File size: 11,906 Bytes
4b07aaf
 
 
 
 
 
 
 
 
85b7ac8
a7caaff
85b7ac8
 
 
 
 
 
 
 
 
 
4b07aaf
85b7ac8
4b07aaf
85b7ac8
 
 
 
 
 
4b07aaf
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
85b7ac8
 
 
 
4b07aaf
 
 
 
 
 
85b7ac8
 
 
 
 
 
4b07aaf
85b7ac8
 
4b07aaf
85b7ac8
2794920
4b07aaf
2794920
4b07aaf
 
 
 
 
2794920
4b07aaf
 
 
 
 
 
 
2794920
 
 
 
 
 
 
 
 
 
4b07aaf
 
 
 
 
 
2794920
4b07aaf
 
2794920
 
4b07aaf
 
 
 
2794920
 
 
 
 
4b07aaf
2794920
4b07aaf
 
 
 
 
2794920
 
 
4b07aaf
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
"""Task 5: CI and Docker Build Integration — MEDIUM-HARD.

Agent debugs combined workflow + Docker build integration failures:
- Missing Buildx for multi-platform
- Docker login needs secrets in env block
- Build context path mismatch
- Cache configuration errors
- Missing Docker login before push
"""



from server.models import TaskDifficulty
from server.tasks.base import BaseTask


class CIDockerIntegrationTask(BaseTask):
    NAME = "CI and Docker Build Integration"
    DESCRIPTION = "Debug combined workflow and Docker build integration failures"
    DIFFICULTY = TaskDifficulty.MEDIUM
    AVAILABLE_SECRETS = ["DOCKER_USERNAME", "DOCKER_PASSWORD", "GITHUB_TOKEN"]

    SCENARIOS = [
        # Scenario 1: Missing Buildx setup for multi-platform build
        {
            "id": "missing_buildx_for_platforms",
            "files": [
                {
                    "path": ".github/workflows/build.yml",
                    "type": "workflow",
                    "content": (
                        "name: Multi-platform Build\n"
                        "on: push\n"
                        "\n"
                        "jobs:\n"
                        "  build:\n"
                        "    runs-on: ubuntu-latest\n"
                        "    steps:\n"
                        "      - uses: actions/checkout@v4\n"
                        "      - name: Build multi-platform\n"
                        "        uses: docker/build-push-action@v5\n"
                        "        with:\n"
                        "          context: .\n"
                        "          platforms: linux/amd64,linux/arm64\n"
                        "          push: false"
                    ),
                },
                {
                    "path": "Dockerfile",
                    "type": "dockerfile",
                    "content": (
                        "FROM python:3.11-slim\n"
                        "WORKDIR /app\n"
                        "COPY . .\n"
                        'CMD ["python", "app.py"]'
                    ),
                },
            ],
            "error": {
                "phase": "docker_build",
                "message": (
                    "ERROR: Multi-platform build is not supported for the docker driver. "
                    "Switch to a different driver, or turn on the containerd image store."
                ),
                "exit_code": 1,
                "failed_step": "Build multi-platform",
            },
            "expected_fixes": [
                {
                    "file": ".github/workflows/build.yml",
                    "type": "contains",
                    "expected": "docker/setup-buildx-action",
                    "hint": "Multi-platform builds require Docker Buildx setup step",
                }
            ],
        },

        # Scenario 2: build-push-action without load:true, next step can't find image
        {
            "id": "missing_load_true",
            "files": [
                {
                    "path": ".github/workflows/build.yml",
                    "type": "workflow",
                    "content": (
                        "name: Build and Test\n"
                        "on: push\n"
                        "\n"
                        "jobs:\n"
                        "  build:\n"
                        "    runs-on: ubuntu-latest\n"
                        "    steps:\n"
                        "      - uses: actions/checkout@v4\n"
                        "      - name: Set up Docker Buildx\n"
                        "        uses: docker/setup-buildx-action@v3\n"
                        "      - name: Build image\n"
                        "        uses: docker/build-push-action@v5\n"
                        "        with:\n"
                        "          context: .\n"
                        "          push: false\n"
                        "          tags: myapp:test\n"
                        "      - name: Run tests\n"
                        "        run: docker run myapp:test pytest"
                    ),
                },
                {
                    "path": "Dockerfile",
                    "type": "dockerfile",
                    "content": (
                        "FROM python:3.11-slim\n"
                        "WORKDIR /app\n"
                        "COPY . .\n"
                        "RUN pip install pytest\n"
                        'CMD ["python", "app.py"]'
                    ),
                },
            ],
            "error": {
                "phase": "docker_build",
                "message": (
                    "Unable to find image 'myapp:test' locally. "
                    "docker: Error response from daemon: pull access denied for myapp."
                ),
                "exit_code": 1,
                "failed_step": "Run tests",
            },
            "expected_fixes": [
                {
                    "file": ".github/workflows/build.yml",
                    "type": "contains",
                    "expected": "load: true",
                    "hint": "build-push-action with Buildx doesn't load images into local Docker daemon by default — add 'load: true'",
                }
            ],
        },

