aboutsummaryrefslogtreecommitdiff
path: root/script/test-smoke.sh
blob: c992803ed5bd3266f2edbaaad7e8f0deab766fbe (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
#!/usr/bin/env bash

set -ex

export LC_ALL=C.UTF-8
export LANG=C.UTF-8
SCRIPT_FOLDER="`dirname \"$0\"`"
REPO_FOLDER="${SCRIPT_FOLDER}/../"
GARAGE_DEBUG="${REPO_FOLDER}/target/debug/"
GARAGE_RELEASE="${REPO_FOLDER}/target/release/"
NIX_RELEASE="${REPO_FOLDER}/result/bin/"
PATH="${GARAGE_DEBUG}:${GARAGE_RELEASE}:${NIX_RELEASE}:$PATH"
CMDOUT=/tmp/garage.cmd.tmp

# @FIXME Duck is not ready for testing, we have a bug
SKIP_DUCK=1

echo "⏳ Setup"
${SCRIPT_FOLDER}/dev-clean.sh
${SCRIPT_FOLDER}/dev-cluster.sh > /tmp/garage.log 2>&1 &
sleep 6
${SCRIPT_FOLDER}/dev-configure.sh
${SCRIPT_FOLDER}/dev-bucket.sh

which garage
garage -c /tmp/config.1.toml status
garage -c /tmp/config.1.toml key list
garage -c /tmp/config.1.toml bucket list

dd if=/dev/urandom of=/tmp/garage.1.rnd bs=1k count=2 # No multipart, inline storage (< INLINE_THRESHOLD = 3072 bytes)
dd if=/dev/urandom of=/tmp/garage.2.rnd bs=1M count=5 # No multipart but file will be chunked
dd if=/dev/urandom of=/tmp/garage.3.rnd bs=1M count=10 # by default, AWS starts using multipart at 8MB

# data of lower entropy, to test compression
dd if=/dev/urandom bs=1k count=2  | base64 -w0 > /tmp/garage.1.b64
dd if=/dev/urandom bs=1M count=5  | base64 -w0 > /tmp/garage.2.b64
dd if=/dev/urandom bs=1M count=10 | base64 -w0 > /tmp/garage.3.b64

echo "🧪 S3 API testing..."

# AWS
if [ -z "$SKIP_AWS" ]; then
  echo "🛠️ Testing with awscli"
  source ${SCRIPT_FOLDER}/dev-env-aws.sh
  aws s3 ls
  for idx in {1..3}.{rnd,b64}; do
    aws s3 cp "/tmp/garage.$idx" "s3://eprouvette/&+-é\"/garage.$idx.aws"
    aws s3 ls s3://eprouvette
    aws s3 cp "s3://eprouvette/&+-é\"/garage.$idx.aws" "/tmp/garage.$idx.dl"
    diff /tmp/garage.$idx /tmp/garage.$idx.dl
    rm /tmp/garage.$idx.dl
    aws s3 rm "s3://eprouvette/&+-é\"/garage.$idx.aws"
  done
fi

# S3CMD
if [ -z "$SKIP_S3CMD" ]; then
  echo "🛠️ Testing with s3cmd"
  source ${SCRIPT_FOLDER}/dev-env-s3cmd.sh
  s3cmd ls
  for idx in {1..3}.{rnd,b64}; do
    s3cmd put "/tmp/garage.$idx" "s3://eprouvette/&+-é\"/garage.$idx.s3cmd"
    s3cmd ls s3://eprouvette
    s3cmd get "s3://eprouvette/&+-é\"/garage.$idx.s3cmd" "/tmp/garage.$idx.dl"
    diff /tmp/garage.$idx /tmp/garage.$idx.dl
    rm /tmp/garage.$idx.dl
    s3cmd rm "s3://eprouvette/&+-é\"/garage.$idx.s3cmd"
  done
fi

# Minio Client
if [ -z "$SKIP_MC" ]; then
  echo "🛠️ Testing with mc (minio client)"
  source ${SCRIPT_FOLDER}/dev-env-mc.sh
  mc ls garage/
  for idx in {1..3}.{rnd,b64}; do
    mc cp "/tmp/garage.$idx" "garage/eprouvette/&+-é\"/garage.$idx.mc"
    mc ls garage/eprouvette
    mc cp "garage/eprouvette/&+-é\"/garage.$idx.mc" "/tmp/garage.$idx.dl"
    diff /tmp/garage.$idx /tmp/garage.$idx.dl
    rm /tmp/garage.$idx.dl
    mc rm "garage/eprouvette/&+-é\"/garage.$idx.mc"
  done
fi

