Pin uv 0.10.0, add Taskfile and pre-push hook, improve tests (#192)

* Pin uv 0.10.0, add Taskfile and pre-push hook, improve tests

- Pin uv version to 0.10.0 instead of latest
- Add Taskfile.yml with build/test/setup tasks
- Add .githooks/pre-push to run tests before push
- Rewrite test/main.py: remove flaky network calls, add assertions,
  use Flask test client, exit with non-zero code on failure

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Use Taskfile in CI for Linux image tests

Replace build-and-test.sh with task test:linux/test:linux-slim in CI
workflow. This adds binary verification and keeps CI in sync with
local pre-push hook.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Remove build-and-test.sh, use Taskfile for all CI tests

- Add build:windows and test:windows tasks to Taskfile
- Migrate windows CI job to use task test:windows
- Update commented-out osx CI job to reference Taskfile
- Include windows in `task test` (all images)
- Delete build-and-test.sh

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Fix multi-platform builds: uv on amd64/arm64, pip fallback on others

COPY --from=ghcr.io/astral-sh/uv fails on platforms not in the uv manifest
(386, arm/v5, arm/v7, s390x, ppc64le, riscv64). Replace with conditional
install via TARGETARCH: pip-install uv on amd64/arm64, plain pip elsewhere.
Entrypoint detects uv at runtime for requirements and PyPI mirror config.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Pin arduino/setup-task to full commit SHA for Sonar S7637

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Федор Батоногов <fekinos@me.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: 3 people

.githooks/pre-push

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+set -e
+
+echo "Running Docker build & test before push..."
+
+if ! command -v task &>/dev/null; then
+    echo "Error: 'task' (go-task) is not installed. Skipping tests."
+    echo "Install: https://taskfile.dev/installation/"
+    exit 0
+fi
+
+task test
+
+echo "All tests passed."

.github/workflows/test.yml

@@ -12,37 +12,45 @@ jobs:
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v6.0.2
+      - name: Install Task
+        uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v2.0.0
+        with:
+          version: 3.x
       - name: Run Tests
-        run: |
-          echo "Building image to test"
-          ./build-and-test.sh Dockerfile-py3-windows
+        run: task test:windows
 
   linux:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v6.0.2
+      - name: Install Task
+        uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v2.0.0
+        with:
+          version: 3.x
       - name: Run Tests
-        run: |
-          echo "Building image to test"
-          ./build-and-test.sh Dockerfile-py3-linux
+        run: task test:linux
 
   linux-slim:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v6.0.2
+      - name: Install Task
+        uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v2.0.0
+        with:
+          version: 3.x
       - name: Run Tests
-        run: |
-          echo "Building image to test"
-          ./build-and-test.sh Dockerfile-py3-linux-slim
+        run: task test:linux-slim
 
   # osx:
   #   runs-on: ubuntu-latest
   #   steps:
   #     - name: Checkout Repo
   #       uses: actions/checkout@v6.0.2
+  #     - name: Install Task
+  #       uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v2.0.0
+  #       with:
+  #         version: 3.x
   #     - name: Run Tests
-  #       run: |
-  #         echo "Building image to test"
-  #         ./build-and-test.sh Dockerfile-py3-osx
+  #       run: task test:osx

Dockerfile-py3-linux

@@ -15,12 +15,15 @@ ENV PYTHONUNBUFFERED=1
 # Copy the entrypoint script
 COPY entrypoint-linux.sh /entrypoint.sh
 
-# Install uv
-COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /usr/local/bin/
-
-# Install dependencies, PyInstaller, and set execute permissions for the entrypoint
-RUN uv pip install --system --no-cache pyinstaller==$PYINSTALLER_VERSION \
-    && chmod +x /entrypoint.sh
+# Install PyInstaller (use uv on amd64/arm64, pip on other platforms)
+ARG TARGETARCH
+RUN if [ "$TARGETARCH" = "amd64" ] || [ "$TARGETARCH" = "arm64" ]; then \
+        pip install --no-cache-dir uv==0.10.0 && \
+        uv pip install --system --no-cache pyinstaller==$PYINSTALLER_VERSION; \
+    else \
+        pip install --no-cache-dir pyinstaller==$PYINSTALLER_VERSION; \
+    fi && \
+    chmod +x /entrypoint.sh
 
 # Set the working directory and mount the volume
 VOLUME /src/

Dockerfile-py3-linux-slim

@@ -17,17 +17,20 @@ ENV PYTHONUNBUFFERED=1
 # Copy entrypoint script early to ensure it's available before dependency installation
 COPY entrypoint-linux.sh /entrypoint.sh
 
