feat(ops): add imgproxy native runtime tooling and record 103 deployment

Bundle vendored imgproxy with Mach-O dylibs for 103 launchd, fix install to exec the binary directly with launchctl enable, and document the live native release in the runtime topology. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-31 05:38:14 +08:00
parent 08ea5e05a9
commit 78e5a6c026
8 changed files with 734 additions and 0 deletions
@@ -38,3 +38,34 @@ test('release verifies checksums before loading the image and backs up launch st
  assert.match(release, /release\/\*/);
  assert.match(release, /rev-parse origin\/main/);
 });
+
+test('native builder vendors a pinned darwin arm64 imgproxy binary', () => {
+  const builder = read('scripts/build-imgproxy-runtime-native.sh');
+  assert.match(builder, /vendor\/imgproxy-runtime\/bin\/imgproxy/);
+  assert.match(builder, /vendor\/imgproxy-runtime\/lib/);
+  assert.match(builder, /bundle_mach_dylibs/);
+  assert.match(builder, /shasum -a 256 bin\/imgproxy VERSION\.txt lib\/\*/);
+  assert.match(builder, /IMGPROXY_SOURCE_BIN/);
+  assert.match(builder, /run-imgproxy-prod\.sh/);
+});
+
+test('native installer uses the vendored binary and retires docker imgproxy', () => {
+  const installer = read('scripts/install-imgproxy-native-prod.sh');
+  assert.match(installer, /vendor\/imgproxy-runtime\/bin\/imgproxy/);
+  assert.match(installer, /ProgramArguments/);
+  assert.match(installer, /IMGPROXY_KEY/);
+  assert.match(installer, /127\.0\.0\.1:20082/);
+  assert.match(installer, /10\.10\.0\.2/);
+  assert.match(installer, /"\$\{DOCKER_BIN\}" stop/);
+  assert.match(installer, /"\$\{DOCKER_BIN\}" rm -f/);
+  assert.match(installer, /cn\.tkmind\.imgproxy/);
+});
+
+test('native release bundles vendor artifacts and verifies health on 103', () => {
+  const release = read('scripts/release-imgproxy-native-prod.sh');
+  assert.match(release, /build-imgproxy-runtime-native\.sh/);
+  assert.match(release, /vendor\/imgproxy-runtime\/bin\/imgproxy/);
+  assert.match(release, /install-imgproxy-native-prod\.sh/);
+  assert.match(release, /imgproxy-native-runtime-\$RELEASE_ID\.tar\.gz/);
+  assert.match(release, /img\.tkmind\.cn\/health/);
+});