mixandClaude Opus 5.5
fbd0acd035
test / test (push) Canceled after 0s
Code and config: - C-M7: a DMARC report's explicit <pct>0</pct> stays 0; only an absent pct takes RFC 7489 § 6.3's default 100 (Pct *int). - C-D1: docs/development.md now tables the Debian versions the citations were read at (postfix 3.7.11-0+deb12u1, opendkim and libopendkim11 2.11.0~beta2-8+deb12u1, libmilter1.0.1 8.17.1.9-2+deb12u2, libsasl2-2 and sasl2-bin 2.1.28+dfsg-10, supervisor 4.2.5-1, logrotate 3.21.0-1 - read off the image with dpkg-query, 2026-10-15); the e2e stand's new checkCitedPackageVersions fails when the image it built differs. - C-E2: the e2e zone's SOA serial only grows (CoreDNS v1.14.6's file plugin reloads on a grown serial, not on mtime); Corefile comment says so; TestZoneSerialGrows. - C-K8, C-K9: the e2e compose and stage comments say how --project-directory and .env resolve. - D-arch:154: postfix-config.sh's "Postfix insists" comment says what TLS_README advises and that smtpd reads the key as root. - B-G7: inflight.go's reservationTTL comment: a dropped client does give ABORT (smtpd_proto() -> mail_reset() -> milter_abort()); the TTL is for smtpd dying or the milter connection breaking. - D-guide:301: the nginx fragment's first-certificate command now reaches certbot (--entrypoint certbot, --standalone, port 80 free), and the renewal loop passes --webroot -w /var/www/certbot - a standalone certificate would otherwise renew standalone while nginx holds port 80 (certbot docs, "Renewing certificates": the issuing plugin is used "unless you specify other plugins or options", and options of a successful renewal are saved). The register's proposal missed that. Documents: every D-arch, D-guide and D-sec claim the register's Answers E found false or partly true, rewritten - by three Sonnet agents, one per document, then reviewed: two proposals were obsolete after this stage's fixes and not used (a bounce's From: line - extract_from = "smtp" now; "Origin: null" - Referrer-Policy is same-origin now); a stand observation the agent had dated from a commit is now tied to the e2e test that checks it; the SQLite writers paragraph describes _txlock=immediate; the log tailer's rotation paragraph describes the minute's grace; the guide's nginx steps were put in working order (links and modes before `up`, no reconfigure step). "Deferred" is kept for Postfix's queue in the guide too. guide.md's CRLF from the agent normalised. Stand (2026-10-15, make e2e, exit 0, the version gate and zone serial test included); go vet and go test ./... pass on the server (24 packages). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
40 lines
979 B
Go
40 lines
979 B
Go
package e2e
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"regexp"
|
|
"strconv"
|
|
"testing"
|
|
)
|
|
|
|
// Two zones written within one second still get two serials, the second
|
|
// larger: CoreDNS reloads a zone only when its serial grows (C-E2).
|
|
func TestZoneSerialGrows(t *testing.T) {
|
|
stage := t.TempDir()
|
|
if err := os.MkdirAll(filepath.Join(stage, "dns-stage"), 0o755); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
soa := regexp.MustCompile(`IN SOA ns\.e2e\.test\. admin\.e2e\.test\. \( (\d+) `)
|
|
serial := func() int64 {
|
|
t.Helper()
|
|
if err := writeZone(stage, nil); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
b, err := os.ReadFile(filepath.Join(stage, "dns-stage", "db.zone"))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
m := soa.FindSubmatch(b)
|
|
if m == nil {
|
|
t.Fatalf("no SOA serial in\n%s", b)
|
|
}
|
|
n, _ := strconv.ParseInt(string(m[1]), 10, 64)
|
|
return n
|
|
}
|
|
first, second := serial(), serial()
|
|
if second <= first {
|
|
t.Fatalf("serials %d then %d: the second write would not be served", first, second)
|
|
}
|
|
}
|