-# Install uv
-COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /usr/local/bin/
-
 # Install dependencies and PyInstaller in a single RUN command to reduce image layers
+ARG TARGETARCH
 RUN apt update && \
     apt install --no-install-recommends -y \
         binutils \
         gcc \
         zlib1g-dev && \
     rm -rf /var/lib/apt/lists/* && \
-    uv pip install --system --no-cache pyinstaller==$PYINSTALLER_VERSION && \
+    if [ "$TARGETARCH" = "amd64" ] || [ "$TARGETARCH" = "arm64" ]; then \
+        pip install --no-cache-dir uv==0.10.0 && \
+        uv pip install --system --no-cache pyinstaller==$PYINSTALLER_VERSION; \
+    else \
+        pip install --no-cache-dir pyinstaller==$PYINSTALLER_VERSION; \
+    fi && \
     chmod +x /entrypoint.sh
 
 # Set the working directory and create a volume for source code

Taskfile.yml

@@ -0,0 +1,53 @@
+version: '3'
+
+vars:
+  TEST_DIR: ./test
+  IMAGE_PREFIX: pyinstaller-test
+
+tasks:
+  build:windows:
+    desc: Build Windows image
+    cmds:
+      - docker build -f Dockerfile-py3-windows -t {{.IMAGE_PREFIX}}-windows .
+
+  build:linux:
+    desc: Build Linux image
+    cmds:
+      - docker build -f Dockerfile-py3-linux -t {{.IMAGE_PREFIX}}-linux .
+
+  build:linux-slim:
+    desc: Build Linux slim image
+    cmds:
+      - docker build -f Dockerfile-py3-linux-slim -t {{.IMAGE_PREFIX}}-linux-slim .
+
+  test:windows:
+    desc: Build and test Windows image
+    cmds:
+      - task: build:windows
+      - docker run --rm -v "$(pwd)/{{.TEST_DIR}}:/src/" {{.IMAGE_PREFIX}}-windows "pyinstaller main.py --onefile"
+
+  test:linux:
+    desc: Build and test Linux image
+    cmds:
+      - task: build:linux
+      - docker run --rm -v "$(pwd)/{{.TEST_DIR}}:/src/" {{.IMAGE_PREFIX}}-linux "pyinstaller main.py --onefile"
+      - docker run --rm -v "$(pwd)/{{.TEST_DIR}}:/src/" {{.IMAGE_PREFIX}}-linux ./dist/main
+
+  test:linux-slim:
+    desc: Build and test Linux slim image
+    cmds:
+      - task: build:linux-slim
+      - docker run --rm -v "$(pwd)/{{.TEST_DIR}}:/src/" {{.IMAGE_PREFIX}}-linux-slim "pyinstaller main.py --onefile"
+      - docker run --rm -v "$(pwd)/{{.TEST_DIR}}:/src/" {{.IMAGE_PREFIX}}-linux-slim ./dist/main
+
+  test:
+    desc: Build and test all images
+    cmds:
+      - task: test:windows
+      - task: test:linux
+      - task: test:linux-slim
+
+  setup:
+    desc: Configure git hooks
+    cmds:
+      - git config core.hooksPath .githooks

build-and-test.sh

@@ -19,23 +19,37 @@ WORKDIR=${SRCDIR:-/src}
 # should we build.
 # In case it's not defind, find the first match for `*.spec`
 SPECFILE=${SPECFILE:-$(find . -maxdepth 1 -type f -name '*.spec' -print -quit)}
+
+# Choose installer: uv when available (amd64/arm64), pip otherwise
+if command -v uv &>/dev/null; then
+    PIP_INSTALL="uv pip install --system"
+else
+    PIP_INSTALL="pip3 install"
+fi
+
 # In case the user specified a custom URL for PYPI, then use
 # that one, instead of the default one.
-
 if [[ "$PYPI_URL" != "https://pypi.python.org/" ]] || \
    [[ "$PYPI_INDEX_URL" != "https://pypi.python.org/simple" ]]; then
-    export UV_INDEX_URL="$PYPI_INDEX_URL"
-    # Extract hostname to allow insecure (non-HTTPS) private mirrors
-    export UV_INSECURE_HOST="$(echo $PYPI_URL | perl -pe 's|^.*?://(.*?)(:.*?)?/.*$|$1|')"
-
-    echo "Using custom PyPI index: $UV_INDEX_URL"
-    echo "Insecure host: $UV_INSECURE_HOST"
+    if command -v uv &>/dev/null; then
+        export UV_INDEX_URL="$PYPI_INDEX_URL"
+        export UV_INSECURE_HOST="$(echo $PYPI_URL | perl -pe 's|^.*?://(.*?)(:.*?)?/.*$|$1|')"
+        echo "Using custom PyPI index (uv): $UV_INDEX_URL"
+    else
+        mkdir -p /root/.pip
+        echo "[global]" > /root/.pip/pip.conf
+        echo "index = $PYPI_URL" >> /root/.pip/pip.conf
+        echo "index-url = $PYPI_INDEX_URL" >> /root/.pip/pip.conf
+        echo "trusted-host = $(echo $PYPI_URL | perl -pe 's|^.*?://(.*?)(:.*?)?/.*$|$1|')" >> /root/.pip/pip.conf
+        echo "Using custom pip.conf:"
+        cat /root/.pip/pip.conf
+    fi
 fi
 
