jenkins-bot has submitted this change. ( 
https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1358384?usp=email )

Change subject: tests: temporary deactivate WMCS SOCKS tunnel
......................................................................

tests: temporary deactivate WMCS SOCKS tunnel

Deactivate WMCS SOCKS tunnel because ssh access is currently
not available due to security issue described in T441908.

Bug: T442175
Change-Id: I2ef1ea243d82c95590f26051306ce9733a7719e4
---
M .github/actions/wmcs-socks/action.yml
M .github/workflows/doctest.yml
M .github/workflows/graalpy_tests.yml
M .github/workflows/login_tests-ci.yml
M .github/workflows/oauth_tests-ci.yml
M .github/workflows/pywikibot-ci.yml
M .github/workflows/windows_tests.yml
7 files changed, 1 insertion(+), 67 deletions(-)

Approvals:
  jenkins-bot: Verified
  Mahveotm: Looks good to me, approved




diff --git a/.github/actions/wmcs-socks/action.yml 
b/.github/actions/wmcs-socks/action.yml
index f78cd38..3d63a8b 100644
--- a/.github/actions/wmcs-socks/action.yml
+++ b/.github/actions/wmcs-socks/action.yml
@@ -12,46 +12,4 @@

 runs:
   using: composite
-  steps:
-    - name: Setup SSH directory
-      shell: bash
-      run: |
-        set -euo pipefail
-        mkdir -p ~/.ssh
-    - name: Install SSH key
-      shell: bash
-      run: |
-        set -euo pipefail
-        printf "%s" "${{ inputs.ssh_key }}" > ~/.ssh/id_ed25519
-        chmod 600 ~/.ssh/id_ed25519
-    - name: Add known hosts
-      shell: bash
-      run: |
-        set -euo pipefail
-        ssh-keyscan bastion.wmcloud.org >> ~/.ssh/known_hosts
-    - name: Start SOCKS tunnel
-      shell: bash
-      run: |
-        set -euo pipefail
-        ssh \
-          -o StrictHostKeyChecking=accept-new \
-          -o ExitOnForwardFailure=yes \
-          -o ServerAliveInterval=30 \
-          -o ServerAliveCountMax=3 \
-          -o ConnectTimeout=10 \
-          -N \
-          -D 127.0.0.1:1080 \
-          -i ~/.ssh/id_ed25519 \
-          "${{ inputs.ssh_user }}@bastion.wmcloud.org" &
-        echo $! > ssh.pid
-        echo "SSH tunnel started with PID $(cat ssh.pid)"
-    - name: Show proxy connection
-      shell: bash
-      run: |-
-        set -euo pipefail
-        echo "Local IP:"
-        curl -s https://api.ipify.org
-        echo
-        echo "Proxy IP:"
-        curl --proxy socks5h://127.0.0.1:1080 -s https://api.ipify.org
-        echo
+  steps: []  # temporary deactivated due to T442175
diff --git a/.github/workflows/doctest.yml b/.github/workflows/doctest.yml
index f1cb043..d85b527 100644
--- a/.github/workflows/doctest.yml
+++ b/.github/workflows/doctest.yml
@@ -85,10 +85,6 @@
         env:
           # Force GIL "off" due to mwparserfromhell issue as suggested by 
warning in T412624
           PYTHON_GIL: ${{ endsWith(matrix.python-version, 't') && '0' || '1' }}
-          HTTP_PROXY: socks5h://127.0.0.1:1080
-          HTTPS_PROXY: socks5h://127.0.0.1:1080
-          ALL_PROXY: socks5h://127.0.0.1:1080
-          NO_PROXY: ""
         run: |
           python pwb.py version
           pytest --version
diff --git a/.github/workflows/graalpy_tests.yml 
b/.github/workflows/graalpy_tests.yml
index ce23ddd..22698c7 100644
--- a/.github/workflows/graalpy_tests.yml
+++ b/.github/workflows/graalpy_tests.yml
@@ -69,10 +69,6 @@
           PYTHONWARNINGS: ignore:urllib3 v2 only supports OpenSSL
           PYTHONIOENCODING: utf-8
           PYWIKIBOT_TEST_NO_RC: 1
-          HTTP_PROXY: socks5h://127.0.0.1:1080
