docker-compose.test.yml

version: "2"

services:

  server:
    image: localhost:5000/sut
    build:
      context: .
      dockerfile: Dockerfile
    command: -config /config/dnscrypt-proxy.toml -loglevel 0

  sut:
    # image: alpine:3.21@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
    image: alpine:3.23@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659
    depends_on:
      - server
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    working_dir: /test
    entrypoint:
      - /bin/sh
      - -c
    command:
      - |
        set -ex
        apk add --no-cache bind-tools docker-cli docker-cli-compose

        server_ip="$$(dig +short server | tail -n 1)"

        while read id
        do
          if docker inspect --format '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' $${id} | grep -q "$${server_ip}"
          then
            server_id="$${id}"
            break
          fi
        done < <(docker ps --format '{{.ID}}')

        docker exec $${server_id} dnscrypt-proxy -version

        sleep 5

        docker exec $${server_id} dnsprobe -timeout=10s dnssec.works 127.0.0.1:5053
        ! docker exec $${server_id} dnsprobe foo.local 127.0.0.1:5053
        ! docker exec $${server_id} dnsprobe bar.local 127.0.0.1:5053

        # # fail0[1-4].dnssec.works wasn't failing as expected
        # dig @server -p 5053 dnssec.works +dnssec +multi | tee /dev/stderr | grep -wq NOERROR
        # ! dig @server -p 5053 fail01.dnssec.works +dnssec +multi | tee /dev/stderr | grep -wq NOERROR
        # ! dig @server -p 5053 fail02.dnssec.works +dnssec +multi | tee /dev/stderr | grep -wq NOERROR
        # ! dig @server -p 5053 fail03.dnssec.works +dnssec +multi | tee /dev/stderr | grep -wq NOERROR
        # ! dig @server -p 5053 fail04.dnssec.works +dnssec +multi | tee /dev/stderr | grep -wq NOERROR

        dig @server -p 5053 sigok.verteiltesysteme.net +dnssec +multi | tee /dev/stderr | grep -wq NOERROR
        ! dig @server -p 5053 sigfail.verteiltesysteme.net +dnssec +multi | tee /dev/stderr | grep -wq NOERROR