Add test for docker auth

.github/workflows/check-dynamic.yml

@@ -31,6 +31,17 @@ jobs:
     - uses: Swatinem/[email protected]
       with:
         key: test_${{ matrix.settings.host }}_${{ matrix.settings.target }}
+    - uses: docker/login-action@v3
+      with:
+        registry: quay.io
+        username: fossa+sparkle
+        password: ${{ secrets.QUAY_API_KEY }}
+    - uses: docker/login-action@v3
+      with:
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ github.token }}
+
     - run: cargo nextest run --all-targets
     - run: cargo test --doc
 

lib/tests/it/docker.rs

@@ -0,0 +1,30 @@
+use async_tempfile::TempDir;
+use circe_lib::{registry::Registry, Authentication, Reference};
+use color_eyre::Result;
+use simple_test_case::test_case;
+
+// These tests require that your local docker instance is authenticated with the servers.
+// This is performed before tests are run in CI, but you may need to `docker login` locally.
+#[test_case("quay.io/fossa/hubble-api:latest"; "quay.io/fossa/hubble-api:latest")]
+#[test_case("ghcr.io/fossas/sherlock/server:latest"; "ghcr.io/fossas/sherlock/server:latest")]
+#[test_log::test(tokio::test)]
+async fn pull_authed(image: &str) -> Result<()> {
+    let reference = image.parse::<Reference>()?;
+    let auth = Authentication::docker(&reference).await?;
+    let registry = Registry::builder()
+        .auth(auth)
+        .reference(reference)
+        .build()
+        .await?;
+
+    let layers = registry.layers().await?;
+    assert!(!layers.is_empty(), "image should have at least one layer");
+
+    let tmp = TempDir::new().await?;
+    for layer in layers {
+        let path = tmp.dir_path().join(layer.digest.as_hex());
+        registry.apply_layer(&layer, &path).await?;
+    }
+
+    Ok(())
+}

lib/tests/it/main.rs

@@ -1,3 +1,4 @@
+mod docker;
 mod platform;
 mod reference;
 mod registry;