-          HTTPS_PROXY: socks5h://127.0.0.1:1080
-          ALL_PROXY: socks5h://127.0.0.1:1080
-          NO_PROXY: ""
         run: |
           python pwb.py version
           echo "Running tests with GraalPy native coverage"
diff --git a/.github/workflows/login_tests-ci.yml 
b/.github/workflows/login_tests-ci.yml
index 741e2d1..1ff1c52 100644
--- a/.github/workflows/login_tests-ci.yml
+++ b/.github/workflows/login_tests-ci.yml
@@ -130,10 +130,6 @@
         continue-on-error: true
         timeout-minutes: 2
         env:
-          HTTP_PROXY: socks5h://127.0.0.1:1080
-          HTTPS_PROXY: socks5h://127.0.0.1:1080
-          ALL_PROXY: socks5h://127.0.0.1:1080
-          NO_PROXY: ""
         run: |
           python pwb.py version
           coverage run -m unittest -vv tests/site_login_logout_tests.py
diff --git a/.github/workflows/oauth_tests-ci.yml 
b/.github/workflows/oauth_tests-ci.yml
index 1b9beca..e0757f8 100644
--- a/.github/workflows/oauth_tests-ci.yml
+++ b/.github/workflows/oauth_tests-ci.yml
@@ -129,10 +129,6 @@
           PYWIKIBOT_TEST_WRITE: 1
           PYWIKIBOT_TEST_OAUTH: ${{ secrets[format('{0}', 
steps.token.outputs.uppercase)] }}
           PYWIKIBOT_TEST_MODULES: edit_failure,file,oauth,superset
-          HTTP_PROXY: socks5h://127.0.0.1:1080
-          HTTPS_PROXY: socks5h://127.0.0.1:1080
-          ALL_PROXY: socks5h://127.0.0.1:1080
-          NO_PROXY: ""
         run: |
           python pwb.py version
           coverage run -m unittest -vv
diff --git a/.github/workflows/pywikibot-ci.yml 
b/.github/workflows/pywikibot-ci.yml
index 0a8ab12..8df68b8 100644
--- a/.github/workflows/pywikibot-ci.yml
+++ b/.github/workflows/pywikibot-ci.yml
@@ -145,10 +145,6 @@
           PYWIKIBOT_TEST_DEFAULT_ONLY: ${{ (matrix.site == 'wikisource:zh' || 
matrix.test_default_only) && 1 || 0 }}
           # Force GIL "off" due to mwparserfromhell issue as suggested by 
warning in T412624
           PYTHON_GIL: ${{ endsWith(matrix.python-version, 't') && '0' || '1' }}
-          HTTP_PROXY: socks5h://127.0.0.1:1080
-          HTTPS_PROXY: socks5h://127.0.0.1:1080
-          ALL_PROXY: socks5h://127.0.0.1:1080
-          NO_PROXY: ""
         run: |
           python pwb.py version
           if [ "${{ matrix.site }}" != "wikisource:zh" ] ||
diff --git a/.github/workflows/windows_tests.yml 
b/.github/workflows/windows_tests.yml
index 359a0fd..d148d14 100644
--- a/.github/workflows/windows_tests.yml
+++ b/.github/workflows/windows_tests.yml
@@ -87,10 +87,6 @@
         continue-on-error: true
         env:
           PYTHONIOENCODING: utf-8
-          HTTP_PROXY: socks5h://127.0.0.1:1080
-          HTTPS_PROXY: socks5h://127.0.0.1:1080
-          ALL_PROXY: socks5h://127.0.0.1:1080
-          NO_PROXY: ""
         run: |
           python pwb.py version
           coverage run -m unittest discover -vv -p \"*_tests.py\";

--
To view, visit 
https://gerrit.wikimedia.org/r/c/pywikibot/core/+/1358384?usp=email
To unsubscribe, or for help writing mail filters, visit 
https://gerrit.wikimedia.org/r/settings?usp=email

Gerrit-MessageType: merged
Gerrit-Project: pywikibot/core
Gerrit-Branch: master
Gerrit-Change-Id: I2ef1ea243d82c95590f26051306ce9733a7719e4
Gerrit-Change-Number: 1358384
Gerrit-PatchSet: 1
Gerrit-Owner: Xqt <[email protected]>
Gerrit-Reviewer: Mahveotm <[email protected]>
Gerrit-Reviewer: jenkins-bot
_______________________________________________
Pywikibot-commits mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to