add: 补充回归测试（build 开关/资源档位、日志 fork、插件迁移与依赖清单、父进程死亡、worker 疑似失联）
This commit is contained in:
@@ -0,0 +1,214 @@
|
||||
"""
|
||||
build 命令开关（--encrypt / --license）冒烟测试
|
||||
|
||||
两个开关默认都是关的（不加参数 = 明文模块 + 不带授权的内部调试产物），
|
||||
这里验证"默认关"与"显式打开"在构建产物上都真的生效：
|
||||
1. 参数解析：默认 encrypt/license 全关，--encrypt / --license 打开对应开关；
|
||||
--only 里 license_guard 是合法步骤（文档里一直写着，之前被漏在校验表外）
|
||||
2. 默认（不加密）：.mbank 存明文字节码（encrypted=false）、不写 .key（并清掉旧
|
||||
的）、无 packer_key 记录，且**不需要密钥即可导入**；加 --encrypt 那条路仍然
|
||||
加密、仍然写 .key，且用 .key 里的密钥能正常导入
|
||||
3. 默认（不授权）：prepare 不要求/不注入授权公钥；加 --license 时缺公钥构建失败
|
||||
|
||||
运行: uv run python test/test_build_flags.py
|
||||
"""
|
||||
import importlib
|
||||
import os
|
||||
import shutil
|
||||
import sys
|
||||
import tempfile
|
||||
from pathlib import Path
|
||||
|
||||
SRC = Path(__file__).parent
|
||||
sys.path.insert(0, str(SRC.parent / "utils" / "cli" / "src"))
|
||||
|
||||
from module_bank import PythonToSQLite, layout # noqa: E402
|
||||
from sqlite_vfs.core import SQLiteVFS # noqa: E402
|
||||
|
||||
from chongming_cli import build as b # noqa: E402
|
||||
|
||||
failures = []
|
||||
|
||||
|
||||
def check(name, cond, detail=""):
|
||||
status = "PASS" if cond else "FAIL"
|
||||
print(f"[{status}] {name}" + (f" — {detail}" if detail else ""))
|
||||
if not cond:
|
||||
failures.append(name)
|
||||
|
||||
|
||||
tmp = Path(tempfile.mkdtemp(prefix="build_flags_test_"))
|
||||
|
||||
# ========== 1. 参数解析 ==========
|
||||
_argv, sys.argv = sys.argv, ["build"]
|
||||
mode, steps, options = b._parse_args()
|
||||
check(
|
||||
"默认参数：pyinstaller + 全流程 + 不加密 + 不授权",
|
||||
mode == "pyinstaller" and not steps and not options.encrypt and not options.license,
|
||||
)
|
||||
|
||||
sys.argv = ["build", "--encrypt", "--license", "nuitka"]
|
||||
mode, steps, options = b._parse_args()
|
||||
check(
|
||||
"--encrypt/--license 打开对应开关",
|
||||
mode == "nuitka" and options.encrypt and options.license,
|
||||
f"mode={mode} encrypt={options.encrypt} license={options.license}",
|
||||
)
|
||||
|
||||
sys.argv = ["build", "--only", "mbank,license_guard"]
|
||||
mode, steps, options = b._parse_args()
|
||||
check("--only 接受 license_guard", steps == {"mbank", "license_guard"}, str(steps))
|
||||
|
||||
sys.argv = ["build", "--only", "mbank", "--encrypt", "pyinstaller"]
|
||||
mode, steps, options = b._parse_args()
|
||||
check(
|
||||
"位置参数与开关可混用",
|
||||
mode == "pyinstaller" and steps == {"mbank"} and options.encrypt,
|
||||
)
|
||||
|
||||
sys.argv = ["build", "--unknown-flag"]
|
||||
try:
|
||||
b._parse_args()
|
||||
check("未知参数应退出", False)
|
||||
except SystemExit:
|
||||
check("未知参数应退出", True)
|
||||
sys.argv = _argv
|
||||
|
||||
|
||||
# ========== 2. mbank 加密 / 明文字节码 ==========
|
||||
def make_source(root: Path) -> Path:
|
||||
"""造一个最小可导入的包：demo/__init__.py"""
