refactor: harden tests

src-tauri/tests/donut_proxy_integration.rs

@@ -1389,9 +1389,8 @@ async fn test_local_proxy_with_shadowsocks_upstream(
   }
 
   // Start donut-proxy with Shadowsocks upstream
-  let output = TestUtils::execute_command(
-    &binary_path,
-    &[
+  let output = tokio::process::Command::new(&binary_path)
+    .args([
       "proxy",
       "start",
       "--host",
@@ -1400,13 +1399,11 @@ async fn test_local_proxy_with_shadowsocks_upstream(
       &ss_port.to_string(),
       "--type",
       "ss",
-      "--username",
-      ss_method,
-      "--password",
-      ss_password,
-    ],
-  )
-  .await?;
+    ])
+    .env("DONUT_PROXY_USERNAME", ss_method)
+    .env("DONUT_PROXY_PASSWORD", ss_password)
+    .output()
+    .await?;
 
   if !output.status.success() {
     let stderr = String::from_utf8_lossy(&output.stderr);

src-tauri/tests/fixtures/test.conf

@@ -1,13 +1,10 @@
-# Sample WireGuard configuration for testing
-# This is NOT a real configuration - for unit test purposes only
-
 [Interface]
-PrivateKey = YEocP0e2o1WT5GlvBvQzVF7EeR6z9aCk+ZdZ5NKEuXA=
+PrivateKey = AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
 Address = 10.0.0.2/24
 DNS = 1.1.1.1
 
 [Peer]
-PublicKey = aGnF7JlG+U5t0BqB1PVf1yOuELHrWLGGcUJb0eCK9Aw=
+PublicKey = AQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQE=
 AllowedIPs = 0.0.0.0/0, ::/0
 Endpoint = vpn.example.com:51820
 PersistentKeepalive = 25

src-tauri/tests/vpn_integration.rs

@@ -292,11 +292,11 @@ fn create_test_storage(temp_dir: &tempfile::TempDir) -> VpnStorage {
 #[serial]
 async fn test_wireguard_tunnel_init() {
   let config = WireGuardConfig {
-    private_key: "YEocP0e2o1WT5GlvBvQzVF7EeR6z9aCk+ZdZ5NKEuXA=".to_string(),
+    private_key: "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=".to_string(),
     address: "10.0.0.2/24".to_string(),
     dns: Some("1.1.1.1".to_string()),
     mtu: None,
-    peer_public_key: "aGnF7JlG+U5t0BqB1PVf1yOuELHrWLGGcUJb0eCK9Aw=".to_string(),
+    peer_public_key: "AQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQE=".to_string(),
     peer_endpoint: "127.0.0.1:51820".to_string(),
     allowed_ips: vec!["0.0.0.0/0".to_string()],
     persistent_keepalive: Some(25),
@@ -780,13 +780,9 @@ async fn test_wireguard_traffic_flows_through_donut_proxy(
   }
 
   let binary_path = ensure_donut_proxy_binary().await?;
-  let wg_config = match test_harness::start_wireguard_server().await {
-    Ok(config) => config,
-    Err(error) => {
-      eprintln!("skipping WireGuard e2e test: {error}");
-      return Ok(());
-    }
-  };
+  let wg_config = test_harness::start_wireguard_server()
+    .await
+    .map_err(|error| format!("failed to start Docker WireGuard fixture: {error}"))?;
 
   let vpn_config = new_test_vpn_config(
     "WireGuard E2E",