mirror of
https://github.com/angristan/openvpn-install.git
synced 2025-12-12 07:22:41 +01:00
a3389c126c
### Summary - Add automated end-to-end testing using Docker to verify the installation script works across 18 Linux distributions - Add Oracle Linux 9 support to the installation script - Drop support for EOL distributions (Debian 8/9/10, CentOS 7, Ubuntu 16.04) - Disable Digital Ocean droplets based end-to-end tests, let's use docker from now on ### Changes **New test infrastructure:** - `test/Dockerfile.server` - Multi-OS server image with `BASE_IMAGE` build arg - `test/Dockerfile.client` - Ubuntu 24.04 client for connectivity testing - `test/server-entrypoint.sh` - Runs install script, verifies files exist, asserts iptables NAT rules, starts OpenVPN - `test/client-entrypoint.sh` - Connects to VPN, verifies tun0 interface, pings gateway - `docker-compose.yml` - Orchestrates server + client with shared volume - `.github/workflows/docker-test.yml` - CI matrix testing 18 OS variants - `.github/workflows/test.yml` - Removed push/PR triggers, now manual only for DO tests - `Makefile` - Local testing commands (`make test`, `make test-ubuntu-24.04`, etc.) **Distributions tested (18 total):** | Family | Versions | |--------|----------| | Ubuntu | 18.04, 20.04, 22.04, 24.04 | | Debian | 11, 12 | | Fedora | 40, 41 | | Rocky Linux | 8, 9 | | AlmaLinux | 8, 9 | | Oracle Linux | 8, 9 | | Amazon Linux | 2, 2023 | | CentOS Stream | 9 | | Arch Linux | latest |
91 lines
2.0 KiB
Bash
Executable File
91 lines
2.0 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
|
|
echo "=== OpenVPN Client Container ==="
|
|
|
|
# Create TUN device if it doesn't exist
|
|
if [ ! -c /dev/net/tun ]; then
|
|
mkdir -p /dev/net
|
|
mknod /dev/net/tun c 10 200
|
|
chmod 600 /dev/net/tun
|
|
fi
|
|
|
|
echo "TUN device ready"
|
|
|
|
# Wait for client config to be available
|
|
echo "Waiting for client config..."
|
|
MAX_WAIT=120
|
|
WAITED=0
|
|
while [ ! -f /shared/client.ovpn ] && [ $WAITED -lt $MAX_WAIT ]; do
|
|
sleep 2
|
|
WAITED=$((WAITED + 2))
|
|
echo "Waiting... ($WAITED/$MAX_WAIT seconds)"
|
|
done
|
|
|
|
if [ ! -f /shared/client.ovpn ]; then
|
|
echo "ERROR: Client config not found after ${MAX_WAIT}s"
|
|
exit 1
|
|
fi
|
|
|
|
echo "Client config found!"
|
|
cat /shared/client.ovpn
|
|
|
|
# Connect to VPN
|
|
echo "Connecting to OpenVPN server..."
|
|
openvpn --config /shared/client.ovpn --daemon --log /var/log/openvpn.log
|
|
|
|
# Wait for connection
|
|
echo "Waiting for VPN connection..."
|
|
MAX_WAIT=60
|
|
WAITED=0
|
|
while ! ip addr show tun0 2>/dev/null | grep -q "inet " && [ $WAITED -lt $MAX_WAIT ]; do
|
|
sleep 2
|
|
WAITED=$((WAITED + 2))
|
|
echo "Waiting for tun0... ($WAITED/$MAX_WAIT seconds)"
|
|
|
|
# Check for errors
|
|
if [ -f /var/log/openvpn.log ]; then
|
|
tail -5 /var/log/openvpn.log
|
|
fi
|
|
done
|
|
|
|
if ! ip addr show tun0 2>/dev/null | grep -q "inet "; then
|
|
echo "ERROR: VPN connection failed"
|
|
echo "=== OpenVPN log ==="
|
|
cat /var/log/openvpn.log || true
|
|
exit 1
|
|
fi
|
|
|
|
echo "=== VPN Connected! ==="
|
|
ip addr show tun0
|
|
|
|
# Run connectivity tests
|
|
echo ""
|
|
echo "=== Running connectivity tests ==="
|
|
|
|
# Test 1: Check tun0 interface
|
|
echo "Test 1: Checking tun0 interface..."
|
|
if ip addr show tun0 | grep -q "10.8.0"; then
|
|
echo "PASS: tun0 interface has correct IP range (10.8.0.x)"
|
|
else
|
|
echo "FAIL: tun0 interface doesn't have expected IP"
|
|
exit 1
|
|
fi
|
|
|
|
# Test 2: Ping VPN gateway
|
|
echo "Test 2: Pinging VPN gateway (10.8.0.1)..."
|
|
if ping -c 3 10.8.0.1; then
|
|
echo "PASS: Can ping VPN gateway"
|
|
else
|
|
echo "FAIL: Cannot ping VPN gateway"
|
|
exit 1
|
|
fi
|
|
|
|
echo ""
|
|
echo "=========================================="
|
|
echo " ALL TESTS PASSED!"
|
|
echo "=========================================="
|
|
|
|
# Keep container running for debugging if needed
|
|
exec tail -f /var/log/openvpn.log
|