump actions/checkout from 2.4.0 to 3.0.2 ( #996 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2.4.0 to 3.0.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2.4.0...v3.0.2 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-12 11:51:39 +02:00
Stanislas and GitHub
5fcce43d8d
Update CI images
2022-01-24 21:02:46 +01:00
Stanislas Lange
8c6266053b
ci: update test images
2022-01-07 16:03:31 +01:00
6c4d91e5e8
build(deps): bump actions/checkout from 2.3.5 to 2.4.0 ( #948 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2.3.5 to 2.4.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2.3.5...v2.4.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-13 22:46:07 +01:00