mirror of
https://github.com/certbot/certbot.git
synced 2026-05-28 04:34:11 -04:00
6f1c0b0abd
based on the suggestion @bmw made in #10484, this moves nearly everything from `certbot-apache` and `certbot-nginx` into subdirectories in `certbot/src/certbot/_internal`, and corresponding "extra" dependencies are made for the certbot distribution. in their place, entrypoint shims are made in the old distributions. this way, installing `certbot[nginx]` will pull in the extra dependencies needed for the nginx code, and also pull in the shim in `certbot-nginx`, letting our plugin discovery system work just as it did before. ditto for apache. note that this doesn't yet deprecate anything, which was one of the primary goals of the original issue -- i spun out that work into #10521 fixes #10484 --------- Co-authored-by: Brad Warren <bmw@users.noreply.github.com> Co-authored-by: ohemorange <erica@eff.org>
312 lines
11 KiB
INI
312 lines
11 KiB
INI
[tox]
|
|
envlist = {cover,lint}-posix,mypy
|
|
|
|
skipsdist = true
|
|
|
|
[base]
|
|
pytest = python -m pytest {posargs}
|
|
# Paths are listed on one line because tox seems to have inconsistent
|
|
# behavior with substitutions that contain line continuations, see
|
|
# https://github.com/tox-dev/tox/issues/2069 for more info.
|
|
mypy_strict_source_paths = certbot-ci/src certbot-dns-cloudflare/src certbot-dns-digitalocean/src certbot-dns-dnsimple/src certbot-dns-dnsmadeeasy/src certbot-dns-gehirn/src certbot-dns-google/src certbot-dns-linode/src certbot-dns-luadns/src certbot-dns-nsone/src certbot-dns-ovh/src certbot-dns-rfc2136/src certbot-dns-route53/src certbot-dns-sakuracloud/src
|
|
mypy_no_strict_source_paths = acme/src certbot/src certbot-apache/src certbot-compatibility-test/src certbot-nginx/src
|
|
source_paths = {[base]mypy_strict_source_paths} {[base]mypy_no_strict_source_paths}
|
|
|
|
[testenv]
|
|
platform =
|
|
posix: ^(?!.*win32).*$
|
|
setenv =
|
|
PYTEST_ADDOPTS = {env:PYTEST_ADDOPTS:--numprocesses auto}
|
|
PYTHONHASHSEED = 0
|
|
# The default install command is python -I -m pip install {opts} {packages}
|
|
install_command = python -I {toxinidir}/tools/pip_install.py {opts} {packages}
|
|
deps =
|
|
-e acme[test]
|
|
-e certbot
|
|
-e certbot[test]
|
|
-e certbot-apache
|
|
-e certbot-dns-cloudflare
|
|
-e certbot-dns-digitalocean
|
|
-e certbot-dns-dnsimple
|
|
-e certbot-dns-dnsmadeeasy
|
|
-e certbot-dns-gehirn
|
|
-e certbot-dns-google
|
|
-e certbot-dns-linode
|
|
-e certbot-dns-luadns
|
|
-e certbot-dns-nsone
|
|
-e certbot-dns-ovh
|
|
-e certbot-dns-rfc2136
|
|
-e certbot-dns-route53
|
|
-e certbot-dns-sakuracloud
|
|
-e certbot-nginx
|
|
allowlist_externals =
|
|
echo
|
|
false
|
|
# This and the next few testenvs are a workaround for
|
|
# https://github.com/tox-dev/tox/issues/2858.
|
|
commands =
|
|
echo "Unrecognized environment name {envname}"
|
|
false
|
|
|
|
[testenv:py{,-posix}]
|
|
commands =
|
|
{[base]pytest} acme certbot certbot-dns-cloudflare certbot-dns-digitalocean certbot-dns-dnsimple certbot-dns-dnsmadeeasy certbot-dns-gehirn certbot-dns-google certbot-dns-linode certbot-dns-luadns certbot-dns-nsone certbot-dns-ovh certbot-dns-rfc2136 certbot-dns-route53 certbot-dns-sakuracloud
|
|
|
|
[testenv:py3{,10,11,12,13,14}]
|
|
commands = {[testenv:py]commands}
|
|
|
|
[testenv:py3.{10,11,12,13,14}]
|
|
commands = {[testenv:py]commands}
|
|
|
|
[testenv:oldest]