# RClone
if [ -z "$SKIP_RCLONE" ]; then
  echo "🛠️ Testing with rclone"
  source ${SCRIPT_FOLDER}/dev-env-rclone.sh
  rclone lsd garage:
  for idx in {1..3}.{rnd,b64}; do
    cp /tmp/garage.$idx /tmp/garage.$idx.dl
    rclone copy "/tmp/garage.$idx.dl" "garage:eprouvette/&+-é\"/"
    rm /tmp/garage.$idx.dl
    rclone ls garage:eprouvette
    rclone copy "garage:eprouvette/&+-é\"/garage.$idx.dl" "/tmp/"
    diff /tmp/garage.$idx /tmp/garage.$idx.dl
    rm /tmp/garage.$idx.dl
    rclone delete "garage:eprouvette/&+-é\"/garage.$idx.dl"
  done
fi

# Duck (aka Cyberduck CLI)
if [ -z "$SKIP_DUCK" ]; then
  echo "🛠️ Testing with duck (aka cyberduck cli)"
  source ${SCRIPT_FOLDER}/dev-env-duck.sh
  duck --list garage:/
  duck --mkdir "garage:/eprouvette/duck"
  for idx in {1..3}.{rnd,b64}; do
    duck --verbose --upload "garage:/eprouvette/duck/" "/tmp/garage.$idx"
    duck --list garage:/eprouvette/duck/
    duck --download "garage:/eprouvette/duck/garage.$idx" "/tmp/garage.$idx.dl"
    diff /tmp/garage.$idx /tmp/garage.$idx.dl
    rm /tmp/garage.$idx.dl
    duck --delete "garage:/eprouvette/duck/garage.$idx.dk"
  done
fi

if [ -z "$SKIP_WINSCP" ]; then
  echo "🛠️ Testing with winscp"
  source ${SCRIPT_FOLDER}/dev-env-winscp.sh
  winscp <<EOF
open $WINSCP_URL
ls
mkdir eprouvette/winscp
EOF
  for idx in {1..3}.{rnd,b64}; do
    winscp <<EOF
open $WINSCP_URL
put Z:\\tmp\\garage.$idx eprouvette/winscp/garage.$idx.winscp
ls eprouvette/winscp/
get eprouvette/winscp/garage.$idx.winscp Z:\\tmp\\garage.$idx.dl
rm eprouvette/winscp/garage.$idx.winscp
EOF
    diff /tmp/garage.$idx /tmp/garage.$idx.dl
    rm /tmp/garage.$idx.dl
  done
  winscp <<EOF
open $WINSCP_URL
rm eprouvette/winscp
EOF
fi

# Advanced testing via S3API
if [ -z "$SKIP_AWS" ]; then
  echo "🔌 Test S3API"

  echo "Test Objects"
  aws s3api put-object --bucket eprouvette --key a
  aws s3api put-object --bucket eprouvette --key a/a
  aws s3api put-object --bucket eprouvette --key a/b
  aws s3api put-object --bucket eprouvette --key a/c
  aws s3api put-object --bucket eprouvette --key a/d/a
  aws s3api put-object --bucket eprouvette --key a/é
  aws s3api put-object --bucket eprouvette --key b
  aws s3api put-object --bucket eprouvette --key c


  aws s3api list-objects-v2 --bucket eprouvette >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 8 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-objects-v2 --bucket eprouvette --page-size 0 >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 8 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-objects-v2 --bucket eprouvette --page-size 999999999 >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 8 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-objects-v2 --bucket eprouvette --page-size 1 >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 8 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-objects-v2 --bucket eprouvette --delimiter '/' >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 3 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  aws s3api list-objects-v2 --bucket eprouvette --delimiter '/' --page-size 1 >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 3 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  aws s3api list-objects-v2 --bucket eprouvette --prefix 'a/' >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 5 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-objects-v2 --bucket eprouvette --prefix 'a/' --delimiter '/' >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 4 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  aws s3api list-objects-v2 --bucket eprouvette --prefix 'a/' --page-size 1 >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 5 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-objects-v2 --bucket eprouvette --prefix 'a/' --delimiter '/' --page-size 1 >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 4 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  aws s3api list-objects-v2 --bucket eprouvette --start-after 'Z' >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 8 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-objects-v2 --bucket eprouvette --start-after 'c' >$CMDOUT
  ! [ -s $CMDOUT ]


