From 7cec86400bed6b0d655cb0e95a01f0d7f41f8a33 Mon Sep 17 00:00:00 2001 From: Denozordec Date: Fri, 23 Oct 2026 17:54:09 +0700 Subject: [PATCH] =?UTF-8?q?fix(ci):=20=D0=B2=D0=BE=D1=81=D1=81=D1=82=D0=B0?= =?UTF-8?q?=D0=BD=D0=BE=D0=B2=D0=B8=D1=82=D1=8C=20nightly-perf.yaml=20(?= =?UTF-8?q?=D0=BA=D0=BE=D0=BD=D1=82=D0=B5=D0=B9=D0=BD=D0=B5=D1=80=D0=BD?= =?UTF-8?q?=D0=B0=D1=8F=20=D0=BD=D0=B0=D0=B3=D1=80=D1=83=D0=B7=D0=BA=D0=B0?= =?UTF-8?q?,=20RSS=20=D0=BE=D1=82=D0=B4=D0=B5=D0=BB=D1=8C=D0=BD=D1=8B?= =?UTF-8?q?=D0=BC=20=D1=88=D0=B0=D0=B3=D0=BE=D0=BC)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .gitea/workflows/nightly-perf.yaml | 25 ++++++++++++++++++------- 1 file changed, 18 insertions(+), 7 deletions(-) diff --git a/.gitea/workflows/nightly-perf.yaml b/.gitea/workflows/nightly-perf.yaml index 481a86b..08c2f16 100644 --- a/.gitea/workflows/nightly-perf.yaml +++ b/.gitea/workflows/nightly-perf.yaml @@ -16,8 +16,6 @@ jobs: steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - - id: setup - uses: ./.gitea/actions/setup-pnpm - name: Build image working-directory: deploy/docker env: @@ -31,17 +29,30 @@ jobs: set -euxo pipefail docker volume create load-data docker run --rm -v load-data:/data --user root --entrypoint sh authportal:load -c 'chown 1000:1000 /data' - docker run -d --name authportal-load --init --memory 256m --memory-swap 256m --cpus 1.0 --read-only --tmpfs /tmp --cap-drop ALL -v load-data:/data -e JWT_SECRET=load-jwt-secret-0123456789 -e ADMIN_PASSWORD=load-admin-pass-1 -e ADMIN_EMAIL=admin@smoke.local -e ISSUER=http://127.0.0.1:8080 -e RATE_LIMIT_MAX=1000000 authportal:load - for i in $(seq 1 40); do docker exec authportal-load wget -q -O /dev/null http://127.0.0.1:8080/ready && break; sleep 0.5; done - # Раннер сам в контейнере: нагрузку гоним из соседнего контейнера в сетевом namespace приложения. + docker run -d --name authportal-load --init --memory 256m --memory-swap 256m --cpus 1.0 \ + --read-only --tmpfs /tmp --cap-drop ALL -v load-data:/data \ + -e JWT_SECRET=load-jwt-secret-0123456789 -e ADMIN_PASSWORD=load-admin-pass-1 \ + -e ADMIN_EMAIL=admin@smoke.local -e ISSUER=http://127.0.0.1:8080 \ + -e RATE_LIMIT_MAX=1000000 authportal:load + for i in $(seq 1 40); do + docker exec authportal-load wget -q -O /dev/null http://127.0.0.1:8080/ready && break + sleep 0.5 + done + # Раннер сам работает в контейнере: нагрузку гоним из соседнего контейнера + # в сетевом namespace приложения (127.0.0.1:8080 — это приложение). - name: Load test (autocannon в namespace приложения) run: | set -euxo pipefail - docker run --rm -i --network container:authportal-load -e LOAD_PASSWORD=load-admin-pass-1 -e LOAD_DURATION_S=15 node:22-alpine sh -c 'mkdir /w && cd /w && npm i --silent --no-audit --no-fund autocannon@7.15.0 && cat > load.mjs && node load.mjs http://127.0.0.1:8080' < scripts/perf/load.mjs + docker run --rm -i --network container:authportal-load \ + -e LOAD_PASSWORD=load-admin-pass-1 -e LOAD_DURATION_S=15 \ + node:22-alpine sh -c 'mkdir /w && cd /w && npm i --silent --no-audit --no-fund autocannon@7.15.0 && cat > load.mjs && node load.mjs http://127.0.0.1:8080' \ + < scripts/perf/load.mjs - name: RSS после нагрузки run: | set -euxo pipefail - rss=$(docker stats --no-stream --format '{{.MemUsage}}' authportal-load | sed -E 's/^([0-9.]+)([KMG]i?B).*/ /' | awk '{u=$2; v=$1; if(u ~ /^G/) v*=1024; else if(u ~ /^K/) v/=1024; printf "%d", v}') + rss=$(docker stats --no-stream --format '{{.MemUsage}}' authportal-load \ + | sed -E 's/^([0-9.]+)([KMG]i?B).*/\1 \2/' \ + | awk '{u=$2; v=$1; if(u ~ /^G/) v*=1024; else if(u ~ /^K/) v/=1024; printf "%d", v}') echo "RSS: ${rss} MiB (budget 200)" [ "$rss" -le 200 ] - name: Container logs on failure