|
|
# Setting basepython allows the tests to fail fast if that version of Python
|
|
# isn't available instead of potentially trying to use a newer version of
|
|
# Python which is unlikely to work.
|
|
#
|
|
# This version should be kept in sync with the one declared in
|
|
# tools/pinning/oldest/pyproject.toml.
|
|
basepython = python3.10
|
|
setenv =
|
|
{[testenv:py]setenv}
|
|
CERTBOT_OLDEST=1
|
|
commands = {[testenv:py]commands}
|
|
|
|
[testenv:cover]
|
|
coverage_report = python -m coverage report
|
|
common_coverage_report_commands =
|
|
{[testenv:cover]coverage_report} --fail-under 99 --include certbot-dns-cloudflare/*
|
|
{[testenv:cover]coverage_report} --fail-under 99 --include certbot-dns-digitalocean/*
|
|
{[testenv:cover]coverage_report} --fail-under 99 --include certbot-dns-dnsimple/*
|
|
{[testenv:cover]coverage_report} --fail-under 99 --include certbot-dns-dnsmadeeasy/*
|
|
{[testenv:cover]coverage_report} --fail-under 99 --include certbot-dns-gehirn/*
|
|
{[testenv:cover]coverage_report} --fail-under 99 --include certbot-dns-google/*
|
|
{[testenv:cover]coverage_report} --fail-under 100 --include certbot-dns-linode/*
|
|
{[testenv:cover]coverage_report} --fail-under 99 --include certbot-dns-luadns/*
|
|
{[testenv:cover]coverage_report} --fail-under 99 --include certbot-dns-nsone/*
|
|
{[testenv:cover]coverage_report} --fail-under 98 --include certbot-dns-ovh/*
|
|
{[testenv:cover]coverage_report} --fail-under 99 --include certbot-dns-rfc2136/*
|
|
{[testenv:cover]coverage_report} --fail-under 94 --include certbot-dns-route53/*
|
|
{[testenv:cover]coverage_report} --fail-under 99 --include certbot-dns-sakuracloud/*
|
|
commands =
|
|
{[testenv:py]commands} --cov --cov-report=
|
|
{[testenv:cover]coverage_report} --fail-under 100 --include acme/*
|
|
{[testenv:cover]coverage_report} --fail-under 96 --include certbot/*
|
|
{[testenv:cover]common_coverage_report_commands}
|
|
|
|
# Another workaround for https://github.com/tox-dev/tox/issues/2858 in tox v4.
|
|
[testenv:cover-posix]
|
|
commands = {[testenv:cover]commands}
|
|
|
|
[testenv:lint{,-posix}]
|
|
commands =
|
|
python -m pylint --reports=n --rcfile=.pylintrc {[base]source_paths}
|
|
ruff check
|
|
|
|
[testenv:mypy]
|
|
deps =
|
|
{[testenv]deps}
|
|
-e certbot-ci
|
|
commands =
|
|
mypy {[base]mypy_no_strict_source_paths}
|
|
mypy {[base]mypy_strict_source_paths} --strict
|
|
|
|
[testenv:isolated-acme]
|
|
description = Tests acme without any Certbot components installed
|
|
deps = -e acme[test]
|
|
commands = {[base]pytest} acme
|
|
|
|
[testenv:isolated-certbot]
|
|
description = Tests Certbot without any additional plugins installed
|
|
commands = {[base]pytest} certbot
|
|
deps =
|
|
{[testenv:isolated-acme]deps}
|
|
-e certbot[test]
|
|
|
|
[testenv:isolated-{apache,cloudflare,digitalocean,dnsimple,dnsmadeeasy,gehirn,google,linode,luadns,nsone,ovh,rfc2136,route53,sakuracloud,nginx}]
|
|
description = Tests the plugin without installing any other plugins
|
|
deps =
|
|
{[testenv:isolated-certbot]deps}
|
|
apache: -e certbot-apache
|
|
cloudflare: -e certbot-dns-cloudflare
|
|
digitalocean: -e certbot-dns-digitalocean
|
|
dnsimple: -e certbot-dns-dnsimple
|
|
dnsmadeeasy: -e certbot-dns-dnsmadeeasy
