Function startStubGitServer

acceptance/git/git.go:77–203

startStubGitServer launches a stub git server and exposes the port via NAT from the container

(ctx context.Context)

// startStubGitServer launches a stub git server and exposes the port via NAT from the container
func startStubGitServer(ctx context.Context) (context.Context, error) {
	var state *gitState
	ctx, err := testenv.SetupState(ctx, &state)
	if err != nil {
		return ctx, err
	}

	if state.Up() {
		return ctx, nil
	}

	// the directory on the host where we'll store the git repositories
	repositories, err := os.MkdirTemp("", "git.*")
	if err != nil {
		return ctx, err
	}

	nginxConfDir := path.Join(repositories, "conf")
	if err = os.Mkdir(nginxConfDir, 0o755); err != nil {
		return ctx, err
	}
	if err = os.WriteFile(path.Join(nginxConfDir, "nginx.conf"), nginxConf, 0o400); err != nil {
		return ctx, err
	}

	tlsDir := path.Join(repositories, "tls")
	if err = os.Mkdir(tlsDir, 0o755); err != nil {
		return ctx, err
	}

	if key, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader); err != nil {
		return ctx, err
	} else if keyBytes, err := x509.MarshalECPrivateKey(key); err != nil {
		return ctx, err
	} else {
		keyPem := pem.EncodeToMemory(&pem.Block{
			Type:  "EC PRIVATE KEY",
			Bytes: keyBytes,
		})

		if err = os.WriteFile(path.Join(tlsDir, "server.key"), keyPem, 0o400); err != nil {
			return ctx, err
		}

		serial, err := rand.Int(rand.Reader, big.NewInt(math.MaxInt64))
		if err != nil {
			return ctx, err
		}

		templ := x509.Certificate{
			DNSNames:     []string{"localhost"},
			Subject:      pkix.Name{CommonName: "localhost"},
			SerialNumber: serial,
			NotBefore:    time.Now().Add(-24 * time.Hour),
			NotAfter:     time.Now().Add(24 * time.Hour),
			KeyUsage:     x509.KeyUsageDigitalSignature | x509.KeyUsageKeyEncipherment,
			ExtKeyUsage:  []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
		}