Poetryで管理しているパッケージテストをGitHub ActionsでPoetry及びDockerで行う

poetry install
poetry run pytest

---
name: test

on: push

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: actions/setup-python@v4
        with:
        python-version: '3.11'
    - name: Make poetry environment
      run: |
        pip install poetry
        poetry install
    - name: Run pytest
      run: poetry run pytest

[tool.poetry]
name = "myproject"
version = "0.0.1"
description = ""
authors = ["rcmdnk <[email protected]>"]

[tool.poetry.dependencies]
python = "^3.11"

[tool.poetry.group.dev.dependencies]
pytest = "^8.0.0"

[build-system]
requires = ["poetry-core>=1.0.0"]
build-backend = "poetry.core.masonry.api"

[tool.poetry.scripts]
hello = "myproject:main"

FROM python:3.12-slim-bookworm as builder

ENV PIP_NO_CACHE_DIR=1 \
PIP_DISABLE_PIP_VERSION_CHECK=1 \
VIRTUAL_ENV=/app/.venv

WORKDIR /app

RUN pip install poetry-plugin-export

COPY pyproject.toml poetry.lock src ./

RUN poetry export --with dev --without-hashes --format=requirements.txt > requirements.txt
RUN echo "./" >> requirements.txt

RUN python -m venv "$VIRTUAL_ENV"
RUN . "$VIRTUAL_ENV/bin/activate" && pip install -r requirements.txt

#########

FROM python:3.12-slim-bookworm as runtime

ENV VIRTUAL_ENV=/app/.venv \
PATH="/app/.venv/bin:$PATH" \
USER_NAME=appuser

COPY --from=builder $VIRTUAL_ENV $VIRTUAL_ENV

WORKDIR /app

RUN useradd -r -u 1000 $USER_NAME
RUN chown -R $USER_NAME:$USER_NAME /app

USER $USER_NAME

RUN poetry export --with dev --without-hashes --format=requirements.txt > requirements.txt

name: test
description: Run tests

runs:
  using: 'composite'
  steps:
    - name: pytest
      shell: bash
      run: pytest

    - uses: ./.github/actions/test

---
name: poetry test

on: push

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: actions/setup-python@v4
        with:
        python-version: '3.11'
    - name: Make poetry environment
      run: |
        pip install poetry
        poetry install
        echo "$(poetry show -v 2>/dev/null|grep 'Using virtualenv:'|awk '{print $3}')/bin" >> $GITHUB_PATH
    - uses: ./.github/actions/test

---
name: docker test

on: push

jobs:
  docker-build:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    steps:
    - uses: actions/checkout@v4
    - uses: docker/login-action@v3
      with:
        registry: ghcr.io
        username: $
        password: $
    - uses: docker/setup-buildx-action@v3
    - uses: docker/build-push-action@v5
      with:
        context: .
        file: ./Dockerfile
        push: true
        tags: ghcr.io/$/test-image:$
  docker-test:
    needs: docker-build
    runs-on: ubuntu-latest
    container:
      image: ghcr.io/$/test-image:$
      credentials:
        username: $
        password: $
      options: --user root
    steps:
    - uses: actions/checkout@v4
    - uses: ./.github/actions/test

RUN mkdir -p .github
COPY .github/actions ./.github/
COPY tests ./

Error: EACCES: permission denied, open '/__w/_temp/_runner_file_commands/save_state_XXXXXXXX-XXXX-XXXX-XXXX-XXXX[XX](https://github.com/SensoftInc/xxxxxxxxxxxx/actions/runs/xxxxxxxxxx/jobs/xxxxxxxxxx#step:x:xx)xxxxxx'

RUN mkdir -m 1777 /__w

RUN mkdir /__w
RUN chown -R $USER_NAME:$USER_NAME /__w

name: test

on:
  push:
  workflow_dispatch:
    inputs:
      exe_env:
        description: "Execution environment."
        type: choice
        required: false
        default: "docker"
        options:
          - "docker"
          - "poetry"

jobs:
  docker-build:
    if: ${{ (github.event_name == 'workflow_dispatch' && github.event.inputs.exe_env == 'docker') }}

    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    steps:
    - uses: actions/checkout@v4
    - uses: docker/login-action@v3
      with:
        registry: ghcr.io
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}
    - uses: docker/setup-buildx-action@v3
    - uses: docker/build-push-action@v5
      with:
        context: .
        file: ./Dockerfile
        push: true
        tags: ghcr.io/${{ github.repository }}/test-image:${{ github.sha }}
  docker-test:
    if: ${{ (github.event_name == 'workflow_dispatch' && github.event.inputs.exe_env == 'docker') }}
    needs: docker-build
    runs-on: ubuntu-latest
    container:
      image: ghcr.io/${{ github.repository }}/test-image:${{ github.sha }}
      credentials:
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}
      options: --user root
    steps:
    - uses: actions/checkout@v4
    - uses: ./.github/actions/test
  poetry-test:
    if: ${{ (github.event_name == 'push') || (github.event_name == 'workflow_dispatch' && github.event.inputs.exe_env == 'poetry') }}
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: actions/setup-python@v4
      with:
        python-version: '3.12'
    - name: setup poetry
      run: |
        pip install poetry
        poetry install
        echo "$(dirname $(poetry run which python))" >> $GITHUB_PATH
    - uses: ./.github/actions/test