mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-07 19:32:17 +00:00
kevinveenbirkenbachandClaude Opus 5
66be8f6a0a
A codename carries no ordering, so 'bookworm' and 'trixie' are two opaque strings and no updater can tell that one supersedes the other. A pin that names its Debian release that way is frozen on that release for as long as it stands, and the freeze is invisible because the tag keeps resolving. Numeric tags are comparable and stay inside the freshness pipeline, so the rule is worth holding for the whole repository rather than fixing case by case. The check reads two shapes, because a codename reaches the tree in two spellings. A 'name:tag' reference is recognised by the absence of a space after the colon, which is what separates 'debian:bookworm' from the YAML 'image: python' and covers Dockerfile FROM lines and heredocs without a second parser. A 'version:' value is read as a key, because '3.11-bookworm' carries no colon at all. False positives are kept out by two independent gates: a word-boundary prefilter, so 'residual' and 'inside' are not read as 'sid', and a split of the tag on '-', '.' and '_' that requires a whole component to be a codename. That is what lets 'cache buster', '.stretched-link', 'fa-bullseye' and a tags list containing 'stretch' through. Every codename occurrence in the repository was checked against the matcher by hand, and the check was negative-controlled in both shapes, including an untracked file. Four references had to move for the rule to hold. meta/distros.yml takes 'debian:13' rather than '13.6': at depth 1 the updater can raise it across a major, while depth 2 pins it inside the 13.x line forever. The whole 'make install' path was run in a debian:13 container to back that: all twenty-four Depends and Recommends resolve on trixie, the docker repository bootstrap derives the right suite and installs docker-ce-cli, and the package builds and installs. The workspace DiD probe moves to 'debian:13-slim'. An earlier version of this change carried a suppression claiming the probe had to follow the suite the apt proxy mirrors. That was wrong twice over: it cited a function that has nothing to do with the probe, and the coupling does not exist, because the cache frontend rewrites by path prefix and the suite never enters a routing decision. Replaying the probe verbatim against debian:13-slim fetches all three trixie suites through the bookworm-configured proxies, so the suppression is gone rather than reworded. The rule ships with an escape hatch and no uses of it. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Workspace Test Suite
This directory contains the modular workspace test suite for Infinito.Nexus. It validates the full local development flow from a clean state.
The entry point is 00_orchestrator.sh. It runs one or more tracks — subdirectories whose numbered scripts execute in order.
Tracks
base prepares the workspace and is a prerequisite for the other two. compose
and swarm are independent of each other, which is what lets CI run them as
separate jobs with a budget each.
| Track | File | Purpose |
|---|---|---|
| base | base/01_install.sh | Installs package prerequisites and repository dependencies |
| base | base/02_system.sh | Shows disk usage and purges cached state |
| base | base/03_build.sh | Builds the local Docker image |
| base | base/04_bootstrap.sh | Bootstraps the development environment and starts the stack |
| base | base/05_commit.sh | Validates pre-commit hook enforcement and --no-verify bypass |
| base | base/06_test.sh | Runs the full validation suite |
| base | base/07_console.sh | Smoke-tests the interactive console REPL |
| compose | compose/01_minimal.sh | Compose deploy on minimal hardware with service exclusion |
| compose | compose/02_performance.sh | Compose deploy of the full application set on performance hardware |
| compose | compose/03_reuse.sh | Compose redeploy reusing existing inventory and packages |
| compose | compose/04_teardown.sh | Shuts down the stack and reverses environment changes |
| swarm | swarm/01_teardown.sh | Releases the development stack so the swarm cluster runs alone |
| swarm | swarm/02_zombie.sh | Swarm deploy of the MariaDB database role (svc-db-mariadb) |
| swarm | swarm/03_roundtrip.sh | Compose+swarm roundtrip of the PostgreSQL database role (svc-db-postgres) |
| swarm | swarm/04_teardown.sh | Shuts down the stack and reverses environment changes |
| Shared | Purpose |
|---|---|
| utils/common.sh | Shared bootstrap, constants, and generic helpers (HTTP assertion, inventory inspection) |
| utils/cache.sh | Cache-stack assertions and probes (registry-cache, package-cache, DiD inner-build) |
| utils/teardown.sh | Stack shutdown and environment reversal, shared by both closing steps |
Usage
Run every track via the entry point:
bash scripts/tests/workspace/00_orchestrator.sh
Run selected tracks, in the order given, through INFINITO_WORKSPACE_TRACKS:
INFINITO_WORKSPACE_TRACKS="base swarm" bash scripts/tests/workspace/00_orchestrator.sh
An unknown track name aborts before anything else runs.
For documentation on the overall development workflow, see the Deploy Guide.