cameri / nostream / 40110637118

76%

push

github

fix(compose): confine dynamic addresses to 10.10.10.128/26 (#972)

The network let Docker allocate dynamic addresses from the bottom of
10.10.10.0/24 while nostream, nostream-db and nostream-cache were pinned to
.2-.4. otel-collector has no dependency that orders it after nostream, so it
could be given .2 first and nostream then failed to start with "Address
already in use" - most reliably after a host reboot, when the daemon starts
containers in arbitrary order.

An ip_range keeps the subnet and gateway as they were, so 10.10.10.1 remains
the trusted proxy and the overlay pins (.5, .252, .253) stay outside the pool.
A unit test holds every static address outside the dynamic pool in every
compose file, so a future pin cannot silently land inside it.

Closes #929

4164 of 5983 branches covered (69.6%)

Branch coverage included in aggregate %.

9250 of 11578 relevant lines covered (79.89%)

787.03 hits per line