Localias on GitHub Actions

[iloveitaly]

👋 what a cool project. Love it.

I'm trying to get this working on GitHub actions with the goal of enabling the test suite to mirror production as closely as possible.

https://github.com/iloveitaly/python-starter-template/actions/runs/11965441527/job/33359452515

It's close (I have a couple PRs coming for some tweaks I've made) but the certs are not installing properly. One especially strange thing is:

localias debug cert --print

Results in:

error: open /home/runner/.local/state/localias/caddy/pki/authorities/local/root.crt: no such file or directory

Another interesting error is:

{"level":"info","ts":1732243175.972077,"msg":"not NSS security databases found"}

Which doesn't seem like the core issue?

I'm not familiar with the linux certificate store, so I wanted to check in with you in case you had any pointers before I start hunting in the dark for what's going on here in ubuntu.

[peterldowns]

Hey @iloveitaly nice to run into you on Github! Just to make sure I understand — your goal is to run the localias daemon inside of a Github Actions workflow, so that other steps in the workflow can make requests that get proxied by localias? If so, that's not something I had ever considered, but sounds cool and I'd be happy to accept PRs that help make it happen.

I don't know anything about the Github Actions environment re: cert stuff, and I don't use linux so I'm not really familiar with how to deal with common certificate stores. I've been lucky to mainly piggyback on the hard work of the Caddy project and have this stuff mostly Just™ Work™ 😅 .

If you have any questions about how to make the necessary change in Localias to support what you're doing, I hope to be more helpful.

[iloveitaly]

Got this mostly working! There were some very weird issues I had to workaround:

https://github.com/iloveitaly/github-action-localias

[peterldowns]

Very cool! Thanks for taking a look at Localias and for working to extend it! Did making it all work end up requiring any patches to localias?

[iloveitaly]

No patches to localias! There were some very weird issues with "SSL cert warming" which would cause an SSL error to be reported the first time you request a domain.

This would sometimes happen repeatedly, even after requesting the domain once, which is why we have a backoff for both curl and an optional chromium test.

I have no idea why this is the case—there's something funky going on with how ubuntu handles self-signed SSL certs.

Cool with adding to the readme?