integration-tests.yaml

name: Integration Tests

on:
  pull_request:
  workflow_call:

jobs:
  integration-test-legacy:
    name: Run Legacy Integration Tests
    runs-on: [ self-hosted, linux, x64, large ]

    steps:
      - uses: actions/checkout@v2

      - name: Build Aproxy Snap
        id: snapcraft-build
        uses: snapcore/action-build@v1

      - name: Upload Aproxy Snap
        uses: actions/upload-artifact@v3
        with:
          name: snap
          path: aproxy*.snap

      - name: Install Aproxy Snap
        run: |
          sudo snap install --dangerous aproxy_*_amd64.snap

      - name: Configure Aproxy
        run: |
          sudo snap set aproxy proxy=squid.internal:3128 listen=:23403
          sudo nft -f - << EOF
          define default-ip = $(ip route get $(ip route show 0.0.0.0/0 | grep -oP 'via \K\S+') | grep -oP 'src \K\S+')
          define private-ips = { 10.0.0.0/8, 127.0.0.1/8, 172.16.0.0/12, 192.168.0.0/16 }
          table ip aproxy
          flush table ip aproxy
          table ip aproxy {
                  chain prerouting {
                          type nat hook prerouting priority dstnat; policy accept;
                          ip daddr != \$private-ips tcp dport { 80, 443 } counter dnat to \$default-ip:23403
                  }

                  chain output {
                          type nat hook output priority -100; policy accept;
                          ip daddr != \$private-ips tcp dport { 80, 443 } counter dnat to \$default-ip:23403
                  }
          }
          EOF

      - name: Test HTTP
        run: |
          curl --noproxy "*" http://example.com -svS -o /dev/null

      - name: Test HTTPS
        run: |
          curl --noproxy "*" https://example.com -svS -o /dev/null

      - name: Test Access Logs
        run: |
          sudo snap logs aproxy.aproxy
          sudo snap logs aproxy.aproxy | grep -Fq "example.com:80"
          sudo snap logs aproxy.aproxy | grep -Fq "example.com:443"

  integration-test:
    name: Run Integration Tests
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v2

      - name: Install Tinyproxy
        run: |
          sudo apt update
          sudo apt install tinyproxy -y

      - name: Build Aproxy Snap
        id: snapcraft-build
        uses: snapcore/action-build@v1

      - name: Upload Aproxy Snap
        uses: actions/upload-artifact@v3
        with:
          name: snap
          path: aproxy*.snap

      - name: Install Aproxy Snap
        run: |
          sudo snap install --dangerous aproxy_*_amd64.snap

      - name: Configure Aproxy
        run: |
          sudo snap connect aproxy:network-control
          sudo snap set aproxy fwmark=7316 listen=:23403
          
          sudo nft -f - << EOF
          define default-ip = $(ip route get $(ip route show 0.0.0.0/0 | grep -oP 'via \K\S+') | grep -oP 'src \K\S+')
          define private-ips = { 10.0.0.0/8, 127.0.0.1/8, 172.16.0.0/12, 192.168.0.0/16 }
          table ip aproxy
          flush table ip aproxy
          table ip aproxy {
                  chain prerouting {
                          type nat hook prerouting priority dstnat; policy accept;
                          mark != 7316 ip daddr != \$private-ips tcp dport { 80, 443 } counter dnat to \$default-ip:23403
                  }

                  chain output {
                          type nat hook output priority -100; policy accept;
                          mark != 7316 ip daddr != \$private-ips tcp dport { 80, 443 } counter dnat to \$default-ip:23403
                  }
          }
          EOF

      - name: Test Passthrough HTTP
        run: |
          curl --noproxy "*" http://www.example.com -svS -o /dev/null
          sudo snap logs aproxy.aproxy -n 1 | grep -qi "passthrough.*host=www.example.com"

      - name: Test Passthrough HTTPS
        run: |
          curl --noproxy "*" https://example.com -svS -o /dev/null
          sudo snap logs aproxy.aproxy -n 1 | grep -qi "passthrough.*host=example.com"

      - name: Set HTTP Proxy
        run: |
          sudo snap set aproxy http.proxy=http://localhost:8888

      - name: Test Proxy HTTP
        run: |
          curl --noproxy "*" http://www.example.net -svS -o /dev/null
          sudo snap logs aproxy.aproxy -n 1 | grep -qi "http.*proxy.*host=www.example.net"

      - name: Test Passthrough HTTPS
        run: |
          curl --noproxy "*" https://example.net -svS -o /dev/null
          sudo snap logs aproxy.aproxy -n 1 | grep -qi "tls.*proxy.*host=example.net"

      - name: Set HTTPS Proxy
        run: |
          sudo snap set aproxy https.proxy=http://localhost:8888

      - name: Test Proxy HTTP
        run: |
          curl --noproxy "*" http://www.example.org -svS -o /dev/null
          sudo snap logs aproxy.aproxy -n 1 | grep -qi "http.*proxy.*host=www.example.org"

      - name: Test Proxy HTTPS
        run: |
          curl --noproxy "*" https://example.org -svS -o /dev/null
          sudo snap logs aproxy.aproxy -n 1 | grep -qi "tls.*proxy.*host=example.org"

      - name: Print Aproxy Logs
        if: always()
        run: sudo snap logs aproxy -n all