Skip to content

Bump to nginx 1.27.2 #422

Bump to nginx 1.27.2

Bump to nginx 1.27.2 #422

Workflow file for this run

name: Docker Image CI
on:
push:
branches: [ master ]
pull_request:
jobs:
build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
# https://github.com/FiloSottile/mkcert#installation
- name: Install and setup mkcert
env:
MKCERT_VERSION: v1.4.3
run: |
set -x
sudo apt-get update && \
sudo apt-get install -y libnss3-tools
curl https://github.com/FiloSottile/mkcert/releases/download/${MKCERT_VERSION}/mkcert-${MKCERT_VERSION}-linux-amd64 --location --output /tmp/mkcert
chmod 744 /tmp/mkcert
sudo mv /tmp/mkcert /bin/mkcert
mkcert -install
- name: Create signed TLS certificates for localhost
run: |
mkcert -cert-file tests/localhost.crt -key-file tests/localhost.key localhost 0.0.0.0 ::1
# https://github.com/marketplace/actions/build-and-push-docker-images
- name: Build the Docker image
uses: docker/build-push-action@v6
with:
context: .
tags: macbre/nginx
cache-from: |
ghcr.io/macbre/nginx-http3:latest
- name: Lint the Dockerfile
uses: hadolint/hadolint-action@v3.1.0
with:
dockerfile: Dockerfile
- name: Inspect images
run: |
docker images | head -n3
- name: Are we running as non-root?
run: |
docker run --rm -t macbre/nginx whoami | grep nginx
- name: Run nginx -V and njs -v
run: |
docker run --rm -t macbre/nginx nginx -V | sed 's/\-\-/\n\t--/g' | tee
echo "njs v$(docker run -t macbre/nginx njs -v)"
- name: Serve a static asset
run: |
# expand commands
set -x
./run-docker.sh &
sleep 2; docker ps
curl -v --compressed localhost:8888 2>&1 | tee /tmp/out
grep --fixed-strings --invert-match -i '< Server: nginx' /tmp/out > /dev/null
grep --fixed-strings '< Content-Encoding: br' /tmp/out
grep --fixed-strings '<p>It works!</p>' /tmp/out
curl -v --compressed localhost:8888/FooBar 2>&1 | tee /tmp/out
grep --fixed-strings 'HTTP/1.1 301 Moved Permanently' /tmp/out
grep --fixed-strings '< x-rewrite: 1' /tmp/out
grep --fixed-strings '< Location: http://localhost/foobar' /tmp/out
- name: Check njs module
run: |
set -x
curl -v --compressed -H 'Host: njs' localhost:8888/hello 2>&1 | tee /tmp/out
grep --fixed-strings '< x-njs: 1' /tmp/out
grep 'Hello world from njs' /tmp/out
- name: http2 vs h3
run: |
set -x
curl -v --compressed https://localhost:8889 2>&1 | tee /tmp/h2
grep --fixed-strings '< HTTP/2 200' /tmp/h2
grep --fixed-strings --invert-match -i '< server: nginx' /tmp/h2 > /dev/null
grep --fixed-strings '<p>It works!</p>' /tmp/h2
docker run --rm --network host ghcr.io/macbre/curl-http3 \
curl -v --insecure https://localhost:8889 --http3 --max-time 5 2>&1 | tee /tmp/h3
grep --fixed-strings '< HTTP/3 200' /tmp/h3
grep --fixed-strings --invert-match -i '< server: nginx' /tmp/h3 > /dev/null
grep --fixed-strings '< alt-svc: h3=":8889"; ma=86400' /tmp/h3
grep --fixed-strings '< quic-status: h3' /tmp/h3
grep --fixed-strings '<p>It works!</p>' /tmp/h3
- name: Test njs command line
run: |
echo "console.log('Using njs v' + njs.version)" | docker run -i --rm macbre/nginx njs -q - | grep "Using njs v0.8.6"
- name: Show logs
if: always()
run: docker logs test_nginx