CuatroElixir / spear / c6b919223f8b7c1d246edb12e819084f2ab9f329
100%
main: 100%

LAST BUILD BRANCH: fix/ci-certs-and-eventstoredb-pin
DEFAULT BRANCH: main
Ran
Jobs 2
Files 30
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 100.0%. Remained the same
c6b919223f8b7c1d246edb12e819084f2ab9f329

push

github

the-mikedavis 
ci: generate test certs per-run and pin EventStoreDB to last OSS release

CI had been failing for three unrelated reasons, none of them dependency
version drift:

- The committed EventStoreDB node certificate expired on 2025-02-01, so the
  server refused to start (or aborted TLS handshakes), breaking every test.
- The `ghcr.io/eventstore/eventstore:ci` nightly image now returns `denied`,
  so the main CI job could not pull the database at all.
- The compatibility matrix pinned OTP `24.0`, which setup-beam can no longer
  resolve from its prebuilt list.

Instead of re-committing a fresh (and again-expiring) certificate, generate a
throwaway CA + node cert on every run via `eventstoredb/gen-certs.sh` and
git-ignore `eventstoredb/certs/`. The cert carries a 10 year expiry so local
checkouts stay valid, but nothing long-lived lives in the repo. EventStoreDB
reads node.key with .NET's ImportRSAPrivateKey, which only accepts a PKCS#1
key; OpenSSL 3 writes PKCS#8 by default, so the script normalises the key to
PKCS#1 (via -traditional where supported) to stay portable across openssl
versions.

Pin the database to `eventstore/eventstore:23.10.8-bookworm-slim`. 23.10 is the
last EventStoreDB release under a true open-source license; 24.10 onward moves
to the non-OSS Event Store License v2 ("KurrentDB"), so we deliberately stay
below it. Bump the compatibility OTP pin to `24.3`, and dump the container
logs in the compatibility job to make future cert/startup failures debuggable.

742 of 742 relevant lines covered (100.0%)

246.87 hits per line

Jobs
ID Job ID Ran Files Coverage
1 c6b919223f8b7c1d246edb12e819084f2ab9f329.1 30
100.0
 GitHub Action Run
2 c6b919223f8b7c1d246edb12e819084f2ab9f329.2 30
100.0
 GitHub Action Run
Source Files on build c6b919223f8b7c1d246edb12e819084f2ab9f329