 cd $WORKDIR
 
 if [ -f requirements.txt ]; then
-    uv pip install --system -r requirements.txt
+    $PIP_INSTALL -r requirements.txt
 fi # [ -f requirements.txt ]
 
 echo "$@"

entrypoint-linux.sh

@@ -1,57 +1,27 @@
-import logging
-import platform  # New import for OS information
-import time
+import platform
+import sys
 
 import numpy as np
 import pandas as pd
-import requests
 from flask import Flask, jsonify
 from flask_wtf.csrf import CSRFProtect
 from sqlalchemy import create_engine, text
 
-# Logging configuration
-logging.basicConfig(
-    filename="app.log",
-    filemode="a",
-    level=logging.INFO,
-    format="%(asctime)s - %(levelname)s - %(message)s",
-)
 
+def check_platform():
+    info = platform.platform()
+    print(f"Platform: {info}")
 
-# Function to log OS information
-def log_os_info():
-    os_info = platform.platform()
-    logging.info(f"Operating System: {os_info}")
 
-
-# Function to check requests functionality
-def check_requests():
-    max_retries = 3
-    for attempt in range(1, max_retries + 1):
-        try:
-            response = requests.get("https://api.github.com")
-            response.raise_for_status()
-            logging.info(f"Request succeeded with status {response.status_code}")
-            print(f"Response Content: {response.json()}")
-            return
-        except requests.exceptions.HTTPError as http_err:
-            logging.error(f"HTTP error on attempt {attempt}: {http_err}")
-        except Exception as err:
-            logging.error(f"Other error on attempt {attempt}: {err}")
-        time.sleep(2)
-    print("All retries failed.")
-
-
-# Function to test Pandas and NumPy functionality
-def data_processing():
+def check_numpy_pandas():
     data = np.random.rand(5, 3)
     df = pd.DataFrame(data, columns=["A", "B", "C"])
-    logging.info(f"Generated DataFrame:\n{df}")
-    print(df.describe())  # Data statistics
+    assert df.shape == (5, 3), f"Expected shape (5, 3), got {df.shape}"
+    assert list(df.columns) == ["A", "B", "C"]
+    print(f"NumPy/Pandas OK: {df.shape}")
 
 
-# Function to test Flask functionality
-def start_flask_app():
+def check_flask():
     app = Flask(__name__)
     csrf = CSRFProtect()
     csrf.init_app(app)
@@ -60,31 +30,33 @@ def start_flask_app():
     def index():
         return jsonify(message="Hello from Flask!")
 
-    app.run(port=5000)
+    client = app.test_client()
+    response = client.get("/")
+    assert response.status_code == 200, f"Flask returned {response.status_code}"
+    print("Flask OK")
 
 
-# Function to test SQLAlchemy functionality
-def check_database():
+def check_sqlalchemy():
     engine = create_engine("sqlite:///:memory:")
     with engine.connect() as connection:
         result = connection.execute(text("SELECT 'Hello, SQLAlchemy!'"))
-        for row in result:
-            logging.info(f"SQLAlchemy result: {row[0]}")
-            print(f"SQLAlchemy result: {row[0]}")
+        row = result.fetchone()
+        assert row is not None, "SQLAlchemy returned no rows"
+        assert row[0] == "Hello, SQLAlchemy!"
+    print("SQLAlchemy OK")
 
 
-# Main function
 def main():
-    log_os_info()  # Log OS information
-    logging.info("Starting main test process")
-    check_requests()
-    data_processing()
-    check_database()
-    # Run the Flask app in a separate thread if needed
-    # from threading import Thread
-    # flask_thread = Thread(target=start_flask_app)
-    # flask_thread.start()
+    check_platform()
+    check_numpy_pandas()
+    check_flask()
+    check_sqlalchemy()
+    print("All checks passed")
 
 
 if __name__ == "__main__":
-    main()
+    try:
+        main()
+    except Exception as e:
+        print(f"FATAL: {e}", file=sys.stderr)
+        sys.exit(1)