From b8595856cfc2b42284bdddd316c5ef01b19ebf96 Mon Sep 17 00:00:00 2001 From: Dirk Wetter Date: Sun, 6 Sep 2026 23:52:05 +0200 Subject: [PATCH] Adding cgroups check as port is suspected to be hidden in GHA environment --- .github/workflows/cgroups_test.yml | 32 ++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 .github/workflows/cgroups_test.yml diff --git a/.github/workflows/cgroups_test.yml b/.github/workflows/cgroups_test.yml new file mode 100644 index 0000000..9c9b8ae --- /dev/null +++ b/.github/workflows/cgroups_test.yml @@ -0,0 +1,32 @@ +--- +name: cgroups test +on: [pull_request] +permissions: + contents: read + +jobs: + repro: + runs-on: ubuntu-24.04 + steps: + - name: Bare s_server, no perl, no testssl + run: | + set -x + openssl req -x509 -newkey rsa:2048 -keyout /tmp/k.pem -out /tmp/c.pem \ + -days 42 -nodes -subj "/CN=localhost" \ + -addext "subjectAltName=DNS:localhost,IP:127.0.0.1" >/dev/null 2>&1 + openssl s_server -accept 127.0.0.1:1443 -cert /tmp/c.pem -key /tmp/k.pem \ + -tls1_3 -naccept 4242 >/tmp/srv.log 2>&1 & + SPID=$! + sleep 2 + echo "alive-before: $(kill -0 $SPID 2>/dev/null && echo yes || echo no)" + # the 'probe': connect and immediately close, exactly like the perl probe + timeout 2 bash -c 'echo > /dev/tcp/127.0.0.1/1443' 2>/dev/null + echo "probe-exit: $?" + sleep 2 + echo "alive-after: $(kill -0 $SPID 2>/dev/null && echo yes || echo no)" + echo '--- srv.log ---'; cat /tmp/srv.log + echo '--- cgroup ---'; cat /proc/$SPID/cgroup 2>/dev/null || echo "(process gone)" + echo '--- seccomp ---'; grep -E 'Seccomp|NoNewPrivs' /proc/$SPID/status 2>/dev/null || echo "(process gone)" + echo '--- limits ---'; cat /proc/$SPID/limits 2>/dev/null || echo "(process gone)" + kill -9 $SPID 2>/dev/null +