[cli] feat: add automatic push to antithesis and accept test-run for trusted GH users

Author: paolino

cli/CD/anti-agent/docker-compose.yaml

@@ -4,26 +4,39 @@ services:
     secrets:
       - agent-wallet
       - secrets
+      - source: docker
+        target: /run/secrets/docker/config.json
     environment:
       - ANTI_MPFS_HOST=https://mpfs.plutimus.com
       - ANTI_WALLET_FILE=/run/secrets/agent-wallet
       - ANTI_TOKEN_ID=21c523c3b4565f1fc1ad7e54e82ca976f60997d8e7e9946826813fabf341069b
       - ANTI_SECRETS_FILE=/run/secrets/secrets
       - ANTI_WAIT=240
+      - DOCKER_CONFIG=/run/secrets/docker
     restart:
       always
+    privileged: true
     volumes:
       - tmp:/tmp
+         # Mount CA certificates, curl seems not to find them when the pkgs.cacert is included in the image
+      - /etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt:ro
+      - /var/run/docker.sock:/var/run/docker.sock
 secrets:
   agent-wallet:
     file: /secrets/anti-agent/agent.json # Path to a file containing the wallet
   secrets:
     file: /secrets/anti-agent/secrets.yaml # Path to a file containing the secrets
+  docker:
+    file: /secrets/anti-agent/docker/config.json # Path to a file containing Docker config (for private registries)
 
 volumes:
   tmp:
 
 ### Keys of the secrets.yaml file:
-  # agentEmail:
-  # agentEmailPassword:
-  # githubPAT:
+  # agentEmail: # Email address where url links are received
+  # agentEmailPassword: # App password for the email account
+  # githubPAT: # GitHub Personal Access Token
+  # trustedRequesters:
+  #   - requester1
+  #   - requester2
+  # antithesisPassword: # Password for Antithesis registry and Docker image

cli/justfile

@@ -130,26 +130,33 @@ stop-mpfs:
     #!/usr/bin/env bash
     docker compose -p "anti-testing" -f test-E2E/fixtures/docker-compose.yml down
 
-start-anti-agent bg="false":
+build-anti-agent:
     #!/usr/bin/env bash
     nix build .#anti-agent-docker-image
     docker load < result
     version=$(nix eval --raw .#version)
     docker image tag cardano-foundation/anti-agent:"$version" cardano-foundation/anti-agent:latest
-    # shellcheck disable=SC2050
+
+start-anti-agent bg="false":
+    #!/usr/bin/env bash
     if [[ '{{ bg }}' == "true" ]]; then
         docker compose -f CD/anti-agent/docker-compose.yaml up -d
     else
         docker compose -f CD/anti-agent/docker-compose.yaml up
     fi
 
+build-and-start-anti-agent bg="false":
+    #!/usr/bin/env bash
+    just build-anti-agent
+    just start-anti-agent "{{ bg }}"
+
 logs-anti-agent:
     #!/usr/bin/env bash
-    docker compose -f CD/anti-agent/docker-compose.yaml logs -f
+    docker compose -f CD/anti-agent/docker-compose.yaml logs -ft
 
 start-anti-oracle bg="false":
     #!/usr/bin/env bash
-    nix build .#anti-oracle-docker-image
+     nix build .#anti-oracle-docker-image
     docker load < result
     version=$(nix eval --raw .#version)
     docker image tag cardano-foundation/anti-oracle:"$version" cardano-foundation/anti-oracle:latest
@@ -162,4 +169,4 @@ start-anti-oracle bg="false":
 
 logs-anti-oracle:
     #!/usr/bin/env bash
-    docker compose -f CD/anti-oracle/docker-compose.yaml logs -f
+    docker compose -f CD/anti-oracle/docker-compose.yaml logs -ft

cli/nix/anti-agent-docker.nix

@@ -16,6 +16,6 @@ in pkgs.dockerTools.buildImage {
       unpacked = pkgs.runCommand "unpack" {
         nativeBuildInputs = [ pkgs.gnutar pkgs.gzip ];
       } unpack;
-    in [ unpacked pkgs.cacert ];
+    in [ unpacked pkgs.docker pkgs.curl pkgs.coreutils pkgs.bash ];
   };
 }

cli/src/Cli.hs

@@ -2,6 +2,7 @@ module Cli
     ( cmd
     , Command (..)
     , WithValidation (..)
+    , TokenInfoFailure (..)
     ) where
 
 import Control.Monad.IO.Class (MonadIO (..))

cli/src/User/Agent/Options.hs

@@ -7,6 +7,8 @@ module User.Agent.Options
     , agentEmailPasswordOption
     , daysOption
     , testRunIdOption
+    , registryOption
+    , antithesisAuthOption
     ) where
 
 import Core.Options