|
|
gehirn: -e certbot-dns-gehirn
|
|
google: -e certbot-dns-google
|
|
linode: -e certbot-dns-linode
|
|
luadns: -e certbot-dns-luadns
|
|
nsone: -e certbot-dns-nsone
|
|
ovh: -e certbot-dns-ovh
|
|
rfc2136: -e certbot-dns-rfc2136
|
|
route53: -e certbot-dns-route53
|
|
sakuracloud: -e certbot-dns-sakuracloud
|
|
nginx: -e certbot-nginx
|
|
commands =
|
|
apache: {[base]pytest} certbot/src/certbot/_internal/tests/plugins/apache
|
|
cloudflare: {[base]pytest} certbot-dns-cloudflare
|
|
digitalocean: {[base]pytest} certbot-dns-digitalocean
|
|
dnsimple: {[base]pytest} certbot-dns-dnsimple
|
|
dnsmadeeasy: {[base]pytest} certbot-dns-dnsmadeeasy
|
|
gehirn: {[base]pytest} certbot-dns-gehirn
|
|
google: {[base]pytest} certbot-dns-google
|
|
linode: {[base]pytest} certbot-dns-linode
|
|
luadns: {[base]pytest} certbot-dns-luadns
|
|
nsone: {[base]pytest} certbot-dns-nsone
|
|
ovh: {[base]pytest} certbot-dns-ovh
|
|
rfc2136: {[base]pytest} certbot-dns-rfc2136
|
|
route53: {[base]pytest} certbot-dns-route53
|
|
sakuracloud: {[base]pytest} certbot-dns-sakuracloud
|
|
nginx: {[base]pytest} certbot/src/certbot/_internal/tests/plugins/nginx
|
|
|
|
[testenv:apacheconftest]
|
|
deps =
|
|
-e acme
|
|
-e certbot
|
|
-e certbot-apache
|
|
commands =
|
|
{toxinidir}/certbot/src/certbot/_internal/tests/plugins/apache/apache-conf-files/apache-conf-test --debian-modules
|
|
passenv =
|
|
SERVER
|
|
allowlist_externals =
|
|
{toxinidir}/certbot/src/certbot/_internal/tests/plugins/apache/apache-conf-files/apache-conf-test
|
|
|
|
[testenv:apacheconftest-external-with-pebble]
|
|
description = Run apacheconftest with pebble and Certbot outside of the tox virtual environment.
|
|
deps =
|
|
-e certbot-ci
|
|
allowlist_externals =
|
|
{toxinidir}/certbot/src/certbot/_internal/tests/plugins/apache/apache-conf-files/apache-conf-test-pebble.py
|
|
commands =
|
|
{toxinidir}/certbot/src/certbot/_internal/tests/plugins/apache/apache-conf-files/apache-conf-test-pebble.py --debian-modules
|
|
|
|
[testenv:apacheconftest-with-pebble]
|
|
deps =
|
|
{[testenv:apacheconftest]deps}
|
|
{[testenv:apacheconftest-external-with-pebble]deps}
|
|
allowlist_externals =
|
|
{toxinidir}/certbot/src/certbot/_internal/tests/plugins/apache/apache-conf-files/apache-conf-test-pebble.py
|
|
commands = {[testenv:apacheconftest-external-with-pebble]commands}
|
|
|
|
[testenv:nginxroundtrip]
|
|
deps =
|
|
-e acme
|
|
-e certbot
|
|
-e certbot-apache
|
|
-e certbot-nginx
|
|
commands =
|
|
python certbot-compatibility-test/nginx/roundtrip.py certbot-compatibility-test/nginx/nginx-roundtrip-testdata
|
|
|
|
[testenv:modification]
|
|
deps =
|
|
commands =
|
|
python {toxinidir}/tests/modification-check.py
|
|
|
|
[testenv:apache_compat]
|
|
deps =
|
|
commands =
|
|
docker build -t certbot-compatibility-test -f certbot-compatibility-test/Dockerfile .
|
|
docker build -t apache-compat -f certbot-compatibility-test/Dockerfile-apache .
|
|
docker run --rm -t apache-compat -c apache.tar.gz -vvvv
|
|
allowlist_externals =
|
|
docker
|
|
passenv =
|
|
DOCKER_*
|
|
|
|
[testenv:nginx_compat]
|
|
deps =
|
|
commands =
|
|
docker build -t certbot-compatibility-test -f certbot-compatibility-test/Dockerfile .