|
||||
pkg = root / "demo"
|
||||
pkg.mkdir(parents=True)
|
||||
(pkg / "__init__.py").write_text("VALUE = 42\n", encoding="utf-8")
|
||||
return pkg
|
||||
|
||||
|
||||
def bank_meta(bank: Path, module: str) -> dict:
|
||||
vfs = SQLiteVFS(str(bank), compress=False, readonly=True)
|
||||
try:
|
||||
# 包名 → 包内路径由 module_bank 定，别自己拼；明文未混淆的模块不写
|
||||
# meta.json（默认值即"什么都不用记"），用 read_meta 读缺省
|
||||
return layout.read_meta(vfs, layout.module_paths(module, True)["meta"])
|
||||
finally:
|
||||
vfs.close()
|
||||
|
||||
|
||||
def bank_has_key(bank: Path) -> bool:
|
||||
vfs = SQLiteVFS(str(bank), compress=False, readonly=True)
|
||||
try:
|
||||
return vfs.is_file("packer_key")
|
||||
finally:
|
||||
vfs.close()
|
||||
|
||||
|
||||
def import_from_bank(bank: Path, module: str, key):
|
||||
"""像 utils/launch.py 那样装载：install_importer → import。返回 (模块, 错误)。"""
|
||||
packer = PythonToSQLite(str(bank))
|
||||
finder = packer.install_importer(key=key)
|
||||
try:
|
||||
mod = importlib.import_module(module)
|
||||
return mod, None
|
||||
except Exception as exc: # noqa: BLE001 — 测试就是要区分"能导/不能导"
|
||||
return None, exc
|
||||
finally:
|
||||
if finder in sys.meta_path:
|
||||
sys.meta_path.remove(finder)
|
||||
sys.modules.pop(module, None)
|
||||
|
||||
|
||||
plain_dir = make_source(tmp / "plain_src")
|
||||
plain_bank = tmp / "plain.mbank"
|
||||
plain_size = b._pack_mbank(
|
||||
str(plain_bank), str(plain_dir), "demo", obfuscate=False, encrypt=False
|
||||
)
|
||||
check("明文打包产出 .mbank", plain_bank.exists(), plain_size)
|
||||
check("明文打包不写 .key", not plain_bank.with_suffix(".key").exists())
|
||||
check("明文打包 encrypted=false", bank_meta(plain_bank, "demo")["encrypted"] is False)
|
||||
check("明文打包无 packer_key 记录", not bank_has_key(plain_bank))
|
||||
|
||||
mod, err = import_from_bank(plain_bank, "demo", key=None)
|
||||
check("明文包无密钥即可导入", mod is not None and getattr(mod, "VALUE", None) == 42, str(err))
|
||||
|
||||
enc_dir = make_source(tmp / "enc_src")
|
||||
enc_bank = tmp / "enc.mbank"
|
||||
enc_key_path = enc_bank.with_suffix(".key")
|
||||
enc_key_path.write_text("stale-key-from-previous-build", encoding="utf-8") # 模拟上一次加密构建
|
||||
enc_size = b._pack_mbank(
|
||||
str(enc_bank), str(enc_dir), "demo", obfuscate=False, encrypt=False
|
||||
)
|
||||
check("默认（不加密）清掉上一次加密构建留下的 .key", not enc_key_path.exists(), enc_size)
|
||||
|
||||
encrypted_bank = tmp / "encrypted.mbank"
|
||||
key = b.Encryption.generate_key()
|
||||
_orig_gen = b.Encryption.generate_key
|
||||
b.Encryption.generate_key = staticmethod(lambda: key) # 固定密钥，便于用 .key 验证导入
|
||||
try:
|
||||
b._pack_mbank(str(encrypted_bank), str(enc_dir), "demo", obfuscate=False, encrypt=True)
|
||||
finally:
|
||||
b.Encryption.generate_key = _orig_gen
|
||||
|
||||
check("--encrypt 打包写 .key", encrypted_bank.with_suffix(".key").exists())