  aws s3api list-objects --bucket eprouvette >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 8 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-objects --bucket eprouvette --page-size 1 >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 8 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-objects --bucket eprouvette --delimiter '/' >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 3 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  # @FIXME it does not work as expected but might be a limitation of aws s3api
  # The problem is the conjunction of a delimiter + pagination + v1 of listobjects
  #aws s3api list-objects --bucket eprouvette --delimiter '/' --page-size 1 >$CMDOUT
  #[ $(jq '.Contents | length' $CMDOUT) == 3 ]
  #[ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  aws s3api list-objects --bucket eprouvette --prefix 'a/' >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 5 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-objects --bucket eprouvette --prefix 'a/' --delimiter '/' >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 4 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  aws s3api list-objects --bucket eprouvette --prefix 'a/' --page-size 1 >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 5 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  # @FIXME idem
  #aws s3api list-objects --bucket eprouvette --prefix 'a/' --delimiter '/' --page-size 1 >$CMDOUT
  #[ $(jq '.Contents | length' $CMDOUT) == 4 ]
  #[ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  aws s3api list-objects --bucket eprouvette --starting-token 'Z' >$CMDOUT
  [ $(jq '.Contents | length' $CMDOUT) == 8 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-objects --bucket eprouvette --starting-token 'c' >$CMDOUT
  ! [ -s $CMDOUT ]

  aws s3api list-objects-v2 --bucket eprouvette | \
    jq -c '. | {Objects: [.Contents[] | {Key: .Key}], Quiet: true}' | \
    aws s3api delete-objects --bucket eprouvette --delete file:///dev/stdin


  echo "Test Multipart Upload"
  aws s3api create-multipart-upload --bucket eprouvette --key a
  aws s3api create-multipart-upload --bucket eprouvette --key a
  aws s3api create-multipart-upload --bucket eprouvette --key c
  aws s3api create-multipart-upload --bucket eprouvette --key c/a
  aws s3api create-multipart-upload --bucket eprouvette --key c/b

  aws s3api list-multipart-uploads --bucket eprouvette >$CMDOUT
  [ $(jq '.Uploads | length' $CMDOUT) == 5 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-multipart-uploads --bucket eprouvette --page-size 1 >$CMDOUT
  [ $(jq '.Uploads | length' $CMDOUT) == 5 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-multipart-uploads --bucket eprouvette --delimiter '/' >$CMDOUT
  [ $(jq '.Uploads | length' $CMDOUT) == 3 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  aws s3api list-multipart-uploads --bucket eprouvette --delimiter '/' --page-size 1 >$CMDOUT
  [ $(jq '.Uploads | length' $CMDOUT) == 3 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  aws s3api list-multipart-uploads --bucket eprouvette --prefix 'c' >$CMDOUT
  [ $(jq '.Uploads | length' $CMDOUT) == 3 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-multipart-uploads --bucket eprouvette --prefix 'c' --page-size 1 >$CMDOUT
  [ $(jq '.Uploads | length' $CMDOUT) == 3 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-multipart-uploads --bucket eprouvette --prefix 'c' --delimiter '/' >$CMDOUT
  [ $(jq '.Uploads | length' $CMDOUT) == 1 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  aws s3api list-multipart-uploads --bucket eprouvette --prefix 'c' --delimiter '/' --page-size 1 >$CMDOUT
  [ $(jq '.Uploads | length' $CMDOUT) == 1 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 1 ]
  aws s3api list-multipart-uploads --bucket eprouvette --starting-token 'ZZZZZ' >$CMDOUT
  [ $(jq '.Uploads | length' $CMDOUT) == 5 ]
  [ $(jq '.CommonPrefixes | length' $CMDOUT) == 0 ]
  aws s3api list-multipart-uploads --bucket eprouvette --starting-token 'd' >$CMDOUT
  ! [ -s $CMDOUT ]

  aws s3api list-multipart-uploads --bucket eprouvette | \
    jq -r '.Uploads[] | "\(.Key) \(.UploadId)"' | \
    while read r; do 
      key=$(echo $r|cut -d' ' -f 1); 
      uid=$(echo $r|cut -d' ' -f 2); 
      aws s3api abort-multipart-upload --bucket eprouvette --key $key --upload-id $uid;
      echo "Deleted ${key}:${uid}"
    done

  echo "Test for ListParts"
  UPLOAD_ID=$(aws s3api create-multipart-upload --bucket eprouvette --key list-parts | jq -r .UploadId)
  aws s3api list-parts --bucket eprouvette --key list-parts --upload-id $UPLOAD_ID >$CMDOUT
  [ $(jq '.Parts | length' $CMDOUT) == 0 ]
  [ $(jq -r '.StorageClass' $CMDOUT) == 'STANDARD' ] # check that the result is not empty
  ETAG1=$(aws s3api upload-part --bucket eprouvette --key list-parts --upload-id $UPLOAD_ID --part-number 1 --body /tmp/garage.2.rnd | jq .ETag)
  aws s3api list-parts --bucket eprouvette --key list-parts --upload-id $UPLOAD_ID >$CMDOUT
  [ $(jq '.Parts | length' $CMDOUT) == 1 ]
  [ $(jq '.Parts[0].PartNumber' $CMDOUT) == 1 ]
  [ $(jq '.Parts[0].Size' $CMDOUT) == 5242880 ]
  [ $(jq '.Parts[0].ETag' $CMDOUT) == $ETAG1 ]

