mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-10 22:41:41 +00:00
97dbd8efcb
* fix(docker): add public Wolfi apk repo to runtime image Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * test(docker): accept quote variants in Wolfi repo assertion Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> --------- Co-authored-by: yassin <yassin@berri.ai> Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
52 lines
1.8 KiB
Python
52 lines
1.8 KiB
Python
"""
|
|
Static checks on the root Dockerfile's apk repository configuration.
|
|
|
|
The base image (cgr.dev/chainguard/wolfi-base) only configures the
|
|
authenticated Chainguard apk repo (https://apk.cgr.dev/chainguard) in
|
|
/etc/apk/repositories, which requires a Chainguard enterprise subscription.
|
|
Anyone pulling the published litellm image and running `apk add` inside it
|
|
hits SSL/auth failures with no fallback repo configured, so nothing can be
|
|
installed. See https://github.com/BerriAI/litellm/issues/33518
|
|
"""
|
|
|
|
import os
|
|
import re
|
|
|
|
import pytest
|
|
|
|
DOCKERFILE_PATH = os.path.join(
|
|
os.path.dirname(__file__),
|
|
"..",
|
|
"..",
|
|
"Dockerfile",
|
|
)
|
|
|
|
|
|
def _runtime_stage(dockerfile_text: str) -> str:
|
|
"""Return the contents of the final `FROM ... AS runtime` build stage."""
|
|
match = re.search(r"^FROM .*\bAS runtime\b(.*)\Z", dockerfile_text, re.MULTILINE | re.DOTALL)
|
|
assert match, "Dockerfile has no `FROM ... AS runtime` stage"
|
|
return match.group(1)
|
|
|
|
|
|
@pytest.mark.skipif(
|
|
not os.path.exists(DOCKERFILE_PATH),
|
|
reason="Dockerfile not present in this checkout",
|
|
)
|
|
def test_runtime_stage_adds_public_wolfi_repo():
|
|
"""The runtime stage must add the public Wolfi apk repo so `apk add`
|
|
works for users without a Chainguard enterprise subscription."""
|
|
with open(DOCKERFILE_PATH, "r", encoding="utf-8") as f:
|
|
contents = f.read()
|
|
|
|
runtime_stage = _runtime_stage(contents)
|
|
|
|
assert re.search(
|
|
r"echo\s+[\"']?https://packages\.wolfi\.dev/os[\"']?\s*>>\s*/etc/apk/repositories",
|
|
runtime_stage,
|
|
), (
|
|
"Runtime stage must append the public Wolfi apk repo "
|
|
'(RUN echo "https://packages.wolfi.dev/os" >> /etc/apk/repositories) '
|
|
"so `apk add` works without Chainguard enterprise credentials. "
|
|
"See https://github.com/BerriAI/litellm/issues/33518"
|
|
)
|