.gitea/workflows/main.yml

@@ -42,11 +42,14 @@ jobs:
       - name: Download dependencies
         run: go mod download
 
+      - name: Download tun2socks binaries
+        run: make download-tun2socks
+
+      - name: Install golangci-lint
+        run: GOTOOLCHAIN=local go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.1.6
+
       - name: Lint
-        uses: golangci/golangci-lint-action@v6
-        with:
-          install-mode: goinstall
-          version: v1.64.8
+        run: golangci-lint run --allow-parallel-runners
 
   test-linux:
     name: Test (Linux)
@@ -112,4 +115,4 @@ jobs:
         run: make build-ci
 
       - name: Run smoke tests
-        run: GREYWALL_TEST_NETWORK=1 ./scripts/smoke_test.sh ./greywall
+        run: ./scripts/smoke_test.sh ./greywall

Makefile

@@ -38,11 +38,11 @@ build-ci: download-tun2socks
 	$(eval GIT_COMMIT := $(shell git rev-parse HEAD 2>/dev/null || echo "unknown"))
 	$(GOBUILD) -ldflags "-s -w -X main.version=$(VERSION) -X main.buildTime=$(BUILD_TIME) -X main.gitCommit=$(GIT_COMMIT)" -o $(BINARY_NAME) -v ./cmd/greywall
 
-test:
+test: download-tun2socks
 	@echo "Running tests..."
 	$(GOTEST) -v ./...
 
-test-ci:
+test-ci: download-tun2socks
 	@echo "CI: Running tests with coverage..."
 	$(GOTEST) -v -race -coverprofile=coverage.out ./...
 

scripts/smoke_test.sh

@@ -25,11 +25,11 @@ GREYWALL_BIN="${1:-}"
 if [[ -z "$GREYWALL_BIN" ]]; then
     if [[ -x "./greywall" ]]; then
         GREYWALL_BIN="./greywall"
-    elif [[ -x "./dis./greywall" ]]; then
-        GREYWALL_BIN="./dis./greywall"
+    elif [[ -x "./dist/greywall" ]]; then
+        GREYWALL_BIN="./dist/greywall"
     else
         echo "Building greywall..."
-        go build -o ./greywall ./cm./greywall
+        go build -o ./greywall ./cmd/greywall
         GREYWALL_BIN="./greywall"
     fi
 fi
@@ -121,7 +121,7 @@ run_test "read file in workspace" "pass" "$GREYWALL_BIN" -c "cat $WORKSPACE/test
 
 # Test: Write outside workspace blocked
 # Create a settings file that only allows write to current workspace
-SETTINGS_FILE="$WORKSPAC./greywall.json"
+SETTINGS_FILE="$WORKSPACE/greywall.json"
 cat > "$SETTINGS_FILE" << EOF
 {
   "filesystem": {