homeio

1import { mkdtemp, mkdir, rm, symlink, writeFile } from "node:fs/promises";
2import os from "node:os";
3import path from "node:path";
4import { afterEach, describe, expect, it } from "vitest";
5import {
6  classifyServiceBindMountOwnership,
7  collectOwnershipApplicationTargets,
8} from "@/lib/server/modules/docker/app-data-ownership";
9
10const tempRoots: string[] = [];
11
12afterEach(async () => {
13  await Promise.all(
14    tempRoots.splice(0).map((rootPath) =>
15      rm(rootPath, { recursive: true, force: true })
16    ),
17  );
18});
19
20describe("app-data-ownership", () => {
21  it("prefers an explicit numeric service user over image-specific rules", () => {
22    expect(
23      classifyServiceBindMountOwnership({
24        image: "grafana/grafana:12.1.4",
25        user: "1234:5678",
26        env: {},
27        targetPath: "/var/lib/grafana",
28      }),
29    ).toEqual({
30      source: "service-user",
31      uid: 1234,
32      gid: 5678,
33    });
34  });
35
36  it("treats root as an explicit service user", () => {
37    expect(
38      classifyServiceBindMountOwnership({
39        image: "grafana/grafana:12.1.4",
40        user: "root",
41        env: {},
42        targetPath: "/var/lib/grafana",
43      }),
44    ).toEqual({
45      source: "service-user",
46      uid: 0,
47      gid: 0,
48    });
49  });
50
51  it("prefers PUID and PGID over image-specific rules", () => {
52    expect(
53      classifyServiceBindMountOwnership({
54        image: "grafana/grafana:12.1.4",
55        user: null,
56        env: {
57          PUID: "1001",
58          PGID: "1002",
59        },
60        targetPath: "/var/lib/grafana",
61      }),
62    ).toEqual({
63      source: "puid-pgid",
64      uid: 1001,
65      gid: 1002,
66    });
67  });
68
69  it("falls back to known image rules when no explicit user or PUID/PGID is set", () => {
70    expect(
71      classifyServiceBindMountOwnership({
72        image: "n8nio/n8n:1.123.0",
73        user: null,
74        env: {},
75        targetPath: "/home/node/.n8n",
76      }),
77    ).toEqual({
78      source: "image-rule",
79      uid: 1000,
80      gid: 1000,
81    });
82  });
83
84  it("returns fallback when no ownership override can be inferred", () => {
85    expect(
86      classifyServiceBindMountOwnership({
87        image: "nginx:latest",
88        user: null,
89        env: {},
90        targetPath: "/usr/share/nginx/html",
91      }),
92    ).toEqual({
93      source: "fallback",
94      uid: null,
95      gid: null,
96    });
97  });
98
99  it("collects nested ownership targets and skips symbolic links", async () => {
100    const rootPath = await mkdtemp(path.join(os.tmpdir(), "ownership-targets-"));
101    tempRoots.push(rootPath);
102
103    const appDataPath = path.join(rootPath, "AppData", "grafana");
104    const nestedDir = path.join(appDataPath, "data", "plugins");
105    const nestedFile = path.join(nestedDir, "plugin.json");
106    const siblingFile = path.join(appDataPath, "data", "grafana.db");
107    const symlinkPath = path.join(appDataPath, "data", "linked-config");
108
109    await mkdir(nestedDir, { recursive: true });
110    await writeFile(nestedFile, "{}", "utf8");
111    await writeFile(siblingFile, "db", "utf8");
112    await symlink(path.join(rootPath, "elsewhere"), symlinkPath);
113
114    const targets = await collectOwnershipApplicationTargets(path.join(appDataPath, "data"));
115
116    expect(targets.sort((a, b) => a.localeCompare(b))).toEqual([
117      path.join(appDataPath, "data"),
118      path.join(appDataPath, "data", "grafana.db"),
119      path.join(appDataPath, "data", "plugins"),
120      path.join(appDataPath, "data", "plugins", "plugin.json"),
121    ]);
122  });
123});
124