  ETAG2=$(aws s3api upload-part --bucket eprouvette --key list-parts --upload-id $UPLOAD_ID --part-number 3 --body /tmp/garage.3.rnd | jq .ETag)
  ETAG3=$(aws s3api upload-part --bucket eprouvette --key list-parts --upload-id $UPLOAD_ID --part-number 2 --body /tmp/garage.2.rnd | jq .ETag)
  aws s3api list-parts --bucket eprouvette --key list-parts --upload-id $UPLOAD_ID >$CMDOUT
  [ $(jq '.Parts | length' $CMDOUT) == 3 ]
  [ $(jq '.Parts[1].ETag' $CMDOUT) == $ETAG3 ]

  aws s3api list-parts --bucket eprouvette --key list-parts --upload-id $UPLOAD_ID --page-size 1 >$CMDOUT
  [ $(jq '.Parts | length' $CMDOUT) == 3 ]
  [ $(jq '.Parts[1].ETag' $CMDOUT) == $ETAG3 ]

  cat >/tmp/garage.multipart_struct <<EOF
{
  "Parts": [
    {
      "ETag": $ETAG1,
      "PartNumber": 1
    },
    {
      "ETag": $ETAG3,
      "PartNumber": 2
    },
    {
      "ETag": $ETAG2,
      "PartNumber": 3
    }
  ]
}
EOF
  aws s3api complete-multipart-upload \
    --bucket eprouvette --key list-parts --upload-id $UPLOAD_ID \
    --multipart-upload file:///tmp/garage.multipart_struct

  ! aws s3api list-parts --bucket eprouvette --key list-parts --upload-id $UPLOAD_ID >$CMDOUT
  aws s3 rm "s3://eprouvette/list-parts"


  # @FIXME We do not write tests with --starting-token due to a bug with awscli
  # See here: https://github.com/aws/aws-cli/issues/6666

  echo "Test for UploadPartCopy"
  aws s3 cp "/tmp/garage.3.rnd" "s3://eprouvette/copy_part_source"
  UPLOAD_ID=$(aws s3api create-multipart-upload --bucket eprouvette --key test_multipart | jq -r .UploadId)
  PART1=$(aws s3api upload-part \
    --bucket eprouvette --key test_multipart \
    --upload-id $UPLOAD_ID --part-number 1 \
    --body /tmp/garage.2.rnd | jq .ETag)
  PART2=$(aws s3api upload-part-copy \
    --bucket eprouvette --key test_multipart \
    --upload-id $UPLOAD_ID --part-number 2 \
    --copy-source "/eprouvette/copy_part_source" \
    --copy-source-range "bytes=500-5000500" \
    | jq .CopyPartResult.ETag)
  PART3=$(aws s3api upload-part \
    --bucket eprouvette --key test_multipart \
    --upload-id $UPLOAD_ID --part-number 3 \
    --body /tmp/garage.3.rnd | jq .ETag)
  cat >/tmp/garage.multipart_struct <<EOF
{
  "Parts": [
    {
      "ETag": $PART1,
      "PartNumber": 1
    },
    {
      "ETag": $PART2,
      "PartNumber": 2
    },
    {
      "ETag": $PART3,
      "PartNumber": 3
    }
  ]
}
EOF
  aws s3api complete-multipart-upload \
    --bucket eprouvette --key test_multipart --upload-id $UPLOAD_ID \
    --multipart-upload file:///tmp/garage.multipart_struct

  aws s3 cp "s3://eprouvette/test_multipart" /tmp/garage.test_multipart
  cat /tmp/garage.2.rnd <(tail -c +501 /tmp/garage.3.rnd | head -c 5000001) /tmp/garage.3.rnd > /tmp/garage.test_multipart_reference
  diff /tmp/garage.test_multipart /tmp/garage.test_multipart_reference >/tmp/garage.test_multipart_diff 2>&1

  aws s3 rm "s3://eprouvette/copy_part_source"
  aws s3 rm "s3://eprouvette/test_multipart"