        # Scenario 3: Build context path wrong — using subdirectory but context is .
        {
            "id": "wrong_build_context",
            "files": [
                {
                    "path": ".github/workflows/build.yml",
                    "type": "workflow",
                    "content": (
                        "name: Build Backend\n"
                        "on: push\n"
                        "\n"
                        "jobs:\n"
                        "  build:\n"
                        "    runs-on: ubuntu-latest\n"
                        "    steps:\n"
                        "      - uses: actions/checkout@v4\n"
                        "      - name: Build backend\n"
                        "        uses: docker/build-push-action@v5\n"
                        "        with:\n"
                        "          context: ./backend\n"
                        "          file: ./Dockerfile\n"
                        "          push: false"
                    ),
                },
                {
                    "path": "Dockerfile",
                    "type": "dockerfile",
                    "content": (
                        "FROM python:3.11-slim\n"
                        "WORKDIR /app\n"
                        "COPY requirements.txt .\n"
                        "RUN pip install -r requirements.txt\n"
                        "COPY . .\n"
                        'CMD ["python", "app.py"]'
                    ),
                },
                {
                    "path": "requirements.txt",
                    "type": "requirements",
                    "content": "flask==2.3.0",
                },
            ],
            "error": {
                "phase": "docker_build",
                "message": (
                    "unable to prepare context: path \"./Dockerfile\" not found — "
                    "Dockerfile path does not match build context"
                ),
                "exit_code": 1,
                "failed_step": "Build backend",
            },
            "expected_fixes": [
                {
                    "file": ".github/workflows/build.yml",
                    "type": "contains",
                    "expected": "file: ./backend/Dockerfile",
                    "hint": "When context is ./backend, the Dockerfile path must be relative to repo root: ./backend/Dockerfile",
                }
            ],
        },

        # Scenario 4: Cache export without mode=max
        {
            "id": "cache_without_mode_max",
            "files": [
                {
                    "path": ".github/workflows/build.yml",
                    "type": "workflow",
                    "content": (
                        "name: Build with Cache\n"
                        "on: push\n"
                        "\n"
                        "jobs:\n"
                        "  build:\n"
                        "    runs-on: ubuntu-latest\n"
                        "    steps:\n"
                        "      - uses: actions/checkout@v4\n"
                        "      - name: Set up Docker Buildx\n"
                        "        uses: docker/setup-buildx-action@v3\n"
                        "      - name: Build\n"
                        "        uses: docker/build-push-action@v5\n"
                        "        with:\n"
                        "          context: .\n"
                        "          push: false\n"
                        "          cache-from: type=gha\n"
                        "          cache-to: type=gha"
                    ),
                },
                {
                    "path": "Dockerfile",
                    "type": "dockerfile",
                    "content": (
                        "FROM python:3.9-slim\n"
                        "WORKDIR /app\n"
                        "COPY . .\n"
                        'CMD ["python", "app.py"]'
                    ),
                },
            ],
            "error": {
                "phase": "docker_build",
                "message": (
                    "ERROR: cache export feature is currently not supported for docker driver. "
                    "Please switch to a different driver"
                ),
                "exit_code": 1,
                "failed_step": "Build",
            },
            "expected_fixes": [
                {
                    "file": ".github/workflows/build.yml",
                    "type": "contains",
                    "expected": "cache-to: type=gha,mode=max",
                    "hint": "GHA cache needs mode=max for proper cache export",
                }
            ],
        },

        # Scenario 5: Push without login
        {
            "id": "push_without_login",
            "files": [
                {
                    "path": ".github/workflows/build.yml",
                    "type": "workflow",
                    "content": (
                        "name: Build and Push\n"
                        "on:\n"
                        "  push:\n"
                        "    tags: ['v*']\n"
                        "\n"
                        "jobs:\n"
                        "  build:\n"
                        "    runs-on: ubuntu-latest\n"
                        "    steps:\n"
                        "      - uses: actions/checkout@v4\n"
                        "      - name: Build image\n"
                        "        run: docker build -t myuser/myapp:${{ github.ref_name }} .\n"
                        "      - name: Push image\n"
                        "        run: docker push myuser/myapp:${{ github.ref_name }}"
                    ),
                },
                {
                    "path": "Dockerfile",
                    "type": "dockerfile",
                    "content": (
                        "FROM python:3.11-slim\n"
                        "WORKDIR /app\n"
                        "COPY . .\n"
                        'CMD ["python", "app.py"]'
                    ),
                },
            ],
            "error": {
                "phase": "push",
                "message": "denied: requested access to the resource is denied — not logged in to registry",
                "exit_code": 1,
                "failed_step": "Push image",
            },
            "expected_fixes": [
                {
                    "file": ".github/workflows/build.yml",
                    "type": "contains",
                    "expected": "docker login",
                    "hint": "Add a Docker login step before pushing to a registry",
                },
            ],
        },
    ]