|
||||
check("--encrypt 打包 encrypted=true", bank_meta(encrypted_bank, "demo")["encrypted"] is True)
|
||||
|
||||
mod, err = import_from_bank(encrypted_bank, "demo", key=encrypted_bank.with_suffix(".key").read_text())
|
||||
check("加密包用 .key 里的密钥可导入", mod is not None, str(err))
|
||||
|
||||
mod, err = import_from_bank(encrypted_bank, "demo", key=None)
|
||||
check("加密包缺密钥无法导入（说明 .key 必须随包提供给加载端）", mod is None and isinstance(err, ImportError), str(err))
|
||||
|
||||
|
||||
# ========== 3. 授权公钥注入 / 默认不注入 ==========
|
||||
def make_project(root: Path) -> Path:
|
||||
"""造一个最小构建现场：public/{main.py,server.py,config.toml}"""
|
||||
(root / "public" / "utils").mkdir(parents=True)
|
||||
(root / "public" / "utils" / "launch.py").write_text("", encoding="utf-8")
|
||||
(root / "public" / "main.py").write_text("", encoding="utf-8")
|
||||
(root / "public" / "server.py").write_text("", encoding="utf-8")
|
||||
(root / "public" / "config.toml").write_text(
|
||||
'[security]\nsecret_key = "your-secret-key-change-in-production"\n\n'
|
||||
'[license]\n# 机器码授权公钥（构建时注入）\npublic_key = ""\n',
|
||||
encoding="utf-8",
|
||||
)
|
||||
return root
|
||||
|
||||
|
||||
env_keys = (b.LICENSE_PUBKEY_ENV, b.LICENSE_PUBKEY_FILE_ENV, b.ALLOW_NO_KEY_ENV)
|
||||
saved_env = {k: os.environ.pop(k, None) for k in env_keys} # 环境变量不该影响测试结论
|
||||
|
||||
cwd = Path.cwd()
|
||||
proj = make_project(tmp / "proj_default")
|
||||
os.chdir(proj)
|
||||
try:
|
||||
msg = b._stage_prepare_build_dir(None, "pyinstaller", b.BuildOptions())
|
||||
conf = (proj / "build" / "config.toml").read_text(encoding="utf-8")
|
||||
check("默认（不授权）的 prepare 不报错", msg == "资源准备完成", msg)
|
||||
check("默认不注入公钥（模板 public_key 保持空）", 'public_key = ""' in conf)
|
||||
check("JWT 密钥仍会注入", "your-secret-key-change-in-production" not in conf)
|
||||
|
||||
try:
|
||||
b._stage_prepare_build_dir(None, "pyinstaller", b.BuildOptions(license=True))
|
||||
check("--license 缺授权公钥应失败", False)
|
||||
except RuntimeError as exc:
|
||||
check("--license 缺授权公钥应失败", "缺少厂商授权公钥" in str(exc))
|
||||
|
||||
os.environ[b.LICENSE_PUBKEY_ENV] = "test-pubkey-b64"
|
||||
try:
|
||||
b._stage_prepare_build_dir(None, "pyinstaller", b.BuildOptions(license=True))
|
||||
conf = (proj / "build" / "config.toml").read_text(encoding="utf-8")
|
||||
check("--license + 提供公钥后注入 [license] public_key", 'public_key = "test-pubkey-b64"' in conf)
|
||||
finally:
|
||||
os.environ.pop(b.LICENSE_PUBKEY_ENV, None)
|
||||
finally:
|
||||
os.chdir(cwd)
|
||||
for k, v in saved_env.items():
|
||||
if v is not None:
|
||||
os.environ[k] = v
|
||||
|
||||
shutil.rmtree(tmp, ignore_errors=True)
|
||||
|
||||
print("\n" + ("=" * 40))
|
||||
if failures:
|
||||
print(f"❌ {len(failures)} 项未通过: {failures}")
|
||||
sys.exit(1)
|
||||
print("✅ 全部通过")
|
||||
Reference in New Issue
Block a user