|
|
docker build -t nginx-compat -f certbot-compatibility-test/Dockerfile-nginx .
|
|
docker run --rm -t nginx-compat -c nginx.tar.gz -vv -aie
|
|
allowlist_externals =
|
|
docker
|
|
passenv =
|
|
DOCKER_*
|
|
|
|
[testenv:integration]
|
|
deps =
|
|
-e acme
|
|
-e certbot
|
|
-e certbot-nginx
|
|
-e certbot-ci
|
|
commands =
|
|
{[base]pytest} certbot-ci/src/certbot_integration_tests \
|
|
--cov=acme --cov=certbot --cov=certbot_nginx --cov-report= \
|
|
--cov-config=certbot-ci/src/certbot_integration_tests/.coveragerc
|
|
coverage report --include 'certbot/*' --show-missing --fail-under=71
|
|
passenv = DOCKER_*
|
|
|
|
[testenv:integration-certbot]
|
|
deps =
|
|
-e acme
|
|
-e certbot
|
|
-e certbot-ci
|
|
commands =
|
|
{[base]pytest} certbot-ci/src/certbot_integration_tests/certbot_tests \
|
|
--cov=acme --cov=certbot --cov-report= \
|
|
--cov-config=certbot-ci/src/certbot_integration_tests/.coveragerc
|
|
coverage report --include 'certbot/*' --show-missing --fail-under=62
|
|
|
|
[testenv:integration-dns-rfc2136]
|
|
deps =
|
|
-e acme
|
|
-e certbot
|
|
-e certbot-dns-rfc2136
|
|
-e certbot-ci
|
|
commands =
|
|
{[base]pytest} certbot-ci/src/certbot_integration_tests/rfc2136_tests \
|
|
--dns-server=bind \
|
|
--numprocesses=1 \
|
|
--cov=acme --cov=certbot --cov=certbot_dns_rfc2136 --cov-report= \
|
|
--cov-config=certbot-ci/src/certbot_integration_tests/.coveragerc
|
|
coverage report --include 'certbot/*' --show-missing --fail-under=45
|
|
coverage report --include 'certbot-dns-rfc2136/*' --show-missing --fail-under=86
|
|
|
|
[testenv:integration-external]
|
|
description = Run integration tests with Certbot outside of the tox virtual environment.
|
|
deps =
|
|
-e certbot-ci
|
|
commands =
|
|
{[base]pytest} certbot-ci/src/certbot_integration_tests
|
|
passenv = DOCKER_*
|
|
|
|
[testenv:integration-certbot-oldest]
|
|
deps =
|
|
-e acme
|
|
-e certbot
|
|
-e certbot-ci
|
|
basepython =
|
|
{[testenv:oldest]basepython}
|
|
commands =
|
|
{[base]pytest} certbot-ci/src/certbot_integration_tests/certbot_tests
|
|
passenv = DOCKER_*
|
|
setenv = {[testenv:oldest]setenv}
|
|
|
|
[testenv:integration-nginx-oldest]
|
|
deps =
|
|
-e acme
|
|
-e certbot
|
|
-e certbot-nginx
|
|
-e certbot-ci
|
|
basepython =
|
|
{[testenv:oldest]basepython}
|
|
commands =
|
|
{[base]pytest} certbot-ci/src/certbot_integration_tests/nginx_tests
|
|
passenv = DOCKER_*
|
|
setenv = {[testenv:oldest]setenv}
|
|
|
|
[testenv:test-farm-apache2]
|
|
passenv =
|
|
AWS_*
|
|
setenv = AWS_DEFAULT_REGION=us-east-1
|
|
changedir = letstest
|
|
deps = -e {toxinidir}/letstest
|
|
commands = {toxinidir}/tools/retry.sh letstest targets/targets.yaml {env:AWS_EC2_PEM_FILE} SET_BY_ENV scripts/test_apache2.sh --repo {toxinidir}
|
|
allowlist_externals =
|
|
{toxinidir}/tools/retry.sh
|
|
|
|
[testenv:validate-changelog]
|
|
deps = towncrier
|
|
# we set --version here so towncrier doesn't try to guess the certbot version which requires certbot
|
|
# to be installed
|
|
commands = towncrier build --draft --version 99.99.0
|