  rm /tmp/garage.multipart_struct
  rm /tmp/garage.test_multipart
  rm /tmp/garage.test_multipart_reference
  rm /tmp/garage.test_multipart_diff


  echo "Test CORS endpoints"
  garage -c /tmp/config.1.toml bucket website --allow eprouvette
  aws s3api put-object --bucket eprouvette --key index.html
  CORS='{"CORSRules":[{"AllowedHeaders":["*"],"AllowedMethods":["GET","PUT"],"AllowedOrigins":["*"]}]}'
  aws s3api put-bucket-cors --bucket eprouvette --cors-configuration $CORS
  [ `aws s3api get-bucket-cors --bucket eprouvette | jq -c` == $CORS ]

  curl -s -i -H 'Origin: http://example.com' --header "Host: eprouvette.web.garage.localhost" http://127.0.0.1:3921/ | grep access-control-allow-origin
  curl -s -i -X OPTIONS -H 'Access-Control-Request-Method: PUT' -H 'Origin: http://example.com' --header "Host: eprouvette.web.garage.localhost" http://127.0.0.1:3921/ | grep access-control-allow-methods
  curl -s -i -X OPTIONS -H 'Access-Control-Request-Method: DELETE' -H 'Origin: http://example.com' --header "Host: eprouvette.web.garage.localhost" http://127.0.0.1:3921/ | grep '403 Forbidden'

  #@TODO we may want to test the S3 endpoint but we need to handle authentication, which is way more complex.

  aws s3api delete-bucket-cors --bucket eprouvette
  ! [ -s `aws s3api get-bucket-cors --bucket eprouvette` ]
  curl -s -i -X OPTIONS -H 'Access-Control-Request-Method: PUT' -H 'Origin: http://example.com' --header "Host: eprouvette.web.garage.localhost" http://127.0.0.1:3921/ | grep '403 Forbidden'
  aws s3api delete-object --bucket eprouvette --key index.html
  garage -c /tmp/config.1.toml bucket website --deny eprouvette
fi

rm /tmp/garage.{1..3}.{rnd,b64}

if [ -z "$SKIP_AWS" ]; then
  echo "🪣 Test bucket logic "
  AWS_ACCESS_KEY_ID=`cat /tmp/garage.s3 |cut -d' ' -f1`
  [ $(aws s3 ls | wc -l) == 1 ]
  garage -c /tmp/config.1.toml bucket create seau
  garage -c /tmp/config.1.toml bucket allow --read seau --key $AWS_ACCESS_KEY_ID
  [ $(aws s3 ls | wc -l) == 2 ]
  garage -c /tmp/config.1.toml bucket deny --read seau --key $AWS_ACCESS_KEY_ID
  [ $(aws s3 ls | wc -l) == 1 ]
  garage -c /tmp/config.1.toml bucket allow --read seau --key $AWS_ACCESS_KEY_ID
  [ $(aws s3 ls | wc -l) == 2 ]
  garage -c /tmp/config.1.toml bucket delete --yes seau
  [ $(aws s3 ls | wc -l) == 1 ]
fi

if [ -z "$SKIP_AWS" ]; then
  echo "🧪 Website Testing"
  echo "<h1>hello world</h1>" > /tmp/garage-index.html
  aws s3 cp /tmp/garage-index.html s3://eprouvette/index.html
  [ `curl -s -o /dev/null -w "%{http_code}" --header "Host: eprouvette.web.garage.localhost"  http://127.0.0.1:3921/ ` == 404 ]
  garage -c /tmp/config.1.toml bucket website --allow eprouvette
  [ `curl -s -o /dev/null -w "%{http_code}" --header "Host: eprouvette.web.garage.localhost"  http://127.0.0.1:3921/ ` == 200 ]
  garage -c /tmp/config.1.toml bucket website --deny eprouvette
  [ `curl -s -o /dev/null -w "%{http_code}" --header "Host: eprouvette.web.garage.localhost"  http://127.0.0.1:3921/ ` == 404 ]
  aws s3 rm s3://eprouvette/index.html
  rm /tmp/garage-index.html
fi

echo "🏁 Teardown"
AWS_ACCESS_KEY_ID=`cat /tmp/garage.s3 |cut -d' ' -f1`
AWS_SECRET_ACCESS_KEY=`cat /tmp/garage.s3 |cut -d' ' -f2`
garage -c /tmp/config.1.toml bucket deny --read --write eprouvette --key $AWS_ACCESS_KEY_ID
garage -c /tmp/config.1.toml bucket delete --yes eprouvette
garage -c /tmp/config.1.toml key delete --yes $AWS_ACCESS_KEY_ID
exec 3>&-

echo "✅ Success"