The FedWiki walkthrough fails on networks whose DNS drops loopback answers #236
Closed
opened 2026-10-17 16:18:26 +00:00 by cgalo5758
·
3 comments
Labels
Clear labels
accessibility
area/billing
area/catalog
area/discourse
area/domains
area/entitlements
area/fedwiki
area/identity
area/integrations
area/licensing
area/member-ui
area/meta
area/operator-ui
area/ops
area/testing
duplicate
good-first-issue
invalid
privacy
security
upstream
wontfix
A barrier for people using assistive technology or a keyboard alone.
The Stripe mirror, checkout, subscriptions, invoices, fulfillment.
Products, prices, plan ladders, purchasability.
The Discourse integration.
The domains registry, claims, placements, the certificate ask.
Entitlement sets, rules, grants, pools, provisioning.
The Federated Wiki integration and farm sync.
Sign-in, sessions, persons, organizations, workspaces, roles.
The provider registry, outbox and webhooks in general.
Licenses, the contributor agreement, SPDX headers.
Member pages.
The repository itself, its contributing guide, CI, the tracker and the workflow.
Operator pages, forms, lists, the design system.
Deployment, configuration, migrations, workflows, instance settings.
The test stack, screens, lint, walkthroughs.
Closed because another issue already covers it.
Small, self-contained, and explained enough to be a first contribution.
Closed because it is not a ticket for this repository.
Touches what a person's data reveals.
Touches authentication, authorization, secrets or data exposure.
Waits on another repository or project before it can move.
Closed because it will not be done, with the reason in the last comment.
kind
bug
The software does something other than what it promises; closed when it again does what it promises.
kind
debt
Code, tests or tooling to clean up with nothing visible changing; closed when they are cleaner.
kind
design
A question to settle before work can be defined; closed when the decision is written down.
kind
docs
Documentation that is wrong or missing; closed when it says the right thing.
kind
enhancement
Something the software does not do yet; closed when it does.
priority
critical
Blocks the active milestone or harms members now.
priority
high
Next in line inside the active milestone.
priority
low
Inside the active milestone, when nothing else is left.
priority
medium
Inside the active milestone, after the high ones.
Milestone
No items
No Milestone
Projects
Clear projects
No projects
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: wiki-cafe/member-console#236
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
What a contributor runs into
The test stack names the FedWiki farm under
localtest.me, a public domain whose names all resolve to127.0.0.1and::1. Some resolvers refuse to pass on a public name that points at the loopback address: home routers with DNS-rebind protection, some office resolvers and some VPNs. Without a network the name does not resolve at all.On such a network the app's call to the farm fails with
lookup admin.localtest.me: no such host.TestFedWikiSitesWalkthroughthen waits 30 seconds and fails in phase 1 with "row for walk-....sites.localhost never reached the expected state". Nothing in the failure names DNS, and the same commit passes on a network whose resolver answers.The walkthroughs' reachability guard (
skipUnlessIntegrationEndpointReachable) has the same blind spot. When its request to the farm fails on the lookup, it skips with "add "fedwiki" to COMPOSE_PROFILES", although the farm is composed.The farm cannot move to
*.localhostlike the stack's other names. FedWiki's sign-in shares one session cookie across the farm's sites, and browsers do not scope a cookie to.localhost, so sign-in on one site would not reach another.Why it costs
The suite's result depends on the network it runs on. A contributor on a filtering network gets a timeout or a misleading skip, with nothing pointing at the cause.
Where
test/e2e/operator-walkthroughs/helpers_test.go, test/bootstrap-stack.sh, test/AGENTS.md
Done when
*.localhost,*.localtest.me) resolves only to loopback addresses. When the check fails, the guard fails the test instead of skipping it, naming the host, what the lookup returned, and the hosts-file lines that fix it. An endpoint hosted elsewhere still passes the check.bootstrap-stack.shruns the same check on the farm's host whenever thefedwikiprofile is on, and prints the same fix.localtest.me, which resolvers break it, and gives the hosts-file lines.Fixed in
dbd3a890. The reachability guard looks the endpoint's host up before it sends the request and fails the test with the host, the reason and the /etc/hosts lines.bootstrap-stack.shprints the same fix when the fedwiki profile is on, and test/AGENTS.md has a section, "Names that must resolve to this machine".Reopening: the walkthrough guard never runs its name check, for the farm or for the forum.
skipUnlessIntegrationEndpointReachablereads the endpoint from the integration's settings page, from the field named for the key.fedwiki-farm-api-urlanddiscourse-base-urlare deployment-only keys, and the settings page renders a deployment-only key as static text, "Set fedwiki-farm-api-url in the environment.", with no field holding the URL. The guard finds nohttpvalue and returns early, treating the endpoint as unconfigured, so neither the resolution check added here nor the reachability skip runs.On a network whose resolver drops loopback answers for
localtest.me,make testagain fails inTestFedWikiSitesWalkthroughwith "row ... never reached the expected state; last ... Pending", and the console's log showslookup admin.localtest.me: no such hoston every farm call. The suite that closed this issue ran on a network that resolved the name, so it never exercised the check.The fix: the guard reads the endpoint from
test/.env(MC_FEDWIKI_FARM_API_URL,MC_DISCOURSE_BASE_URL), the file the walkthrough already loads and the console's environment comes from, and a test pins the mapping from key to variable so the guard cannot silently stop reading it again. The bootstrap warning and thetest/AGENTS.mdsection stand as they are.Fixed in
e1bb2959. The guard reads the endpoint fromtest/.env, under the variable the console reads for the key, and no longer visits the settings page.TestEndpointEnvVarpins the mapping from key to variable forfedwiki-farm-api-urlanddiscourse-base-url.